{"type": "bundle", "id": "bundle--79a11569-a516-42e5-87a1-be6223a96130", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--bf3d5f01-c02b-4244-9a6e-26c71807f691", "name": "DigitalOcean London", "latitude": 51.5177, "longitude": -0.6215, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "GB"}, {"type": "location", "spec_version": "2.1", "id": "location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9", "name": "DigitalOcean Toronto", "latitude": 43.6547, "longitude": -79.3623, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "CA"}, {"type": "location", "spec_version": "2.1", "id": "location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--47461e64-884e-42e8-aaad-2d208d9e6bf3", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--03e0852f-3c64-47f2-8f12-c039d720eb51", "name": "DigitalOcean London", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94f15e8c-9bb7-469e-b1c8-626538e5c15c", "relationship_type": "located-at", "source_ref": "infrastructure--03e0852f-3c64-47f2-8f12-c039d720eb51", "target_ref": "location--bf3d5f01-c02b-4244-9a6e-26c71807f691", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--c9b85d9b-bf8e-4fcc-94ec-86f32ed1600c", "name": "DigitalOcean Toronto", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80c37d0f-d0b0-45ca-a1b5-0bd1296f587e", "relationship_type": "located-at", "source_ref": "infrastructure--c9b85d9b-bf8e-4fcc-94ec-86f32ed1600c", "target_ref": "location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--f1a47422-d39f-4213-8424-77f0b57daad1", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--14887674-4fca-466e-aa93-41c424ab464a", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2444cda9-e2d3-4e1c-944d-edb395d022e2", "relationship_type": "located-at", "source_ref": "infrastructure--14887674-4fca-466e-aa93-41c424ab464a", "target_ref": "location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--a87f2e39-341c-4f45-9e43-0326b52b93d3", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--95bcd7a4-c434-45ba-9cca-e7981fbf79ec", "relationship_type": "located-at", "source_ref": "infrastructure--a87f2e39-341c-4f45-9e43-0326b52b93d3", "target_ref": "location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--8cf44e1e-4684-4556-adfe-18ec18689016", "name": "CVE-2000-0778", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2000-0778", "external_id": "CVE-2000-0778"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--32810b51-445f-43d5-aaea-a31a0abdef08", "name": "CVE-2002-1149", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--1ae7669d-c0f2-43b2-b9c0-17583542f0e0", "name": "CVE-2019-5418", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--1b54f858-1f51-4904-8b63-1716d46f773a", "name": "CVE-2021-41773", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--aafe8ac9-890f-4583-96e2-3d3f3e6e9352", "name": "CVE-2021-42013", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--604e7a91-4ab2-4091-a564-9069e23b10ff", "name": "CVE-2023-1389", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108df885-7464-4b69-96bf-65965e00ac57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.1.241.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10fd2476-ee45-40a8-8890-41639960f28d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.14.110.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f3e0d5-d7b2-4ffa-835a-4782e512a68c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.15.52.154']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05cb638-1ba6-47aa-8b55-92239d735bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.164.90.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9be3e43-3f39-4f1d-965c-e795e0d5dd89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.193.63.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd6700f-3aca-4d7c-aefb-3ff1eebd56d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.215.199.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9796d934-ef83-4a32-b513-880b7174f1e0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.235.192.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11ff7e3-241b-4aa3-b72a-aef05a5447c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7800ee1-abe3-4956-bd9a-238ab12da1cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.178']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cabb787-7a7a-4dc8-a729-b4927dd33807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.28.216.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b799a27-1ee9-4200-8365-9dd663b24c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.31.64.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e740a739-4901-4e48-a880-4afcbfd2d876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.83.125.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1a8cab-bc28-4aa7-ac6c-f01e7be67e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.83.125.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d702e1-d339-4815-9874-8e3cdbc7db8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.85.216.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1ffc61-0897-43d8-9069-8f6f7a69280b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.95.56.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0b36de-818e-4cf2-a5b8-c3d006715711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b95011-f26d-4909-97e1-32f84f857294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.1']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d1dacb-fa59-4493-85e9-6fc221214128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26eac0b-bd2b-4de5-8cbb-d9ff20a23997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0bde041-ac4d-4a73-9061-7cad858d5d67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6111d3d-6c1c-49af-a1cf-1fca9df854fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d76007e-74fa-4b1a-a05f-4f1b4ddd8fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff5a9dd-52f0-4f4b-addf-291e866df5e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ccdbd60-139c-424f-97d9-198707da327c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7638197c-a4f0-4e64-8cd5-cc3a00606468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383d26a7-1ee1-4d5d-9d42-6e9dcb30f6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95089477-1585-433b-a376-f3392a7ab4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc64f5c4-0c4c-4fe5-adb8-4d1c2b77bcc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012a1c30-7faa-49a3-88c2-eeb4d8d561f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1194eae4-d679-4cb7-be8c-0012d66165b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cabe32e2-8fd0-45c6-af86-f2e7569ed008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70e4aca-2810-4f57-a750-e8a5fefba0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b4f563-bee1-4902-bbf5-b48245ed8171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--899ba4a8-876d-4d91-890a-cc18a0f67e19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3fb4341-fa0b-4f21-bb77-1cd2b0f8aa98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b7e2cc-afe9-478f-8391-05ad1e0cc21b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d61f82-93c8-4740-a58f-2bca73b82201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17df3d40-121f-4bec-b7e8-0fb3af7d4fb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d07cb12-1d4c-4eec-8782-601543196650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77806895-a00b-44fd-8db0-038c41a468b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfba5aa8-d262-471c-841f-67f54dd4beb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1523810-6be9-475d-b2c2-58e7551fcd00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73fc8ea9-e47b-42fd-8439-ff586885a23e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4420e566-c9f8-48aa-a058-ca670ceee318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0cb6f0-dec6-4e26-a23d-131d80c58251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.57']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8667d9d5-41d6-411d-a718-7afccb1ea5e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a0c7c1-c156-425a-8954-f3c595d3b45e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72a50e5-adcf-472a-b860-d221e221494d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d14cda1-4f80-48e5-845f-a0122fd7eed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97bc5cd4-ad03-4f6b-8e56-1d2f1849417f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2358d77f-6440-49cc-9109-2019d91df83c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c865bd-4e91-4fac-97e9-6d8685b418b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31fd3069-6cdd-4a2b-93e0-a8209ea3dae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5402d60-96a0-4604-8997-86fac704c74b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09a8561-1ad6-41f6-a953-c8bd336bbc7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1606d69-0c63-46fd-8cca-997768464b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592ab6d2-7483-4aba-a709-73a3e9aaef0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b22dcbcb-5650-4764-9a5f-5c334986179a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4925979-e2de-4cd1-ac81-6689bbf02da4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73426955-737d-4605-ba13-2be7ce1f21d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4875318c-123e-47cc-b616-e404146933e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6008379-c355-40ad-85cd-93a104245ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6280e4d4-aca6-4c22-9ef6-a305a27ebf32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5edb4d4-2a6a-4b60-aaa0-251d7cd2ac3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8a35c5-a51f-47ea-8f81-9e803cb5a073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e07534-00b5-4de6-a305-26496a1a65ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6aafa20-2ded-44ae-b289-dc14ad893779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4517ee3-73f0-4c3b-98fa-faffaa05fc1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--288528a9-fa2f-47d0-85ca-5b9b26c5d294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0436b83-b44d-40a6-8bac-9235bd0c3ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75fc6201-ce72-4bf3-90fd-30d6208d16b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf3e784-d2e5-4683-9f78-c32ba5f5818a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.153.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1ef8e9-4e58-45e2-8e29-a0cc875eb4a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df94045b-8c9a-4732-8292-90515bcd420d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.51.195.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0adb55d4-bfa8-4606-8c73-10179c922a91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.204.251.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9447fb7-a22a-4a19-b94c-fa17775ba5e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.206.108.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09cfea56-8dbc-4301-b0f4-c17c9641c554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.22.92.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28376fd-2eb8-45c7-b834-88bf71747eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.208.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d5a482-52df-4d76-bd4d-4d359506ad08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.33.66.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006525fb-1eb5-4929-844c-db0c567e5e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.34.82.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad72a496-1def-4a8f-a8ab-c5b0b1864816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.35.46.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2fc98f-17e0-4f4c-bcc3-a83b89a5c578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2019-5418, CVE-2021-41773, CVE-2021-42013. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.104.242']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--947c2819-5879-4b5b-a4c2-8eabbce010a8", "relationship_type": "indicates", "source_ref": "indicator--5e2fc98f-17e0-4f4c-bcc3-a83b89a5c578", "target_ref": "vulnerability--1ae7669d-c0f2-43b2-b9c0-17583542f0e0", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--108e14f1-40bd-44b4-a7af-08914d3149e7", "relationship_type": "indicates", "source_ref": "indicator--5e2fc98f-17e0-4f4c-bcc3-a83b89a5c578", "target_ref": "vulnerability--1b54f858-1f51-4904-8b63-1716d46f773a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27beda45-3f6e-43ae-b42e-a4a32b81c216", "relationship_type": "indicates", "source_ref": "indicator--5e2fc98f-17e0-4f4c-bcc3-a83b89a5c578", "target_ref": "vulnerability--aafe8ac9-890f-4583-96e2-3d3f3e6e9352", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60eb973-a744-4591-98c1-3cce63cb6144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41bb992-fade-4285-8b05-efd7acaecbaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b929c5c-dd1d-4637-8fc9-58ee450db471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea23d67-fb08-4844-a01e-3162d9807c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2016dfa8-4a99-4d76-85c6-60abf2a8b7bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edaf2e9e-5d13-4cc5-8399-b0f7f57699be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454be7bb-8b37-48cc-8a57-996e5c41c357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.191']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3caf9228-f6ff-4355-93d9-1d24b20b7b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb04eae1-8c43-4c03-b3c3-ef2e172b620b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0e17d0-7afb-41bd-8093-9623862049aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.112.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3509b3-5592-4887-a6a2-59d0d376f786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66a8097-ffa3-4601-a669-f45381844a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ba943c-fe49-4cec-83fd-7e86b1c38d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.222']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a206ad88-5013-4ba2-b309-98fb9c8b9180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a01478-2d9e-4296-aec4-68dfe26d1a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a747c41c-b01e-411a-b86a-77d075024133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa86e9b-b027-441b-8f81-0650fb13ea2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.119.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f44b3a-136e-4558-a4f7-db4f6266068d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e77a181-a4e6-4c02-8850-d6c46cbe44f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.123.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16778a7-cb2d-4381-b06f-a37ee0b06281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.124.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7f50c0-66b6-4696-9df8-ae0446e916bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.127.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70692f10-60e9-4b85-9647-9f769886c7cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a18a62-8729-4aa3-9a1b-84452e1f2c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f8f753-8961-405f-bfc7-25247a5bc6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e12dbf-8b09-4ec3-a072-d74fb0d0752e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8a8a86-6ce4-4470-8a99-4870619117ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016fff58-8fe0-4404-be21-1a10ca8c4a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228f4f7c-4ce4-446c-bf17-54e7d84e47f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b571b38d-4648-40e1-a7b8-b4f5cd0fec82", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.42.41.164']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f81758-453d-4044-a780-87db17da473d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.15.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ab655c-824b-4f58-98f2-bb52e2edfc0d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.15.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cefb897-d6df-4c1a-99e7-7bcd6ac86783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.8.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4ec4a5-4823-4b17-9287-2fae34bde113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.68.7.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9756590-661e-4265-873e-d9f2b7f2360b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.71.221.186']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f31187-a5c7-4c27-8477-1bcc4aafba36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.89.148.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41d12b5-e5ec-4cc8-b284-55e2f0f5dbbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.200.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beda7960-bf4c-4e03-9c9d-fd3cf64db039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.163.112.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5518d02-6db2-4df4-9f36-8349c89705e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.165.127.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4565fb60-8348-4357-a032-bbbf4a5aa749", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.210.148.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa44930-3545-4068-82b7-ebd4c256b3c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.216.169.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60e63b4-cce6-4dd2-b75e-e47f76019f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.219.234.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039ec4a1-a1d1-4c91-95ad-8605848deff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.22.81.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd1000e-353e-4c8c-aee8-721d0bee8dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d23a55d-6e77-4773-bd78-2b4b1c438a8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a413694-4ade-409d-aaf4-7a88786b6edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15f1450-99e7-4849-81cc-278f5032f47f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.223.47.171']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a83022-40d6-4014-81eb-38f55d473627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.21.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6fcec6a-31a9-4f14-aead-8317c8b1184d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fadab9d-50c1-4e3f-ad15-abc7fa7c2e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.101.203.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--535ae3e6-8ec9-440a-a19d-b2311c0aafc0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.110.87.57']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07915f05-3138-4a40-9294-75e6aacf5740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.112.62.144']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce7be1c-b2e1-407e-ae6c-250f1ab9d635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.118.29.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec9f88f-bd9b-448f-8723-bb7ae05f1635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.120.189.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d690a14c-a048-4b5e-a1aa-8bec51bc7de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.221.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b83b2998-bc06-4183-891f-8c99d5cf1207", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.123.226.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca835e57-4dcb-43dc-9259-7169bd50ffdd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.123.53.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95d41df-06f2-4138-bcbf-77294a2d69f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.130.209.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcead2ef-8597-4523-9631-e6635eaf958f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.131.61.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ec3b22-3ac1-4e0d-9db4-33d21ab42fc0", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.132.236.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a36aec-bff1-432f-b98e-6e04e226a855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.192']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b563c3-fe17-4801-b177-ed54bf1fa35a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43fcd1ac-891d-415e-8321-57681b7252cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.145.5.191']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1eb899-e1a4-4aa4-bd1e-a02cda480b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.180.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e33e9b7-e679-4e84-82d9-32a375b5b4c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d333fc25-3f00-48a0-aa41-41b13b7f613f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--224880fe-6515-4805-8e05-b9b2e0888de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.28.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab727aed-185a-455a-8a26-a93d8012338e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.15.222.183']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1671bb-1430-4592-8e74-dfa42a75ef54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.104.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2434136c-07a0-4bfc-893d-46edd12fd819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.68.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757b7ce5-34bd-4f3c-8d6b-b8896cc477ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.118.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec43b5c-bd38-42f9-bf5e-f18f9db6937d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.34.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c984cadd-2385-49e0-ba50-9b1932a1d87c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.162.213.152']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c937c0a-48ba-4d2b-a8a3-273ee043c1b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.165.11.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3606f9e1-a33f-4fb6-b2bf-1368b885985d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.29.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e031758-395b-425f-be7f-ac166f5505c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.78.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--852de819-4722-4879-be33-ffd8fc24698c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.7.236']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3525da-1448-4078-bc32-4b19ddf66240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.174.243.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a847e7-32a0-485c-bfa5-e2dbc4632c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.166.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6edaae-fd9a-4da5-a8ff-23bf65e25d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.20.57']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9267cc83-4cb6-4879-8635-79ccf04deaa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.90.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d4957c-47fe-409d-b13b-273c6c0c63c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.180.212.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031098c7-aee7-4782-a6b3-ef9e6fe55c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.180.213.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90026b12-0246-4e30-ac1d-57f5e74ad7e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.181.176.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e9406f-fd6f-4e54-b4b3-6d4bce492062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.183.118.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01bec3e8-f861-4e7b-8eb2-179c460d1da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.183.119.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7637d1ed-47c7-4dd2-be95-6a5d7c39a7b5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.183.62.0']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3cfe2fe-5aac-4566-b369-aa2c0ff599d5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.183.62.1']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505fc6e0-9ded-4713-9548-17f8aff2ba54", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.183.62.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7328dfa1-a6cf-4f6f-9be9-6e7606ff21e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.184.94.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f299f33-b1c2-4d33-9fe8-75b954da9416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.185.85.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7311cb0b-ae51-4480-b819-fabdbdd5529d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.186.31.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df76380-b8c1-47d5-bcfc-7737bd0ddd2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.186.77.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da61222e-8b09-4101-9fa7-34ab45829074", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.187.147.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991407bb-7c29-42c8-bd6d-bedf2f084aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.187.165.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3633e52b-2d6f-4e2a-8234-90cfa462dfe0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.189.235.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f71b79-aa10-41b4-9513-ed5b276676aa", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.200.22.154']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3740ed-94f6-48f8-80b8-ff238f18f84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b5d606-722b-4da8-80cc-d63437d76f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da5a43d-c99b-47a0-8f31-5ced1ff2c6ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b47c08-921a-4e1a-915a-15dbe02d20c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e21844-ddc9-4466-9eb3-b94e74ea323a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca858a1-349d-4cd3-bb46-6542f5210717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6064e41-fccf-41fd-baeb-2d5ce8a9c3e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bbf6db5-7f54-4052-916d-7e653a525e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d6a5d9-46eb-4a58-96b5-c3d2ad9178c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.58.1']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd662d0-acb9-489d-901e-24acfb80cfa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.22.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d92c4c8-84eb-4c55-ab6c-5f534daf07d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.213.112.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef7242d-a698-4321-a6e8-f53ba8747f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.241.43.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26adae97-a958-4ee2-8f28-0615f58ae9d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.242.82.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30634499-094f-40d9-a04a-678abe3084d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.244.227.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b93404-eb94-4e1e-a251-c46e7dd3cbdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.249.87.183']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a76b41d-02fd-47d9-8c88-77ba44ebe6d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.250.11.63']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f13889d-4672-4ce4-9d8a-aedd80a36306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.252.90.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3cdbce-8b80-476d-9d27-b9f6116acd61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.26.86.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74599bc-e5fb-4fb2-856f-ab1d33309125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ae280f-5575-42a1-bdbb-be3b7d821143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fda82b45-d7ac-4cd7-aee3-5a82321a29b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe74cb9-19c9-4556-b738-4774aee5e1a3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.30.40.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32dcc618-790e-44b2-a740-ee6f4f0013cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.31.83.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ded292e-21b2-47b6-8632-2a9e7878f981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.39.236.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1615e76e-eb47-464b-aace-57357787f783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.42.30.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5f16a6-cab5-45f1-9648-19de6f6ca353", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.43.191.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c32dd5-1e48-45ee-b407-50fd5a1521fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.54.101.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51a9249-9286-4502-a279-4894396cc643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.55.68.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a690440-6565-4148-bc6c-def7e070528a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.56.115.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9722daca-a719-469c-86f7-1408cca2dd42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.57.224.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06021c9a-983a-496f-ac9d-c78b00ea3155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.69.200.240']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f17bb31-cb43-4147-a98e-3f271583e15b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.175.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f5a130-e51d-4cb0-b09a-8b90e0c88f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.242.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c66e0b4-26fa-40d9-8566-0e90e8d2b1da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.132.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b275aca5-8711-4f65-8587-7f46738b8e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.20.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0397423-27d9-4425-abbb-e4b51a9dba2c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.85.112.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd96c496-2390-4c76-8622-bd729a9968f6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.91.246.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4418813-0846-45ad-bb78-c84783849f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.96.140.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc61939-18e8-40bb-8559-d6d0b6873d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.96.96.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709bc305-dc8c-439b-b1c3-b7aa94eaf321", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.101.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf9fd83-6644-42e4-8cd5-461b286d6b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.131.42.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89052212-59f1-48d7-bec5-cec2a348a236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.131.9.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b865edb-0be1-4a75-951b-f0af292f937c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.131.93.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dcb9bbc-5967-41a4-86de-df77ec28776b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.140.145.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f892d647-1e58-4342-a213-e6e0676b65a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.143.39.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2658ad-6c2d-4701-82ef-d87085b33e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.144']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ef26cd-7338-429a-a6bd-022a2458b3cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918652a0-f460-4a0c-8a36-1f34bf70dacb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.242']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce52321a-d943-4235-86ca-a2a09854c837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.32.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--174bd21b-8cf4-4d61-bcf0-0b7d178474da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.66.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c24b4c-14d1-47ed-be20-b4fb9fa022e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.167.199.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac601af-913d-4481-a4a5-a4caca082d56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.10.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2949badb-47fe-4e6a-866c-0c5c891867d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.154.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f09bde78-cdab-463a-97ee-039328c974b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.9.81']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc8fa57-a8a3-4785-b0a3-cc6b1e18c896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.1.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f885a44a-b513-40c6-a06a-0d823153be69", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.176.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7b976a-44d2-48cb-92bd-5c2484a749f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.55.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682c2aa3-d75a-43f7-886d-c80f7bc5f5b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.74.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a7cc37-c552-4f6b-b14b-c8daee309553", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.210.140.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8d3492-0457-4c03-b28a-1d3421ace7b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.218.165.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e0ade9c-4f5f-4871-92e9-c68e3f7fea07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.223.84.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f491aab-21cd-4343-b8d7-01950afc1b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.66.186']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095cd6b9-7aaa-4e2e-af49-51d28554b884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.132.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5b02a5-b7d0-40f0-88ef-f2176dc00cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.144.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55f97ba-807c-46a6-89f5-c8eaa26a67ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a4c066-d823-4db8-9650-a5ebb4ad400d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c88dae2-7120-4c11-868f-97c568af4223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.240.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0612d62-b0bd-4ea4-8fcb-43a92867bafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25b4f1e-72c3-4afd-ad07-14a0fc4200f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45eba56-995e-4e7c-a58e-cfd753435409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd8c381-3f20-4927-9371-4b019f064e09", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.38.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cbee3b-b458-4710-aba6-4335b1842b5d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.42.167']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f5cf9d0-5166-4c28-87a1-80680819c318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.43.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--000cd760-db78-4032-8ba3-24f8d5fc388c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.46.222']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e538af-cd1c-4a85-b9bb-58aa74ceecec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.244.77.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762ffe6e-bedb-414c-a843-8e82873a2b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.244.78.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677d15f7-82b2-49b9-9219-f3479507acd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.117.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--710737e8-ed1b-46f8-be92-ba5d1c5ecdd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.130.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3922eea9-65c8-4cdc-9eae-c8cd37cc1cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.160.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b7f81e-88e9-4775-b6de-9b6bd5288ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.177.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8e189b-5531-490e-a170-f4783d78cde9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.229.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e109916a-ea0d-4c6b-916d-6b17cd35f6c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.251.180.164']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ccb530b-be53-4593-b7bf-991fa6bd7a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.215.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a22a76-bb96-4a75-90d3-48a229b7eaec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.37.174.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022e05e0-4ebf-43dd-aa03-174ae9e03731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.46.236.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31541bdf-5eda-4af2-b25a-0f33df9ef07b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.155.41.144']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1470b8b2-9c86-4f37-9f64-d60391e4ce65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.156.165.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500f64e2-ec5d-44ba-8567-72ac3e927003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.188.108.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c3912f0-4b5c-40de-85bc-3af50c218622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.235.132.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5873aa-24ff-411b-a72c-c5e9a8ae4d8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.105.88.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa52c34-9779-4876-9d62-eed645470155", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.190.191']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c76a6ae-af8a-490c-bf79-0f8175b08e91", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.98.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec15582-efc7-4c0d-ae7e-04a2b27cf947", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.98.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ccd72a0-9c80-4fdc-89bf-e8580836dd22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.15.238.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a712b9d-7265-491a-bd61-e07ff33403ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.245.8.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116d254c-39d4-420f-adb5-134b8ad8e4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.137.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c96df76-e952-4dc6-a568-d85491b2400a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.139.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd77bb61-9139-48c0-9cfb-bb060e9f21ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.141.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e6ce416-83ea-48da-bd7a-dce17ae6d67b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b7a6cd-56e1-4b14-9491-5c42d64f6481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df24ca52-0a27-4855-9189-a1f74a8f288f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80cb16c2-5570-43d3-bcc1-f9f44b2f40e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ece95d-e7b3-4e06-b434-52660ef15555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08774ddf-4bd0-43eb-9f6b-62cb497b23c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.186']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a54457-141a-4dec-bd20-55403bed4d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da2f130-7950-4896-9fc8-9b6ae4c01494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4929d12-9ebe-46a0-9a1b-de1f153213b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e365cba5-6364-42ca-a8c8-584e061f1408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4a7006-d750-4107-854c-54ca06955cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6544c130-3ee8-40fe-bc8f-1ff9e951dc91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b66ac6-bc00-4fb7-8741-475f8c478a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.154.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9903a480-0bb2-4207-9cee-9d18150c1593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.16.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb795f2c-0940-4714-8b07-a0b8a2006d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.172.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f72e63-22aa-44c9-b98a-60bdc6f4cee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c987972-c992-4f1c-be21-3ebd92fee855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.184.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fab26d-25d5-4655-8afd-03e75dba8433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.185.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2357bf0-df19-43fb-8326-0709cc9e5da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.188.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b31b73b-830c-45e7-8457-6cc8e487728f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.189.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3beb0a-7770-4653-8952-120e769e7c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce3b676-afaa-4329-a1b3-af915acf45a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6124faa-14f1-4d15-a433-180020cc65e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af67a74b-860b-4c22-8209-28d907b1807f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d20b7b-a05e-42c9-bfbd-9e87a8dc62f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.57']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed10a1d-d2fe-4300-98d9-49900ceacc6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9df046b-6d23-4056-86b0-611e1b812b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542282b9-4242-442f-891b-1143ce0c3d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd49c06-ad0c-48b4-ad86-fe13224f2fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab8c9d1-a1d6-4188-85f5-a135a6dd3e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.112.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b83b44-8a4b-4069-8229-a86e0cecabac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f2af8b-ebff-47a0-b41f-b71aa5726067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.167']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b0a4ca-31ac-4645-962a-81be5a62c434", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.48.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730f0f61-26f3-4163-afb7-be81226767b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0d5332-9bef-4603-8c62-ec7bdc628408", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.88.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6435b8-2bc3-4c25-a8f6-20fb5549f6b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.170.1.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ca7898-b011-4894-b421-9cefcf268df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.170.65.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0444cfbc-59e1-4575-bb45-c65c3bab9733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.252.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f56e8c4e-92f6-4d83-9ab9-c34166b928d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.80.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1c515c-9f83-408f-9c51-86a9289886c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.88.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db69c0fb-4e47-41b3-88c4-eccb6c961b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.122.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f3fdc7-1b5a-4ef8-8ac5-09b6b134d6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.146.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404b7091-b56a-4ba3-ba71-973229d0f68c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.37.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6dd6c69-3530-43dc-9a0d-655f35c48ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.141.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac76ed4-e1c7-414a-82c2-701197ec6c54", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.69.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9dd7ea8-1a57-494d-a108-834babc75b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.181.228.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e024f079-bc63-47f6-bae6-5bb5fcb0676f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.24.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c4d3b7-1cc9-4f4b-9356-2488bf86e9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.7.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fcf53fb-c8fb-480f-9d67-6675d9f93505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.56.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1622a9c2-c4a0-4c6a-8867-2bcb6f63a196", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.63.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51f3377-2fa6-4df2-8a87-2fe0ec192767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.214.225.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a738262-eba6-4d76-b903-35dcd1b80986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c39ac56-cdf8-470a-b4d2-0a91b599db95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49bb24f2-c4d8-4e1d-80f0-5eaebfb5d6e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d516d89-3cab-4e39-82e4-904cdc6a8b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075b6762-37a4-40de-9c8a-803482eeacc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55ae178-a0f2-4f92-93d4-5d68233a7938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a51b91e-3820-4ba7-9f5b-38bb6b1dc91b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.57']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094dc963-a923-4c9d-b12b-6351ed134284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d2ee1db-15da-4fb7-908c-5251198e3cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9e09bb1-17ab-4a94-bc68-57a334bedd46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.63']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6c9a46-8acf-4649-b043-37442877ff69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f89ea4e-6db3-4033-b403-85d01e544f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dda1953-268e-4e11-8128-fc8cc364c0aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--295b3a63-c78f-4c5d-a4bb-750a8d8ab62a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42268e75-7660-4666-aa88-c82c90b5e79a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.162.200.166']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46b2f35-8479-4f6a-9d35-1a312dd4edfc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.199.125.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c856a0-bc29-4f54-ae61-b755aabf6288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.211.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190f2a53-5d96-41c3-aa4a-e4657ff1f03e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.207.174.234']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027756a7-90fe-4e1f-8698-74f28874ac4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.237.96.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7761250-9308-429f-a7ae-78fb96fe8a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.75.50.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f62029-b1be-4716-b9ca-ebc086964b7c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.10.176.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81cd6497-62f3-4f40-b05b-374c934fb1bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.136.175.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04dc3efa-b475-4367-894a-7f0ce929ceb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.18.72.167']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f92f347-2005-47b7-9a0b-65c9be7f7cca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.249.201.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3a1818a-fb82-4bd5-98ab-e1e4a3a3aceb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.93.224.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a1aeec-3350-444a-9b39-cf914f9a4d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.195']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ee36f6-844d-404c-aad3-548db707ca8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.170.18.160']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885c31a5-86c0-4564-a119-071f98d776fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.196.133.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a90b27e5-399d-4023-aef4-f47ab3dfd325", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.225.148.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aedc1cdb-f0b8-417f-865d-05cd02403dc8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.225.149.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0063ff2a-b12a-4cf2-a082-2a324c14a3af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.229.171.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9477177-6104-40b0-8f39-b6caa9ad280d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.230.69.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e294183-aa95-4043-8bce-92a472819887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.26.6.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7203ca61-b947-44fa-a4a5-256f22f1c66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.34.20.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92415f1c-361e-4428-b7db-741dfcf03b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.55.72.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af7b0d1-986c-4be7-89d9-81ac03dfc8c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.74.57.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f022531d-70b0-4824-bb51-edbb01f49a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.75.205.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a66e2b0e-c3fa-469b-b018-d44b4b99793d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.89.115.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d496a438-4cd2-454c-b2d3-79839451d8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.158.200.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b44cc9-5797-4d2e-a713-715b88e67945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.164.235.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20256e99-70cc-43e2-ab56-265e493de647", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.216.108.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf58c061-6ffc-4aa7-a804-ce7c5fb12d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.235.40.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9189e02a-7763-4576-8fa8-71615581a223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.217.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3c99f2-2743-4152-b9ca-c2f1c0f4a43c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.6.99.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a69ef3b-abd7-4934-8a9f-e4dcc0d47acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.81.86.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31544af5-83ea-4f5e-9962-3f833bf397ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.252.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af11a4a-9551-4e0a-a53d-d999bd1bac59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.253.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db92d543-3e88-4d75-98a1-d06717362b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.116.34.152']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b704d26-e3f3-412a-a2d8-3eac9e1f4fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.131.200.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1c3bd8-cf5e-4aa0-a13e-d69591f0327e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.161.161.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f515e5-b5b7-4c59-acd5-31ec13c5966e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.169.67.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c794cef8-3301-4e4d-a002-39b8a4cd6cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.183.200.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd59777c-61a0-4416-aa5a-7c50fadd175e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.200.71.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012b8a1d-3fd7-4e33-886e-1cc179ee6315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.200.71.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749c573f-dc34-4411-83c6-c5f6d70c92db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.200.72.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12f247a-90a5-44bb-8793-a111816546d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.206.176.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11daec1-18a6-4688-a107-bf8eb1d991d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.57.184.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e22afc5-99ac-46a0-8d70-7f40f96e1b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.104.188.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbeb7d51-80a6-4b64-9d0a-d42ba36935b5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.128.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0baabd7f-3f1a-416c-8095-37b3b83501ba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.130.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--038f509b-df72-4934-9b85-c53207816044", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb77bf1-3ef7-4ea0-8b19-8be400a175cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.132.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d556ebc2-796f-4716-969a-0ed405ffd9ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f921279-6922-4ec4-ab8a-18cde295c455", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.136.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3aaca9-590d-437f-844e-1099e844b586", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.136.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b261422a-5cf2-43e8-af6d-493b132d82af", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3fd4c82-6f6d-440c-b637-9624e84be590", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544939c0-97da-4ac8-bd11-2025108c6158", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.141.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7237df7-34cc-4785-aeb5-bb6cefa78b59", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.1']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb59d6a9-9a73-479b-a7f6-147c9b727d3f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ae7154-5331-4964-9ee2-e4804830c5db", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e7b6e14-afe6-4ed1-a1a4-9fccb47397bf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72aa66a6-a28e-43ca-83bd-17d70d5f96c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cbaace-b778-405d-8a0b-02afd63cacbb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bda6872-9d91-4405-9d17-80003eedc193", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.154.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c535f82-35af-4f68-b5a0-ce81369e1d18", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d11e8d-2b4a-46b6-b5bc-b9cfa8998767", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3e11a0-f9f3-4cca-a930-c5a989ae0efb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a9e058-d5f0-434b-a5d4-8b8071d21f98", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.157.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c94d20b9-2061-4946-957a-21a0e75f605a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.158.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99dd035b-f550-4a66-983d-a6363b7c3282", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f3a1aa-5011-476e-93f7-230c02353dad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.166.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a05c2d-2666-4716-89fc-40463cb8cd47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.234.101.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e11f648-0760-4d3b-9f02-818b40a4ef52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.30.86.228']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98eb5571-efba-4ef3-8925-75fa3d7a8db6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.32.101.152']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4de2f7-a5d9-4ff0-a4fe-cec07b01e31d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.33.12.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe6ab41-e91b-41c5-935c-8d9f89a84e7b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.34.106.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e790da3a-111c-4767-8de6-94d7263f5fa2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.55.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c570869-e17e-4d48-a4ca-aaf10a121dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.66.29.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8fbdbbf-4c15-4c5f-9247-c7556d6f6e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.80.35.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45544e7d-036c-4c4a-8e57-4b613e9a6883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.127.35.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f115dd9f-37b2-4652-abba-0b50990215a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.149.161.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971c50f7-91fe-4a2f-abec-95818346c240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.179.102.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d6ccf82-f9c2-4b09-a4ab-3d4c685c289a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.118.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f993ac1-f5d3-47d2-9c80-aa9b7f155f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.167.144']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9fee2ed-5be1-4e7c-878e-716773c18789", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.181.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3a69be-89d2-4e82-a67b-7854798c3bb4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.40.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8248df9-ed09-4c22-8a5a-dd496c7ba566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.221.239.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d30377e-dbca-49a9-b5ea-aad1523823aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.227.26.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da80987-7d44-47ba-899b-d600db961dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.231.78.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27848e72-171b-4600-b50d-509beb958be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.29.236.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b5dcf2-162f-44b0-af16-4622776c02a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.42.75.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bfee3d1-765e-4045-9fdc-63c745f63301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.63.33.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb502a6-4b7a-4c03-8e8e-37db5d944f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.64.214.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--773f408a-67bc-4d7e-8c0e-71dc9d2bb792", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.148.164']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fcb2a1-b1e2-4da9-965e-46544ea16d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.219.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f4f16e8-08c0-4be6-ba70-5580d33d2416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.118.9.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22525f51-c877-46bc-9401-b43deda0c3be", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad14b9b-accc-4953-a666-b452a7151291", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76ddc9c-f0f2-48f2-9b25-c9258c24c158", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3f0910-579b-4426-9b03-e144800729b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cead0a2-3aab-4979-b86e-5bce4a1cff42", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37cfa580-674b-4c68-b2e0-cae4fe11feb2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce4bee65-4fc9-47e8-93b8-3a36b2814f0b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7fd6d50-6a3a-4fcf-949c-16b3e2fcb897", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0188edaf-ad4d-41ae-a9aa-ab7c6f306bc7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d03f33-f037-482b-b5b3-d48bc04c1d30", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5abe64b3-6f73-4746-87bb-0393f4627a1e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c747111c-3107-4286-8930-6fd1ea108d5c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40605288-6d8b-404b-8f73-77abe5abf672", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da4fef3-1e4d-4f83-817f-0bd64927cef2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956b5d47-b778-4d05-9c79-75297f976744", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878137f5-10b4-4368-aa76-c3d38c1a492c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725a1de7-7bea-4882-9574-51d2fd02bdc2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cfae58f-9655-4bf3-bc49-af0b22706203", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b568d3-e57c-404b-b6f2-ca91192197eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.167.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385e2166-e7bb-47fe-8866-cd8cd70ad82f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.231.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58dff838-aaf5-46cb-a954-e6d051ea6321", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.99.168.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad4130c-ef98-4823-bd5f-088656d968d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.102.110.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adabb886-6833-48f0-80f2-f0525ceb20cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.129.84.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14982160-da2b-40a3-9a66-f1e2f15dd0df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.139.231.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705a9fcb-975a-4feb-b7b5-9fd60589ca3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.146.237.166']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b18be1-ccb3-4718-86bc-7da7ee6d89f6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.149.196.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3524b47c-23a0-43c3-90f3-9ae0ad3c8b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.158.156.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8754df3-eb50-4efa-bbc2-22c5dd25c8f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.172.221.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b61894e-09fd-4829-aaaa-6c5f45c56075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.187.180.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7c92b5-b93f-4c72-b8dc-24295bff92b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.190.29.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e14663d-d309-49ad-a1bf-4a14e7ccb158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.244.252.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a0b820-174b-43e2-9661-d5783a72fb6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.74.36.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5671a8a-46a1-4fc8-998c-e4f64619b811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.80.233.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28079c94-ded3-4c39-9793-4e120c968344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.88.69.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df790a0-3e1d-4868-bb4f-0f361d35864c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.122.253.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--990d999d-a563-4658-9981-589ad0416903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.123.1.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640ec239-ee96-40ca-8fe7-bd1ad6f075ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.139.167.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7051ad2-d33a-4bae-bf89-f495658eaab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.116.57']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782df0f4-c63a-415c-8ea4-93b67d87e62a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.164.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6b5c8c-fc40-4001-9db8-b761810dd64e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.214.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97604bf6-1684-4448-b78d-75869afab290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.172.227.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5869cf4-3e97-4c59-a069-a4fef0ec4336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.18.239.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036adf45-e6ac-49a0-9806-572ecd8103fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd629595-dd17-4631-8c58-bd8b1860b776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.33.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21410e2-c61b-41c5-a188-aad1391e7260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.33.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3735896-4136-4b54-b066-8b6f710d25fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.35.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298ee7be-fc1a-4f67-a73c-a4647ebafa64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e95d19-ab9d-4741-9fb6-3910f6e9208a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f017db-8f37-4c5b-89d1-567ab76599ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402f2ea4-768e-4ff4-8d25-66fa86437308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.56']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70dabfb9-69d4-4173-ab53-ae2dce9c0f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.63']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea557d0f-5c39-4b46-84b0-f3acd023c421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.37.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861c5a2d-6691-4190-8e9c-6c1f7c291b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9482b04b-70c5-4057-8c5f-32873b6987c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b22a69e-342b-4d3a-804a-5c1a35aa1885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af5b8e3-cee8-4e76-9c98-bd94cd2d2434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbbcc427-a8bd-4703-b153-a178ebfe1412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef418a58-7532-47e3-a780-13b6860717f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.45.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f9a2c0-73c2-4688-ac5e-99ed179a29e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329dc76d-7397-4d8f-bf2d-e3a4308319df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c02db2d-874f-478b-8eda-9d09e3f03aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c674b69d-6ce7-48ea-830f-604f5b1291c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba29e901-1fa0-4d6d-bd0c-faf32d3536e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f741df-2868-4e86-9fcc-1d64d1c5da86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d3f8fe-44ae-4be5-b193-6057ef611c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57bcda4-8a23-4e7c-bbee-59517fec9464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea6ee04-d44c-4c6f-ae05-bf8d7755737c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb96845-1491-461d-8819-11273f895928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6b0da4-a40a-46c5-976c-7a0779ef5ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7663d65a-8004-40bf-98ed-6777d27e4d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a857ca5f-b3cd-4072-ba25-54ee0a05138c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2a9ef7-d2e2-4c69-9a93-262ef8764e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ed0783-d961-42a2-ab2a-55b88fda3b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94cc44a7-750b-45a3-b076-6c3b2a90d1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d921e188-e33e-4c9f-b73b-f8f8e237c776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328e5b61-ba4a-449d-8034-08c9fc4adf5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e6ebf1-3f50-4080-8da4-07ebe428bc9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee370d9-e13f-4329-9c40-21c0893992a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a4f01e-877d-4f66-be09-20b05a4fdc11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d298c80-7781-4c02-b5a8-22ec404eb640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c3af26-e9bc-4ffd-a74f-b19caf8cbbdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6abfd4-abaf-4350-ad56-10d6c4cc068f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcdf92d6-8209-46f5-898c-79c86bf20a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3d3ce0-567e-4f5c-a030-ff695be2713b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e099eee-246f-4c76-998d-9c5bd16ec8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.234']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--046ff516-4f7d-4394-8d92-a1bfe470a787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.68.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8382f4e-291b-4062-b328-7aea73feca35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40035fe1-92a7-47b8-b06f-63a6e76376a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f856332-e0d6-444a-8e51-242edb6415bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.72.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f13e6f-b3ae-4116-908a-76a5824e9b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.73.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae17f39d-ddfa-4807-8044-bc99e54dc93b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.228.167']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31ab3b5-fe93-40ee-ba04-881df6d1c406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.228.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e43518b-b759-4524-a02f-fc67ec5007e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363299e3-d809-4127-be58-2ea0fdc57810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad241b84-4538-47cb-ab83-6680d063e8d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87e2d43-2363-4e29-af85-66564c3e7ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--856b46ee-d12f-41df-9309-813232c22c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0142b233-ce91-4a89-acc3-6c43c02e137e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f08df1-ef5e-493d-854c-ca1809239865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ac7335-3fd4-419b-bed6-4dd8a29127bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8a778c-26f8-4982-bde3-77ba8e8b0cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f963db-0b31-4739-82a1-176af08b8ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d1ace2-706d-4af1-a6f2-676533af7f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.238.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--812d1758-c65f-4c76-83aa-39f2a8844f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1060ad1c-259b-4aa5-99f9-8c2e03519e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ee9589-dba9-45cc-9150-133e025fff93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd9b121-765e-4a94-9a5f-c12ebec604d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9207a46b-72d2-455c-8065-a1bf13ae63db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d275e27f-a362-4887-b623-ae5a841e9368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6943c0-54c7-4632-8983-f6a8bdc90e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.144']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd4b66c-98e0-4c89-ae8e-bab77bfbef71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.145']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7c2b01-b36f-454a-a178-845847ff9993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9272a2-5432-4420-8fde-174608219755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c3a7f1-c871-41d1-94eb-71793f3ea34c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd50a87-4760-44ab-98c5-5f973962a91a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94826832-9b67-4282-bf72-396818c7a020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.87.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b21120-e495-4f21-9763-2e14460eed77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575144d4-4bc5-4b49-8d2c-cca5fb6c9e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d63cae1f-e556-4725-9746-073cf3f31db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0192daa2-9e88-4c25-b00e-2b387420bc91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4b6305-ad23-4f5f-833c-44be69aaa539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.144']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18573f91-5511-40bf-9141-a8b493827e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ade99f8-1e2d-4cc2-ae8d-e8c532eef262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2c05a5-8338-4dc2-bb89-13455eeb22a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.111.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b68994bc-05dd-4593-9fc3-8a2d6d4214ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c460f0-1c98-4d2d-afd4-76d3b9ffe571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.37.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dce203c-6009-4683-87a2-4e6b287806bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.39.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4da10e-2d6c-4fd3-86ba-07d4e6201d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.39.57.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12dc195-a3c5-44dd-9f0a-d9b79066135e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.41.137.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c0655e-27f7-49ed-a998-497941e2954f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.81.198.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbef2ddf-3888-4cf1-a911-f7c3655115c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.81.201.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a6b3b6-1cb2-4dcf-acee-ea504954d742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.81.203.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97adc11-7103-4cb0-891e-79acc377a917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.81.206.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01244412-51e9-4015-8920-a1fc9fb51345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.18.147.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948d0a95-6bd5-4120-b02e-803278702f31", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.249.100.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ffcb880-16e6-487e-9272-bc41f0ce0cf4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.249.100.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd84846a-aabb-44f4-96ec-054016dff9a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.249.100.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26145e6d-9484-4235-863f-2f68051a0135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.29.243.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11cccbbb-a742-43eb-b24b-90889278ee45", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.47.90.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e464de50-063f-4821-a02f-ac307bf10139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.48.134.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c846b0-8865-44fa-af77-366276529cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.52.78.153']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1495b80-9028-4167-8d5e-99adaf93e64e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.68.228.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9673fa-e4cd-4ee8-897e-d148901cb79e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.209.33.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8bffe48-b160-4c6d-a52f-3dcfda62d905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.224.237.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a10589-3243-48c8-ac21-0bbacd5a0dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.240.95.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7570633e-0b45-4de7-b11c-534a2550c130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.242.88.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76515f0-9d37-4bea-9873-4d45ab940bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.26.46.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f16e0a8-1e13-4761-b6c0-d5851597c404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.26.57.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47678829-da15-42b2-bb02-51d9068184d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.52.12.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e1e3fa-ba06-4ad6-b330-e8dd7850267d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.76.158.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656f1598-1ba1-4173-b70a-45e58e834a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.79.99.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a075ffef-82cd-4f07-bff4-8c37dc009b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.121.120.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc83312a-c1fb-40d2-9e1b-80f0d8faa70b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.128.26.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a1eabe-492d-45d3-8ab6-4c5a4d4d7702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.133.138.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b521dcbd-2043-4460-a452-31b6ae2fc81f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.133.219.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f3278a5-87d1-4477-88db-b09143ffbf3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.146.99.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--979d4dce-87af-44e7-8b4e-7d4fa35e346c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.157.46.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95035739-5ab1-44b0-ae9e-405328e461da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.158.231.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d3f587-ba7c-4983-ae17-8b01c9552302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.167.108.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38202ab3-9e1f-415f-9fed-b397d7c289a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.169.155.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6eb768-57c9-4bb8-9955-9cc23b33e04c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.173.173.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8062aa8-e01a-480b-9e35-64ce01d9dbc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.177.44.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79896210-dbe9-4214-8fa1-f35696de972c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.183.70.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14037b9d-d6ed-48fb-959c-9779d91c775b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.186.9.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d189bb-91ab-468c-a400-c9acb142a0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.207.44.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa3e1d0-78eb-44e3-b3b4-af0792145b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.149.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8efb49c-1aa0-44d1-904e-090c46df0f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.85.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913b9c21-063c-4b9d-bcde-6c23c9d72ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.78.125.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfce20dd-f1cd-41c5-bd2e-46f825822037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.102.127.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a3b7ba-e884-4e1d-a090-02b332514ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.155.41.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e8722d-09d0-4182-aa7f-00c5d398a1eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.160.119.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3778cd1-9341-45b3-b906-cd92aaf13c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.163.178.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79559360-48bf-42d4-a8de-26d69554477c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.166.250.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329adb43-e078-4b6b-be8c-cacbe7e6eccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.179.174.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9250ee31-d200-4e40-92c2-1c49d89c7db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.180.68.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0b4d13-5c90-4142-b27c-ebe63a8013f0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.183.32.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6627c1d1-7d8d-42c2-bbe7-049c1cb2a4c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.190.26.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52260fb7-9a6f-4cff-9ddd-4caa9ab73113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.191.115.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c27b9207-44bd-4722-a34f-b329981a83be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.227.108.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4681be96-c696-4c15-9ef6-67920ae11880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.238.129.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b468cfcb-3b8b-4c97-8ed1-da42463b769d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.51.143.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8266ec-7a82-4057-ae8d-c5834e286716", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.51.236.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a77e0f-7236-40bf-853b-5cdff31848aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd21237-f6bf-411a-8615-95e5e49940c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87075e10-3f9b-4df0-b279-b1d4bebcd50a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.11.77.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a31eeae-df09-46dc-ab32-fe1aae624581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.124.24.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc800b4b-1278-4fe9-8815-49cddf3d8d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.138.18.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764f9a6d-80c5-4f11-a14b-fa500a511ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.138.72.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e799150-7150-4f3e-816f-a2e6d1f6db3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.145.25.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82474561-c1db-4a6a-9861-76d0eebb68c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.145.35.167']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43139d55-7317-44b5-a948-b7866c07ad5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.154.2.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd21a66-0440-450c-a107-06334d82a9cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.157.223.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c794d9c6-0bb3-430a-bfa2-a9a07234adb3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.16.196.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2e4f43-29f3-47d8-b30b-5f3a15908797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.223.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e9f705-5d66-4a6c-a5f3-34370189b1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.223.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4b73b8-41e4-4021-85c6-3dbb38b32765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.238']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d22693-5f30-4e08-975f-ab38679128a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c615a8b0-e2f6-430e-a575-3f65c237f722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.191.129.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4872f5c5-5efb-4cb1-bdbc-230c41ce80a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.231.41.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c53232-9a42-4e3f-a150-587619e2eb22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.24.206.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00270dc-e708-4489-ae3a-6f0eaec38808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.240.242.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335cfeb2-ce09-4ef5-80e9-8c52e96cf664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.84.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1254b45-478e-4dde-8bce-5627ca02923c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.84.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d4ffef-989b-4a3c-9be1-5afefce129da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.85.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a35781a-5eba-46c9-88ff-933e9db16475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.240.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474bc111-28e6-4671-ad56-fda16e349ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.49.60.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a023ae-cda0-482e-942a-6e253768e75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e6ede1-1b31-41ae-99d7-a0f80f6a920c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--626818b4-7160-42e5-a578-7796cc8c656a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b169e22-b46c-43cd-8beb-85e9c6b9c8dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.205.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6f7b6c-4322-470e-92d7-d384dcff3c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a47d1da5-db33-446e-a560-5b5a2ae47ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd6efd5-3bc2-4242-b946-3c3da37e3224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f012cb4e-c7a6-4713-8718-0e0e399c5076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.81']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90862559-b310-49e4-b246-3b84087a0c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.210.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa81686-db9c-47bc-9ed4-85946b49fc01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a491dda-6149-40bb-840b-e25494aaa802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19aea5eb-7a73-4442-b21e-6a738baccbc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.215.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb6dd3f-66d2-48f8-adc1-15dbe3099e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.195.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47fafea1-49a2-46ba-9a71-d9a3fff3376b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.195.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f284d86-aee3-4259-835e-69414fefd003", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.149.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f34266-014c-4dda-85f9-edd8c0621a01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.131.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de3013c-fd6a-4840-a694-49fc648ce646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.131.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c3172d-4433-4166-8990-ad8b896a43e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.220.17.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb376934-2506-45aa-8b0a-bd93d4fbfe8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.220.234.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad84ffab-17c1-45fe-a162-0d9aecbba0ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.223.165.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf3ef95-432c-4b5e-aae2-a9b6b336a684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.223.63.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36a3f09-5aa8-4616-b8f1-da4a8842a742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.226.2.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9385691-a8d8-4b2a-8954-a28b0113e278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.255.242.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e497e4f0-9896-496b-b0eb-81ec185b5022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.29.226.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d436e0-bb38-47cc-897c-a7505367b6da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.31.242.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b154ae43-c938-4b5c-9e88-63340d1f6222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.43.70.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e496fb-167f-4da7-8fc4-9731272c50ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.45.33.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d3c054-22a1-414d-8031-f3e280e387a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.88.113.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e574421-ac11-4107-8870-f6bc29198481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.88.113.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e90fbd6-e6ef-46ec-b595-3624e41d18cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.88.113.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f44b12-3dc8-4799-80c2-e397e7be74da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.88.113.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a07f67-0a3a-4ac0-858b-38da94007f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.88.113.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd76834-e52c-4bf1-be86-660924a475bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.124.128.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29564c30-216c-4704-83a2-784563a7cac1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.132.34.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a88440-fb85-4706-a2f3-24b13481baa7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.31.2.160']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b54a4f-fe67-4559-87e2-2ef14d6bc1c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.77.175.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537f3942-fad7-4ad5-b719-5261a765070c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f3e4b2-0a44-49a0-a5aa-96976737d8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.34.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c0597b-1386-4df3-bef7-ee00c320d08f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.44.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e45716-ca0c-4fca-a3f0-00763b4283ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d127b7-d118-4cb1-b1be-e50f4cfa2815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04e5b52-8828-4e18-adfb-301b450d13cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c0fb99-74f9-417f-ab5b-a3fba0b56461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e80155-1667-4499-ac01-6d1632e5bb08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.232.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1024608d-39fd-4def-bc54-5981d6d71671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c58dedc-8f3a-4edf-aac6-d8be476551d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9d1966-7eb7-459c-b894-7c0ecb7891c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb60f02-ece2-47c5-896c-7e24cec1be56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76b8880-4bde-4493-b646-1030517218d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf9901f-89ca-4601-90f8-bbbdf5b0a7c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2c0120-7324-49ea-aaa2-d2edcc631ba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7add77ae-8161-4730-8118-a05097122eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d38e797f-29c1-4870-a975-f8f045654b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591699a7-6a57-41cd-86ee-e2163c52be74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef17243e-b9f0-4040-af19-85e907cc0e70", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.140.40.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ba159d-039a-4cf9-9110-111c15b4aaac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.137.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e596812d-c82c-4dc9-942e-f8e53df911d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.225.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c53154a0-583b-44c5-9021-a43ecfe6909f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.44.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697d9ae8-3bbb-427b-a351-7c696cdece0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88447ebc-fdd7-4755-8912-73675d52f893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.201.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf7afe54-1b1e-45c7-af28-d72d4f03db31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.201.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc770b5-7162-493e-b609-9bff5a8dba78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11eea35-e348-4b6b-a2ba-3963a1d5bf57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1e6e01-0a0e-4615-99bd-68045a4048ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.8.124.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd59db9-bc98-4384-a08d-93e2eb50cae5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.121.47.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed039414-b86f-4766-86e6-f9b3e96d0724", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.146.243.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a60504-34cb-441e-a1ed-3e74663da7c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.212.237.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab74f9df-b7ae-4d37-bd16-54c229795bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.80.76.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc1e4d40-4fa6-40a9-b61b-f5e78149f05b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.222.69.0']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b084d389-f1e6-4ca8-830a-32d9d3f37e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.250.241.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656b766d-4029-4420-b617-510ecba8d18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.70.158.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59fd7b01-57dd-4f2c-b65d-9103124db4fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.72.110.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--703bb8b7-1ecb-4d9f-9e6f-ef4017675203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.104.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10521c10-a3fb-492f-9205-c905e7c1537a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.105.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2d8e79-ba0b-4936-8bcc-a9a299041812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.105.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3191b8-efc5-49bd-bf01-b30b5f971c50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.106.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503cdcea-bbb1-41bb-b0ef-e5e238dcceb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.113.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5e3070-e544-4e68-ae74-b22acced64f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.113.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebcc05b-adbd-4427-9c1b-5f583ee62416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.113.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f87777a-5172-4c65-8e16-2869f32b3364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d4171f-1918-4095-bef6-d9d83bcdd803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.117.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0716e6-8e8a-48a3-b094-9732ffec6138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.121.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8412c9d6-f57a-4c4a-ae03-b7309aacdc43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc39cdf1-b740-4e7d-88a4-165f8fb64bad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8330365-7773-415c-a4c8-48bae00bd8f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba026e9-d924-479e-bdee-5d113861dda5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd67f847-8269-4978-9695-09ace61baabe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb68bce-766e-4405-987f-0b5290efb5bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7caa5c-73d5-4c70-a85a-0fa836f2017e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e60f245-6d48-4e09-b7a2-d08e4a154f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435f1361-75de-4edd-aa36-4e38433202b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07bb455-7ce7-4ad1-89d6-d33331181ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2adc8f-503a-419a-9bde-830ab221a169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2678e209-533c-4d0f-adc8-7eb7cdb93b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132f94da-c58a-44da-9923-be3abbb68061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f9b6bf-7723-478c-bcf1-ce838774a999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--085ffce6-2246-4341-b598-82e0f240a291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7738a847-7845-4a56-b8cd-1c831fe74ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5358bd7-b8da-4c22-8ce1-9b0a3edf4617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40660d06-c372-4bd4-9e5f-aa7d1e420ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--224f4c60-7127-47e9-a2c2-2bd848219943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d51c69b-0e26-4aef-86d5-73a85950a7fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e153e2-5eb4-4350-aba9-75138f712431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908d88f1-7859-4808-a266-e98e57c821ee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7c09a9-2cc2-47fd-a531-5c8a0a3b0c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebade8e1-e089-4d88-bbf7-4344b710733f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0488cf4-902a-43f1-a3c8-eeca0ea1af59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408afae6-7bd9-43e5-a51f-a0a4b85a0414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3236c35d-d5cb-43b6-ac39-f7b93877a6e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dca0ee4-d848-4620-aedd-102fed80d669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9207a08-b5d9-4b61-ac8b-45e806b6b4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1404e33d-898a-471e-82c5-926151bfa260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.185.119.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f532ccb-4519-48fa-b3cb-6c66d79cd216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.110.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5cb17d-de48-4492-8d3c-2acb249aacd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.49.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--643b86b2-9099-4c67-aa54-61896242fb40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.159.24.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83bc6f7f-0ea9-44a8-8b60-16f3c14b01d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.196.20.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374c673f-a9ca-4085-9d7c-96251a1c88f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.72.173.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d2f3c81-dcd7-4e87-904c-e0ee1106325d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.148.142.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a7e27b-0257-44b1-b560-2d08db91f118", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.148.155.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae754aa-aea2-45f8-9517-9885256b58ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.148.26.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5195f30-c70f-402d-bb3b-d6f4a79da4d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.125.153']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--153bacaa-40a2-4f48-aace-555c1df60789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.77.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3395fb-787d-439d-8091-c28814d79941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.208.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b26182-72e9-40a1-a899-ea59a9487ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.174.238']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c0b0a2-1ad6-4573-bded-d4be9b47cce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.187.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3702551d-7e4e-46fc-85e5-10544439e3d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.73.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3fe706-b769-4fc6-af25-4cdf8b294aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.35.61.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca08cd8-65b1-4985-aa8b-f682a6bc61e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7a9cb6-caa8-4793-a8f6-47953442486c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15020596-cf5e-4b4f-a353-949e7aff85d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.16.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--227327dd-2304-4717-a7a4-eee676034315", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.73.164']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be3947e-5e4c-4f87-9a56-9b8ada756ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fbb9a5c-2155-402b-9ed3-f88b213b8080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4843a46-bca1-4225-887a-443c0409b53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cddb27d7-84b7-4ace-b86e-45cb767e59c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.97.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86eef2c2-d2a8-47b5-b878-dbc79c9bde70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.148.124.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27b8cab-09d5-401f-b8d8-132e22f96252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea67b4cf-f0a9-4051-a1e0-41a076f6d51d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02cb5018-4c33-43a9-9757-bf9bd1a116e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e976427-5b0f-4d74-9e19-6b291303915e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999a72f8-6b5a-4fb7-bc00-b588de78e522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc830be-19f1-485f-ae07-18d50271e955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb88a0f-a3f4-4ffc-a5f9-3441ef95cc62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3d6df3-4e65-4828-86a4-d4cc9d575039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b62f66-66ad-4353-ada1-9094ceca0456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae951d43-bf6f-4aa2-b226-0a95a0d59c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6bb19e-f74e-4b21-8c61-28b6b4406ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f5ef5d-e6e2-490d-8114-e26e7e571430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29b1931-7a30-4a98-ac85-f75ac274dee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbaa5e2a-5de0-45b4-804b-a7c789d3f4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc65bf5-3e5f-4453-8e47-cefc6755f0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c161910-2b81-4bbb-bdf0-5f5d5be57065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e322ad3-6b76-4026-b115-e38c864db9c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e36c2a-2e79-4458-acc2-b57d43ac05af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f420a202-4e2f-4dff-8d6c-72490e8d2be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6fbf83-f18f-4810-8782-795eacfcb853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dad2152-e73e-4fd4-8ab7-7ccf04dc6bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c1ef71-7ee1-489f-bb9b-e1d75148c878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e639812-de87-42c5-ba5a-ad4e7c8340ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d660e5c7-43bd-4ab7-b474-ab5b856d892d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726425d7-196d-4167-ba8d-b9e6ae1639a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0325ea0b-d147-4eae-8754-aaddcbbf118b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4641dc90-cf84-498b-8ca5-279da49d1681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2f95b6-192c-45d4-8d21-051438c0d9ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c8b7de-7c2b-4a36-9f64-65ed44a82506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87beeac8-c3c3-43ee-aae5-d5d43141eaf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5aa2a98-6e4c-4abc-aaec-73ff325b7273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3840973e-ac1f-4fae-9a99-c4044a1047dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528dce2b-795d-4b9b-823b-48edb5389850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a3b96b-0ccd-4b2a-9f4e-14896246ec63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afa26b0-64bc-4388-9f96-58d14f60403e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325fff1e-5bcf-430b-9b1a-d8969e10dba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157dcfe4-4fb2-4a18-a250-5a6923f97d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bafcfdec-9c0d-46d6-899d-86d35281e874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac4ca55-f71b-42b6-985f-d16d533da9cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c3d412-d74e-4a13-aaa4-7f39e6184c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79c1d73-cd77-407d-a91f-2430bbd84da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41dfecfe-cfd0-4d22-bb19-89de368b11ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c757b83-0d8d-4d9c-b749-bd8824d837f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46df240a-902d-4be5-a62e-2c67aebbb3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4424d72e-793c-4cd1-b8b6-1871541030e6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.107.254.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc93d74-1cec-4379-8879-040b8ee604d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.112.177.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe3f463d-99ac-4d06-b27d-ba7f43166840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.118.105.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64828a56-5046-4d04-b547-c35a9cb84757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.119.104.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b02975e-9334-46c1-bfca-7ff130ea5275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.143.176.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0af9a49-8786-4d06-b1b6-ecbe7c64227e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.143.177.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65857a1-2263-4b49-92cd-ae3d9bfa2dc4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.144.35.145']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b6352be-c366-432a-87c8-5f23c1c996bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.105.192']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d7d3d4-a95a-4931-86d2-ab923a93ebf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.121.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df3a717-89be-4846-ac67-d480e3bea389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.123.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0293b6d8-7370-4a60-81dc-8dde93c1d67c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.162.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--340df2b3-f36a-4a0d-b8f9-3c71ac624c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.167.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7433f927-baab-4b6e-a275-0311980c8254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.36.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e4d1e21-3e87-4578-a26e-96d8e4152f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.54.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be81001d-5c6b-469a-881a-483093ee56e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.85.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5358c51-fe01-493b-8679-c5bf92d9d482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.93.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332c6f21-9573-4621-a75b-509d7dfe56e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.59.54.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592fe88e-3ce9-40d5-919b-37beb8a9b067", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.130.251']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283109f9-a64a-4149-b337-43d38ad470d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.24.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9448f9bc-59bf-4baf-8b5a-b4ebb3c3d498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.8.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9812fc-30b9-4ef0-81fa-df053b38d78d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a67790-c0b1-4e36-b529-243814333842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2da1b1a-68d2-4cdc-9ab5-2fd04b231af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f9a287-16a4-41e2-9014-d003b33ce361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.246.253.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63c8841-da7b-44a5-b8eb-00a62befc27d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.20.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd18c73f-3832-4bae-b1eb-15bd874e25c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.4.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3aaa7c3-293a-4b1e-bbdf-5bfed32f32ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.65.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5099e1-f4fc-4e71-817f-6377635703d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.98.57']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e33e72-d65f-491f-82eb-0213a52a0449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.91.107.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bfc017e-d8ec-4901-8efc-5290441ddd1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.45.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258f98e3-2914-4997-9c61-1f90743addc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3751f420-2fbc-4f95-92bd-62b26d4cab41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f082e534-577e-438e-ae9c-c100e21dd6a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f2489f-9c51-42aa-b9ab-90493022efb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.113.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1008d2-62ee-4520-abfe-2a0bb0ce3388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.117.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006553ae-0aef-477b-b4a7-a1e9f2bb0267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.183.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81106be-f251-4f8a-bca4-1e8bc50056ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.66.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e2ec42-2ad3-4684-a4fa-ed9bc3f5e8ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.70.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed91acf-d410-4b1b-b750-676d7e7e5d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.78.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65aa51c0-2b38-4286-a0f5-33e0154c357f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.170.73.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6a5c1e-c386-419a-a75c-d70654765d70", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a22a6e5d-7359-47cd-bd74-fc6d4175749e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562bd26c-cdc1-48b7-9616-bbb85ad79e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.226.100.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b85060e-0a4c-4ce1-babe-3b8e27b8737e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.104.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad459c6-f3c1-4679-9ca9-8a380dd7f7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.11.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669aadee-0aa8-48c6-a2c3-0044ca0c87e0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.146.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc955b4-b5d0-4a43-a30c-d40b9938a406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.152.154']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155705b6-ed3b-4dba-bd80-5fe411f0bb4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.173.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b60a768b-fbd9-41b0-b708-43aed857a82f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.208.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668f4aa8-d32e-46aa-b932-46b4037d7472", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.208.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cfc30b6-9582-4490-8cf0-aa13c2222a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.30.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcea3a6b-c7e6-40f7-8d29-33c282cdef56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.37.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ef44c7-edac-4eb9-a50b-b8f9e389ab8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.42.255']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa2d87b-4f11-4beb-b5d4-599e9d7d059f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.56.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a24107c-68d4-462b-871b-cd6012a761a5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.114.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc510f75-9e09-4278-8324-2be48111812f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.115.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40af58c-8afd-473f-a94b-43b39312bdac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f92c86a-b148-4c4f-b5fa-d93626f8c04a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.116.219.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3268da26-b2c8-44fe-89df-048ffd001ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.137.237.192']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d3203f-8f65-45c3-943e-34f8ffe5db39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.165.242.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b50781ea-9823-4b96-a19e-8ed05240821a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.183.88.192']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b919619-6d35-4b43-95b0-7e92b9a1db35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.186.246.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--765a538a-35e5-42c9-b294-3028a92a6b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.187.246.81']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8649e176-b456-481c-91a9-319cb5fd2199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.205.104.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bf6427-adc3-4914-9be4-8947f6e96667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.205.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ee964e-9bb9-4e68-84be-b341b65153e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.225.230.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ff8cd1-9f52-4d83-bab0-040b4bc887f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.225.245.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671edb72-a9e9-4859-89ae-d802b2968efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.225.7.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3efb061d-2dff-471e-8910-bf228d4676f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.229.227.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64307250-f722-4733-8f1a-59121aaaed90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.23.124.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ffcc8a-13bc-481e-bd99-25541424bdd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.241.172.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d44d94bc-63c9-4bed-88ec-fe856d43e708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.241.84.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b06e01-1e0a-47ed-8fc4-e0cb03449beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.41.51.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362b2868-dae6-4d49-8d0b-bb982df3ca24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.45.174.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb8ab93-592c-4cc0-8982-bc4824c8ec72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.52.46.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b00f36-92d3-4ac1-80b3-6206a2e64d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.54.24.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f87d2f90-ba0c-4f51-8b67-35129a32bffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.56.51.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e850daf2-0010-4e23-94ee-992cbb86600b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.97.117.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b7cda5-ae62-428c-a8e4-0c9d38be5ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.143.159.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd04349-e8a8-4e37-bc2e-028739003f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.238.153.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80561968-785b-4753-b5a3-a53411c99816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.246.124.160']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a01e83a-6ed4-4253-8a1e-b2f2c3cdc9f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.88.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f98a04c-30c8-4f79-8e4e-515b6d80640b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.88.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb40fd5-32fb-4b94-9ddc-d5cdd22f7441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.88.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ef0cfb-13a2-4b82-8745-11bf24308c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.88.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5106d06-a2a3-4b6b-8720-530fae459c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.88.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30be59c5-9f6d-4bf0-a583-b8aa3e5985a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.88.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744245d6-c070-42b9-b107-4edecaa67332", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.88.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25f2658-976b-4bca-9083-c7cd0b42d52f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.95.34.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5227bea4-6f83-484f-8027-c5301a1148f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.10.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c4ec2e-b179-43b2-ba40-67f0ede7b431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af16157-c682-4874-b181-492c121458d1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.83.240']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff56679-653f-476f-853f-4be93b6cf2a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.83.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00badefb-b06f-4c7e-86ed-aa443ddfd44a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.165.181.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ee72fa-26e1-415f-8b2e-498d2f9f4d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.202.189.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897c4588-9be9-47ee-ad8b-14599a3483e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.44.247.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6815d548-8ea9-4cd3-a7b2-22523c5050ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.146.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a109a0a2-d3c3-4913-9d9d-a164c6f8009d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.152.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5677a9f-fd77-4300-80cf-16b13e818440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.19.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da446a2a-30e3-4a27-8958-00ad45c538f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.105.133.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab96d145-3842-4140-9051-aedf7fc1e0c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.182.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba90940-1bfa-4be9-a826-2c05f26d3fa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.240.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f574af-6386-415e-a8e6-85f411345a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.252.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9bcd56b-a6a2-46f3-9c75-b20c5b3dd992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.14.92.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d63d353-dc89-4198-9832-5a5149b8cab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.14.92.81']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221db2a3-3a10-40ce-bfb1-7da00868851d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.153.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa4503b-d879-4b59-aa1c-4d4562270284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2019-5418, CVE-2021-41773, CVE-2021-42013. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.214.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9efa2506-c649-4bb6-aa3b-6059a37e4a28", "relationship_type": "indicates", "source_ref": "indicator--4aa4503b-d879-4b59-aa1c-4d4562270284", "target_ref": "vulnerability--1ae7669d-c0f2-43b2-b9c0-17583542f0e0", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f619e2aa-2d65-4cac-a311-5e3dc2868f4c", "relationship_type": "indicates", "source_ref": "indicator--4aa4503b-d879-4b59-aa1c-4d4562270284", "target_ref": "vulnerability--1b54f858-1f51-4904-8b63-1716d46f773a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--219a61e4-33d6-4688-af76-30799ae194d0", "relationship_type": "indicates", "source_ref": "indicator--4aa4503b-d879-4b59-aa1c-4d4562270284", "target_ref": "vulnerability--aafe8ac9-890f-4583-96e2-3d3f3e6e9352", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00381d0-4420-4c10-a63e-b74559e078aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.20.49.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b703b76-daea-4b58-9c63-8f7fb35e4817", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.20.49.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe94fc98-bd1a-49cc-8e15-7bcae0ef4f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.132.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15fe8a4c-01dc-48ce-b7ea-b7db1400f23e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.135.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e1ee3b-fa5f-4fc7-aa26-a054e09b5d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c12353e-1f31-496f-b384-05d6c66877d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b74545-6b5d-46ff-a7e9-23cb669e50e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9916b5-16f1-4fcb-8ff4-40e01c12825e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b3ef78-b3f2-49d3-b862-8c0bbc27437d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5a5ef8-b612-4420-8bbf-5d07519fb31f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a68a9a5-f5e3-4589-a3f7-5b49b74ec783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--038465a3-aad1-4949-b7fe-c40cadd28afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d2e22a8-8dc5-4e16-af93-95a945b24d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673af2ca-3f96-4f82-b065-72b1ce1c9709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7984107-3daf-4e8b-89f7-97c0d9b0582a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3d8d65-a899-4fd4-b2f7-1957d4cb746b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9227d57-5e6b-4c3b-bcd7-12ff72515396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--251f69f4-b55c-4e3d-b3d2-7916d2277b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e06da5d-5b3d-46b9-9a22-23930dc366d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3adde5-e798-4bc9-8deb-71e28b9dd928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d33940b-5937-4e30-8af8-77824be28eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd47fb7-9789-47f7-900e-f97eec98589b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15071aa3-3a28-4c37-ae24-a389df2b3d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d749e452-0ca0-4058-93a5-7d02dfead0c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a14bd0-1715-4330-aab7-e0f240599ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5782715-e446-4591-81de-0a69b3285f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5c469f-8826-4043-b5e7-c4174845a1dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1c997a-6084-40ba-8c03-893b4e22b42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91bf5069-7db5-4a34-9fd6-a88c5cc9e1e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.77.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6591318-d18f-406c-afaf-29e895fef711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.194.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77914a62-26ea-4349-9e3c-10b999187fcf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.106.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbae2e37-354c-4c0e-9df5-da6ec61c538b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.65.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d1000b-3d87-45c9-9fc5-3cff0bcdecc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4b3973-1a56-4426-b0af-c1812c59ab92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.92.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d334e7-13d5-4fb4-a337-31b41d3ec70f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.31.0.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eef1af0-3ae5-448b-9457-5f939f0954d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.31.220.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab0e5d1-28f1-4492-b4f0-b67a77921b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf23c84-ced4-4437-80ee-7144f5502d07", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.91.108.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3b7af6-6bcf-4de5-ba6e-a8f74845de63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.225.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9543071-56d3-4eb9-bdc8-6a5c2fa748e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.148.124.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21c9959-b09e-487b-a69e-bf9ec1617a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.19.125.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b46643b5-fe7b-4fc7-a6d7-08774ca8e1db", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.112.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3320a4-15f2-49ca-8cfe-16179a4faa41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.121.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e20398-467c-4913-a933-d00f91303cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.134.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e465b0dc-0e93-4e63-b056-fc6eaad553a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.139.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca27884-b9c1-4c14-a92d-013c0c5a7052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.166.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b34d93a-3489-431c-9b69-7a7b68922db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.167.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0309bf98-9601-4d9b-93e2-2a872d72ee67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.21.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--613a7a61-8724-4a6d-8bcf-ef7bfe389453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.31.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b71a87-d9a0-459f-a257-b3a2d71bed6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.55.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac49173-b845-4c0b-82a6-ec2fb177380c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.57.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b686f4c3-e7c4-4ab0-9de0-40c79ac5947a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.194.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0781eb-8201-4953-9e56-795c544f07ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.211.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d25b93-a386-4c79-af37-a4755b10ab2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b433849-5730-4f76-b0ea-09455a1a5dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7d7d3b-9a58-4901-b420-f71b1fdc259a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a83491-6245-4ba8-96fc-c049014ca753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a7be96-eadc-42f9-a148-58ecc1146806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.132.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f044ecc-781f-4937-933b-d90c11692bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.136.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb6ce2a2-ec6c-44a0-8524-db6932a13ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.142.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b02e1f3-3e7d-4bbd-a0ff-131cc134baaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.146.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbc392d-35e1-4c25-933b-add1a2f2dc7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.197.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b984fd-e43e-4249-87d8-526517026921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934cde59-bf2e-4016-990b-0a05b64aacb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c34987bf-ade0-4426-981d-b6919eb95e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654f0b51-3113-41a4-955b-b8bd34ae1370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ecba02-5e03-4453-ae7d-47b12a5f9da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4662c4f7-700f-4258-ac29-1bbf2d592735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3dfcbb9-10d5-4d2c-bf74-35c947314b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8902c238-0d78-4242-8df1-f4b8253ebcef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f37b9961-65fc-4445-b883-db5af26a76ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5947432b-5e81-4b73-99d2-449b3365e54b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913c055c-b627-4a8d-b76f-7b0d02959d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5face34a-dc21-45e4-aa63-f0b6ee7c9677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2c1e92-f010-4542-b8e8-984c6075385f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3081bd1-b1b4-4c08-8a29-c33c939ac6c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7183dd2-86d0-457d-8cd9-b3db597d3e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a7d9e0-7c47-4bb2-9e0d-afac25e7f9db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a853f2-4ba5-41f2-91fc-b1af652bf6c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7043c2f0-f60e-44d4-8c27-babf9fd07b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97c6cd0-6ce7-4395-896e-bdf4bd356642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcae64a9-e7f0-4309-a8ec-dee6a2943b48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b3bfda8-da00-4d93-898b-e45ac2f88e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2639656-9a4c-44d1-bfd6-559ec73c246d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe2c62e-4842-49ca-8a11-1cecca645f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b343fe-1e43-462b-9330-f58706859743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abfffe4f-3e1b-46ce-92b6-fdd508db6071", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f8dca6-10d9-46ec-b04f-016ff34fcfbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30dfed20-c779-4eba-887c-4e72d0571116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4686b3ba-789b-4931-bfd2-a436f962c975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23472384-f027-4ef4-a622-0fde9afdf33f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.144']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c41560-d426-490f-8c21-005eb76d298d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017f7bfc-6f11-4eb8-8ff2-52ff540c1f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abdcb14-71e7-4a14-b2b9-94c22fb9b7c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b402eacd-8578-4b96-89f1-2e385c4aa550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a65aeed-07b3-4bfb-bb9b-47506aeb52a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.153']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9b1759-705d-4994-89a8-b18239ee68fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83801fd-5538-42ce-938c-6faaf3a1ea39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a02c7f7-dd20-4f1f-bd3a-251b8cd50d7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd83173-b675-47bf-8903-f1392bc48176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b10e35-3f1c-491a-973b-81fc8a5d77fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.160']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ee3418-99ad-4068-be75-7492bcef766c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165d35a2-1add-43af-9818-d4dffb0df1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.164']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e2c33d-e732-4a15-ae9b-bfbdc25d6b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67cb3455-7a78-470c-9b07-95c7f0381919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163c431b-ff62-4b8c-be86-bfbd10220559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff86005-dbb8-4bde-ad2a-6d1b3ca7dc23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.171']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329d91d7-3611-4f5d-94ca-026bbbe4d0fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235fd4ee-e35e-480b-b5ba-e02df66e7dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccaccb02-ab93-4aeb-a8c7-bf3f4c0cd501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104a803c-f3ae-4f99-904d-d70c64b4cbc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28986db8-22cd-419a-8ad3-f3844783fd9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--138a0661-13c3-4e4f-baed-95e447644c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.178']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549c9dba-1e83-4845-a55b-84b6f8a3ab31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900062b8-dc72-4cb6-ad6a-526539cc2132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd093e9-14b1-4ec2-8d96-45900eac1eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce4a4f33-9593-4d79-b577-7e8a3ae83de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.183']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a87861d-2024-4d8c-be52-036a148d3885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421fe66a-708c-48f3-bbbb-de3c4285f2f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1380ce71-5b95-4b92-bd02-efcb215fd046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71368af6-ca22-4e42-bb1d-95aa1b20cfba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6273c6-3ec8-442c-ac3c-8a3ff9815944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.195']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad22499-5014-42e9-b96b-93c7349c9fbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e5d1e4-2d55-427f-a24e-f112b5c5571b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc242ea-91ad-490e-8733-14c7813454a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67961ce6-05e8-43e3-8c9d-74c19108ea88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c90a731-4c04-4ecf-bc82-d71f563bdd0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7301da0-6ad7-46b4-93c1-0b9143b9d277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc31f2df-14cb-42b8-b586-c05ed80a387d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58fbe0bb-2af6-4ed6-9110-ab40c35c42eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e468ff-c124-41a6-bc3e-8c97b3599d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d73050-2d64-4f8b-8822-ee658dad7160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa379aa7-7bf7-4d82-82a7-00db2d25dc89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6bd3a93-a4fc-497b-8f44-071521c0564f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d48a2396-374d-47dc-9a0d-02f20aec114e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2fc62f-c287-433f-96a5-28b6d338bc64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.216']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55a3a81-aa43-4730-a5b3-8756ce175b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216a4c21-843a-4857-902d-847ae585aad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--872d883e-d96f-417d-9171-31fa1a90d137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64093e8-6cba-402e-a09e-7f0beb2641a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5523fa02-481e-4eed-b96f-c42f85405d70", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2be5ad-73be-455f-adee-ca6d5b2e5498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19415b3-e156-4a60-9926-929b8bbda193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8168229c-2d23-4d9a-90e7-8e7060c0fcf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a07b3b95-f013-4d1b-b0a0-434552cebcdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147f16ef-9eb8-4569-80fa-7d045a6e83b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e53722d-8ccb-4022-b7a7-973e14f327a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.234']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78f5533-2303-4eb4-ae54-55694b100d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.236']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90655b55-d82a-4d19-9170-c30d42d7ac1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3741ea6a-8a50-4190-b425-702a1e5eb12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.240']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a4c46f-1b72-4ede-9f87-8e17f6b81db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e50162a-b85b-49c2-8ed9-17057153fd46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69170383-5ea9-46ec-8602-1a6a664f294e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073b3c5b-ac4f-4f5c-934e-8be74be56cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a6cd27-d012-4da4-bc22-e91b5acfb3c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fca30be-c762-4afc-aac9-9a92a0d19199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--483310cb-9d2b-4b35-afbd-c8f824c764f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b705f9-e152-47fe-b89b-38323a0b2507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ffb717-7882-4d1a-b4bd-a32621a13503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.255']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24230c9f-471d-4c24-a5b1-9fe39cc64e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a443a695-c507-41eb-b4e9-3c80ea838978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8915e2aa-741a-49ca-8750-f57d5de8192b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f3e9bd-d370-44cc-af91-3524505b9306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57026a15-0aec-4ad9-a80d-ec30b8c095d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e6d239-9c01-4973-b417-aeb99a39170c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93bbde61-76ae-490b-bf9b-9201d502886f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e154d9a7-6065-43cc-9ab0-1fef64ea8671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d4ae9c-ad8e-4d30-8371-09dad9d03e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01792a71-9831-4639-8519-abd26e921da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00edc120-1b3d-4694-83b3-c1f327ca33fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79407f5d-a227-426f-8e60-189295d0cf85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd7b8ed7-f89e-49f9-a5bd-dc1c799253fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c1f1a6-4b4d-4e90-87d7-66e1c683ddbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a3cdf6-2889-4665-9bdc-8a22e1cae73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f69d4bb-3721-4598-ae6e-ef54e4fef835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e165d4-d531-4a32-8997-a354cfb4a908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501864df-f757-467a-8aa4-7320aa6dce8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88020cbd-7463-4c83-813a-71921caddd63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd94236e-4493-4e2f-96a6-1d6d29131ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5cc89d-8d89-4c38-8ba1-abf41b55706f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b72fb8d-1d1b-48d2-bf9f-2f86ea06904f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.57']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3306f3d-84d0-4007-973f-2dcee6719eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1da1fd5-b932-4270-b6c1-1d5e01ba48ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a05e24-3bba-4fec-b080-9aeeb9e1ced1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c36c44e-6af4-4722-80aa-5281328bc329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be5b710-7eb4-46d0-b217-ad5d0d514f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.63']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc13466-8b04-492e-bb77-425c1b0aa9ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7f0220-e9ed-4465-9966-17e05cd7d012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d63a2a9f-bdcc-4a06-b73b-3bdb0f2e79f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3633ca29-66fa-47f3-89a9-6dd14234bd94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c99844-a5ee-4a6c-8ac9-9505a29349f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26700114-470b-45cc-ad99-357247b8fa72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b8159a-618e-4c95-a9ee-c53f5b995acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b30a23aa-11c3-47f3-8ce2-fa452f840c31", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd89893-99de-45c6-9090-61f3de0d54b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5989ab7-0504-475b-bf5e-342937e0fac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28ded04-273d-4853-97ae-2cb4d6a6ed72", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3d2fef-d724-417e-b095-295f3977a9c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c852517e-6d49-4d30-906f-3888dd794124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e65e1c98-8e0b-4a06-b8be-ac48f3d388f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f80477c-1781-4bd6-bcc8-8a0c46b6546c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c43e9019-6ae5-4060-b4a0-9d37cb4b1508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904847d9-a872-49ed-96af-b32ec55bae32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1716f98-40e9-4327-b529-a162680368ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b9ec6d-ac87-4ea7-88b3-6f0abdc86b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da79cb3-2f16-44ea-8448-02096338c70c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d83d0a4-8c64-4631-972a-4614296aa1ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5551abaa-78f6-4317-b2aa-36be204dafc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760bc569-2773-4739-8d12-e70b7997b10f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85074240-4efa-4051-93cf-295145d62998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd2f15f-595e-4a17-9f94-f8deb977e84e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0181cc-af76-40f1-ab45-a917dbae2f6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390ded55-3397-4654-9288-3804dde32af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.1']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c65959-ab66-4ab0-87ce-5b52e79e5fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abdb59f-0444-4405-923d-451111f5238c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef0bfcc-a64f-4d00-a9f8-fd22b06057b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6999c78c-580a-4365-927e-2a332d30b564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ec5625-b277-44a4-b566-a0910edab2ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--446c7b49-b7b1-4563-b139-a651b20ea81b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b13d575-2619-4ad3-8f9f-59fae5268a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c12c978-78ab-4d32-a52a-5e7e29830aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f71d87-e4f4-4896-8d4c-b34ecb07bd4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e080f3f4-4d0a-4e6a-9154-29cfa7c31dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5121a8-a95f-43f7-a282-031037a5e216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb44b47b-a5de-4e08-addc-d0c7ab91c705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0f97f6-85dd-442f-8b50-1eaf905d4310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f043cd9c-61b0-4f09-9b63-9139da8de34a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39093426-25ec-4601-be14-679846f20a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d605dd-e98f-42c7-ace5-aaeaad494fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8152d717-537d-4770-9852-7a0dc5ac3327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66eba924-d17e-4c72-bc25-b415ac0cddf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e689fc-fc6c-48a1-b73f-a5d1ddb48c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e799955-1cf7-4928-bf82-1b7c80bc5796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b695f9-2936-419d-b135-197574767791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be827a9-5c77-4169-93fa-7252b7abed29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b4bd62-c277-42c2-8cb7-325f22c1cbca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0aa789-3011-4c2b-ae40-17c88f840f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926d7e7b-9493-4122-ac48-a60296215d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.144']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf3a897-0f10-4d08-aba2-fc19d783e571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a089b90c-b362-48c0-9c7e-90d2bb83d31b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b73106-a3bc-4451-b588-7ec3bc9efb2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3cb79f-ee5c-4e74-a2f8-95f2bf5310b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26642142-4c49-46b2-a992-36cc5914a18e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e235441a-17a2-4c15-94ed-0d902f3241bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ecfe7bf-69a8-4221-94ec-8925a90636a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870220bf-43f0-4646-ae1a-7430b8c5f0fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a3d9ef-6bb6-47e3-90d1-ba185463fd04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d414f4-c465-4b41-88c5-8859be550fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c94b168-b0d3-41ae-8bf5-7a5413686840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab18d21-8529-4a33-a34b-83719553bd32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.164']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ed53c1-2e56-45a0-a3f5-51a90e9e0a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.166']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d472ad64-d08f-4a40-a5e6-1b95678ed87a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16cb1081-d102-4e1d-be34-9646edb8e1cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05dd64b-3755-42d5-9364-ee20dfa7bb8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6748adb6-d04a-42b4-a548-293847c96ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67e7315-7007-4197-8576-992ca9f9cbb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d52106-cea0-4cf6-8adf-84ba7e5aebde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a50880-aff7-4318-b3b2-ccf1e89cd50e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--032db8b2-1557-4f41-a16b-2368c75c3416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eadbd32e-b205-48c7-89b8-65fa3e4523c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2caf82d-0274-4ca3-9f2b-772fdaeca7b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.195']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693e6700-49a9-4154-b96d-b5baae6d2481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02730ff-0ed4-433b-83c0-c99e3a184e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ba67dc-6f4c-4dee-aff9-8258bcc479ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ce9943-bf50-459c-9253-5e1be78e97f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a655108-3e27-4b77-9189-f2ab376e41bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f538117-1127-4ff8-9b30-c402bfc6527a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b177d9-b889-4995-80ab-4830ec6962f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4589c5e-508f-4f04-aebe-5121b376df59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9369ba35-0219-40f0-b009-9151eb26f60c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e07096-5ec3-42b5-9f07-789c5a7cee1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dcc111d-5f32-4935-a040-752309c312d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b0b0a67-07f9-4fc9-9a9e-0b0c470a90ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06e96a9-e2ae-4ccd-9fc4-625c28ded45b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--defc27a5-f07b-4ec0-b926-7f57150c16c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3939791-f1e8-4ab7-b5d0-f213c40695d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0499fc-6e46-4a98-ab0e-f7624f9c4b6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.222']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae961198-2cd5-4676-8c28-da024c7b1a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c084f7d3-337d-4993-9657-77166df016fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.228']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4641a956-a756-41e6-bc61-46bc054b53e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39786928-02c6-4be7-ae86-152435bbb075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982d6cbc-6b51-49e5-ba6a-407467b57d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357195d3-32ef-4edd-8a67-c7d03bdf2082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6924a1-fca7-4546-a406-6e6dd3dcab7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.236']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c32d7d-d13c-440d-b318-e3e555b8c131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21703ca5-9fa1-462e-83bd-978ce8c608e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd96b690-6707-4e61-9e59-7fdbb6c5d170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff396cc2-b004-4207-8d2d-30ae1c724f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.242']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf6c719-5b85-4bde-bf64-5a63940dbc73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc42b7a-fde2-45a5-945b-49fdfbd810e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd0fc38-3a5c-4b1e-a082-d2734d48482c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a961ebe-3677-491e-b2e9-1ae5be84772e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.251']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e02cad-88e2-4380-9127-d2b30ee6fd1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.255']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0aa8f9f-b7e5-4659-a352-dc084158aeac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624e4dbb-cc70-420c-a0ca-8b7e177cab7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4259f4-1dd6-4632-ae8a-6693ed1fda3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab79fe8-7a20-46ad-a32c-1e1a020a0665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548a1be1-1ac5-472c-8f17-1220dde1543f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d5aeb3-07c8-46a5-b1f4-cc43a15a1da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7a491d-bf65-4c61-ada9-3452f8bf7c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f77482-3832-47f4-bfa4-e5b4fd674076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72cb9cd6-b176-42bb-8a47-800e804f9dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--864c664b-f5b2-46db-bea1-582326311e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b281201b-350f-40cb-a058-7c96af92101a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e53fe5-5d09-493e-ac42-03f003d93f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230425d0-47ac-401f-b2da-2b742846d5e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69594b19-5f83-4aaf-bcae-56fc446e063b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3226faae-15b8-470d-8636-d22ef0e7627d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e339b9e7-665c-4453-9401-3c5d21cb6d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6d726e-3a93-45d9-98d7-19596536dcb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.57']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39836ac5-5f2e-4854-88af-b98cedc1bd18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d60778d-8534-4c60-98e5-a3c9ecc298f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57316ad-b4c1-4397-83a1-e2075e21667f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16585f1-37e3-42dc-948f-622d504d8396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0e0031-57a3-4e83-8e84-00385d1e1d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.63']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f5ce22-5fba-4d98-8a93-6cd8c57fc8f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72499b74-dd03-4bd4-b48b-ef8fa1d673cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480315dc-cfe6-4d17-9dd8-f824a3ff7204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--852e463b-dfcf-4c46-9323-3bb0f7ea2655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c80aad-411e-454c-9c3f-918aa7411a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e25b69e-2244-4d25-a462-1d7f4830796c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66bcce0-9e5d-41c4-a1f5-27e31e52e399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb858e36-5318-4a00-a1a6-70d0262e856b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f10fdf-7472-478e-97be-568590be5407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428e06ca-774e-4d0e-b723-fc8fdd2647fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96e3522-ef1e-40f7-9412-897cac1e0251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a064a24-954f-4de9-971d-e6ccb5aac822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c933f1f4-dd7b-4ba7-b50f-e74a42b4d6a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c33835-9b90-4337-9b85-298c409cc691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb6faeb-b57c-4b22-8812-414abfb4dc6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d6db7de-c44f-41af-9dff-ca81ce589795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb27108e-e997-447b-b33c-2fdaca99e10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78c7f8c-e561-4004-935e-a7676686cb11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.161.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd5f4d5-5bb7-4697-ab6d-c5df1581996f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.199.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44979e0c-2f8b-424b-87e9-b8a66fa34e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.209.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709d687f-8b01-4d16-bf50-ac0c50dc4019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.211.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0fa7a04-300c-41bb-a19c-f7838d409943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.2.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48642117-abba-4163-bdd4-6d1882087ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.190.153']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6455b9da-1555-412f-be01-d6742fa6399a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.221.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d680cae7-1f32-4479-8763-163654a7dbb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.221.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43105780-5d94-48ad-8684-36c853c9267e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dae4482-c8d2-4c37-bf54-4919c59320bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c29a094-4c70-418e-9ac1-5766594ac581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494d0301-7bd6-4fb3-bc09-0b0c80a27fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee33f9b-28fb-4e68-97e6-a4e8becc68f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b136404-536e-4b4f-b60d-5adcb147151b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.245.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd86adc-bf7c-420a-a418-7ae4d45b1d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d8b2cf-dfe5-47c7-9d7f-50ce6d4397d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59fa344f-6527-4e2f-8b66-8271fe610f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.28.52.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e38a6f-deb0-439d-b214-a8ba99767327", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.34.253.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63909057-738a-440c-a832-c236bcd6fca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.56.241.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8000faab-36db-40cf-b903-2149f27a73f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.88.86.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523ad133-e6bc-4142-9ad9-0490a6294431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.156.110.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7982f5ec-3e5d-4d17-a180-f594070130d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.156.234.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d57e83-8154-4b51-b1e2-cb613c7bb8cb", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.157.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90cc6793-1d77-4a3d-8eba-5b547d61b3f1", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.157.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9757b6-4480-47c7-a195-a3fc776bbfa5", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.165.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd0fac8-a4fa-4a78-aa47-d12739155bde", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.184.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec667a43-89e6-46c9-ac67-283f1182781d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.122.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d938f8d4-309f-4393-bcc7-477feda2d5e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.104.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9945f9f0-78e4-4c16-8efd-f6312ea2926a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86339b39-defd-42d8-bb99-b50b9be96e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02546986-22d1-47a6-a817-a4897f7116d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1628201a-c5d4-4662-a586-5ea18b4fc01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc5d6df-b9d1-4c4c-8187-bd81aa3d3a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.197.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a587dac7-4aa8-4d35-aed0-cff8b9598056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.255.180.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac51764f-beae-4c9e-bb96-719b248588b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.255.249.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449157ae-c6b9-4a47-bc65-072047026862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.255.251.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b5adf4-829b-4f74-9cb3-a7607e21d95a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.255.253.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f1793d-1645-487b-8b65-bd668b2082c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.255.89.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d3d472-c694-43bf-95f3-9d43a310b2ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.130.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f59f5a1b-6c3f-458a-99ff-ddaefccffd8a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.133.164']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85126293-0fce-4915-bb7a-9b0de0bf6246", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2da16f-52ab-47a4-b257-e8c54d729275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.241.122.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf11a90-52af-4327-ad54-374f4d570ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.247.193.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e541292-de2b-4af1-a94a-15ad99df0c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.136.188.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ce46be-ec5c-402b-974e-990f7f78ce2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951036d5-b3ff-4510-86a0-a588fecd693c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83cc80db-c757-4a61-8f0b-55e5a2dd095c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e0916a-9916-4860-b4d0-2afd9988b97b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c8a42c-4e90-4a72-a3ee-d00a8264a5b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b8c91d-3e7c-4a41-958f-97605c8dd120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.154']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7294265-8c69-482f-bd6e-e3a2859a6224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b685b85-2a2d-426d-b3ee-54b64fc725d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.191']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f6feb7-1e96-47e2-ade9-65c9d2fc4d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.131.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41306b35-e184-4e5a-aad4-b0a5418d65f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.132.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a231e5-f810-4e02-aa2c-b1b40f3f32a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2d9e2c-4314-47ff-b920-df8c4a24ac31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.166']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e462e555-8394-4c1f-a6d3-e55c7ec4416b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e9977d-91e2-47f8-ba28-033411ad9cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4519ffb-9b0c-46be-ba41-5f7b49521af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.81']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eba2685-1afc-4d1d-abaf-93bb80d6dd4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea98ebb-f263-4487-8174-2bc2260083eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33229cf1-a733-4bd4-abc2-a95823c797d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cee4cb9-3c75-4b3d-bae3-8a494b6f26c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1575198-0cf5-4a1c-8258-b9abe6a71dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566b0cb6-310a-4e65-bc37-e7244bd5293b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24e1691-84b4-4148-ac81-ad8fcf0df737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fbf9c99-a89e-4af5-90a0-5868ba416a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69aaa4ea-1095-4361-b20f-7272c3e628f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b5f35b-64fc-4ae6-abbc-0ac50be11765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9212dfd9-db02-4b87-b250-9ebd5522b734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e9bb75-fea7-4a82-b22e-b3d3707b434d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b25cfd-b476-4567-8388-d5c2c057bce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6833730-acac-4e72-bcdb-f919b9bdf2ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea72c25a-b748-4796-911d-d745ea4c55ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d97ae236-4e8f-47f6-a633-1d0d7bcdd88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23385f0a-eaa5-428b-9b96-5ce0f141386f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419cfa7b-2966-4cc0-96da-9f7743527d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01291f8a-818f-470d-8b61-fdd88a563219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9bcc22-26b9-453a-9e4e-21c7f8fafaa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc35a85-3070-498b-8736-8de4cca5fbcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44ac7a4-2a82-4dc7-880b-d9e34860aa00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b952ffb1-413c-4833-965c-9583e0241f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09083d53-d37d-48d7-b2c4-f8ca74cb2e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113db4bb-3c92-443e-83c6-817ea9c84c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee8eb20-9647-44cb-8bf8-7952ee5e36e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53bdfbf4-ce1a-4eb3-86a3-4e6dcc4efb24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e4e6ff-4e6a-4f46-9923-ac130559c7c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2561dee-32ae-4ee7-b7a8-25fc0e597237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e96c5d-fe93-4f6a-ae51-e5381efd43c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cea090c-a063-428e-a564-f8d8c87f1795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97dedf33-fd64-4e05-9788-63b163fccc88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.153.228']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d0db05-a271-4cfb-a770-ee8b4ea454e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece7631e-30e2-4af9-a70e-69cb3702ea58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf851bc-659f-4e5a-8aed-ee58facc05d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e2fa98-36ed-49fc-b171-e3cba68d1884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799b076e-8224-4efc-8825-3b78cd896056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f18c32-a034-494e-a358-1368e8e0fc50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ee6e8e-abc8-407a-9615-65b050689662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b60a16a-4c4b-4c25-b6ba-a48f5d8b7e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd412ee8-3874-471a-8451-3a7a4845e1e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e61305-40cc-426c-b246-6f69e3d76cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571e468d-7c36-442f-8294-f28705e57623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e70d940-d704-409e-aecc-5feaadc9ad85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d378e761-b95d-4c26-b2db-75e4af3a4b62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f99e53-ec3e-46fd-a0e1-1885f610d3a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f9b8b2-9e58-4a79-8c43-8f397aa61c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.160.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89c1c8c-6404-406e-aab4-5e5048906cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.168.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4fe0690-8e85-43b2-af5a-9d295343174c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d53a22-124c-43e1-8b12-b8fa6719e5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63234ed3-597c-439b-a6b6-923f4f27a19d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.170.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0394c024-86f0-46e0-9df6-a6b7659b84e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac757956-a690-477f-9a96-79e2d4c5eb39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.173.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4222ee-2d35-4e95-b92b-6711043707a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.178.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cc102fd-5721-480f-8313-a47b54fb87fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8712e8e2-0889-42a5-9b29-e79a406620ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c8de2c-4355-467a-8fa0-23fce851a42b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0088b422-46e0-4766-8012-2c504428c080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc396dd-582f-4daa-998e-3f2940e7db10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd8c129-aace-476c-a101-a3b31d8e37a6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05a0737-853a-4276-8e3a-a64cafa3388e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0310d8f5-59af-47ba-81a8-d3722e00b8c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9cea61d-a51d-4dbf-95cb-0510dbc5b10b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.236']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0deb69ee-99bd-4342-a858-d368d7a78f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b1a143-5b5e-449c-b607-8e26668b24a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ed92f4-a729-42d9-9678-ced9588ee3d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.185.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbaa72be-fc78-482a-b2b8-3a867da3e026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.186.240']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e2a92d-b33f-460b-b15a-ffa82c3c6e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.188.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a040120f-e90c-4dcd-bb77-535c3a147617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.189.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b39ca0d-83aa-4d85-9461-e76beb885f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.191.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--defa1de0-d58d-4d29-8c5d-0aa2fd52c757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7497db-2ddf-492a-9a14-1608964cc0d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98670cb5-d206-4027-8237-36f256e5256d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2676acef-cf9d-4389-8075-b1ff038c5f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f515e2b0-a319-408c-b9b2-f80caae52f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bae7b28-850e-4518-ac8a-08063314ee3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d51c77-a922-45ea-b78f-4434c3c03eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040bcd82-93f0-4909-bf45-f2ad1572c2ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1330f49c-3728-4b7e-bd60-7017786029d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b34e2f0-1957-45a7-bdbb-5d9fd08ad9d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fdbdc6b-1ee8-46d5-90df-6d08137bfd64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69945c04-3061-4f36-b0b9-5576d97d6ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752f8e6d-513c-45c0-9664-8250b4e53479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c9a6d0-bc93-4c40-91aa-4ad0a9043331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a275841f-8322-4334-8094-81667a2320e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605b2939-eeb2-4d03-9926-38ad69294a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee235f4-33fa-4925-9ff2-ceed09e2a536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc21d4b-24d0-4f0e-bf89-7978b11a75ea", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.153']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44cedd97-56fc-4707-b8b2-7befc82e0f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525a0673-756d-43e2-b3a2-54e05a438408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031672d2-8381-4f4e-8654-a1f951bd313d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04fd55bd-5864-4bb7-842d-b7b30ee03b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb358c8-2d5d-436f-9fe4-4d189539e93a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2944891b-74c7-4d73-a10d-4e2cc6f5ae81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45446d6a-b38b-4038-ab6e-77098b4768ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0432be77-c4ca-402d-9112-2a1b9cc363f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea6abb1-1d85-4ced-8217-6c2b9e7703ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef126c2-df1d-4c4b-a3ba-dcb55ca9c6b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52da66cc-62bc-4c66-b4a7-b5645d556b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580337dc-1ce6-4e1e-91ae-6d594bd1a0ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d747cb7-b51b-47f1-85ca-345576183c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a256a381-6412-4636-a070-484a3cef639b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc4e893-ac76-4b20-af94-a916b8a35309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3886b8f-61df-4014-a202-1dc8fbfe5cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--254f472d-ca93-4b67-9308-a6ff55c939ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2078f65b-6927-4fe4-9da1-cdd5b8318fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c939289-52f9-4722-a91f-f2aa3ea7434c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc553d5a-efa7-40cb-a7a7-aed835ffee04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00dd74a7-39e0-4a89-b3ef-78bd1ac8f9a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2bbe7e-c660-4803-9515-3d5f5acca291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d46dbc-8902-4275-8c98-53385cbaee36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.209.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d936cab4-1755-47b1-98e9-08ee9ec0a6a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.211.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a879b99c-7c3c-4b6c-a35b-b4b88f73a191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4520cf-9d9c-4573-8619-df46f723fe2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2faae3a-27c6-4035-85a6-d85f9fdd1fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9bd5dc-00c7-4814-8b7b-67a790eae12c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6410ad3c-d934-4dec-915d-2095c0be91dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35cb97d-c6ba-4df0-9571-4a6418c85f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53095d73-33c9-41c5-aad6-d7205871cbf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c573c5-e780-4a89-8a2e-350aa8ccf696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32dd42fb-be52-47d3-9bb0-dbd758849475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.216.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e890735-ed86-47ca-9d12-df2f3371b0e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b324a724-4102-4735-9b46-ea8766ab0845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b1797e-d950-41dd-9691-a42929054c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e249b26f-1400-4b90-a4a3-548ffc2827ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.219.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e36770-507e-4405-9240-6fc9d6802e42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d71cefe7-d493-4d37-a7c2-8441261ae436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0ed04b-4e3d-4ffa-b0b7-615728f77052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1297deef-df1a-4616-bf1e-943b04cd5184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13a1577-2933-4eba-8ea0-81c1f8873ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d906ab22-9cef-491f-a2c1-1d1c7ab26eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22be858-463d-432c-afa0-0b76e67b57f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4082e7-1663-45fe-bbd8-3420c4382e44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.228.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cadf45e9-28bb-4f8d-a3c0-3e2fbb8867b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d378f223-aa0c-4e08-a472-e625bf0b96e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41c9bc2-c117-427a-8ce3-81260af799bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58e552f-2793-48bc-bf76-0242a8748342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63f3972-240e-49b5-80e9-a1bddb5c4020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50039de7-40f9-47a8-ac38-7240065be66b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c781cb-dd57-4a7f-a706-709a5e18b1d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.160']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43aa2c3c-d2bd-439e-9db5-397142624c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f2b272-e6a9-4a95-91d8-449deefb0162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa1355b8-fae4-4db9-83c2-ea366b6e1547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf17df52-0b0f-4b4e-8397-8c3be8b4283b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071a86b2-dbe2-4dcc-b89c-c806ebcdd204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c9bb42-b470-4594-82b2-064f9eb4ef73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71137ca-51c5-4498-af5e-ec5d3ea65b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1d1336-5e2f-4ec6-a758-6a1a928b3fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93bc0419-6944-4ea4-9980-4e4db4b775e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3179fc-ab74-41a5-b12e-8765006d90be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a76e0c5-b60b-4d12-b818-afb48d4e55e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.186']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5f1826-775c-4d1a-90d2-8a0feadfe395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3211cd-b807-4d09-942c-ee24b57e0e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f31d919-29fc-4f2f-bb50-a6a44aa27fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cddeb27-c522-4a1c-be24-9aae5494a199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23904333-fc17-49ee-a238-c488dafa29dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6875a17-3781-47c8-9558-4834dcf9784f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f7f56c5-8cd9-472b-b53a-8327da84fb2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.251.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f377706-3723-496f-85dc-2d57e266ccb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3fa0504-7fbf-47db-a531-b43d5ed09be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6785b978-373b-4671-84af-2a23689e442f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.254.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c960a98-c2c9-4cde-a773-f7a73115b0be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.255.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97dfd402-723a-452a-b3fe-ee68e4adee4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.136.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a1bed6-d272-4970-bebc-73ab20bf4596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.148.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01938c06-759b-4ca2-b070-4340aad82337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.182.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5f8b59-65d5-4375-849e-7a3a79ae9ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.190.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c5f85aa-06fc-4456-853a-1b4619e62e14", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.225.238']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c8c821-df9c-4867-b34a-5bf4e2074c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.247.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf3ec817-df31-404c-9919-6c51b8de60e2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.52.15.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c699c9-60ef-447e-be4b-4ee532855379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.191.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22128dd-5b15-40b9-940b-e55bcbe6a1c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.22.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59535b6a-7673-4d01-852d-2824ae5e933b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac4431e-b814-42eb-9ae2-cbe98d73667a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.14.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e70199-d583-4fba-be68-0429b08b9edd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.34.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf25348c-f51e-41d2-b75c-cfad4715b10b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.9.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3226d1a3-d9d2-4931-89b3-6b9b3dc67ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.212.10.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9713b8f7-c201-455c-be1a-3e012a3cccaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.246.198.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518fde57-14f0-4c72-8c07-e266abef1c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.75.91.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e2c546-8e6f-4ab1-aa96-d371f9367d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.30.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f45187-f6e3-4caa-9020-1529c36911a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.14.23.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36e797e-7471-4b54-b1d8-bd64d7551dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.115.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7285b4e0-7e32-446a-adb7-ec46f2333eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.119.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea22c65-7336-4ce8-b846-1ee66c9824c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.195.189.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ef3d01-2354-434e-b098-2e623819d724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.56.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--defce204-55d6-472e-ac68-cf5777325e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.236.167.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae083d44-7168-4343-ace5-514f21466403", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.238.53.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f726005a-88b6-4a1b-aed5-4f82dd82c4d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.241.54.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057f91da-06b4-45bd-bcde-c89315c8298f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.68.31.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--441b28f3-7a32-4ad4-a29e-c58eab00e06b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.86.119.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791a8e96-f976-4a16-946d-69851d29c0ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.88.129.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--224ae714-d235-4316-8bc3-07baaabae950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.2.194.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a8b78f-c7a8-4e1d-b7a6-8eb6b709790f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.94.145.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8009ea78-b656-4626-8008-21cb2c4e1155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.244.28.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe1736d-a4cd-4902-a4e3-7dc2452e1cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.255.181.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd76aab1-cfbb-47b0-9a14-181b84538666", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.40.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c52ea8a-502f-4b2c-b737-9f6e31c7aaab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.173.100.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a33a09-1ccb-471f-8746-29d16e6daf70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.101.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c545030e-760b-43e3-a79a-be46fa8ea24d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.120.166']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f062b3-5927-43a0-8c26-6ec211e8388a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.186.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9f0129-a4ec-4156-8a12-7ecf9d0885f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.233.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4034c8-f0d2-4c92-9e1f-7782a0f2dab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.96.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081842af-e143-409c-9c2e-5419a53480a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.110.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79f0c94-341a-4abc-90ef-566e9017f094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.189.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba9a999-b45a-4fec-a5ea-63485c50add6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.243.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ab11bb-09ff-4de1-9995-29978c37d061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.245.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8521e359-926d-4e8d-9f69-4a9148e0a245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.69.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4b6c5a-6ed5-4002-8882-013f78d2e014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.69.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db7a88b-64f8-4675-84ea-7fd8f81ef4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.66.35.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1543a2f3-6061-4e78-b95a-d8b53f6728b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.224.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d79690-f910-41d2-afc9-986691421c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.121.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9889171-d237-4a51-8891-5c8de1879b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.69.227.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cac2d9a-0ea4-4a8e-8116-93aa8d0659d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8dc6882-e3d5-408f-a3b8-37e74b82e90c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc7c194-c2b4-42c7-aff5-e6de9fc1e1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b7b0e2-95fd-4368-86a9-b48733593d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323bd059-f21c-4e65-b3d6-995b437c657e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd0ca38e-92cc-45b4-9994-1c493f9e4db6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec3ba30a-17c5-4217-afd0-fa15254e95d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.167']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c62c3cfb-d478-4960-a2f2-3bc228850f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8c3f36-33c4-41b3-a9bd-076129f8dd3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95232b9-357f-4f1c-bf09-a092aacc132a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36adcf8-00a5-40f9-b011-db8468381903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21e2d99-afe8-499f-b490-19a39e999e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c896063e-231c-46aa-b169-8bc1e43cb534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247a373b-d727-4b48-80d0-6ff90a700e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a354f06-0c24-49b4-84b2-79a87e06a911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40553dec-013d-4f3a-863e-92a50e1ea1aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba18bee5-3e31-4527-9f64-a5f9c5e88a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8888fb-5178-4156-aa4c-28766f976476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c6ebf2-bbe2-4fe1-95e5-30847891c7b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d5dc85-dc5f-4e1a-8637-265acf86d8b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--259b938d-53f0-41bb-8902-d292ffd83451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6146eff0-6a88-40b5-80d6-9ef69de66cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab817dad-599e-4458-b273-49d25d0d70a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557040ff-2f27-4b10-88a0-44c9ca46125c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5deb90-c868-415c-93db-bca9c620c48d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5f230e-e8f3-4cd9-84c4-cd1e55077a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d3beb5-9cea-4629-b299-6868da44c80d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ae6232-170d-48cd-a869-92f6987e2194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8b33c6-a505-4d72-8cde-51a425f40d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.100.243.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c8da9a-71a9-4f0c-b4ec-aae087b6597f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.161.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12f1e80c-a3da-4990-a9a5-da17f79b12b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.18.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bffe68b3-886b-4b1d-bc43-dd248c462e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.189.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db5f70b9-3488-420d-8a21-5f6ecd68bfa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.59.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572152b1-d058-404b-9a80-1d36f16cdf65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.68.186']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4263a95a-d804-4c90-b3d4-78d5c522be5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.109.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b4cd53-bb5f-48ee-bba2-a230f202f474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.179.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc98b1f-95b8-406b-b912-fa9469d9497f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.213.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf0c4ba-644f-45d2-93b3-c0282a3a347b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.217.240']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6816dc5-2b46-4700-aa5a-50cd83f06616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.238.255']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f373d4-2e04-45ed-91db-2f93bdb955ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.85.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d2997f-4de9-4a66-9859-47f40b4f1fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.253.22.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12cc35d6-74f6-4e34-be5b-1f8ee3fd3c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.168.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc783ac1-2be4-4d6b-963b-43414df7be8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.170.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f8602d-dfff-4f46-9a42-2701971ed78c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.191.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3e77d3-22db-4c41-8333-4732b33d1f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.206.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5523cea2-05de-4284-8e34-ded6927d1a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.91.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db2a03af-c473-4352-bbda-07b8bad8bc2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.75.148.154']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56726b17-7220-49f3-86e3-7e944ef408cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.1.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe0307a-ffad-41b1-a2bb-48ad0b549430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.124.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87cea0d-8f38-49e3-9652-2e72cef9affe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.224.160']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8336355-f9df-46e5-b323-9a8d35555041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.226.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85572437-08d0-4931-9b05-f3080df6fa12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.230.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783232b3-327c-4de3-bcc7-e4e936d5acc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.237.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26db41b-99b9-418d-98d3-9a476335424c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.171.238.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3420ea-9916-41d4-b07f-4f5e880a19b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65ea4f5-d326-44d5-ace7-c0bf96dac6f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.58.56.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa3d0c9-47a1-4d7a-924c-61a201afd714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680c57db-56a2-4f50-9259-edb6dbe1e10b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c8cfef0-7a67-4133-97cd-0152f43c2784", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f693a63-1615-4f4c-9ace-ea5140a0f172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a25f9b-c2d0-4206-aac5-cea5ebac6e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb58795-f44f-47a5-8e02-e5f12db1ee13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f520216-2386-494e-8a55-a5eaaedd7d47", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1f9caa-4993-4e19-931e-7098baca504e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.238.24.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a24d32-562e-4240-9615-b38f8fd0eb60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.1.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d685163f-db1a-47cd-b844-f3b565faff1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.145.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca3ab99d-0801-4492-83fb-ad6be6f3f592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.160.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d49d16f-13f7-4cf8-8990-9d6df067d601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.213.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a342a2-4f19-43fb-8de8-6fbd7189c62f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.216.178']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a9544d-5078-43f5-bf68-26f1911e348d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.3.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f790d7-02a5-4ec4-a42a-cedc143e3348", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.97.152.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25648aeb-b6ed-4eed-9de6-839c32283ed8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.14.81.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8aed6e-5cdd-44e2-8b1b-27f969b7009e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.158.216.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d6bdb6-1b50-4df0-8541-749efb4cba6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.212.152.192']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e135a5a-966e-497e-8994-b05f591a1663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b395e55d-7dc5-42fd-9250-995822e8e3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d83715-e58a-455f-bd2c-a4b2a6de809d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6181c01-2625-445a-aade-2fe5eedd4662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1d411c-703c-4d0b-aaca-e5ae284a3dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8822f200-eab8-4ac6-9e87-df0184033a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf8d98b8-6c75-4bf0-83fe-95e687b3a18c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e9c6e60-dfbe-49f7-8ff9-8b2c6830828a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275ac3fe-799f-46cd-9099-708f6e37249f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4491bb71-d0e8-4016-b9c6-05d9ff9eb3bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a7e7fe-d982-488d-9164-02f849d7e33f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb1acd01-9419-4303-ae91-18043145af98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--551bcd5a-7cf9-4d44-9948-787cca104d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f6877e-528b-4954-866d-9d3924886d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c12b13-10b0-4c09-9e24-7eb74d20c73d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89dc2ca2-5f36-46fc-b8bf-224bb20d8400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64acfd52-fb86-4916-a916-d2249e80ba23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20e4f3f-4708-4625-a2db-5e6914202d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--551882fe-f6bd-4325-ac3d-c9ded43e3649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--278ab4da-9641-4dca-bdf8-275ad49cfe74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c800d9f9-a4ed-4aaa-b068-fd5190ff02c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5bebf6-68e1-4a88-b0ad-31f4961793b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ce66e9-f096-4fbc-b0ca-085e5bbb5961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9eca165-72e8-45a7-aab6-89eadecb9d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.144']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1d2ebf-8913-4781-a289-97b68e131c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.145']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0d19c6-f2df-4cb9-8786-9ba7e1781ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c88326-11e2-473d-b98d-2dc683b7e21e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177de9b3-aa9a-4c2f-9d6f-41b5838a4e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9301b9e1-c4d8-4f44-ac72-6ad371d75ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d94be07-8e69-41db-ab96-cd506037efd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b80790-c4b6-4f20-914d-26c06768ade6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b573b6b-23df-44fe-9897-95fa5fc3b796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9a864f-9d98-4477-a709-fd480b99d715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c1e7722-8021-484e-a936-03307794ccf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.160']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67e9039-21b0-40a3-83c5-fac290469906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1723ea02-991e-4150-bfd1-04b59a528afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d829267-5455-472c-9428-b1e84d8b050e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.164']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3fb8b2-5457-42ca-b226-b7db53df607c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8736bd7-7040-447a-82b3-332e01669b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18d6501-d4a3-4c69-89a0-f3c8366d9dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf9aa1d-8b83-4f5c-ac1d-2573407ce793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8b7d48-712c-4c0f-9119-de3b4679a996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779fc2f6-bb0a-415c-9214-f0a968f664d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d4eb24-0bfb-4aec-9f9c-9392745758e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1bef7d1-117b-4775-8d85-2495f7c3b363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.178']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64fa12c0-48c9-43a8-825b-6bccef0abc0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17492a7d-d1f9-408b-afab-db6bdb980570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6680176-1b4c-4552-9e57-e033fbefa3be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ecb986-5d3b-4964-86fd-7a3aee449676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.183']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--502029d4-43e4-4479-9124-23b85d678315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.186']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491ba0e7-4e1e-44a5-b054-29d5f682195b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--812c5bc5-397d-45ce-a9d0-d15fa69f5149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f771857-a4f2-4c14-baa0-804ec95fb142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.191']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2271fda-3f49-45f1-812e-cc2bb40d0a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.192']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9d3b3f-ce82-4faf-a4aa-92e515a5d7f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e9b8a7-2b2c-46a9-8fe6-70fed9b5bff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72706a19-346d-46d7-afb5-23fa2ac11744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31c5d4f-a84f-4324-98ed-e9a07db730d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebeadd0-a7df-4a22-9e61-2aed93c13963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8581438-62cb-4d93-ab92-5b80757a72f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6a024b-7032-401c-a4a0-0bcd8ad69ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0462e59-892a-41b8-94b8-fdc0b8a304fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.216']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b25457-6f89-4495-98a5-06319a7668e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cce35ed-93df-4ade-a664-9d92257c0574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf67fb4-2a3e-4eb5-9db5-7cb5fefb35b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94332526-19d7-4ea0-8745-bbdad971b50a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2889f8-f99f-4c9d-b338-34f78599fec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303428b2-b731-478e-86ff-a8cf00fbfe79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.228']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b84adc-4564-4925-ae15-ba6fadb6af12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cdcc509-6d4e-4598-9327-97ffa5c7fbfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.234']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13114d3-14e5-4738-b8de-14ddaff34f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.240']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c046f0-a8cf-4a66-a265-2efaf8abbb03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa787a6-bb87-4396-a970-06e1b3542425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8179ba-eada-47fa-9833-05cea9d11f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72239df7-90e8-4c1e-9b5d-fc5aaaecd015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e7d18f3-67a3-4528-85dc-ded559dcefea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1bb469-1e04-4512-9e8a-2d1722c8a04c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233d1c58-04ad-4f58-b64b-cd559f8d6be2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220692c2-4816-407a-8a57-847a05670e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67f4c28-6735-43fe-96d5-17935a3edbfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0daf68f-1f79-47be-b2df-21f1fb0d63bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfd91d2-62a3-4795-be84-11eb180708e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69edcb14-9a0c-45c5-a7d3-e00e048b1239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe486eee-b2db-47ad-a462-e6963cf5f4fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8dfff92-8add-4e0e-8a9d-1141a382cdbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e4686a-5d96-4d8f-838d-2103dd59006e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e00e04b-69bc-43ad-a517-ddbda4e5f381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f5550b-fb49-4980-a294-9a8899ce4ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30403dac-1e62-454f-858e-05f6c9b2ece8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a95e0b-a434-4548-ad3a-1234f989fd20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc479bb3-2014-426f-b200-070b2b802fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646b34df-0f83-4b86-8acf-624dba333977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4f2468-46dc-4c95-9ed6-0c973e714151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8d9ad9-2e52-4d95-86e2-88dbfd81036b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb9cc06-e49c-44c3-904d-d0254589bcde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51fd8a1-4423-4f3f-833c-df0fb329557d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff84cf6d-7845-4ef2-8865-fa3312e0e219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4d1856-dc8a-4344-9245-73cc871d8114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86915ab-c7ec-4685-92be-fa966bddf4c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.63']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea7430b-a7b3-4312-99ac-f8fa200f51c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb60cdcd-945f-4b0f-9d54-43b4c1aff3ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d623cd6-1e99-4814-ae37-597ad98d8808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e2fc48-a8f7-49c6-bc96-de1943e3bb49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--406f01e1-9558-44dc-907f-d3c5ba67d664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39896e0-583c-4098-b8bb-9af468e010ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4158b1a-fa1f-49ba-a9b6-d5b628198505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98bb3793-88b0-4f5f-ba1e-ae2ae3b0e36d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d2b699-0905-4261-8b65-d97cd44b8888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42ac6a3-3055-4f90-8202-a7c542f3c5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c7b6bd-6e10-44cf-93fd-015164a113ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0332612e-ba3a-48c7-a34f-8bb54bdd2e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3720fd9-084d-4856-b47f-66491462b7ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19fe7156-cdca-42b9-8215-055380812741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0350ac3-9ef3-45a1-9e98-30c07b69dace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f2523c-4b13-416a-a7e8-37bd8acc6929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd5f9b5-06c2-492a-aee3-ad830625f042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6517000-edb8-4c75-8661-bafeff7e8959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ef42d0-a78a-48c7-81a5-61bae1c3937b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855032a2-edb1-4fd2-a2ec-0f4dfac93ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae7523a-2d89-4a77-b874-dd7936a51309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc891ad-fecc-4782-994d-588d49077c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ab410f-dbff-4cb7-99cd-4b086c0fc937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bafd745-6b41-4c7d-a815-700ee8ca520d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a60f3f-f5a6-43e8-8088-e969b62f9561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ecb0e39-8ec0-414e-b5b4-ae4f7c554977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c801a92-a666-4316-890a-4662bc77add9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e88a2fb-a5c1-48cf-83f1-69c1ee2a5377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449406ee-2d79-46de-8fd6-fb8068f9d70d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eac5683-58fd-42d0-99db-ac30f00469cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f419bb4-f769-4d22-9e6c-116cb9c2e320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667ad21d-9b5b-4e23-a238-757361d85a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2a7d7b-1103-4349-afe2-9b9441443833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3988d653-b546-43ec-9163-6a5b899b5fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53100137-d64d-46c1-a3ab-98073ed0a3fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de01e39b-3af0-4fc5-8daa-a416d477df6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7133da3-9f64-4876-932f-0f5906b913db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99c4298-ffce-43d9-9746-d460653291ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bcd7bb8-a267-48c9-9b4f-ec56ddaf606b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71be7a9a-042f-4324-8875-dd63ae69bfcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a004911-22b8-4d8a-afde-28441a67c24a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.144']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525ca8c7-d6a9-4ed2-a299-05d1e81369e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.145']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7127cb0-60ae-438d-a70e-3acfe4720484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d649f439-d831-4ab5-985d-3a36cc16e5ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da212151-befe-4e24-aa74-42c8359d0557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b17d58c2-c81c-46d5-a09e-77a6b1a9bd36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d4473c-fa13-495e-a28a-fe83fe5476eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.152']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c87903-f174-4f15-9c24-62617bc3ce0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.153']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3bde301-f27d-4984-a8cc-b69576fe4015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b296a258-ac56-4c0c-a240-6c857957fafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb259a7b-b6e2-476d-bfc9-a8b541e0975a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4863790c-2229-48a5-98c8-e1b7d663144c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.160']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de938429-9bd5-44dd-aa5f-b8387e399d06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95735bce-9731-4425-b306-d8261387dc50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f9cf6a5-9fed-42c6-9573-444731e76652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b35483-2858-45dd-b8d8-ffba0cd0fa60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.167']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7299f51-5dad-4b46-97b2-834cf109863e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbbb9e23-a59e-479a-ada4-9027c16c12ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61853865-4e64-46ed-9341-3f769d4c2641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.171']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f1a9f1-3c86-4a7d-a32e-b7182c345eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a23c1b-e748-4e68-8b3d-ddc6758ffdc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4314556b-dfc6-447b-a276-caab70ccc137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f790c5-b7ea-44ee-b593-8d4b867f619d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44114774-b564-42fa-b32a-0d6bd21c9234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42209b40-b6e2-4a55-bfe6-7e0e32d4160d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4361722e-295e-4dca-8924-eaa5355ee405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d2ddad-66f2-4dbe-9bd4-f6ee1940b0e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a93523-2614-4778-a72f-b702f18ffd69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8c188c-9749-4079-b91b-235b735e1f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.183']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd00896c-4360-4bb8-aa1f-9700a5cee924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99b3077-41a9-462a-ade1-4fc908140231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e498c1-0bc6-400c-bd67-86ec5572a18b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b24646-7d07-44ec-a9d6-23c5fd790697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.191']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f148433-594f-4488-9625-611ba098baa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07706f69-3f42-4bed-a0d5-dfd410a7dd3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98f211f-4dd5-433e-9653-fda7ea07d9ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e38332-573b-465f-8524-5e12cc3eb399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2214b6dc-d5f9-49a5-bda3-ac7e937c1cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c22244-0881-4d0b-9b37-ac8e5bdfa23c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c762a07d-29fc-4325-81f7-c438c77cdd37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7777482-6f03-404a-bbbf-66132f4047bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2264fcb2-bb1a-4c7a-a103-88b9064e1497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed826df-b7fc-4649-b8ba-2d049cb738be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b34442-e27a-4c8b-ae1c-949106ef3268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b434a1e5-4133-465e-836d-2fe1a5d26446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae98403-0e27-49f8-bd0e-a51c9d943d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1acf958-0744-46c1-8cc6-2c8e4e5f8afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85707d3c-19e4-4803-8cf4-00e85872842c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d8305b-b844-48ff-812c-4aa3f5a066ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8575ffb-5c48-4278-bf3b-b2d5f931d0a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00e0dc7-3a6c-4704-a9bc-1d4539f8e452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc3c6ba-dd26-4a40-aa53-e504462f3747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.222']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae03450a-a7ce-48d4-8f49-30dc6b5d501d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161a05c0-88c8-4d1f-9277-b02905285e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--282bc125-c338-41be-b9af-b38271dfaf89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb9aaeb-d458-42e5-ab2f-7b7045a717e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe733d0-37cf-4be1-8ad5-9dd65b45da05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f029b3ef-665d-4d1a-819a-0ab5790c4d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0dcac04-acfd-404d-ae9e-8369673331a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.236']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07a8ecf-68bf-4236-883a-211a66430537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec50ee72-617b-4821-813b-51c93dbb312c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdca1615-f7c2-48f2-b13e-ef5cb46b33dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.242']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c4032e-2358-4c7f-8398-5b4ff5935214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aea065d-5708-4356-bc17-c94a81d10ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85abec62-82fe-4a1f-8acf-bc26486b9c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f667149b-7bb1-49e7-99b5-a9b3d81e78ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08afd64d-338c-48a5-bc9d-9bac6d91321f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36586a41-6b7e-4f86-9295-ccf264c257c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd12ac9d-c94e-4d16-91ed-7bc2b6d6147e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.251']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c650ac5-aba6-4aad-887e-091856d64e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d6cc58-1237-4331-ab34-9e3b312cedb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9effff95-b1f1-4cd3-a44e-988ef364afbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b641aef-f4cd-478a-8d7d-dc0c7ab220c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d999b0-bb1e-417b-bfe9-e055182295ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1836240e-f2da-475b-b900-c041bbbc8187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e7afcd-6251-4565-ae8a-b96ede6c8af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8dd112-f34b-444f-a4ac-8aa4e43b5f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6385ab-ca57-4505-af6d-bf8c2873a06b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38bbf9ea-bd59-4045-a534-bf59574c15c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2122436a-e633-4c4d-b57c-2446727dd980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6936bf72-2888-4390-8bc3-e0a96e0eef95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f2deee-9c92-4bee-a2b6-8208853ab3d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d33cae8-5d36-46fe-8303-f57fc9822183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8ba7b6-89a8-4cb0-8a19-f3c6b0c06ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f9634c-2319-4fa8-8a37-1c8d7dd0a04b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2664de-c995-4c97-9f98-24846eb51257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.56']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0207375-bb03-43c5-8adb-f8da5d8526ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8281ab-0747-490b-a8a9-c163ef5c3d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be87375-7c31-4150-a6f4-12d8cd46ca1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d94538-266f-49e3-ac75-a53b7f724af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ab2617-711c-48df-84d2-dfe0eea63827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9cebf2-d616-4be8-989f-88bc8b25cac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d88535-aa2f-47b0-89e8-f3c2397df12e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08dac6fc-9584-4f3c-836b-ffe4295a08ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98903ec4-d265-4013-9069-2af0c6dc52f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e719fc58-1d06-4ade-be88-01014de2e9f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdaddff4-a7d7-4480-acab-2192afff593e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab323833-40d2-4486-accb-f9bbabcd7f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27725d62-1517-44fb-8c66-b5dbb286d137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd595abc-a4d9-4bcc-a0a4-f36280446b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.81']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74be56b-b583-4d59-8d1c-27166caf3c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b96d80d0-f156-45ff-96c9-5ed257d3c398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe3f8a7-bab2-4d8b-b714-d48798929c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a320cd86-a899-4026-ae01-0d5f303dd259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec9d862-2b4e-4f12-bbc6-e44fa55e2185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb98cd7-07e5-45a6-82f8-7f9b21a10201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977ec967-b266-4d70-bf34-676a78a70695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2148988-b42b-4974-b276-5e424701936c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.16.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bdaab98-1fa3-4618-9f94-57a75a270e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5732ab-d61f-4097-947e-cc44db622513", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.103.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21cc41e0-7acf-4a42-b8e9-6aaadf6d878e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.222.205.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c1e67d0-4983-44fb-bbc5-acd83183a09a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.20.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bddf08b1-2a8f-4520-a12a-c04934031b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.114.171']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2835340f-4b1d-4a88-8375-529dc2829ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.116.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7fced4-b646-43af-a67e-a3eb65d9f833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.244.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c83dde-6f3e-45c4-a10d-08dc2418cf5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.132.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79aa60b2-5893-4308-adf8-aa74e4bc7f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.213.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2052c2-d2e6-4ab6-b512-4ec3667eaaa7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.11.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e936163-ac8e-43cf-b6b7-120417c894d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.132.235.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fde5243-45c4-462f-8097-77bd531bd088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.163.24.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e75fa7e-d9bf-450d-974f-c75f7d01976b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.68.117.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8a32ac-596b-4c65-9f52-bc37282217bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.70.84.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64c12a1-30ed-487b-bf61-8b597a6172f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.155.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730b16d1-faa1-47f8-8968-dc5f147ce752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.156.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45a3243-c63d-4141-b81e-b25213f8f789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.176.216']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f90ed83-3781-4515-b474-c3b8aabd19c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.190.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ecd449b-cd6b-4ff9-9bef-2ffd965dbe13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.117.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d00a47-69a4-4a03-9886-9f741936c472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.129.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a1a6e4-c216-496c-96e5-136067bfbece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.159.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5e19ed-3849-437f-af9b-754bbcfa1d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.161.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca5a8be8-031b-4ba4-995d-aed657cde0d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.219.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc913dc7-0fec-4599-872b-29e8168c87ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.70.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83574bb7-a469-4b64-8ffb-07499dcd9cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.1.172.144']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1acf96-a9ea-4530-9cb3-5785b3721dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.140.167.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde26fe5-35b7-44cd-a6ec-03f909444842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9661a2b7-71f5-4956-b5a1-99e2f6690029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2721de1f-0c7b-4521-a157-afbb98259c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee7afa89-fa1e-4b52-a6d9-4d6848566316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908ed7a8-298f-44de-a9e8-f42c77f1f23b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508c9187-d25c-456c-84c9-ed7e070c8a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.56']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef58bbc2-963b-43ff-963b-cd1f49ca8083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d6206f-079e-4e37-8fb5-ed48cf8d21c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.104.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850b6249-62bd-4083-b370-088ad033c1a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f22735-7d06-4b05-b809-bbfc7c26151f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e836ee3-ae2c-491a-a585-3104b73d1495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--410b4502-3ec9-4a4d-8ba9-0f818557b263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b732d96-dbb9-4fc3-b446-b269ee7a98b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c8ae30-39f7-4834-a242-8a7d51fcf489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7faa6624-1e48-439d-9f81-c2ac063eeff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8027cb7f-159b-494d-b8a0-26c543fca944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeaa17ae-a096-4c30-8846-7f11ec1fedc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aafce40-4e37-4b96-b144-7f262655ad24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3284919-b34f-47eb-9312-b465d8fdd4e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.118.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22997468-8121-4a02-a20b-e4f1eb9dbd69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aefb69e1-753d-40b6-9398-578615ccbcf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddaa8546-bc41-44a8-881c-ae4ccff36184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42380e9e-9682-4ffa-97b2-3175d13dbaca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d16067d5-5691-4776-9033-a5e3662315a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7245dfd-a81c-42f5-af5e-352257ed5696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04c7a8b-6b11-4845-b2ea-4de0ac11ead4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed29c3a-105a-460e-b69d-e94f8972ad03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c87fbf-2572-4866-8a2b-cebd7093a7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7869ab5a-8527-4f43-84ee-406683d2ca2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12258a86-5d8c-4761-ba62-ee30c17d9895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feaa613d-1aaf-4783-bffe-3c08cf16c583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8237b182-01f8-41e1-8881-5e27748c5a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186d7a40-100f-4680-be27-be53f578751b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56845c38-ee8e-4968-9d2b-f4ac47c7c56c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f095cdd7-9686-470d-91dc-c2cb0d44d24f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a314de00-e79e-4265-bd08-e371fab63ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31983f9a-39a4-42db-a18b-67c34fda60bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ded987b-2a3d-4822-a6e2-d7dea46f0455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bfe1b37-8047-4e6b-9095-085352255548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.152']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b036a555-508a-4294-9911-46a79f24ed6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4eaee5-50b9-4445-9a36-235eb44524bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85054ba1-85a2-47b2-8b95-03411700943e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c61db85-860b-4b43-866d-c10ec1389186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8121791-6dd6-413d-811e-bf81e8dd9895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09715e2a-92f7-45f2-9c51-75193e6ea07a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e147bc01-645b-4171-a2e8-7d1665471fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b7c758a-1560-4d9f-a3d3-677990ab68ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeffda03-4301-4ee2-a8fc-77bc9999e4e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.150.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969dde35-9a83-4aed-be00-81e0a0783e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83be446-e076-4119-99eb-e60b2f6d9421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4dd9b0-7f12-47cf-b1f7-2fc7fe4da1f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c20a3a-ff65-436a-a2de-8044155dbd2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70f8132-98e5-4597-baba-43ecb4293419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f768cbe-f0d6-4173-b725-ee99ddacda82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06ec856-8e77-4388-9985-5addf44dd98f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91ef9f9-611a-4db5-935c-c918c6dbd73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77354ab1-df23-450a-8739-78b903b7c433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b266ef4-8f62-4ff4-9321-3a60e526682c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.57']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--072e6758-fc8b-4780-8d25-3a4a3d0f31b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af5e98a-a643-4e5b-b5cc-5b241f2568b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58d8710-0eb9-41da-93fb-2a5bf82c21d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f608ab-b7d5-4a12-a9b7-d8d4217cb95f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9879cc4c-b35e-4bec-b393-9a690beca38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8cc01af-2ef2-43f9-bd77-6c22b3101d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c982d3-f094-4966-86ea-19e4615d584b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb30737a-ec24-42fa-ab9a-7d4da3cfa9b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fffb8620-68ed-4ae0-aaf3-0a6c77a102e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4eecb58-b172-408f-aa8f-d22bfa489dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6963e2-6f7b-4451-9142-6cc1948d9d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7953bd-4398-42fc-a19e-258a09add0e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7dd16f-ec40-4277-80ab-f1c82a8fb99c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e675390-3dda-47da-9de1-d04f4cf20c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e739ac-4924-4ccd-982b-38c1b8c8b655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32056b08-6cc0-4f1f-8309-e0fa8a1908b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaead50a-aa1c-4e55-b697-0fe0f5305959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda5e2ed-f12e-41d1-a9f6-dfd0d21be814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.176.251']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c6b02b-9e37-43fb-a43c-69154a93a30e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.179.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad71ef05-ebec-4884-b627-4dde9c99f3e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.154']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65239dda-80aa-4b0c-a437-96d48400bba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58fdc65c-a79b-4260-ab1a-c44c615c0f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdaba2a-7bfe-4ec9-86bd-3a5bb3e5122d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e002bc-aef4-4868-a906-da69039de3aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847b8bda-dbd5-41fc-b164-7abe3f11ec6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f2de97-09ae-4c9e-b1eb-869be21a694a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9796232-2bb6-4fb9-b5bf-7e6710a00bba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228af6e8-f232-44af-9b0c-ee9215fd845f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385e40e5-6d84-45ed-8a71-ba9aa2dde6c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ab4dfd-8663-4bba-9784-b8f16f20cc66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff6c103-be4f-4323-b3f8-5c05ad3db6c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.187.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ffaf01-9a42-4366-8858-95ac76db5f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--626df0b7-3bdd-48b2-8e3d-a7f654433435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2feea2c-1a1e-4c66-a75c-af86154e7bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056e4f0c-833d-4ab0-9ccd-5e5dfbb69972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c0bb78-2aa3-46b5-82a8-cb62e2ab972e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b7064f2-1783-4a84-89c3-37d009cb318d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.221.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093d8987-e7bf-4073-8254-230b86a23d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.23.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7cec84b-2f55-412c-8c57-cb4d2a6ab14c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.236.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a7f764-7c96-4b37-8176-a52a85c74144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.144']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156d9657-a04d-4045-a29e-e7bb3c6b351c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004ed26a-3130-40cb-bb88-223c8571847e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.32.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47bf8a2-87e1-4ddf-b739-202d80e7d0ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.33.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed534794-ef05-410d-918b-a61b418af560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c361649-0829-4649-87ba-71551ffbadff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98003cf3-34fd-46e9-bb5c-b2d2a972ed2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5752d95-3c35-4cc7-9f1d-7d4346dac7bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189f84c9-b2bd-4f62-b196-5dfa2f4c6828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9243d4c7-34e1-49ce-b742-b8fd55fbca33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5bc9b77-573e-4e17-8e19-9849a3a26280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920417f7-069e-4eca-9c4b-5544862304c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd81e2b-265a-453b-a663-3d00d2df1294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6418a90-59c9-448c-a91f-7269aee0bcf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aeee78b-210f-4632-b5cf-8850cb6c0777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1c0fab-2adf-48e1-972a-900b6f37ac26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3f2073-0bce-4539-bb67-6cbb91c7a2d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9985df-b1de-4e85-a607-08b7f4806ec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29f095d-c7fc-49c9-8cda-79957efbccf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.152']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c46493-06fd-4bd1-acc5-453f7af3f56d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c294cd6-a682-408a-8713-ffc3ba3a8b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f1577f-1ba1-47b2-a8ac-529c42c8b604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6f4371-2572-48a4-9027-88f0bff6efc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ce9817-a61f-4299-8a20-968a58ecb4f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba8c232-80b5-4b42-96cd-57cc0229d9e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b5c74f-e51a-4c0f-a37d-f4ae0ce916bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.56']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003332bb-c3d0-4bd4-b488-5adc4699e6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf26815-9787-4a1a-9d7e-65e1cd7dc6fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8ff81e-a62a-4634-819a-17b49b7371f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.42.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be9432c-0fcf-47db-acc8-302e97e37dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.43.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68662152-e3f2-4687-99b6-aa295421306a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.160']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c19baf1a-d39e-4d6a-9a9c-c91fd79e50a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.49.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075f8dca-c559-4fd1-962d-b20569223989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--174a0b36-51be-4d8a-ac98-e66ac1b9c0dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7494b550-68dd-4c0c-9560-993325d052c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5295378f-5225-44ca-97a4-e2ca753720de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a31f19a-ec8d-47a0-9ee2-19bcb6ac7efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d04970f-77d9-4873-ad87-08e878db2a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.251']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b830d98-dbc9-478c-94f2-1d2f8258a24d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.59.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0adf57f-d0cd-44e6-a16e-0538964c2a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.59.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec31b61c-0bf0-41f4-8edf-d16106e529fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.211.23.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e6f473-f4c2-40b0-9a7a-ffee4eba9223", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.115.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e0bbaa-e6e9-4338-b5d8-a0ffe947ce31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.193.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75b1091-f707-41e6-b49f-f0f653b06a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.47.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b0d3c3-41b6-411a-b667-3fa98aca1b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.57.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c52b7e-fc4c-49a8-98eb-12ed2c8029de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.60.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23766e6-c0c7-4b4c-bdb7-3f1ab7726539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.130.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da612b6c-76fa-4d9b-b93d-2cf31eb71498", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.159.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae15941-6eb9-4217-b466-de28bd228fd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.180.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--919b7789-b788-4501-8834-dbcf0f324e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.209.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c941f7a4-8cd4-465d-b6ca-2091fc0feb45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.47.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63fb8b03-99fd-47a5-abf4-bd726629d3a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.62.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a677bb06-ea25-4386-b1df-8e237824b60c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.158.1']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1081a0e0-b49d-45da-b88d-861ecc94e4f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.73.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2708ea4-075c-4dee-918f-0a6b51034f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.97.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f4d7d1d-02a0-451a-90eb-78314bc903b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.227.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b68a09-ab52-4862-83cd-ef37a84a335c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.232.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ab3639-721b-48d3-8ba0-b977e4c4f56d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.62.35.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f4fd8ce-01df-43d0-b42e-0b56aea802d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.62.89.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e9a07c-826d-4126-b0c8-3e847bde83f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.114.156.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58aba24a-291d-4eef-826d-db44d544820f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.148.201.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6047bcbc-60f5-4e2a-a755-75fc9f0ff288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.148.201.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14694ea9-9170-4d75-bb33-3efa5709af89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.148.201.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8c1fd0-bf34-4a17-a52e-1bb13db1c2ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.148.201.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a720945a-5b9b-40e1-86d5-78848eca1cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.148.201.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630c14eb-66a9-46d5-876a-aefe2f11d9f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.148.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938f8041-5771-4de0-b503-68f46a6135e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.199.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22289c46-5a10-4553-97be-7c2c0cf4d715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.223.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a849d6e2-dc98-4627-a110-7323811c4cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.245.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df00c53-9003-4d05-8526-60f8fa52709e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.40.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb5e780-5e16-4435-a1b0-b5261dab4588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.48.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87346e08-b25b-451a-8628-53a950031118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.233.68.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b19d2f-1a60-4099-bbe5-6ab4915c3ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.131.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f16e4d-8c52-4e01-8e58-c332be2bda1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.213.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a015a836-01bc-4300-9615-19c6d0261ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.248.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6483f76-0234-4fc3-8893-8bc10feb7cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.45.242']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a2b939-1daa-458c-bd2c-377943bc7978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.70.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f8eb18-f648-404b-ac78-34e640223cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.84.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace97601-d3fd-45c0-8ef7-3089ab32d135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16470d25-c9ed-47f2-8214-4c3be32677b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb228d16-8cdf-4ac9-b4eb-0c258fea89a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1674fd-a15c-414e-8868-3bf4ce3d3509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce43f48f-b702-40f9-bc92-bf535feb0b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0b768d-7292-4cff-9516-afc3d54dae83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d70afd9-a5dd-4dad-8377-4b162027783f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eada5b39-2a37-44c1-b103-6a45ef865837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f3d1d8-4a53-4cf5-a3c4-c892c13fba43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf829a23-61c8-48c9-8ea2-b45e9e3810c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585bb613-8e48-40fd-b2ca-695f746253df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676e3d81-4c4a-4754-8698-5d1f0eec3736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2c305a-4afc-462f-838a-5be9fcede80f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f3bad2-ef3b-423f-9d57-eca96d772660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--843444e8-f1ef-439f-af5d-64a9a9caef30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa89a27-2015-4f10-a6dd-a6772d4712b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cacdd216-ac58-4bcb-87cf-574b3cf70d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a77180d-2577-4fc3-bc43-85868f770808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53288cd9-c68e-41fd-9452-07758a34813a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f4fb308-6db2-4600-8d1d-834723b392cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a83a176-2846-4eef-b08c-aa0a079d3ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa47f97-4b7e-4ad7-8034-d1b95f943821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a8c184-9972-48e7-884e-3f677d822367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca47020c-c0fb-47b5-baa2-c7592bc7ef1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16cbf619-135d-48f0-a2df-b5a011de7e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c33cadc0-2371-4d24-9e69-bb11d39982f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2177f2d-fae2-4cce-acab-c3d651327b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa000b3-aebe-41a6-abb6-92e3758ec3da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b421015-4f2f-4aaa-b4f6-40235ad58a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1aeb1e9-7f36-48c0-8be6-b62a3e67d5e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d6c418-db74-46e2-a440-b188611c43d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de7863b-1aee-4b5c-9bb7-4d88a7753aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ce06d1-befb-4004-82c8-61d3bc490ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b156a57a-33cb-47ab-a70c-f2c14b2e3167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0888756e-328f-441a-a76b-57bb7e76b2b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--164a16c7-82f6-4e97-b002-3a6c7ed04d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d82763-871a-4a86-9af3-23f1b811f6de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbbe780a-ce39-4bdf-9ac9-2770db35f04f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.56']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0041c5b2-3f41-4683-8b65-e46785dfcd34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0fbabd3-a692-43d2-bd86-cce40cf82ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1cefff4-d376-41f9-a6ba-18a3d6f3af4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989e404c-9aec-47ad-ab41-26236de208dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6daa8995-1dce-46be-9eaf-1d7e12b5a109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.63']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eed1c80-26a5-4cb5-9def-0d0b4b849f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24cea613-bc6b-4ff4-8f50-51411945957c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d6d6f6-4eed-4782-a3f6-e6e786a5e079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a992d8f5-29f1-4cad-8c7d-1aeeb5b7a434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d7fa2c-4f39-46b0-9dbe-5f99dcd55d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f03dc70-e269-447f-86ac-a22c2c1459d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c00b87-10eb-4c41-b75e-457de869730c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c8cae9-782c-4cf9-9bb1-feac988e7a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125472e4-6740-4992-81a6-edb0823d1571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac26d67-4e16-42e0-ba55-5dd79d8ee0e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c527e863-5384-4dc0-93c3-12594f9791a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85344c88-d703-445c-9ac5-82a4f288260c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b292a1-ad0b-4bc7-ba27-e8e9f5835f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3343141-e45c-40b2-82d8-f78d77594c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca4ed3e-24ff-42c4-96a7-f310bf83cc9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.101.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63150732-6bb5-4782-9c85-2050ca93efee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.119.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f82a30d8-5a17-4273-8f40-4d29cd354daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.144.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35120881-16c1-4afd-951a-69b5e920ab74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.187.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30dd4feb-c454-43ea-8bbc-4286bf98c620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.211.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed1a8a4-a7c6-407c-8f15-65daf12ae63d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.234.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89d9a83-3177-43f5-b96f-209dee33cc7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.247.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9968c074-704c-42b8-b052-446fe3a24811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.93.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2412c70-e95a-4c96-8233-6775155a2f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6c1a86-c119-4f93-af66-95da75e95cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.232.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969ad348-49d4-4c69-8d47-5b6c1ddea868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.181.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6030f7a9-25e0-4dc5-9e03-cf05011c31f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.187.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98980b0a-1717-4e5c-9df4-494ded887bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.92.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991a6002-d938-4f24-b119-f821bb1d4e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.194.64.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f4cc5b-132b-4d0a-9779-384aaa7f83c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.206.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a33ad9-bfe5-4c92-91a4-96b50a531f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.222.43.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69aa3b68-1130-4c5d-836b-6387f3bf3cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.231.90.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ef8191-533e-48cc-b95b-dbf42e9fbb98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.150.227.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853bf6c7-e1cc-42bb-9ce8-f334992cf9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.197.113.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec5f8c1-56ac-4cd9-8a82-585d3b7d5262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.228.66.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f138b6b5-0cfa-4bab-b8d0-9ff51b5245ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.255.72.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75991a0f-e75a-4115-9e1d-94f5166d23f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.11.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10cd1e5-5dff-4242-a7d4-ec5153ac4cff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.140.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb59cb3-567c-4d57-be91-b5132ac17734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.84.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab27a101-3d75-4cc5-b80d-ca2e020647bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.155.2.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fafca82-9d44-4986-b44d-c3ffe08e2000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98cdb470-3bce-4fe9-acc9-1a6bf22d1686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3bacb1-99c5-47d9-b401-82a0b439031d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93cdcf2f-b83f-44a6-8f9d-0485887e74aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb80027-3265-4e40-8a06-5fbb7c02e6a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9c3b11-bac8-4f51-91f4-007b922fd617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8028c0d8-297b-4f64-b39e-15c5daaabadb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8958c9-ec71-4924-9719-0b8c7da636c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60dcab83-31d1-48c4-94c4-64afeef202d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.134.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9708e74b-8a39-42db-bd63-12f5f5a21b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.154.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e71aaf5c-78f5-4991-9f75-5c5ef19954d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.167.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e730f230-2246-42d0-bcae-fc057a6e093a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.83.158.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5051f8e6-ba3a-4d74-80ad-40742a8482fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.104.81.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c403c969-10cb-4a86-95c5-e158d9b3746a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.141.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1646fb07-ab04-4641-a2c5-1df0ab972423", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.201.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c42bae3-b707-44f3-9b0c-a4b0e3e283f5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.25.158.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6bb2476-c6f4-41d7-ba8d-fc9a716b16e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.25.193.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3680cb19-160e-40db-b6f0-fd968b7236ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.35.134.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db2c8b69-e8fb-4438-8f83-f2e27a7e6003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.36.6.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0c0593-6b7f-4053-8b0a-cf75c04cd40c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.37.47.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7703183d-5b21-46d3-958d-857fda8a09f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.8.246.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a8ab10-6b49-4f5b-9a43-14159fb4038f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.100.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994ebbac-5b3b-43d0-b380-ebbb8b7c8c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.105.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab44fa3-1f36-4750-b194-f31150b68295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.13.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0046ade2-e318-4cc5-b00f-ac01a2acf810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.13.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32593067-cae8-4f44-9ade-1bcb3b442374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.17.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc45f74-78c8-400e-b678-1ea023a392eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.17.192']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6143bc-56eb-42fc-ac82-3db8219939b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.17.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b72a048-0a97-45eb-913a-efde24b25c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.17.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b076e17e-a1c9-4bef-aa05-ab0718f9f0c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5873591b-b051-4c39-8203-16d8d880a5b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31487d4a-8987-41f4-ab19-099a42201e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.209.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00886a58-cf99-4b73-906a-c0dd676e7cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.210.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0becc3-598d-4e26-bdbf-0088fc3f0471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.210.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739e20d1-cff1-4c5f-99e2-bbd6d8d5a200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.27.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6cff24b-1af3-4ac6-8ba1-9208a02b7e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.27.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e945fc45-5134-44be-bff4-677d0bd8c3ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.30.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6855ec8-3a5b-42a9-ae2c-9f3b74bc7b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.30.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d8281a-5167-418f-9010-6739e82c3851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.30.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d3d4e5a-36be-4d25-b598-93d03306a576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.30.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8c1443-f9d9-4c89-a8a1-28802947d32b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.5.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96e7ac1-670a-4cd9-99c2-9d0f1123154c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6fe2be7-3ff7-4947-b65a-57d3412fa9a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.218.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0365f54-87df-4238-9cf6-5c49d8ac4a64", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5e58cc-8a52-4821-9b16-7bd1993b8440", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa59de6-fcce-444d-b95d-f9ed55820b56", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.167']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5330245-e067-4b1f-a252-268291bba155", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a2c231-716c-407c-8899-3e3b83721972", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb8a1c7-2fc2-493e-ba01-a4e0ab9ac41a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.161.73.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb8e1a1-f331-4083-b1f4-ea8458a09a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.26.152']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7310b7e-8633-4750-bf43-1e5c6b481bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.211.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c1f169-b30c-416f-81a9-6b6c5b0c5b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.225.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ed6248-4eb4-41d4-b385-9b26fafc4e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.235.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b7ca34-df82-45b2-9fe4-4675c69154e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.236.56']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3ba371-0e95-4273-99e2-ef5e5f7c71ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.244.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5eb262c-7ebf-4362-93d2-406246d57b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.250.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef615ba1-cfa6-41ee-a9d2-fb5ca15df1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c143053c-0cac-4e41-bc7c-c3a5708f35b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8002fa-4a99-4838-bc96-474761c0b270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.83.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f2e801-d13d-49ae-890f-26d3ea8d39ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.83.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e00ac7-3e4c-4da5-92b7-342f0ffb301a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.182.226.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c4c870-2584-4361-839e-e25784d2612b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.190.112.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acadad16-797a-4b8b-9d2c-80686bf70d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.20.215.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246886ab-21a3-4fb3-9627-1e191058f059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fbce3e-94d3-4a4b-b0fd-69154dc83541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.105.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6818e2e4-e598-4ec3-be55-2c54f91f5279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.114.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963d4a7b-6978-4c6b-b62a-1131538cec25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31f29f9-da56-4906-8b83-6040fb3d10cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7893ca48-a80c-49da-98a0-293faab7d038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421d65c7-632d-4ed2-8067-ebb11c119c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e02959-1360-4015-a0fa-33a709326a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081f5ce0-a86c-4657-9bc3-dda834a5f6af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaed927e-3555-4b35-a471-e25f0c6bf605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec63bde-c681-441b-ab6d-f19e9855a56f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107a07e2-09a6-4155-8f7a-74343abb5d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727563c1-f208-4219-8ef1-e8ad5dc2a6b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b64b01b-601b-48de-87b2-d985b208b8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f69c5ef-cb36-4f88-99c2-f1b79ebc0eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e12676a-f452-408f-868f-f4a4d38b536d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dcb9174-b702-44b8-8fb5-1aae0c3dcf92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8789c49e-69bc-4ba0-943f-7adf860a8111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd951674-76b1-481f-8f39-5eec542ee777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7055553-7bd3-4144-be81-1a90b230d3d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.122.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f957cc3b-1233-44e6-908b-45da458f5a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ae53c4-4bb0-4375-9793-9959d48f3053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0679dac9-436b-4b8e-8465-5a177ea807fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.24.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c69c73-4ca5-4c0a-8fb7-fea3def01fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.65.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47917c05-802e-427e-807a-1a655bf3d148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.65.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0011903-6a8d-490e-b6fd-3c29390d6207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.9.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0320533a-f556-40a5-a6fd-500d129cc666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.9.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b9c6d5-5d8c-4a35-aaab-aec953914fcf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.174.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe070574-479e-4cfb-91bb-2604623e2ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.200.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41397b40-0379-43fa-9a91-2666bea82a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.200.195']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6585f4-5a82-4655-b82d-3805268cd15b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.200.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea78a55-04f4-411a-b219-fb1346f3b148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.200.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e10029-de8a-4590-a5d4-60206dc08a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.201.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d752a91-37e3-4d12-b153-864d1e08a23b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.108.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ee444a-348b-4c4e-aa34-347a3b9454e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabeca83-8352-49bf-b720-ecd1cbb1af03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a1cb324-7c40-4bdd-8c19-76a2470e6bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095b2797-9c62-4287-946b-dcb5cadda4d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed36a80-9180-44c7-9853-806be661f547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec99863-033e-47a9-9877-b25f9016ed22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55404a43-baab-4cd0-b40f-41f14bd9515f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f43122b-4f23-4887-9815-97b6a99e60d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b65fe89-0a6a-4f1f-acba-019e1d93b221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff595d9-3af8-4023-8f5f-6982366355a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205d4cd3-ca52-4772-a12a-2bc3687b1054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8c1e9d-402c-4fa7-89ea-0ad2e180d520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61eb4786-2a95-4b62-8ca5-3140a17c5ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bba4cbe-1b3e-4dcc-9d19-47f40028cecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.217.192']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1436e96e-9fb4-4686-aada-853ba0d87698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46566ceb-dc14-4aaa-8ee6-1af6fa8e9022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d2cf68-17f0-46fd-81d7-0cada9d3ec01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7249208f-f018-46a4-87a4-e2c3175a4159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534f2db3-018a-4c7a-8a2b-54824af48fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f075b9b2-ac93-4353-aceb-430d7f4fb585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07722c0-b4dc-405e-9514-53fa721fa5ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169fc92b-6981-46c7-b85a-6b24d0792cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde9c2ca-61a4-4eac-85e3-686874542f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc1e5d4d-ca2d-4cbd-b4d1-3e39e1e52b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96ca7f7-4455-4ab8-9ece-91f82960267a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.41.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5a6888-e013-4143-bfd0-485feb43abbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fd8f6d-e7a0-43bb-9c78-94709372a1db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea57b10-5dbe-4e8f-b0a1-f111ecc2e7ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f53d00-f50a-4557-a753-f1e1ef9b00de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c9f818-763e-426e-b680-61ae08e4ba4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944fc9fa-f3b3-4bd1-9459-5c102622fb6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9d8e25-1aa9-487e-aee1-35054068928e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4781610a-1c5d-4f0a-addc-d38389b9ff9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb89085-ef7b-4458-9cdd-5d1e0bdd4684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--067edda2-3697-4f15-9a09-dcc889b54bad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fdc221f-5479-4656-a0b2-b400b8cefad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8baf61d-d281-4bf7-a896-af298313fb1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066a4602-91b4-4b47-85b7-c70f211e2df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7303d4d2-959a-4c3e-88ea-d335c72bbdab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.239.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6ef43c-6321-4a9c-9a7c-834871bba912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5001f128-a43a-4e3b-82d2-add773b23aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a63a504-983f-4d8e-a61e-e0064c6c08e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860af9d9-5818-475a-894a-14e1a3537e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823098d9-370e-4d42-8fb5-9982f2298ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99640dfd-082e-47b3-8652-973cc1721fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924ae673-4fed-4558-94bf-c854ca363bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc12185-c7d4-4713-8aca-ce71eb0b2e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16cee12-6d8f-4e30-bf45-63029a8327b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b464550-7eba-4521-9c1c-c3927c7f031b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5a4d63-105d-405d-b232-ef9c0b824cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.36.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0793a068-e419-4e5f-8e84-a22f77a9ee8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da965897-1992-4819-a804-824705d49198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaea4b0b-7f0d-41f3-a4b3-2d69b45bf28c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b2cbd9-011b-41a4-b048-dd4ad96b8d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.239.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261e42d2-d30a-4bf1-ac05-75d370c404b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef04ed6e-d1ef-4e52-9f32-f1f180e9d37f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f27e59-f818-405d-a340-4ea60cd17e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81199ba7-9755-4236-984a-a4aed734d1fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.64.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb24fc63-b761-4f61-8473-0dbd709f5a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.64.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84e54f4-7ce6-4030-8374-0065db5d353d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.112.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--429248e1-c994-488b-a7f9-3817dc08b1c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.112.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d698516-3b59-443b-a49d-9ed66c24c056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.16.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16526c3-48f0-46d7-9739-92a9dcaf8270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.187.186']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ccca78-28cc-4a35-8c97-32cece874165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.21.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f937ff7-e6d6-4518-9fa9-e9f4cfc51966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.225.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c05041-d332-4397-84a5-3152aa400d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.237.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd764d2-122e-43fd-b47f-a375ce3c3ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.89.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9184a92f-28c3-47bc-a73a-a076b94cc7ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.27.30.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8045e617-8f07-4c5c-a2b1-b8ac510fed61", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.59.117.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e654d4-6bfb-4a4b-bf9d-ffc51a5fb55f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.68.229.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6548c7b8-5f6a-4330-b19d-6d0136cdbec1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.83.83.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f9d7dc-0126-40d4-ae53-b75721c9acf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.106.153']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d918de0c-7d46-4f7e-bcee-20de8fd27311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b962e7ab-f2df-4296-bf25-b7e045249ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0973ca83-9e48-4ddc-ab95-9352dbb1ed82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992d1b0c-b2f9-46ec-827c-2296924d35b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91776a79-22de-4347-9e10-7fd4cf4a490a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d538a5f-5564-44bd-ac54-2886f363aa68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94442da-06b3-475b-9f95-32c07f81a1db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.96.172.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3bc211-e882-4f8a-ad3c-6773d5cd44f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.197.14.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ceba199-8cfc-427d-a099-0305824f24b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66280f5e-5b78-4da9-9c43-d6d607ca775f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7e09b7-977c-4365-a034-4eb3e11b2ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.155.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a6c6627-f854-4758-907e-a61717cb1299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.155.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7503fcd-73ca-45df-b1b8-8802b8d84f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.221.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd30a94-3497-49d5-b312-17396918a512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.249.10.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6038ef-c6bf-46ad-97de-46d804b8846f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.198.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e803e4af-1429-47cd-a605-9d019a42c28b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba0c4bb-131b-4dbf-9483-6e509134caa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d1c7d4-393f-4a0d-82b5-aebf3a1e051f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c534c43-e13b-4f53-b9e4-a620a93f9ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1785742e-b51d-4da5-831a-70a8928b1891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f74b61-eada-41fe-a237-4934ef666794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5302448c-c9b0-4afe-87a9-a88f2c91cc5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb28aa8-82df-4c76-a636-e68e3f198668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59eb9729-e2de-478f-a67f-0350ea88267d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae398ac5-4dca-4281-94a3-8ab7a64af8b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561f1e91-f55c-481e-ac8d-fde14cd2f4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5476f68-3312-467b-af10-462bd5f1676f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47cf2aa-7711-4039-858c-9435fb276fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.231.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab907196-8ed4-4a6c-8ee2-5ed60ff7d58f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.235.183']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a41204-8cf0-4ee2-8d93-d97f3fda8f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.235.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af28ae5-83cc-4139-8771-73db64c343e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.235.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82361d46-6eda-47a4-ae6c-078388d3bf31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.235.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7047dcfb-d449-49e3-b409-60378a9190f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.236.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55091e69-393f-4fb8-8a64-9f79d7cb8514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e505ebec-3690-4966-836a-ce8fc42cbdd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b5958f-1e3b-4afd-b189-e1dc20a5de82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.248.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637f402f-4a6b-4309-a143-de07f46d43be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.73.62.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b619e39a-9ae3-4f48-b5ec-832d26027395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.66.113.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71bddfc2-c9dd-445d-9257-46f60a27e936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.39.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b446c868-2196-47d2-9e21-cd3cc06362a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.110.112.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78300984-1c71-4656-abc6-560f3495e640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.195.238.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00ebb7b-76b1-4041-8ab9-236a5568505b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.21.243.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951bbed1-4a93-43b5-b5c4-36ad6cba2e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.21.244.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ffbcea-9be7-49c0-8d1d-a87bffed5ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.178']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726550f5-7eed-4e07-a60c-fbecf57eb3bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72442be6-1510-42c6-95ff-8d63450c6e39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9295fe1-e0d5-448f-96ab-c53133a69dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1ad5c2-4877-45d8-bd12-632b3340e2b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.112.128.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60fdbfab-a727-403a-a3c2-349a6379184e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.215.199.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed7a8a2c-9a89-4e2c-9b80-b28619abb79f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88072694-849a-46ce-8856-8ceef20c21be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.39.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37ba335-d9eb-4002-ab39-ee687b287846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00838aa5-f6bf-48fa-a33f-4a188ca66d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6f0c9a-f764-4352-963b-4381d1315192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999ede37-e26e-47aa-9861-c3d7abf20af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5642a9bc-c042-41e2-92fa-a61d142e2b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0969cf-1325-4b9b-ac95-fe3bb8e70c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456a7c6d-8b9e-491d-98bd-164ca5348c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ac9d66-7b69-4285-bc6b-b2dec08c5ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee98e72-fa31-40bf-8e22-b6d485810908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0322e852-33dd-4faa-a55b-cb37d944a1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe4745a-6517-493e-92e6-846dcd1d3562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2eb2ec-1b17-4d84-a874-0ab5aff8fd92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e6c61ff-7bb4-48ad-be66-73c255d43b62", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ded326-0cae-4139-a77f-33cda0e34680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb8ca71-6c38-4f07-900c-d1e306c5e012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3872b8ae-5241-4320-bc69-7d1b399ae1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb61fd9d-33b0-4b88-9c2d-0e74bfb22c14", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a234015-5ee4-4c35-a7aa-64d80f555c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306b9147-8f6e-459a-9cbd-7f6130f20bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdfa7e1d-9f1c-4b31-a304-95cd8a2c6f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1d35e2-9bde-4884-94af-561767e61478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a75495-d1d4-493a-b06d-c131c6230ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056a4d8b-c57b-4ca9-9b6f-96b2941d1689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5732d42-5d72-45c9-91a5-a17f67c6910b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77636618-03cf-412a-9c5a-3f805f63e0cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bff0be2-abd4-408c-8762-8ab65daac36d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfc732c-44e6-4766-b484-5f5b14b6c396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84378a62-9014-4f4c-aa47-844f984d6425", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.56']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed0e9da-eab7-4786-b557-7e2d0fae8fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a647277b-cb80-4772-adc1-f6eb67ee07c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5e9726-05e2-4f1f-915f-1eeb61507e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db2818a9-c957-4292-bb71-8e28de6a5208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890b9f26-dc35-4fda-a4e5-6e6d4d6e608d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.144.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4822a29-8511-40b1-ae08-481a82b38069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d5987f4-25dc-4984-999c-27174f622e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86192d6f-5a60-4b03-8aeb-b54f9992e205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--364df79d-00bb-45d4-95a8-767f515936b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8cf1bda-2216-4838-acc7-61fdd3811d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.197']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949239a1-75cf-4bf5-b4d7-fd5da76b710f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e72f57d-5512-447a-beef-173bc85463d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281aa0c1-24c4-4729-9bca-3676ea85f915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.216']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d478791e-e316-4fde-af0e-142d66097e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9df846-429f-4b41-ba9e-080a1116793e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--433d9cdc-f841-4ff1-a5f5-4ef35cf3dd6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f33dfc-8a63-4453-b59e-887037e3143a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41568da4-e192-406e-8c1c-15ef98bc18cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5b427a-2ae0-4f4e-ae13-09cdf2665443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4fecb3f-9fdb-49af-8c5b-a88427ba89e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2628a0-2a15-452b-947d-df370c95abdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd42cc45-f545-4dd1-91d8-4aa9d30594dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a992a3c-d378-409e-be48-fceb95fa2b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be16cf52-cd9c-4aa1-8e21-2421a0ffde2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686a466a-5e1e-41ee-9c11-7f0e8cd57037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ab1ac1-62e7-4ad6-8718-3138368c800f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.236']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a30efae-0ee4-4d4a-a6fa-f5712a1b53b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.9.16.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43851c4e-afcc-4fcd-ab02-7ff9f5adbedc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.9.30.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f11a14f-cdb8-4936-b799-37e487fcc618", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.200.32.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db122bf5-5c7f-4435-a546-61e3914da496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.22.44.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82ad73c-ba16-4bac-a006-128ef7bea18d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.244.61.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe52e31c-a059-4124-b3dd-3e15ab19895a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.32.0.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c2eea6c-d7f3-49a9-8a13-26ff20b74a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.69.238.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6445cf0d-d81f-4aeb-b146-195375e289a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.8.171.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc15bf9-2c69-43d0-81c7-ff82dcd52771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.92.66.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d6377f-9ce0-4cec-878c-0b25185fa3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.113.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb3935c-b895-4d83-b82b-9fb09b231c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.208.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55702f97-0556-4a7e-aac4-f97d5d48d402", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.120.81.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aad4b76-3aa7-4918-ae4d-2d1fdc59ba4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.124.204.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86dd9b21-9733-41c5-9423-69f516c81569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.157.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4876b97b-76c2-412f-8010-2566338c7036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.178.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553e0166-26e4-40be-b26d-238fc31bcd66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.212.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9fa62b-bc31-4242-8320-8460f16219f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.250.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d58d3291-3e69-4654-806f-017fd3125c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.84.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9699a92d-0882-4090-8cf9-a71b4d02dda5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.84.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c0b5a0-0680-4b47-8275-48eaad23c156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.95.222']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b579a6-a75d-4d06-b6ad-4ce778645231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f81e3df-d2e1-43e0-ad4d-c61487d78661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3dfa8ff-d84e-45ca-ac45-0748170f7bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55cec6b7-e6d9-42d6-bb71-981485bbd9b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ae53f5-85ec-49fe-937d-26d01eb50bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.173.155.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d3085e-d618-4b29-b380-2d29ff6a8228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.177.40.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba0c3ebc-517a-45ba-82dd-8d69bf99fab8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.18.253.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d755dd2-917f-4f69-b3b9-e9bb24771309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2febad-593f-441b-9ab4-bc91a2cd19d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c958a2df-f1ca-46e3-bb7c-9fee35f1eaf7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee911363-549a-4625-a87a-22851f0c7821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.219.173.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319a26a4-32d3-4330-a11f-63a38f8975f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.253.95.228']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6254a700-315d-4242-9462-746007fb3727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.46.129.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da21084-4ab1-473b-bfc6-090f3dffc181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.216.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a616c9c9-a797-43a4-8a35-4989179aeae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.73.210.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb7036c-ab20-4955-abce-ef6eb43797db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.93.200.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a00cb8-8930-4674-a570-603c14e93fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.235.14.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1786de4c-96d8-49c3-be71-27759057a3f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.146.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1623e194-30da-403b-84e1-18decd99e220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.168.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0073f749-dd50-479e-929b-0a805b99a022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.137.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940ea44e-6f09-45e6-a434-060a68996499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.169.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f194e97-4c7b-45e1-94a4-04001ab7710e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44e5e2e-ef81-46aa-92e1-d5dec520818d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae7bab6-dd44-40ab-89ce-f2946cb7cd0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.101.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d2bc2f-e474-43b7-b023-ca551122f2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7feebf85-8903-4477-ad53-39c03239750f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.135.247.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946fb465-fda7-4466-be09-c9dad8e149c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.140.44.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf46e0f-eeac-47ba-8e73-88564dc8db0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.74.1']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76d5ba9-9fe4-48e4-8665-5ee49fc00654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79461c38-448c-4664-937b-7943cd01fded", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.205.199.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ccbbc6-581b-4cc1-8354-0666dc549c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b018e83e-1315-4716-b33b-a81b18e4ba75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.218.118.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc06f87d-8823-4073-b628-8ad8a21c7dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a937d57-176c-49fa-9d45-1978fc94da0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.225.224.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e98308-cd63-49be-9c7a-3beedae6cdf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.97.19.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6329dfaa-edab-49e3-9b18-c20abbe8d268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.97.5.56']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667f4075-ddeb-45f1-966d-97273f90cc22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.111.30.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96fc5507-19e4-484d-824f-350e0022cece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.111.30.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7953d7e0-6216-4cec-b9d0-ac6206967327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.140.129.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c68ee6-4b79-408c-860f-71713fef0d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.140.190.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a556665-71ff-4ece-81c4-d14490432ade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a448f368-cab1-4c6a-8228-df49e1b2dfd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a86e2e0-c86d-475f-889e-d7d07d66e0ca", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.181.239.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a2d44a3-5a0e-4ed4-9454-e6e693bf82de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.212.92.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01dc1823-27e0-4d83-9ccb-abfa9e84a928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.248.199.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ac608f-4e4e-40f6-bdfe-ba003d53e80e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.248.49.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77bb286e-4f5c-4db5-840e-2a4a1a367d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.250.174.171']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a473ff3-4924-491d-9094-cc29f72e9e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.74.195.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d28a63-f0ef-4b9e-936a-f01e662ee884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.172.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2fc951-d76b-4f68-8191-aef051c18e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.249.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7e3231-c14d-4864-bd02-f64d7bffda65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.95.238.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6192bd6c-61f7-48cb-8bcc-7aefd7e22f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.95.238.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d31d68b1-0826-4900-b4b1-676646dd1b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.115.192.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd3332c-703c-486b-805a-91a7a659d426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.143.162.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce9692b-8a69-4666-876f-5e68988e70ab", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.188.176.242']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9adf3548-d872-43f9-bfbe-11b49e862dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.208.25.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d9386d0-7bce-4ee5-8ae4-2eeaef03b35e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.140.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b293b9-3fff-4bd4-badb-359697a314d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.225.53.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f516f0-3013-462c-8520-2dfb9b1b918c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.28.27.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d84aff9-b8bd-4de8-89e3-db581d373782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.225.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da0d2c7-c485-4f42-a777-abfd899b8615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.125.121.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b32487-0df1-4ea7-96ab-fb3b24d21c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ed6c24-fb0a-402b-8790-e9cf3d9cf8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d291a7-9f2d-44d7-94dd-5b395aa11ece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.163.107.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4224c7fe-e3a4-41d2-aa93-e43b83730d48", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.18.161.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f4e962b-b219-4688-bfda-b6085076efbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.204.158.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998f874c-5130-4984-ae55-9b3a39b9a308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.168.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85e0d25-2a68-4f79-99e1-c4cfe81b3bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.253.54.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0cfcb2c-13a4-494b-847a-06badc558c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.43.128.171']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21647dc4-861d-4c45-9947-4d96419ba706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.8.225.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e7d1fb-62b7-42a1-a864-271257260444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.92.202.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2892708-5296-4f8e-b7c0-c02c795fcfb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.92.71.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797866f1-002f-4ed9-8bf8-fbd529c0074d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.184.54.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c0b7b4-ed97-4d08-9c5a-07626ee53338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.191.21.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7769bd64-6240-4167-962b-214dcf87a4a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.241.54.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709d19a4-bb04-478b-b7a3-0f3682a93100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.36.35.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c025e672-5608-4c3a-baee-9692c8f76370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.56.243.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233a4639-b704-4830-b4da-198c1e4e6287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.6.4.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c306a6e-e533-4be2-a8c9-21f6fbea0c9a", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.62.171.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c7db88-618b-4838-b443-9aeb8b68d62a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.66.138.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8f6a05-c94a-419e-aab9-0b0c84f4c70b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.81.169.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e66795-5a42-4b4d-ae84-4d2572147942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.82.107.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b68bd94d-6f05-4899-9645-86bb597ada4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.82.120.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d92fd7b-e727-4138-a108-b8043b44e0dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.99.25.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0978de-5cbb-4e37-96bd-ccb4ab492ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27386253-ac53-43ed-912a-91a79328eb1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4e7d78-6f54-4111-9589-487387e1a96b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5523fe9-d85e-4304-b7e6-f1c7dde5c80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d935a8ad-a6e4-4305-842f-cbad43508ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4fefe8e-88f4-4d76-80a6-224e5bc09a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f37329c-300e-46a4-803f-c916ef3fa994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad117734-ee18-46f5-8829-9f3d71d39f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa39ef0d-738e-4aeb-98b8-be257b24abd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86487211-51ea-4353-8fe8-5aa318750345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c78a35-4f32-4d95-bc1d-477171147c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a0dd0a-f4e8-4331-93c1-c631e9079c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a965ef4e-7e52-4572-9709-b4568c46264f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a638e534-36bc-4785-b3e3-15f3f111b528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c6b2db9-6889-436e-955c-954aec30690b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed5e86a-e24e-4255-aaa7-2e502e8dea5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d151ea13-2b60-46c8-82e5-f170842b986c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db586c1d-9ad3-4032-bcb4-ccc01f375602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a6d1bf-78c5-4e71-98df-aeed02984b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a073d63-b3da-42da-8fe1-e35458b0d8ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd454c0-ac61-4e13-b6b6-8bbd8b3526a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--711d9d25-a4c2-4c68-bb6c-88f72ba9ec2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b459bc0-e86a-4e0c-a8d8-f89836a3682e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5408a7bd-52ee-42f4-a046-92fb821278a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.81']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8550da-4cb1-48f3-abd2-3a67d1984b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb9eed2-04e9-4a75-b31e-cc1d75381bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350e7951-e232-47eb-9018-35763cb74429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8370fa19-72fb-4fdd-856d-b81c0e1f197a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b661c902-40e2-487f-828f-025c7e062d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3763564a-d57b-4a95-90db-5db7df190ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9245318-4fbb-4b22-a2ce-f2b3540ffe33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77efbf62-df20-4ced-b1f5-618287a99e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2766d0-b907-4fe0-b59b-1a4011a40d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5d0c18-e18e-4c4b-a7a6-0b48fb2ffa8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557bcd7e-9c7d-4d48-8a20-ea40c71b3fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da80f714-1fe9-44e3-9672-fdc8cb3469f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6bb52ca-e881-4661-bb43-7a9711a80c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd86ba6-14e2-41ca-ac72-c8e40649d71a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8196a436-9046-4d50-aa2d-94ab2127944b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2058d2a8-6465-46b8-ab75-d1fb541cc272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d09b1e-6ee3-4e5e-bc09-11d8f9278cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bbf2b93-8555-49a3-bd3b-41694351e0f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8c49a0-4877-4678-83df-426b7968119e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff9436f-9f26-44e1-8014-de8ecd433f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd685a1-30b9-46a2-87d5-ef23915b7012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f892845-de17-4f08-b434-ae6c16728c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb6f514-d1c5-4325-999a-df1d21d7c5bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6de32f-707f-4e90-9c02-e6d39a536b48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4227b932-6489-422d-9d52-a55d26b0640c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586af803-d72d-4321-84a9-4f0274fb0c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd6f27f-af98-4ec9-9691-e935e470c2a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--137d98e0-75de-46db-93f2-ca852bf74621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99795aa0-ac13-44f3-ac49-49a1551e0087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee764a23-e899-45e1-ab03-2ab0c3271ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d13b397-5e26-4c3e-a28d-eaac7e050aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8db34f-5b87-43ef-b8d1-68a21ddd3374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.234']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17dd37da-2a91-4ca9-ae8a-5dba4b300c33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b0a9501-3c94-43f5-a0f9-9a9f28792342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5405a43-c3f9-4c3b-a8fb-8279bd9bdbef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.240']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5caf048-c6b3-4fb8-9e5d-532db0b61c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.242']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f046542d-498d-4960-b8df-f59f48cdf549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65667acf-9cb7-4ba3-9d50-1a5e9bab7654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d2f4a8d-0b8d-467e-a4d5-e19d7ef10a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--530f3708-3910-467e-b037-44d1b896ecd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc93dcd9-91db-4aa2-8345-6e1d35a36fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298ff0cb-ee66-4c55-88a3-7706f4d80046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78907302-1f07-466f-aeda-598045af6483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f1c7141-69a3-41c0-af98-56b5d386ce67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495b4b96-ea03-4c6e-b4de-152ccae2fc1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71e2168-bea4-47cb-86ba-1239b69dd93f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.100.215.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532e4ebf-2226-450a-8451-6ac6dd337402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549744a8-ca0c-42e3-aabf-eb360212fe29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.163.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b9340c-1277-4c4a-abe0-b160e651e57c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.118.79.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2809c2f2-5b81-46a3-bafc-997ecb3d9b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.119.0.1']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83074f79-3989-48e6-8bb3-de8802868215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8a9b08-89f8-45a8-8545-1d0ca7f1b283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaef5215-f83f-406a-aa2c-42a180299db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.132.187.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76fdcfae-f898-4576-8632-947bf855c742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.134.49.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173ac6bb-f8f5-458f-b0bf-ead6f4586547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.135.137.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16276d8e-ea71-47a6-ba27-7d8085a1cf87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be93b6ba-bab6-4abd-9ff7-124262c1cd8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c702b8d6-7999-45ed-a1a1-9294202e5cef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d857ba-91b1-45b1-abc2-da147a049d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ff3bbc-6453-4756-a62a-8f7639e683c9", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.150.191.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91518a6e-8ae7-4c9e-aa56-2534a06f3c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.156.73.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dead84a-8864-400f-9ecb-c49b63e41a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.242.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8369f372-9082-4ce9-83a7-41929d374724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34c29e7-80bd-4370-8c2b-0f2f33bf2f85", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.72.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5f01c8-47e5-4a50-ad47-d01825c093ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0435cd1b-d63f-4327-98b7-d792551a6dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae32f106-44f5-4253-a0bb-545d5d64f206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca9a79d-1de7-4044-a4b9-2945832dd61d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c01e98d-705b-42dc-9f79-b9f953d46b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2adf16b8-7ae8-4312-85e5-2b77a9972b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--331b35a4-6d56-4eac-8161-f10d5ec0643b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6dc1bf0-fbe9-41f3-8e81-1ac9535be1a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1494b4c8-daed-4ce0-b87b-e9de8ffe1f9a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a4af6c-94e0-49cb-8365-e64db21a533c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13fb0500-8a4d-469c-99de-020540193a5c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f951cac7-9408-4382-b0eb-d09c68c53548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7571d936-c592-4b4d-ae53-6f2f59390154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2019-5418, CVE-2021-41773, CVE-2021-42013. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.182.186.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8111ec3a-aa55-473d-a334-f367da05d1b4", "relationship_type": "indicates", "source_ref": "indicator--7571d936-c592-4b4d-ae53-6f2f59390154", "target_ref": "vulnerability--1ae7669d-c0f2-43b2-b9c0-17583542f0e0", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c965820a-dc20-4c30-8ec4-19972269f679", "relationship_type": "indicates", "source_ref": "indicator--7571d936-c592-4b4d-ae53-6f2f59390154", "target_ref": "vulnerability--1b54f858-1f51-4904-8b63-1716d46f773a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9081d593-f37b-489d-8965-ad67278e4a07", "relationship_type": "indicates", "source_ref": "indicator--7571d936-c592-4b4d-ae53-6f2f59390154", "target_ref": "vulnerability--aafe8ac9-890f-4583-96e2-3d3f3e6e9352", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc1eaa44-1233-426b-9852-3ff11be2970f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.188.217.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d170bd1-1476-4de0-be5d-75d1410149dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.188.249.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2746fc2c-5ad3-485f-98d1-40d8830c41d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--034784be-19f3-40bd-a909-5cebedd8d5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.245.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43a3595-39ee-407c-95ab-0234daa52915", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc79f02-64c3-486c-b788-4665195255e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f22c0e-9f37-4ab2-a878-5ad7a3d14d01", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d23ec5b-8cdf-4c0b-b35c-25d39b1f25a7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe04a4a7-4a4d-471d-8765-78504be53c2c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd4ef9b8-44ff-48e3-9e25-5a3d5f220d9b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0391e49-ad00-4adb-9900-d6365f7006a0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ae8166-4bb6-4bc7-a7a1-360b89e2eef8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786baf5d-4895-42d0-800b-ec2acfc841c1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd42659-4443-4ed5-87f3-9c404955c282", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba08421-f20c-48ef-828a-f7085a18e14e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2854209-7855-497e-9f0c-3be0d51e50ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb35280e-f411-4e1a-b386-2d0894b619d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce500606-f98d-4cd6-9b95-62af0a217153", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cfe5eb8-4a31-4de3-82cb-563f489be977", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97bf7a1d-1bd9-4a3e-941f-2cd8257ffcf2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e20c41-7a71-4ed2-99f8-6d7c59961763", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d94ed2-72d3-430e-ae7c-a28d0bd8ca68", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a044181c-5103-4813-9efb-13836d693831", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efbaf325-08f2-4115-b57e-e7980161e5ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.196.220.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cafab66a-fb05-414e-b0a0-ec34e4736e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.196.220.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87e18de-1eaf-4667-9232-3ec7c57c9ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.196.220.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e883b16c-80f6-4125-97e6-b960839fe863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.196.220.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a62483f-7c1b-4ac1-bc85-bb3a1f1bc894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.196.220.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9ece96-2431-4327-91eb-366658c1ac73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5583d552-7a54-44fc-84ec-cc3d11ab5e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199efb2c-8438-4f21-90a1-0c135ba7b62e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ace17e-3a15-4018-9db2-71db68fc008d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7edbf63-2bac-4686-9aec-f6d502c11e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc1cbd4-d737-4dfa-b752-5abb2a482457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b45a8b-f666-4c46-82be-e97f4cf80daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88311150-47ed-4be5-a06a-ef9c8942b5ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.202.236.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e9d39cc-ca63-4164-af6a-711fdd6b5136", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.202.238.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--403190bc-564f-407f-bcbf-c552e816773b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.211.94.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a34b15-91cd-42fb-9258-0168363c1a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.167']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0015299-44b3-408c-baa9-0a87ade5f903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf73515-0265-4324-95aa-9bfd0ca428d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90ec6ac-5203-4992-a128-585552ff56f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.217.127.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2985c1a1-f065-4616-a205-6a2df22d9577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39be240b-7991-4c8e-be26-429c9fc6da70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.219.133.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0e83d1-478e-49a7-a987-658dc2e8ab12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7606349-0614-4e16-8fa5-da2533826c33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dcf4b67-bbcc-4281-a894-fbd3e399e960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ea6a25-fe02-4341-8077-8ae9840e24b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4986b9d-fca6-436f-a61b-e8089fe06ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd060e4a-d690-4ce9-8423-ad5893dc1e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2e1f78-56a7-4eb4-a4a2-e88be36eaa6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f236c9-295b-4ab4-a8cd-df3738450de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56f583b-b84c-4e82-b74b-5a58eeffa374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a021c516-1e1f-4dbc-940f-1184b5e11bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479e80f8-c6a8-488d-ba53-ee4422615e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b56e1f-3e92-496b-9e49-70be95a83eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a04435e-be84-4d77-8b18-6a7bd3d35ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55652d0-25ff-48c8-b29e-4c36dccbca52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd712f31-021f-4ef6-900a-c61994ac3bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3237673d-be47-4db1-b5f5-07c694fa66cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c769d50c-7f23-49a9-9989-19d36158d553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.227.68.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c39e86-aefb-4e8e-a55b-820232198b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.228.72.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0749f29b-9a0c-4b52-ab30-50c7a90af827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.241.208.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc3b02c-2a5f-4054-b16e-925a3be9af09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea963ce-2c31-4b1c-9f48-94302af62256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5f0e48-24dc-4fce-8e40-990a5195aad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de445504-4cfd-41d3-8702-edf542586ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2da348-021b-4d6f-b796-9395f20435b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a422e0c-6017-4e34-afea-0a91b8d8bfed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f5fdbf5-7b86-496e-9b95-e2bdd74d16fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19038b7-2561-4784-ac6c-b0003e3dd220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7cb34b-fe5d-4f51-87a4-e272d81ebf67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d47b26-82fa-4116-a24a-1b5c2ee127a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab68bfde-e4d3-4880-9f40-6c86ed542ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f961917b-4fe3-48e4-9fb9-7d4ec2b143c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea0aa02-4d8c-4743-be33-ceea2a9a26f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6dd0d1-50e9-42e2-b3bd-abd8fe762d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025f7c27-5afd-4ad2-91ba-1121f873d8f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6f003a-5966-4430-8036-ccecaf335cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16583eb9-6f4b-4df8-a96d-d2ad84c1c6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837d9d9c-532c-46e8-9738-9afc2f4183fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.81']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf1ad26-1055-4a52-98db-a0c911e72d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e975f4-c9f7-4665-904a-3c0d84e404c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6235a1-cbe6-4105-94b4-065b16d00a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b1c48d-e700-428e-a8dd-a1c950fab752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77d1caa-703e-4fbd-bb59-d8ecabb58d07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.233.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf86ac68-2872-442c-b186-cb458d343375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b1a8df-905f-4ee6-88b0-b59d1b6bbedf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900a5ff1-b9d9-4273-9d40-2fa18b04887d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa6b5c8-29cb-47d8-91f9-a9cf86309927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.246.128.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e32bb0-6454-4d32-8769-e54f1bb80e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b14d7fc-6ec6-4d4e-a7e8-7d0250c80d56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.191']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe8679a-c90c-404b-83d3-50adb0c84d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343756e7-09c5-4ae9-af97-68d3df1ca30e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ac060a-8917-4578-8911-12fb72e4bae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b723f40-155b-4a08-9ac1-8ad1cd9068fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.248.85.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e72d8cd-ce52-45f5-a8c6-060b638ea00a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.251.38.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f65ed0c9-ff8e-425b-a06e-50e20419144b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.252.234.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1a4d8a-959f-4414-9430-d4c9a3ebcdcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.254.97.154']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0f32b7-5e77-44f2-be27-497a8e46e6f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.28.37.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced85fb4-8df7-4729-948a-6f43e24b0521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.44.62.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2064b0-de51-4beb-8b92-ebe9fb81200b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.65.107.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099034a0-6759-4536-b6c7-a9f3dcfd23a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.91.69.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97642685-b4c8-4beb-bb41-9db3b18690dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.69.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ace894-5044-417e-b8ed-783e8e7b759f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.154']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b893ad-2d43-433b-b1ce-4f78f41d7313", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.167']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d890cca-b30f-4d30-8fe4-e458c8230aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf3b739-9590-499c-baa8-49037a073d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41fc967-427b-420c-8fc7-540c652eed2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.121.246.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44cc428-ab47-4a55-9e20-03abf980d010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.167.66.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f07405-5686-4ebc-aa69-88eb2d087a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.182.175.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3e4a7c-dcc1-4cf4-8219-37bb76d3a2bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.194.174.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e47e75-fc8e-4df4-b4d5-f379b3275bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.204.20.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--706991f9-d36b-404b-b191-ec2583aff243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.244.227.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c9a05d-ee33-466c-ad45-f167fde14d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.56.59.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9dc0fd-7410-4285-9236-2ed2708cd59a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.96.68.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ee015d-35d5-46c6-ae6e-0c0723c773b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.108.1.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7dc809-f4e0-43a0-97aa-d266a4763417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.110.176.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7373ff9-caf0-49c3-9d61-7f919afd194a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e1389e-b296-4502-914a-9c8a13075dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.137.187.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a22ab4d3-b5bd-4b25-a732-3e4c742e2fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.154.100.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa9451d-400a-4008-bc02-ddda50d9ca35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.17.224.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81debe4-c5d2-4e80-a9b0-cab06d6888e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.17.228.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27458950-c4f3-427a-90dc-94b01bb00385", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.174.238.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e9d06d5-079e-48cd-ab67-3df0431a7a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.189.114.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a56975-6462-45dd-b4f8-606d816e197a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.216.224.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb62a1e1-e54d-472d-ad71-eae2736f9dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.126.89.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5617c0d6-377b-45b2-8105-1e328fcc7ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.126.89.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82568d73-f364-4a45-801a-9778dd77ab32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.126.89.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9908474c-5d66-417c-8ea5-d786fc8e0192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.135.61.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb550297-44ea-431e-900e-e509ce84220b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.137.237.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0266092a-5cbb-4f6c-bb9d-40527654f4c5", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.165.138.145']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4c9d4f-fa6a-4575-9343-dcaac76522b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.191.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c0d81e-adfe-4fec-9ad7-5bf40aba840a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.21.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e894c3e9-e0b7-434b-869a-b4611a8fa879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.71.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd341736-e282-4491-a242-88ef08ed221c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c146a02-1b77-4a74-b94c-f905546bbe0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.247.213.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7e629f-da32-4de8-9684-f23305f14c87", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.254.48.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2739f9-2e7a-4863-9c9c-68b993729966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a070079-3897-43b6-8a7b-5246e631573a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a6b7c0-ddd8-453a-9257-94bd958c1f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b60572-f06e-4c6c-8ee7-640da406198d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e4730e-f170-4aa5-b825-0576bc4258db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.59.101.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efca97cb-2d5e-4c57-b9bb-9922ffa2a53b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.71.197.160']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8240fa3-8c55-4b43-a2c6-eab4f6351454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.101.241.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10606c0-9dfd-4295-8ec0-2ff1efebb245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.150.12.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f690e3-0db5-41cd-bc70-fb7adc5bae59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.189.73.171']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1a949b-2208-437c-8f58-3a3de258cc99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.224.25.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b970b969-2cf7-41ef-8fec-ff020e970c1c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.233.153.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e09eb69-a22f-40dd-a850-abcfcc8660d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.244.39.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71bd96ac-1597-462f-a6e9-175d707e3f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.248.175.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2966710a-b132-4bcb-b76c-97b8b322d568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.51.168.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5100202-ec78-4a64-a1a2-bc9da1a7ae81", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.69.132.216']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ed1913-4127-4258-b800-4cf96666fe38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.119.187.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10baa3e0-6c85-4622-8969-41fe664daf18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.148.112.242']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036ca276-3786-491f-8f51-2003b77194ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.153.21.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3bb8d95-81d9-4f2a-aee2-40850144bc30", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.223.60.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a261af3-2592-46b6-9fa9-925fc9a79f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.60.216.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ae72c0-8c53-4ef6-ab00-9f801ec8f225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.64.151.186']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da921ee-1512-4430-89cb-61fa61703f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.81.117.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18897947-0c91-4852-936f-82baf28d56ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af978d5-c1ce-4c90-97c9-f3d8bc96254a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0756fd9-ff1d-43ef-8bed-731bc949c6e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27689a0-63d4-4429-ad4d-469c09c8dcc0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b42e22-b359-4bd6-a60c-7681692515ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c27c4c68-da1a-427e-9e21-8a0573f3e54d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.53.115.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302a32a4-121e-4aad-9ce3-7220722f73dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.54.7.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df90c371-21ab-4541-b2f3-d157938886cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.96.110.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb3bf67-7327-464f-9f78-126245acd1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.96.110.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc596d2-37b2-4b60-9ca7-1a635ebc1e42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f61ae33-c03a-462c-878d-2daf42076383", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1b142a-0924-4122-9f4f-ed589d612887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.142.24.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8ea060-f761-491f-a3b7-01046d7c5be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.142.28.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a96bd8-82ce-48ae-ab03-23e45a6e5568", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.144.148.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ebf2e4-58d4-44f4-afb4-73518181a9fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c626b882-78b2-4aa4-8b74-5549509367dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c7db174-b89e-48ba-8971-bcf755db8eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b16f2c6d-0f9f-4e19-8472-7e59dee9a8b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.159.99.144']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc24da9-2d87-464d-b682-6a7867f78484", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.180.166']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0d0606-3f68-45a5-a896-43f88ea760cc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.196.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81aca2e-dc2d-468e-aecd-7d5ad8622ece", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.197.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c2e88f-5977-4f38-9316-0a2be9907236", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.202.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d31af189-884e-4451-8bf6-9fd21f78e149", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.244.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aae1f09-86df-4580-8e65-da636c9d90d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.178.6.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f815117-8aa2-45cb-89e2-eaed91b662df", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.178.6.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce63e5d-1f7f-498e-996d-05c8e3958ea4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.178.6.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd82b0e-2e8f-41c4-a43e-5ab6132f43a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.194.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f60d85-a1b6-460b-b84e-5bd810273a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.227.210.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2418ba-0121-42aa-8c5c-0a2bd00ed08d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.248.150.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f69673-cb00-4593-b473-b14d317ca8ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.250.227.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbf9197-b3fa-4cdd-aaab-e4ec2fb9ca04", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:openclawglobal", "protocol:openclaw", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea9dd47-838b-4149-a48f-577dbb2e0682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139feb6f-667a-4bd0-a007-bfd643dd50dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a4292f-48fd-4c69-a288-12bbd40af5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.127.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3754b7f5-af51-43a6-9a2c-8a03806c3268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.150.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f84ba03-9d30-45df-9920-b6a670343bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.16.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac29cda-02cb-40f6-abcf-189219b5ebd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.199.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5c7393-aac5-4c95-be87-ed13b485a26f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.206.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb0eab9-b0db-4f74-9e14-4eb34eb3b7aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.95.10.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b800ccc1-a1fd-408d-9d23-28463349b1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.110.157.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb9ee64-0062-4174-bcb8-93a3ed86c3df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18a0600-d021-4e20-8af0-ef7aff03437f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24dfd1e-b748-4a1f-b272-3b7b6de59864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.234']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb35656-a152-4854-81c5-ac40c746bd36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de8c6ee-23d3-432f-8338-7a40f7c30d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.236']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b0979b-65da-4d45-a32a-14a80244718b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce99a660-015d-4391-bb83-827bdeeeb68c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.238']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b532510-7a9e-4701-bccd-2124f6e01e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4ead90-690e-433b-9ff4-37ac76a0b881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9644d21a-a997-41ec-8b79-d7b7b59b75d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7749d232-3c56-4431-a495-1d93c8f061b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9049d1-752c-4430-a1f1-b10613c18fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d48943-97a1-4708-b206-217796312ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97455a90-f730-4a83-8278-e6c16a7b1156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3004f62b-f9ba-4115-93db-d7232c55c52e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b03504e-aa5e-45b0-8b13-aae2b44a64b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.251']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219025ef-4606-49cd-b18d-b7232ce8ea23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f88a7e02-870b-4a54-8a4c-a15de63daf6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f85b15-3625-42b7-8a0e-d49b7ee33c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9409ebda-fd4a-44d5-8f8c-5dc4eae929cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.141.64.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc843a0-59ba-4c51-a8d3-815a4a012e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.142.147.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9117b7ea-5b55-4843-a547-791eaa9e7cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.142.147.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8344a2c7-ea8e-46bc-8ce5-d464892398f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.142.147.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bfb3a6d-d75e-47d1-a93f-c8a1bfbe4974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.142.43.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfaf2de-99be-4cdf-b517-e17a424e1268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.143.1.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b77d1795-22a9-46b8-8eac-d8f35a2b8fed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e1ce9c-af8f-4250-9d9f-143e92ff012d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ec3b74-a7c3-4f1d-96ae-6ef03476538f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec514f9-5ab8-4b1b-8b21-eff67dccc0f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08b85f1-b79c-4563-aaba-7fce20819421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2294f6a-e3e4-42ce-8b92-f5ba42aaa447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10c221a-a0b1-4d06-a5ff-b380d996857b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1aa4f7-b123-4d80-b72b-433195832d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a729572-9c18-4eda-88b4-b94ca55ad56a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a556daa-45a8-4e7f-9238-cf6d58d3990a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9455528c-64ee-41e5-9cc5-f23de289c915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.183']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad30cb7-53af-4e59-a5fd-8d59ea77eff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379fea22-b891-4a50-8eaa-0bbebf94b446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766d8295-044d-42c9-bd81-b0cd78a98231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.186']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9a06e7-b241-4893-b338-7b25556bac66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24191e1-ead5-460e-846d-126f1bb29c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb87ba3d-f7bf-4fd6-8279-d200faaa4b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24227a9e-af3e-4b19-af97-1573d38547d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4679954b-d08c-4b0c-9953-54d838e5ac74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7abb2ad6-8636-413e-aabe-a6c1c16083ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.191']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1bf4c8-1e93-4ca1-b523-2188505195d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.192']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a670b9b6-ca7d-42cb-89c3-309242b9a19d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7e0b69-ddb6-4ac4-b3bd-bfc159ca04df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6caafb5f-6ea9-4337-a7eb-b602411fc333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.195']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae8f874-bda2-4f56-a55e-94b113a10053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee229572-2dab-4ed2-9581-e30acf66d5a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904f5026-2a3c-468c-b474-ed4ed42499de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43254f88-3880-474e-99ce-9673cbc6e1ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41c4a12-eb07-47e3-9ef4-a23dac31f55e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a7b33e-066b-42bf-b0cc-5f42ab847f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9069c984-d7c6-45a5-9ed6-ab127a9afad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca07f9a-8343-437b-b1bd-11885f18c3a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f235f9e-3aea-4d13-ad23-636eb021b22a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a353051-96a7-47f6-a0c3-a7c0118ebfac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7987c14-1df9-473a-8ead-2c43f92ad477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f5bcc6-91fd-47c1-a23f-939a7458889d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4796e808-87e1-4e09-a847-1f4c02fa80ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996111b6-1e69-49ba-a4f8-00e57dcfee87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03514e97-3c36-43cd-a798-f506c40a2dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e50847-c39f-44df-bcf4-ec1c3c297ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e478e1-7b1b-463f-a713-f41a182cfb11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0f366a-34af-4f65-a6b2-ace108bbe533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f5f364-bcc8-48e6-bc1b-05a1a96b7626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d83ddc66-b96f-4b43-8d61-13008cec9cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ccb40d1-274e-4227-980b-93b034cfcf57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4563c4-d266-4e56-b7d1-2cdbb99a70bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.216']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173b9989-0898-46d3-8882-bd92af8162b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d78d30b-ffcc-4a41-8385-a86ae8ee6ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149422a5-dbf4-4d1b-b614-2ca3dd115ac5", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dcd50eb-f710-41b2-bacc-d65c2a202a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83df1bcd-8e13-415c-a096-02f4dbe2d34a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5b8729-c70b-4f87-9477-119d81b61cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5157085-3dbd-4cca-9990-c63b39d5d9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482c0965-6ec7-4266-a453-146cd7b4f515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9eaba1-e5ec-489f-8906-ac28f09d2e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb3cc3e-7858-4e8d-a60d-d922506f0b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce252d41-3d7a-4de6-8810-71596b4a88a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e48e196-0643-4db6-9681-6448e9b0293d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07fd50e-26c3-4c2c-a6cb-5f16baba9106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4ee66b-5f53-4db7-a0e3-79c01e6a124f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728a3129-7b68-4300-8f44-0a372fb98e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ae4e9e-c1ae-4988-a3ff-810212012710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f84566c-1b89-4da8-8569-5cd1fdb227fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519405f0-249f-4116-aa63-7a752ce1f631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf42319f-f27b-4223-a6df-7214ef1e75ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b40966e-6764-4eae-82df-2f3b7a463785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d0bb4b-327d-4485-ba5f-8db21f139507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd3f863-a217-4459-a402-49a90e6e7443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ebb910-4297-4805-966c-053f74d5cf6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a4f746-bdbb-416f-9ee0-8ff55aa20f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c809d86c-752e-4eda-853b-8d14859263c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca45761-2204-4948-9ffa-7eccc0b6764f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3caa4f0a-1461-4267-aaca-9395c45db00c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.17.95.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b9d6ce-1714-41fc-b169-26635a60271a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.174.89.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8bfe6a5-8ec1-4936-8844-04ae9b1cf0cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1851adbc-ce19-4d31-a5b3-ea657c3206f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a61a715-9600-4bb4-9c44-6b15b4dcdae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d84c620-ed05-47f4-968a-49af3b430595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0a712f-86f7-42bd-85a1-4204faf35310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8e9fd0-0689-4efa-b849-e660db440f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da324cd6-f207-43e6-8dfb-d441b69e61f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.181.214.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3474d625-8aec-4b29-be0d-33c02c723fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.22.147.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04df8ed4-fa87-4222-a54e-78f6e2541411", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.233.74.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65daada1-ec2b-4087-8f69-16067a28c44b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.123.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a27cad50-f795-4aff-b443-8f4229188035", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcce6523-e351-4560-98ea-d15181e2d063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6547c564-a69d-4793-b6f6-3b101cd667a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.217.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7c5c04-84db-4560-b0a5-866470dbedb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4170e5ca-5c68-4e60-a672-7315dc3432d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc17449b-2570-4ee2-ab15-9a81b03d4152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2438d0f7-3abf-4c21-acf9-360704419d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b68bf7b3-6506-4678-b4ac-385ea055244a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b9c2f6-a8c4-45de-8d46-3ff548408088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063edfa7-7c12-4b73-b835-414ebf2585db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf23575-b4d0-43ad-bf6a-0426cad6b67e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1dec80c-93b5-4c79-b567-d5e4f162ece8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f6137f-69ef-442b-8690-de6829949a87", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6714221e-c113-497f-920e-80c5e1e34d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae51e05-c085-4502-935d-50d6141e8810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.238']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3bfe5a-c83d-4a62-badc-b9d687377f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.37.69.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c52dfa6-98d1-4f9f-8ac0-f114b9b38884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.37.70.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029b3c43-8c5f-4ee2-929e-b6462a21b202", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53bc2f0-48aa-42df-9005-20a582afdd74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.70.122.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3044c2c8-c90f-4575-b5c9-69475110d7a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.8.75.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c0904e8-7f2f-40b0-9d98-3d0666e42454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.233.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d0a437-2287-4d0e-9bf6-afb03586ae36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d35775e-2964-4234-9aa5-4017a024c141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e057a01-098b-4868-8a92-7f91cdf9f431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b71d94a-f474-4859-8def-596f4b7506fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f009ca0-c94e-4003-b29f-ca772f7806b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f4298c-8a52-4e98-b088-c9969f9ab088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc40e55-5b98-4c34-916d-a6c2791695cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb597b5-8a3d-43da-be34-d7e9d93fdc6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f49317-237a-468b-b0db-6ef9f3bc52d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d749989-e713-49e8-97dc-5d8b88a91985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fda6d3a-933f-4774-863d-21903c5ae462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.120.230.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2fae1b-16db-4fe9-aaa0-26afe21a998f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.15.52.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75609812-8c8c-40eb-bf2e-2fa7af81be51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93403cd8-c2ea-45cf-85b0-fa475ad880f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67bb1939-ff9e-4919-89d8-a49eb4db5de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567864d0-9cab-4b44-98a2-13909c6b39d2", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.96.171']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0d195f-231e-46b9-8ce3-9a2221538bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db131e9-af88-4934-bfe3-c96da23fe7fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363a7e83-07fe-4a66-9cc6-e1e7032dcf5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21c7f87-5121-4eb7-8141-b43443f813c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.164']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07fae094-ec5f-43af-bc0e-49d7542eb79b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.167']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--502d1767-3cea-4676-8a60-2abe3961d701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1686713d-3133-4939-a5c1-e4af02582bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67250fca-36ce-4ce9-bc8e-56be836607a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7881a665-1ef9-4f37-8067-a393f440475c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab88196-eeb1-4fa3-8194-afd63b9129cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4073ce-919a-4171-91ec-71dc7345ef2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3db3a2-a2ba-4123-9ab7-928860bcb70f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1e2364-0e2f-4fb8-ab89-a275920fc29b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a829f06-3f0c-483c-a216-f8dbb596db43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497dc103-11f1-4e27-9fd4-4c640843f359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d65f5a3-e5d7-42d4-a172-a43fb51def65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--660d52d8-72b6-4e1a-a13f-25dc384d6d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78553fcd-257c-4ef6-a77d-961b8b40c78c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1327cb53-b3ed-49f0-b3c0-447c1d08b0d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfdda88-c209-4e15-b6be-d20d2342fed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb2b48b-b0c9-4c7d-8e74-81516bf918c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ad1204-6da8-4143-b69d-dae06f55a819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0549ed-f587-4960-a5a3-1c84caf51c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f934f83-3daa-476d-af4b-0566f3b4961c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18884ee8-875e-450f-97cc-c5481058cb22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75397973-b63b-48ec-bf52-c4e682fb79de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1919ef8a-5ba1-4602-8cc2-5c997cbab9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a1e0d2-4dc1-4a87-a7cf-88a6cb507b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7be670c-b5c9-40be-bab2-1e99db62cb8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72f22f7-04fc-4ddc-bfc7-98f9a18f6eb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c01b132-320a-4875-bafe-08b0fe9ad01c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ee3a97-9185-49c3-8575-af01cb11dfcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88e8111-a525-4df0-9b01-d888a42371a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee45e9a7-e31b-4532-8822-03093f93cacb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a2e3a8b-e75a-40a0-aa05-cbc85f03748f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf335f88-e796-43c7-a46b-fc17a5c83916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc05da7-6efb-4450-9b1f-876c196501e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fd05fd-8d80-448d-90b2-4dceced1dc69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ba70d9-7e1e-4ab8-8e61-0d9a9e9a6518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4ce747-2489-4e42-a877-3a032ff8df91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c66dc63-c23b-4af8-a7d5-82b4ec2fa410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a5bfec-a93c-41a0-a2e2-19b7c16ce930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd08db6-082f-4618-ab31-f8b44ee97fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57f5181-8feb-48b0-b6f9-a94e288e22c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0abd17-5f61-42d9-adac-da2f1d16b141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c3b661-d5e5-4f95-891c-7895686a17d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917dbdc1-1f8e-4742-bea1-bc2709750f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09cf88a-b46e-460f-8d2a-8461199a74f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ec73c7-c3fa-4c77-8aaa-e090de4affcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.234']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30598c9b-aca0-40aa-a63a-20e9ab766799", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.36.147.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0250f2-d739-4ff3-8939-78828c74bfd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.42.205.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0f0b84-cef3-4c5a-9a82-15ed886da2af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.48.251.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--734bc955-f804-45a8-9978-9f47092c28d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.16.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d424d941-44a4-4f65-8049-24b91a063e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd6b8c5-a7be-4d5c-946d-784ac3c638ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0455b90c-a4e5-42ed-851d-928c6e1c351b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.59.206.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc6b7d5-c6d9-494b-8c17-462df29aec46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c930f687-c630-4f40-8187-df2a4ef15823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94979a16-5a5b-4469-a1c5-0d80cbd07173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48547e2a-c4a3-4142-9127-4f75016dd940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb63d8a0-e7e4-4b87-9653-f33b276ed4a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b57422-8384-449d-a8fd-35de6910ceea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8ee5c1-fcb1-4fa6-b294-1f0d3fb559b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--880c789d-b3d1-4cb6-8015-cb13b46317a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2639b93-2f23-459b-9eee-8ee987f56485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a8dd441-9f4c-4d58-9751-3cdd6b2c24eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c87c4f-27a0-4435-a0b6-c0dbd789bb70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147aade9-231d-47c8-bfa9-f36c94b7e827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2179c8b9-777f-43ff-ac9b-436c5c97c8dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3458f4-d36a-4cd8-a8e6-3b1b0fd3ccc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32390244-d613-4a10-8355-d4fa3a34ae2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e863853-8f41-4191-9b9c-2bd7ddaa259e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9d9961-c00c-43c9-b38f-1ca9d28ecd2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.154.247.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686ee155-4e9e-41e8-9313-16ae88f8e97e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.154.59.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349a4064-3bad-4810-948d-267bb2a56d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.158.16.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a37838-96f7-41e2-9c4c-d27ccaacba13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.160.220.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4921e4ed-201a-4f76-b24c-e0d20169dcf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.175.83.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a749dc-9aca-4eb3-8047-ec9f0d2c1adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cfaf40a-8698-4772-956b-bf6f007c67a8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5336c19f-5ab0-42fe-8308-cd2458b5f654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--178c7b87-0ea5-4d53-ba5e-897180b77807", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0835d86-5850-4029-8cbf-7cde1e0e11e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd75643b-d445-4664-ad54-cacae7436c50", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca23abd-b772-4e39-94bb-3d0b71dc3eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b1e714-9560-4b52-a6e1-70551aa2d962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bde730c-fbee-4f4e-a3cf-60f8934d1de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57aa4e5c-9da0-401a-93dc-be2359c611a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7a8020-96af-4c8c-ae1b-ab37e3322bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6b51f9-f807-49b9-a20a-5aaf835bb660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911397a0-9918-4d29-845c-8f3334bb0253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe65266a-2cc7-4d13-a1c0-176b29e31e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a52ec1-d1f8-4714-92e4-e85b0e789fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--833c02d1-3bdd-48bc-b78a-42e30bb0e4d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014c0ff8-1ae1-4277-9976-855f038a51af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a2d1e7-d96d-44f6-b210-65175f87f61f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee89c68a-c419-4124-be05-e046fd22f973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c226cb59-b248-4454-ad08-da2f7ce628ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb8145a-311c-4106-8de9-78a14913d243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07647f0a-c1b2-4614-9fd4-d699756a352f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afae7484-3404-40e4-a5e5-021ac76ddc6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2497cc50-464c-48ab-9c32-187fbbf43b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c96e5d-9fc7-4848-aaed-7246b5f3bc37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--324d6448-9091-4939-b67a-dc7b38431d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68365db-7a25-4149-b3cb-4baa058a3a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a43034-9535-42bf-a0c9-a2db7309b872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee744ef-f807-4c98-b59b-37eac9ef8588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b47fe68-356e-4f68-ae19-36ab92498c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c07e2e-99b0-41f0-bc5b-30f7a4007da4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9adb87-d89b-4e28-921b-d1ec7ac2e9fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.167']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99020d64-58b3-44fe-9901-8bdff763cd8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b8bd93-8567-4899-a175-3aa8d4459aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db510712-7e07-44c2-88bb-6cb38d8d3db5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.171']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89b5e8a-2fd4-494d-80c8-20e3cc4b7d45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8d09f0-8cc3-4246-b58d-71f8a81da4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a2b4c8-6445-43ad-935e-23a9d9e4e653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cafda810-8c45-46c7-b652-063851115a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a751d58-14d1-4757-a7a9-4f894dfff578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15624873-0b99-4840-8b87-e8a243cccfad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.183']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91a8cc1-7da5-428b-bb6e-a11789dc26a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d252602-af22-4a15-b4e6-adabf02f5da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.186']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc25aa0-4079-444b-9704-917c7c0182f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448064d2-cd29-4b2a-ba8a-82cc08ae800f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8d2d80-f196-4877-a2a5-9741ecbd2c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce2dfee-7dc3-4988-85ed-b0fca11ab49b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29484576-2ac6-40ba-b687-dee3e6ba8eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d16141-ca13-458b-9380-5da657fac40f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1a6b8c-eb57-47a1-9f26-c8cec4166352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf183a6-c34f-4f96-b0b6-281daedaaaf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f827df-2e03-4e77-ade1-3d4272f0e243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce127899-4976-4554-b125-ad8938278f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0b3304-02b4-41b4-aece-11ab6e32a0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e377e1ad-71bb-4f07-9706-59236f3111f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64719f9-4417-4c28-b789-addf05973bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588ecbfc-ee6a-4358-bd6f-95c084b43a94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d1942b-ecf9-41e9-bb50-4d5174294ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--483792b2-8280-44a2-970c-3a051510b978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef75364d-7936-478b-a5e9-a928678bd1fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a447ca1b-4bdc-4c80-9942-569e2197bbda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.234']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f4a347-6d6f-4f84-86e2-218f7e5f6c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ae4470-6997-451d-9e57-5aa790b3ef0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f22667-5838-4654-a8d5-17b757475b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9146ad68-cbdc-4c3f-81b7-e3f706471995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce758b3-a59b-427f-a865-9f0f8f6f2c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3e29e0-4050-43ec-99ba-145121880218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3968f337-acb8-4e78-8839-81168c0d0a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95ce08c-b907-4b36-96a1-3d1e3ba1f812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35dd24a0-4729-48fd-a695-254a66ed4b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb62815-aa43-42a9-953e-6749a8b85ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2819de-6568-4505-8fe3-07dea17fd02a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d2fa629-b1e6-4d86-a61a-a404ca305773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d15584f-8aad-4214-bd97-5524988bf950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c15543c-59e9-4aa8-83ad-515fdc40bf5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097011b2-05ba-4d7e-bfc9-1d0e5ecab203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c296d0b-ac88-4c61-bc16-6697cd01dadc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964ef53f-ada5-47d4-9c96-96d949a426f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336cac12-3961-4b07-9f56-e32dfa192512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192f2720-4525-432b-826a-422befc7b2e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--892eeb05-3574-4abb-909b-b6e76826e311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1fc96c5-dd33-4fda-bc06-69c26604793e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f8051c-336c-4805-aee0-8f639202a2be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319d77ef-7ddd-4286-9988-f3d6576312df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c160d0ff-3d8c-44c4-92f3-bc663329931e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f82b7f96-621f-47ad-a4d8-773468eaa13d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.201.111.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c7ff24-7373-41be-9410-f01ec708f04c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cfcdd21-e1a9-41b0-8037-2068e9c2d73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b5f988-5eb4-4aa5-a8fe-78d9d2df0607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87698af-4f9d-49cc-b94b-e7a544fb1870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f58b4c-3102-47c2-8479-4621b9e4e424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca4175e-b360-4800-bfcc-7836a703ed03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3be8cd6-36f8-4035-8097-0c2783a6c365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d627d9b-8874-416f-918b-a1419681f1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09dae51a-c512-4eb3-bdb9-f89de278f2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.81.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6fe7ace-2333-413a-9278-2f9f663d73b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.37.190.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d97c29a-13ee-4905-87c1-e554a32cbc52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dcd01cc-5294-4a1a-9035-bdd8b99b9678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c4a260-f898-4c3d-98cf-4e53e31e954e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.188.243.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69dd498f-6245-48c0-a6c9-dcc17c5252a5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.188.93.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ede6a64-0f67-4b26-89d5-2e7718973910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.204.71.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56987e3-7009-4347-9371-12cca73a96fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.217.240.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5dd196-1428-4e9e-a82a-77b91b7d0665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.221.71.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aaebdd9-20a9-437e-8488-aa39e6a94823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.74.126.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7151b7ab-dfa3-4b60-86dc-3cec1a605461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.74.181.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f8851f-55df-4225-822e-045422b2edbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.155.134.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b8024f-5031-4713-adf8-4dd5d83073c5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.221.232.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7953744-6e7c-45d3-9a05-9eec80d989fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.235.12.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7db995-5be2-4502-88ed-1cafe5042b1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.31.52.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ab1f52-1658-4464-84a0-b5982847cb72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.44.155.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9332f11-3396-4f89-b01c-f60f8a7dc57d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.178.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa3c239-795a-47c9-bc63-7413deaa6aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.179.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b544442-3c15-4fcf-8a7a-6e40c3760bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.179.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e78e48-6480-4c8a-ac07-0777358a39d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.180.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1d261f-517b-473e-a42c-4ccb336ce021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.180.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6018078-8a68-4982-861b-5001be02c6c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.157.13.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4b230f-e554-4318-b766-8181a79a4fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.157.13.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b3fbbc-89cd-4534-840a-ee19d8dead8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.106.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adbf2677-7545-43a8-9f69-9c7c920853c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.94.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64fc1ce-9b7d-4e3c-b33a-cbd40e18db46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30beac12-d656-4ae4-9aa4-bef1aac6562b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce70ffa9-cda5-4f8b-b667-50194d39a284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa5a18d2-95e0-4fc5-9435-6c63f81045a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c029dd-fa0c-49bd-8641-4a163000b27c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d00a26-62b9-47e1-91e5-e1f1fd878025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78934d0-9a4c-49de-ba62-70766be04636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3869634e-1c08-40b5-9252-48db5b8cb9d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d25bc3-6bdb-48dd-ab66-c8c135e2e053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d57b0f-c1fd-47ea-870f-85a1bca713b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09330e6-cf1a-4cf5-9ddb-1a269b11c2fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4575ba85-dad9-4244-8d12-98d21b1bbf8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9833691e-822c-4ff4-a961-6664d84f9679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf4f3dd-71ee-4330-966d-0568edb38534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797f1e1a-7c56-42f8-ad48-d0acb1ff13ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b57e22-3b17-4c34-beb3-af5e7cc795b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60525bfd-ce0b-462f-a821-a2bfd874b39d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57dac9b2-94f2-491a-909e-2137d2aba2dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f1af20-6c1f-4ddc-a347-01c710688d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2dec10-ed90-483c-b3e6-6af13ab0d829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1f2bb8-5ee9-4d26-8989-d8ce99cf6c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df20a69-dbf2-45ba-b7ff-3c1554de6f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea7e322-511d-4856-98c1-871931c0e580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d497a0c2-8afd-40e0-a044-6cdd95b62a76", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3dc6049-7d9d-49a6-ad50-68e747025bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac40fc4-12f8-42d9-8e6e-ccb6541bdc24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4e7e95-1e36-4f03-a2e5-febd2cf3a122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e9a25b-62d2-4c47-9405-4a15f1ab77ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfcf592d-3947-4fb9-9ee7-e05c2d29180d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108f358d-0064-4c12-b49a-1945cc144138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5eb8958-a264-46e1-8cb6-90db96dd81d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b345068-feda-4f00-be71-61b8a942130d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee4b3c4-c7a6-4575-af2f-27c71f8dbdb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f1e31b-524b-4d01-a488-bb2d96ca924b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5e44c1-2ddd-4445-8a27-a3a557d4f319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe1ce5a-416a-4217-b5ff-d88c743d23c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5324215-c2e5-4262-93fb-cf61bca70b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcbe8c2f-c632-4ba6-8c36-fbf8ace807f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2c578f-d467-4415-85c5-b35a73f1f654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e0aabc-dec4-4045-b92c-e248abd9479d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d34658d6-5054-4509-8595-ab9c06893f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.154']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1079762-73af-4d00-9172-60403449afe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2220059-250a-4480-8b79-5e7db40085c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16807d5e-20f6-4d12-a3fc-ed23822281b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa16a06f-c133-4d82-9268-74d0617daf7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb10b0b-81fa-42a4-9912-d102e6dc7529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.164']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e5d3104-8dae-4c3f-a376-87973ad517f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b319cb-617d-46d2-af73-972dc5795280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.166']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c239d673-d85f-4866-8121-696d46aaaf8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.167']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a90213-58c4-4b6a-9c32-904d09d01466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f199ad-2c06-4b59-8d59-3a9435d91a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34035065-c60a-4499-a7d7-81e6c3cd94d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.171']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02ac370-ff02-405e-afd9-bde955a84f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ef11c5-d58d-4efb-8a7a-ad8cf9956a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4e20a3-6fde-4ec8-9d05-e3bef9625388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afdc9584-24bf-45f4-ba87-05dd5851b7af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e832e9c-e2dc-4b92-a10e-8a3528d6cf6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a1aaa8f-1882-4d69-b2b2-c797d051996d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75db3ed9-1eaa-4229-97a2-b8dcbef8ac46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.178']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054ad3ab-bd9e-4baf-984f-4f1ac3616656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041006ab-2631-41ce-80a8-09feb483618b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--348f8484-a8cd-4a08-940d-457beb928cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb4d3d0-901e-4602-96e9-fcc53b45fc42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.183']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a5eb00-8319-464f-b657-8ee3027c0c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017e7262-0544-44d8-bac3-0d7cb5efd50e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.186']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a64c43e-fb60-4775-b4cd-50bbb057811e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6ac023-c421-45b8-8c39-808ce59cc91f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.192']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d113ad-0b97-4458-9918-4b710943994d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179c75a6-5f0d-48be-80e5-1d711487958c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122f0cf5-e5f4-498a-95a4-d3f2293a4dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.195']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc9b4eb-071c-495a-93d3-e55b68f1e7f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba1a6d4-6861-43c3-a3c2-2488dff14d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.197']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7fe0ba9-e7dd-4103-b734-7597ebc981bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e35545-ddf1-4284-91e2-c163ef305723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98be80ad-70b4-4dd4-b7d8-e2d42efe3a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7783f00a-d31d-46f8-be97-447dfa9bc116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2fac07-1bb5-4b3e-960d-19e912204a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c66f143d-613e-4ab3-87fb-6851fd097bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044bae85-3966-485f-813e-590420ded872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93ca333-c557-475f-a9e3-4689cee96a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc6e2b9-8baf-4869-8c67-d82d42483bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--138429cd-4dc0-44ef-bba3-6fbe4e210b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c40fbb-2558-45a9-9b2b-22ed767c9f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e38117ae-a6b4-40b6-b348-3df06129a2c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e67ac70-2a59-43ae-91c3-79972fe2fe6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f8bccc-dd24-4712-9516-8cbf392d3aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b735e5e1-256b-4c93-aebc-94cdddb701f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dcd77d4-c132-423d-b897-97c28c811f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--600b13c6-e2d7-4df9-8c70-4657428dc360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa55f810-cb72-4dae-a832-ddd2593f8f4a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f619f660-d73d-4ba9-af2a-a9b4362a679e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292c6d56-f3ec-4bc9-af50-2cd5d440ec2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e1d35b-7f3c-4249-82a7-e20d1cf199f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.222']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a42cb01-f549-45cb-a246-8ac12e915742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a1ec19-b659-4c6e-a15b-a180eff1474f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62fd31a-e0b1-42a9-8fd9-8705d7b52605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b95742-2c1b-4a4b-92d6-bb4f7e9fe659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.228']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0453eb71-fe21-46a6-875b-f2a9f75b9889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c0e9b4-68db-49c0-a883-3e47320f027c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e4a444-38af-4a96-8062-d069f8203d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f79650-1f6a-4ff2-8b8f-8abe7f2f52b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457dc56d-2fae-423b-9c09-4a5f84e3aa35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e9b5547-c6f2-4e7a-a6c4-2dd1c698423a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4122430-027f-48e6-adad-8fbf74281b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.236']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1911c3a3-fb5d-4a32-9848-6bda8b6123b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b9b744-990b-4713-82b7-b6c333a50f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.238']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd380552-5673-4850-bd0c-fb2dcfa2cff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36cac2e-afee-4eb7-8517-0607e64ada4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.240']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d487ed06-0d8f-41eb-8ca8-e49b77e2ccd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82964c0d-f46c-4ca3-b366-86e7f20250b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.242']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f25304d-61de-4169-883f-9b6b21c331c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232d9055-2698-4645-8300-207dacaae8a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--170c6f1c-f7d0-457f-a37d-87e0c4aed1a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd84fbb-a0fc-4c8b-b553-8a4b4e0ee272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1b07ae-5a20-4233-9923-460227da6138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.251']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb381812-5a75-459a-baf0-a5c2d52d2e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11c6a18-747c-425b-8f6c-503ce548de77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad82510-a54b-4490-930e-fb51a677efa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4742b00d-0072-4019-ad9d-944322aa030f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.255']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9284e5b5-e7bd-40e4-afbb-19cd159e4efe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c992709e-037f-4696-9421-2818571f4c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00c32c8-c018-4eb5-a2da-85f846ed26af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac47e9b-061b-4702-a635-27b1e7abec3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1acbcf-92f1-4a6a-a1bf-a3d396aa7623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af6f8e2-afdb-4b7f-94d3-b622b8f16f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eda0070-9374-4054-b8b9-16c1812869c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf225d7b-f82f-45f3-a1cf-0f43c620cb7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587f3580-fc1a-44d7-bbab-358fda95ffa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3cc8e6-66c0-45cb-afa4-51d219106662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fa52ab-f721-48f7-8fdc-3c189848e0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc4907d-f3af-4994-97cc-36604794ac34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc28a0b-b40e-4374-9f49-e5360c2f3563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6b2bbd-8a5e-49af-a76e-75c4524004f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede54836-7adf-4d08-af95-84d08202ef1f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f28fec5-b248-4d4f-9f4c-3f7b37403a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1afdae28-a3ed-4847-823a-9c7513e5bc76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2253692-4719-4a85-b841-3a39c33588d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be475d0d-983d-4673-a393-4ac0d520d553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2193a2b-fd0c-4417-a575-71614959c18e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771caa4a-5c62-432e-990e-da00c085c78a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99342c2-b9b3-43a6-b330-f0214843535c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.56']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3bf8360-89dc-43bd-ac1a-b97c0ec61035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.57']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9aadb9-ea4f-45f8-a131-9e8b9d04a822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260de078-d338-49e8-b6cf-3db7da5044e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed99ba8-c2dd-4657-95f8-5d108b6ddadc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54133856-1863-471d-87d9-993ebe56c4c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5ed07b-9bde-4d72-b965-9638b0ec998f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8560ac2-bbf5-4481-af0f-3e186a13915a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1f6076-c89e-4800-930d-b4ae809ab141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4854bf0d-77df-41eb-8f12-599e90f057ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1bb4ebb-52c2-46e0-b3b0-b0766c31fbe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aacdb228-bc3d-4b1b-9fc6-1762121a341e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d585ebc7-e35a-430a-845f-6f981174dcdc", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907dd570-6f61-454f-8f7d-6ecb39dcef94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b30b4b8d-0d4d-4baf-a73e-55f02a5d98f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95bc7532-6db5-4e37-bf6c-de91e013621a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6dad550-354f-461d-9107-4d5abdaafad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7ace06-8b63-4a06-8b0f-8230c20756e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4c88f0-a5f4-4aa1-af01-3ad5ad530f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddeaf9fc-a820-4fc7-af01-9837b248dc48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2d7541-2321-433d-ad9a-ffe413b67f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a4754e-2eec-4553-a37d-bf1392a91e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0961cb0a-1c2a-4c81-9aa6-61030488f682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a53005-ca7a-44ef-8e94-cdf0ef04fd28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02aab44-4c5e-4825-85f1-b77717c98a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc8f6de-8b16-4dee-9817-2ab86d269bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b185c1-4d12-4a6b-9915-9063b12dd137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840c9408-9ce4-47e7-b245-598d26c8bcdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26a4d08-70f8-422a-a636-89cf7182258a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38fe1734-b7e5-4722-afa7-6b02367316b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3080ec1e-17f5-4cd9-9cbd-a66c21764c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0f3e13-a3b8-4682-964f-1458a32141cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--468ec4a6-d97b-4d05-b877-fd02debef7fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb99a5b-ac2a-4f0d-82cf-963695e8bfed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4573b824-bb4a-4f9f-9464-ff17a33fd357", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f062cd-f37f-482a-99c5-da356c5563c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6332efab-a329-41ba-9f3f-4d02e18436ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b6acf0-c74c-4efb-b151-6cd96fb3f3cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.85.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c36c638-04db-4265-a998-1586a9db186f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.91.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5605902-e982-4f39-8f39-96f2913a207a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.134.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5173fb-c185-41c4-9535-2e31f4f14dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.50.197.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db629ac-d137-4467-ba6d-f69ec9dde18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.50.239.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a74d4a-dcfa-412b-8258-1c5a2594f4a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.179.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e6a2bc-19f9-4eb7-89fe-41fe81c52a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6f5eef-454e-40f8-9ebd-f80aa3ef9d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab8a9619-6a6a-47e0-8d3b-6899f7a288d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0867cd78-e6d0-4871-a3cc-cd77b0914c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966362ad-dfd0-4cd1-9e30-f7fb9f790fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5296bf-bc02-4db8-933f-f6b19a841596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50292f53-2149-4863-851a-93084d31fcd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddda8188-19ab-4752-9a03-3fe8c5b76489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae9af03-48c2-4816-bbec-f6d4271e80fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.216']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf3d4f0-010b-44c1-8b35-8c7088e79b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53dfaef5-953e-469b-a65e-d660bb2316ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e374a1b-20d6-49e7-a09f-849b2099d851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9dbb5e-2d16-4186-aa6c-5dae82e53b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6912ede8-19b0-4e91-a5ae-ea5ba454ddb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.62.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7891ceb7-dff5-48f9-b971-be1d9fa3debb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.60.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db13365-621e-48c1-9c00-18890b5efabb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.62.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048a5977-ee47-4720-97c1-2fd8c5aa9516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.63.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77656268-d09b-4d74-93b0-53f6daba0f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1050a905-c77c-49c3-a2c8-e613baab11e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3abb1c-f513-4428-be16-33ae32a30881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa3f092-37c1-485d-ad18-f6882a2660f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32cc5c6d-9c50-4ea2-910d-6c9af5be215c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d1c45e-fd05-4b2f-a561-28af4efe2556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--872f1ed5-d06a-4909-b4bd-a8f49807d940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75919d1f-5bf6-4dfa-b101-43f94ca5404c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd844c8-3a8b-499b-bcac-e82f23b3a133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031ec7f7-17fc-41e5-8839-15cf6390b254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d901331-73e0-4710-bf25-607fd6d73e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4fd214-3478-4b3e-883c-975b854b339c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26d1d73-da4a-4378-8c1f-b7d4fbaa5f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c9af12-f25d-4abc-aca6-ae0174b870d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f45212-a22e-4419-986a-a01ff5de695b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8933d53-4b62-48a0-927d-738acfba1acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922e8054-1e77-487a-b5ad-453a911c1f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43eed0fe-953c-46fe-aeac-c90c82525b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e36e19-89fb-462f-8f19-2518d4bb8386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7eae9f3-7e79-410b-a5b8-e6def2b132be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64e04cef-c279-4a90-a967-eb82864acda9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.152']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80855f10-0c67-4608-bdfc-b1f0f88e8562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.154']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd495b6e-988d-437c-b6d5-3c767ad651c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47324832-8bdb-4d25-9e5d-52bf90afa3a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670773e6-d6c4-419a-8cb9-e2d18d2c4982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2e18e3-d4c6-425f-b8b1-e922b7a95859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b2b218-ce88-430d-b85d-a583fb84bd06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40297c6-6f73-4a31-a67a-529fb9915ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a0026e3-0c4a-49d3-b2d1-4dbba1de2dd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19c6d3b-5c0c-49bc-be4b-da6073e31881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1627f088-204b-4d95-88aa-c8f07303faf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c314eb2a-9ee2-4d72-a0c8-73de12c75157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a39229-3d49-41bc-b26d-14f30dfecbff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72e79c7-f177-40ef-a9b6-276e5dad46fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2394fe6d-b8b0-4f2e-b571-142434cfc827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8feb84-314c-4298-8169-944cab2499de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2cb808d-8aa5-4b9e-8d64-ce759a65c5aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73751936-eb47-4ad8-8efd-28fa236800e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d953c0-1c1e-4322-a2d7-7903c8c463e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c697c6-3dd9-48e7-99f5-2788decc094e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9bfe307-9db4-4978-a4d2-c377edd6c1de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9e4291-5d86-461b-a2b5-1bced1b2ca91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cfc680a-0efe-4a45-bfea-647ce713d9c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96150c91-845e-4969-b91f-6c34b7477ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e862e3-d26a-4457-868f-0c1555115d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be36cda3-50c6-43cf-9200-a44c45e67231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e462b725-cbae-4fb7-8baf-01b8fcc58af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d15721-a8fd-4f4f-b605-24b9e59b4a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0411cb3-9c5d-4078-bda1-e8fb100030a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f99fcc1-81d0-4752-9b86-b26dd5347471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9992cfd7-c0a7-48e7-a1ac-2aa4950420b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7eca8a-407d-4a9e-ab4b-942cd431c2f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a6c4d9-baa9-4188-a40f-2b75efaef7a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bb3dda-0bf0-4005-b010-104e6363e64a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e92109-2884-4516-8150-9734411a5f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553b4124-ce48-47fe-bcef-dee3fef15489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f22536-259e-4085-bb3a-fad83f3eef87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515beb89-c4f5-4d9f-b8ca-e8f3726d6282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f70f28-3f00-4aed-9b95-d4e68fefbf08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c239e792-d6ff-4533-8b04-141205627bd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c3a8cc-51b8-4e6d-8e9c-f35c20978b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf1b113-5f17-46cd-8bec-8dbed8d530ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feeab002-292f-4a6e-b361-7817c9ed36ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb4adbf-e74d-4969-a3f3-a3a8c9002c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8bf4a12-925e-4ee4-85a0-df16ac6bca7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.160.166']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad92cb91-1057-47d6-b143-6bc73f8c4123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.223.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70762f5-ce8d-445d-ac18-f3c775b57f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.27.173.166']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66dfb2a8-f514-43f1-96de-835d87f29b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.27.173.167']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce997d8-6987-41bc-a788-3ed97d857669", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc0904f-005d-4347-bd0c-d0060548864d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916f41c5-5be8-4022-9bbe-7fb7e7c47ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--034f16f5-d14d-482f-8b1c-029f8a65cdef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.58.202.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7197edc3-7814-440f-81a7-f23f7048cf61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.63.211.145']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2db359f-730e-425b-bfee-b53c5adb0103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.87.19.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c46ac1-80c2-4840-a0b4-035363703368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.105.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ca6454-345e-4007-815d-d4edc3b14298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.108.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02115b48-96ff-434d-b923-fe0e0e2f17a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.116.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d41547eb-08f8-4ea3-b3ba-7558845db248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.117.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e346025-a786-4248-afce-58de880df0de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.40.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21dfec1-62b6-46e5-b0ce-f8fc6d86aa9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.91.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2d1624-2bd3-4082-8cf8-1d817d06adb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.92.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d31f0b-cd30-49e0-a7ef-8d021d3c677e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.168.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3968130-f8e1-4e52-9982-9095801fecde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.17.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6de514-da10-430b-829f-7c960ee8faf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.186.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9920b457-ce2e-4647-bc49-c49c6e381862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.195.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c746e9b-3ed0-46be-a219-f68af495dc05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.205.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f07276-7bd7-42ab-9031-40fe31798a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0afcb6de-2b85-46a8-a062-27ad68c20572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.33.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5de64c90-912a-4a87-a436-27f894aa143f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.48.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a386ab8-790d-4d15-b97d-9464dbc07082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.56.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b276915a-6b80-4a95-a947-00a69a082d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.56.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f955de16-7fe5-44bf-ac6f-f3e4ca2de8a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97957f84-8fdb-44f0-ac3c-017506ce2b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.112.233.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41ebbe7-cf73-4358-a74b-9310b8b964c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.228']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c6d048-451c-4535-8824-f90807009e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.201.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb73a8e-74bd-4650-b469-4ab545d48e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3452ca13-6ea0-40ba-9b15-ed3ce36d6cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e8eebc-03d3-4f1e-91d0-bf554d9294f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edcf453d-a3fa-4b65-a5ea-3b255bd85331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9228b22f-418e-4685-acfd-946013fc0753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc60750-67b8-4718-8595-b0d220e6cc08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d814ba-ce30-4849-b908-e0d54c9cd696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a649f3d6-9830-418d-b14a-858adeaa6f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.224.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a43c270-285c-4c94-b7f2-721f68e3b7a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.225.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eec6bf5-ed2c-4636-8a25-0a83b03a998a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.227.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a281586-83f8-416e-b228-428fec04e7f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.232.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839fd0b3-d17b-4d02-adcf-6d66a22459c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.240.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e47d73-0a2c-4f52-ad41-99a886f7fb18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503de102-81e5-4b4c-a564-1afbb7705045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.75.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42062b3b-697f-4bb8-b91a-421f882151e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.99.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a0dabc5-cf56-4bfa-bcf9-61778ba90a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.87.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f66312-3488-473a-8d54-c5686bfaa65e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.157.56']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de11695f-66f2-452e-81c6-365cbeaa266d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.187.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f314b737-1f62-4142-b239-638eea15c77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.192.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0c08b4-c98c-47cf-ad1a-bd7819f311ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7dde4a7-5865-4b73-a2f7-9e5d58ddd2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969737ea-29f9-400f-a71a-340c7a3ef77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57ec4a5-355c-4ee9-9176-b295df46ffbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.204.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc130a8-5cb3-4377-a3ff-644c9567d7f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.208.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00687e00-4b01-4d3a-beb2-f5b0248a9863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.217.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6a5bb1-a694-41d0-a812-98c1229b6fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.218.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c41d6e5-c5d0-4d99-a492-03b570c33e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.220.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2e0f5c-453e-4a85-a6ad-48690a5a94c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.220.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322fd2c1-2651-4c64-9fe7-f919890e49fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.224.63']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efedbca0-b98e-435c-a2cb-f8c678e7be50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.72.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db08e37-7440-4cd0-ae23-931743ac1287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.1']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9cf0339-b29c-4dd5-874c-ea862e89620d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318574c6-b3a7-4a4b-ae0e-13e11f3286ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac028b0-73aa-47df-b919-3b905d74bab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d12e96-77b9-430c-9b59-c98c3ace74b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.78.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9076f5ab-0d4c-46e7-b162-1de3b7cb27fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.79.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf2b5f2-8cf6-4a68-8660-9688901ca313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.81.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94afdde-5ede-4515-8d4c-3d09982e8589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.82.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3404a7-5e9c-454a-bc0a-972dee202ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.83.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861ce5d9-0739-4c54-b3fa-b2eeb28be79f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.87.238']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a87880-0cf7-42ce-91b2-978b3dc81c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.89.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82f6f08-5526-4e36-8174-11bb800c9385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.90.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab599d4e-ce7c-4eb4-bf75-50a481a14079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.93.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b191c25a-bfa2-4e92-b8d5-5f0c1c3fca46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.94.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d206f15-fe9a-463d-bb1c-5b6749040096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a647cfa-7787-4ad1-84d6-4516c722ffbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--162e3948-ecb4-40d3-84dc-8ca42c1b9f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.238']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3116ae2a-4d55-4f61-ac4d-ca20c947828c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a14e8ff4-3986-4638-bb3f-edd640b2c62c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eaaf6c2-57e2-41ea-ac12-056e73ed260d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.164.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb5755f-5fb3-40a2-b2a4-fa678af04f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.164.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25f0dbb-670d-4dba-8f77-c0f4f9d0c1b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.200.1']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f39dd2b-2b18-460c-bd9d-bf243256c260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.201.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40c6a9b-5714-4187-ae92-f9db5a45bb9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.225.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5770032-088d-4b6c-af98-9d9b569337d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.225.63']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256fdc2d-500a-4199-9c23-ca3f53648c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.225.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d99d109-6813-44af-b265-b254ef75be96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.192.63']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0a60af-a1bb-4d52-9256-7a2a5a7b0582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.193.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add5f52b-870a-4c9f-9600-756c4c4079e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.193.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4caf3e-766f-49c0-9866-740d205d3cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.194.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ecd382-56a6-4ee1-ac08-0a72294f5463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.1.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ae747a-a8bc-495f-97ee-f182ab43096f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.10.186']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbeb7706-f9ba-438e-8ba1-fdee4a8c170c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.13.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d62e04-e253-49df-86f2-2dfd3ce5d186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.222']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d04cfc-a1cc-420e-9e0e-7167944cdf56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9456b5-c686-4b35-b979-f14f75900ccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a59864-56a9-443e-84fa-0993f785ab4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352da80c-7b5f-416f-9a99-93f66f9abcd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1bdb6a-f592-494c-bcfd-2967b912e570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2dcf80-9171-41ea-96e6-4c6d8cb86f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d610783a-1149-4c50-8401-c1a484d2e6fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ee3d5b-bd72-40ab-a71a-268d8dfa7350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f0d46a3-5529-4a26-a9cf-237cab5536e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb06b490-d578-434d-ac14-bc736233ef65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68ec8a7-c5cc-4595-990a-b63816e6c3c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1289642-b588-4238-8db0-8cbaed227dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b21e52-93e8-4486-849d-00b13fcd8974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.238']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--512d7cc1-080c-4d2e-85d3-2bd3b8bab206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2404722b-465e-4373-8c32-0345c7aeec6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4f0d60-57be-41a3-9588-5b11b5e7d6b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78fe1110-3423-4574-a527-1d568f794903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049c865b-0852-4d0f-be41-0d5cea1793ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.20.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b971b33d-c35b-4c4c-9ca1-790e727dcc30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.27.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d57c1ac-8799-40c0-8905-02353656b4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.3.234']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1afd635d-3f9d-49d2-a11e-b33d3b51ec18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.30.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e9050eb-202b-4e96-aed4-b3394e0c1215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ee83b8-3d13-4116-935f-0e655af1002b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68c10f8-d047-44be-9ab8-2ce46a3c46ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98664c4e-0299-47b1-ab8d-903dc97968c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd39dd94-329a-4a7d-af1f-8f01af503c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d000791-a42e-49fb-8093-021b31a4e28a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b8646c-8531-43f7-869b-5257a5c86c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.37.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a89f80-4940-4b08-94f3-5e0d477fd5c1", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.5.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde77597-1c16-478f-a300-9f52d7ed4475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.58.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0846dfde-f2c6-4d2e-8bc7-7baa7b82651a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.59.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2adb19b5-b462-4de9-98e0-6c6717bbad00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62afc25b-57e7-4d92-a228-d3494610e94d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35a0bca-8e77-4494-bbd9-acf7c6d817ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76cf3df2-af79-4554-95ee-6c41c579c0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7423f057-b6e2-48aa-ba92-e6bff6caf173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6ae924-9be8-41a8-a957-3c24261efa28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.63.192']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc19e6f-38f5-4959-8f2a-58ee9f199e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.74.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ecafa1-de54-4f22-a90f-895924e2a38f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.8.222']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156a77d9-a35c-4965-b2a6-fc01403a9d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6134e57-2277-4d1f-8475-747439947b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d453df-0b8d-47e7-95e6-9a2a9cffb545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c41460-21a6-4179-a076-477242467e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb9e4dc-38b2-4b04-9bc9-67db16c5a4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b52cda-3210-43bf-8827-e9feaa5647b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a195ec65-7c01-433e-be3e-4cd9a058c2f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d296219-7d5d-45c5-b19b-61e20f7ff6ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.107.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--715a4207-a9f4-48d5-8508-dcf7c6c003ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.116.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642b35ef-ec4d-4829-92f4-8a05d03f882d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.12.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7817fa-d373-4af8-b4c9-d604ba08b37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34cf2d28-c44f-47da-86e0-dbcbffd4a69d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b450e3bd-ac22-44f1-ae7d-de5f2c910669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507f70d8-3fcd-4124-bdd7-81c73c184186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79658841-c73d-4711-a2d5-968b9c9eccd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.251']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--887e6a20-7d18-4d77-9020-940d1d9c5fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e52e83e-76c7-4e44-9197-6cba21d254d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566c4dfb-6944-4778-b042-d3b68c2b4d82", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.152']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca10120-709c-4603-adfa-bbeef2d85987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.236']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806138bf-2fc3-4847-9127-ebe505183102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.238']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da8c65b7-4824-4b2c-a739-e1f3a9c85bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1158b8-55d9-4cb4-af13-6dd56b1e1da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a273d1fb-b1c8-4517-996f-a2384b33586a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90a5514-cfcd-4132-87a4-e9eeb2413144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0b09ac-2ba4-4c43-bd13-bc7f7b93e10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a9c31dd-4c08-4708-a6e7-e49569bfbf25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2332150e-ee05-4910-a575-e8d011b38f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--227295cd-be07-4539-9a7d-a5b8a7dd08e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00c7572-e18e-4892-9c2d-5d0c4c716ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89687486-0245-47a1-9e9f-33abf76ea6e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.0']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d49eaa-859d-4436-8475-a6f46af220e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f73c91-77c5-4f5d-87d0-10d70ca98618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b066b929-ecbe-4dfc-925a-1823e6888323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6dd0035-947a-46a6-8a67-63f219e8d67d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.13.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f223b1eb-5a77-427e-b459-b4063453e3ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.222']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e81bd5-1878-4f26-b3ee-0f2c8b0d1c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ead97a4-2476-423f-a1b5-98c8f7240bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4925ff4-a154-4e3d-9b35-4b66e0dcac8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff33cc3-6cd0-40f5-8cc4-f20276c415ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e26cdfa-c599-4626-b4fc-5d386254ef00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e249975-087b-4915-bf3b-2f181702a9b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4466857e-e473-40cd-97ca-0fae27f89b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f66d54-ea80-4dc6-a04c-878643019dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1793e4ae-0eaf-4c9b-8e29-35500bd2617e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107c3f0b-d458-4993-9f9e-a7d8fd13bdac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1feb033-21ea-4866-9602-22f557ca6010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4620f67b-665e-4c30-9526-90bb93d9cee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.236']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422e772b-3ff3-4989-8ce3-ec8aacd92bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c61637a-8532-44cd-925a-0cba3d0c1ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.8.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74048308-d738-4a6d-b5e0-a81f714f406c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.99.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72aa7a58-b5f1-47ef-aca2-70bcdbf1cb81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc7eb0d-ad89-4ace-98d0-2468380d2f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea87c0a-9b2f-4346-bbc4-371177c065b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256b20cd-1dd3-44ec-a7a1-133cff2cdf41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.255']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8bd984-8cbf-4740-ab15-7685d919bbcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f303640-937c-4ab4-8614-0113de6d54bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc8377f-b75e-4718-af2e-56afc64f8ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e507962b-2a46-4939-99fe-94628c0c2f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8a775c-d1ef-40ba-bb89-69e305008048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc85db12-5a6f-407d-9d83-5b013959a333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b085e177-4224-40f7-a80f-9a5e7aec47c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207329fd-24a8-414e-9478-1d779d24c805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727e5da0-8b03-4f92-8def-c01af6c57a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.81']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141fe54f-a371-4686-a25f-c19f1e8ad758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6b7ad0-1889-49bf-b599-c2df77519668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d454563-1240-47e0-bc98-b00d0cad95ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfc06c5-ee73-4d8e-80a9-94fcd72aab0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8edb35b-7313-444c-a9c9-ac74039edee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57019bf8-489b-4077-8460-c00feec19f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e73667-f1e8-4f71-9649-831be23347f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040d9416-15aa-4ba9-93f7-2fb3dc032229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5cb55df-9591-48c5-927a-6486ca932e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6769987-8288-4239-8ba6-9943ac26c313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19489ba-78a5-4459-b021-b69b9f6cbaae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2448a3b-4fed-47c7-bc9e-bd2710811afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ac1784-3c95-4c01-a7f9-c90cac2ca69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44be6ef0-3442-4629-935d-455b121ec559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cac45d0-fe12-4e4c-a2e5-41713612a5a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d346338-0102-41b0-8d4e-7283847c2a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b308284-0547-4f11-82eb-e0aa5fa42476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aef7a77-1c89-4dcc-b11f-b9360a9a0b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4871649a-0318-458a-85c7-f86408fbf7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57b7546-682f-4bd1-8959-9b87a66f1769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf6d44e-341e-44d1-8ea9-77c614be0d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f768f1f9-b856-4940-bbca-2aa9f943dc06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352404e2-f19f-4ad2-a76f-ebf7522b08df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.50.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de83604e-ca5f-4697-94f5-280032d4f150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.51.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24cd955b-0521-4be5-8eb6-7519c737ad55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912be44b-8e8f-4896-9ec4-f58678ded4a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caca8cec-2b8b-4495-89dc-a530a244f67b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0692cd49-c3fc-4467-a9ae-07a95266cbc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c60a768-52fa-4466-86e4-a6592712ca82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.197']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75075487-1d10-437d-9efb-bf490691574b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.85.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d908408e-0989-41c1-941d-66297325fd31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243be1da-611e-4106-9ac9-95c243d05bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4340f1f9-13d8-4ad7-b48b-777952c52ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da0ea3e-bd93-48d4-a576-4da637a8117c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b35da6-3783-497f-8287-652fbcc7c717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.26.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27dfff34-f164-4ee3-95d3-346f29812c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.1']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bce5ca9-3c90-4ef7-b975-9dd703c2aecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0704383a-9b30-47f3-96b5-21b000604958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7636861e-bf76-451f-84c2-cbac68717b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d125d95c-4deb-4c8e-89e3-f22d1c5eabc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45d0634-dda6-4b01-8394-e695b2777827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.9.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928591f4-93d1-4ad4-80cf-c6da027c1339", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.193.141.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92dccf88-cb5c-4e28-abb0-93f692eecf82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.193.146.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e1f720-2861-419b-8310-18a5485499cf", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.197.238.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e98df0e-3e3a-4975-b3b7-20f876040348", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.203.174.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d81732-8737-47b7-b0c6-a221ef73052e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.204.27.222']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024611e0-5bdf-435b-8e44-d00813d2701c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.205.45.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc3f336-e5a3-4bd4-9e86-c6cc398825aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.210.107.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0f7688-9741-4be2-9b44-3c2bf629dff8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.214.145.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28173af-c691-42fb-af48-46bbb262b5eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.66.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b68c4976-a42b-4436-8db6-cae4c598e962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.69.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b70979c3-3902-4e11-a1be-220f36685e5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.226.81.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a0e0e55-87ca-4e55-b1dd-5b3ada3fefa1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.243.208.191']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29173449-1ff0-4613-92e5-3f0df093c97f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.19.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baefa978-e723-4e63-8fcc-9327d503d109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.21.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15d3e4a-a95c-400d-a564-d704a42617d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.22.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f791d1-8f66-466a-ba0a-1b2fbae84ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5403e94f-c856-4403-839d-bd86a26a9413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51017d94-7a7c-45ac-99f6-9335ea7172a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.24.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e30db50c-d991-4fea-bbb4-4083e7928f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.49.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d1881b-5fc1-4a00-a287-d2b5e9d96570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.49.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2affef6e-eb93-4cff-9d40-ad363d09316f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.56.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6c4ac0-11be-4a54-89bf-e4662858b7f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.58.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5092e9-aa1b-42af-b5bc-259aec4d9ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.3.129.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377767cd-ffc7-421f-a8ae-de18ba2e7780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.35.154']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a577b16a-f5b7-44bd-b226-d4896ae91e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.210.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db95129-8d9b-4965-afaa-8dd37c6b6543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.217.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf380bb-c659-4cb6-83f9-3f1029aba5e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.104.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1379b2-6dd3-4782-9e01-819067f3fd6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.115.228']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--565e79bc-c716-455e-8ce0-c62c26f3c566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.92.153']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6b6ee6-d82e-4816-b22e-702809f0b157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.231.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519be2aa-e225-44fa-8134-e68c706243d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.232.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5a2b96-eaa2-462e-818a-da00bb6ded08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.235.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3182dad8-cc1c-4d68-81a4-62786c7ff085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.235.164']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--700accfb-3123-4662-ba03-23c08aebc823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.244.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f24107-731c-43e2-b280-3d61f3273557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.246.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30124dea-ca14-445b-b760-e8486ffdf15b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.234.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d0b755-ac44-4380-b09d-8ebadf28cb73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.235.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554edd2a-8b15-4385-b7ca-1442c009e7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.29.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72823f1-296f-4afa-9fe3-8f01605a9958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.3.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70620a03-1de0-4280-9134-acde89ddb9ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.35.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0830838e-2ed0-43f2-86e1-2260c63be39f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.4.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2fd886-d685-47bf-991f-feba02d4fc89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.84.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed86d234-7f7a-4240-943a-88c0fa90086d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.97.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0302231c-6f7c-4bd0-92ce-b01e6001bdcd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.63.59.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c4a1c7-2ab2-4274-9999-e586cbe74676", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.63.8.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f759df6c-29c8-476c-b62d-c78ff9735236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d37a426-0b42-4743-8319-a81f696923b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1de0d8-565b-4bcc-b8ce-61d30532691f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da67248f-06ca-4ef3-b81c-998b75981555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247d6fa7-88b2-45d0-a523-c1747e7fa098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.195']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c379544-bf56-4906-8a52-f7b3adf89a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c7e53f-61cb-4a96-a3bf-11060408c463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f4a03e9-16bb-4629-904d-2528cd2abb0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e9fc048-78bf-4602-aaa2-81ab3a46d9ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1887731f-2cde-4bfa-a2d0-089a41122cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af2cffc-cb7b-4f02-9538-7175214c40a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8ab5a8-db57-42b3-950e-604a17a25686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1e7566-90f6-45d5-9b1b-3fe1ed2ea427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9077c80-f233-4828-94ed-639fcbf3b855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c956f0fa-d525-47b6-97d9-d1982d1eaabe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b588b6-3c6c-403e-83d4-18d1aab85c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9792281d-9b1a-45a8-861f-04965b026818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b8bc4d-26ed-4942-abe6-10ea0656c728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010eb0e8-b375-4cce-9fa5-1d836e413e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6afc4fe-1c4a-4fe7-b88b-ab9adf896acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891f9653-1fc9-42b1-96eb-7489cba25686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ee4d4b-566e-48ca-94cb-6277588711cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d4565c-7a92-471b-b393-7e82029a5037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c24da8-3cfa-4d84-b41a-b6a3e767cc67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ebb7b99-7aa5-4f6f-84ce-a776f26ff7c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.234']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ccd6d81-ecdf-4915-9d1a-12b998a9a71d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.236']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--295ab781-3bc8-4788-ac3e-5500fa1280f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.242']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8882d1-43f1-414d-8869-0f38f04c848f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7300b0-6c69-442d-9dfc-e3581b7e8988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c46643e-e9e3-479a-a673-4afe3320179e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb72005-0519-4bd1-ac28-1c81fe2e5017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.251']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef68ee21-68ba-4eb4-b46e-8682c0a52d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274cdb56-2651-455e-a422-20ed4c424913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c381d5-f0a0-4b57-8128-20d268f56628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ccd3f7-164a-47fa-8bcc-aac623f0d382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb4d2f1-9c31-4be3-9df7-964884e67277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628ebf4f-3af1-4efb-9fcb-1c60cf908e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f51bb4e-5ed8-49e5-9671-2a0aa077aabb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ed9dea-9cce-44c9-a791-f2738cca7e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4154beb-4b57-4514-9040-8510048681cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f90b7f-5296-4361-8ee5-322e22ffacbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0472cf88-8fca-421c-a6c6-4e0f3222197b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fcb7f97-c5fa-43b1-b4ba-37f37ce2797f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d611d7-a255-4549-b3e4-9db04d4df744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430894c3-38f8-4792-a091-1f4205a4e31d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.96.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90735f85-aede-4d33-b530-29fde0441946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.136.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19685e44-ccca-4000-908e-8c819eb1a485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.137.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c85876-48fc-4565-af9a-a8a933739074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.138.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5007a86-a043-4ce1-9958-b8c2721ba9fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.138.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e004800-d3a5-4a07-a1ab-3a8794667286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.145.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d759d8-46f5-4e8b-a529-4ab62c7f4d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.145.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0a8f43-c949-4d0b-857e-d8f6d06a7e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.152.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a1d67b-b251-4b10-bd28-9fb50c45e9d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9b02bc-7ca7-4b58-8223-d1b9e3551026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35405d4f-5751-4181-b3af-8f3a8f6777e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.228']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6cc27e-d58e-4d7c-8390-482f60fb7d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db493c9e-2b1a-4670-bfe6-5f9d2e903ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.168.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9dde69-18f3-4ebc-94fd-2f4ee55483eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.185.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cafc023-7b9b-43ab-81a4-31033c8ae1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7686f3b-97e7-4805-b673-f3f9030df090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e894bf-c132-4211-9879-5bdb9d0e7eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740e824f-cedc-469b-a46f-62761d2d73d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e412a4-6ba1-4013-a6e8-4301bf5ebad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2b0944-735a-4e36-96d8-bf65f082337f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.0']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b27bf1-f796-44d2-8586-b9134d2a7196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec506af-93cf-44f2-84a4-9faf5442e175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--826e533a-1b68-47d1-89e9-35e16699ea4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.152']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7d706f-adbf-442f-92b4-5d0e86193639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad148861-ed82-4cb3-bfa0-4c5e67de5726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1800226e-cbb8-423a-aaba-41856dc99840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7434ea2-5950-4cf5-9579-4eeb31fcb39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.183']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39faf994-708a-4cf1-a975-1356ee024923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5caee6a7-0c5c-408d-8b0a-866ee9586ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9b9282-6ab3-4e6a-a987-ebafe2fb1b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a120b37-03c1-45bd-9942-2281e41a3054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06eb0b14-9dd1-4366-8bfd-40c0245f9a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22905038-db8e-48b7-965d-6ca7e9547115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20be373-8812-4c60-bc34-a538e3347fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680522c4-0c08-44df-8cdc-20eeb2f22104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.234']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3970e781-1423-4741-9402-652fb5f4e132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.242']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116246ca-2b23-4035-bc40-6ab5cae9c60e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c786d8e-f4d1-4303-8754-0f2e080f96f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.255']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c27bd3-5e05-4387-bde0-1b11f47c75c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6155da-ddc6-4319-9cc4-3b666373659e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d414ebe3-0629-47f4-9aa1-c1224455a846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a5c0f0b-afc2-4775-b3a5-c458ade2e76f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--152f5088-0d12-44e1-ba67-769566aeb5cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60050dcd-84b2-4016-974e-6ee96198ef6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41501085-de0d-4276-886d-64da7842ea46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2ecd68-9a4d-4c15-bb70-9b5f9cd9e8d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3cc471-a4eb-4bb2-983c-359d0d3dcbc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af84cd1-6dd9-42f6-b7ab-a71cb9d88bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff06e14b-d218-4978-becc-7131c0276a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610e1b67-78d2-4533-ad89-1f6d269ca974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb743e5c-7b95-4fe1-8330-174971e66c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725e7196-a184-46a9-a43d-cbbe3dae1330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337412a2-7e78-4b2b-bcaf-c3fe0d5cfbbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.160']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6c333d-4913-4b78-ba8c-cca95350a438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb4d859-d81d-4eab-b1f0-fa5d11c706f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e4e0ee-198a-4252-970d-f3bfbf2e1a82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72500eb0-70cd-45ae-9bd6-69e5d7fa9d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb401e07-2565-40d7-9374-964aea7ac028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2f50c3-13fb-462d-8037-c1efd2d06d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84cde85-a2d3-4f13-aa60-254d8df6bd0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbe04e2-476f-4087-926c-9db546e545d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b49f08c3-ebbd-4965-8854-4f4426367033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dda83ff-1fcc-463b-9e1f-6b8ba59d8828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af135e24-4bfd-4c76-89a8-4377a2b15666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60698d3f-e73d-43fc-a8e6-0572d6dce1c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.57']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22768dd6-81a3-4ea5-ac8a-98788596111a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2be549e-d7c9-42c3-9ef6-66df0da48964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b918e897-b0f0-4869-8029-c58d89eaee9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d831342a-e59e-435d-8010-f67ca10f5d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.81']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3335ef3-ab2b-40a8-8010-c3b81dc067a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d0d452-4039-4b5e-a444-49923725bf7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa7176a-a6f6-46a6-a08f-45deb6076b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f278ea1-04c8-4f70-ac3d-25ecc546696c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef96ee7-b7b6-498e-b4ef-f3313e12fd05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f25c93-fcd7-4913-a280-c419367e993b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96af419e-ee4a-42b5-8218-b0ac9a18ecd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf90d68-68b2-4239-b89c-383e050bcd6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59babad6-a1b1-4a93-bb2c-c82f04a9205b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35f173d-af3f-4696-9a30-337a273cabfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a548e873-b6a6-46a1-b3da-645da6f9239c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0529c53-bf6a-4682-a2f8-dc4ff9267bdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971c4cd9-014e-4c6a-8030-39216c403cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97456b1-cfb8-4084-8708-6622beeda22e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d807294-f773-4393-a156-d12bb40eb689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4b9316-9dfa-4cf2-b15f-e30d377f4f76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de52604a-7e6d-4789-b31a-56764f0ff9b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb539601-b819-48c0-9bb3-06dc3c91b2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5465361b-5537-4494-b258-1c962fa48ae2", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e31ee4-d87e-46bd-9f51-e61d01525cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94063832-69e3-4fff-9622-79aba1176736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.63']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f548b1-056b-46e6-8adb-bf897e11efa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d7431e-daaf-431e-875e-a89e89631d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041a5158-f07b-4ae3-8615-2c0f034e46ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.201.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b1c28e-3f1c-4786-b6b1-4d691e3393ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a836358a-1738-4713-a0a1-155c92f2516b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae24ad91-4560-4bcb-b8fc-bfab105d3f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6323b163-fdd2-4707-81dc-c2231c0bbbcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.226.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51bf9831-b430-4293-a8b9-7758ac17e3e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.78.176.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4be61e4-0d1d-4e96-b9f0-e0ea1b6e1269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa7f191-4441-4582-952f-fb19a9a030e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a523778-de54-4946-ac76-af9c9d654a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.72.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be77f661-f537-4b90-bfb8-1ecf5f18a23e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.72.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457e0c40-6049-484d-9b83-7463cfef020c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.160']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca469442-37cc-4f7a-afb0-0075799c43b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.197']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004c892e-2c16-4fcf-ad48-91d31d70c8d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c536cc01-813d-44d7-88d2-a84dc362252f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.45.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad2957d6-cd18-42b3-ba39-b67631966efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.47.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d5f6f1-4345-4a63-a13c-f1134c489c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.150.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3740e2-6f68-4a9f-8e55-1d99c240eeaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.150.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a764aa4-2407-4b9e-9e16-16d5d52021df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.151.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358fe0eb-1f86-4c2b-8d5c-e0b5f14642d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1710b1-31ac-45f1-937d-39f635f73031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52da6338-a809-44fd-a0d7-053e4fd7cf50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968bc789-0534-40f3-a0f2-a2d35b907add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09322708-590a-4fb0-9bbb-559eeaddfb42", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8836b437-870f-40be-8582-749c1377a75c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.170.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7427837a-eea6-42d5-9d0b-39ebdd28f5b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2cb8a2-d2fd-4273-8e0a-4ddec1d26b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95fa60aa-70f5-4854-9d43-147f6f616716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d059a2-3b75-4cdf-bd11-b6b994db498c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.40.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de884263-50bc-4aa9-917f-585312defd43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.117.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dcc7f63-503e-4cc6-97f4-4c758069e584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.118.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6868ede0-19fc-4f96-b396-216b00167363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.144.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d34fb909-5970-4fe4-af1d-2edbd72fbef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.144.171']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d800e872-9b71-4b41-a73e-b48fd033a743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9070dc15-ec6d-4d78-a3d4-dfeb8520e5a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b9869a1-2166-4cca-b695-4e7b344aaa6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.152.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69631bcc-8ee2-4142-88e5-ff601e08aff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e8d12a-55ee-4e6a-a666-4243abdf78f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--267b5551-dea3-4a40-b4b2-59660f320274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.167.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a92872-c736-44da-b201-443edb6b594f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.61.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d6dedf-70cd-42e6-8b44-99aa532b501d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.68.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c85a4bc-100e-4cff-9e4e-6354bd1a3e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.137.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f418d6-60e8-4352-95ec-f18460987335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.153.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a8812c-d790-40ca-9a39-b0a801df0523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.165.154']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c9b51c-0f4d-4183-aa15-faebb07986bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.165.171']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64628e87-5e43-44b9-b5b9-336f9b7a09c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.166.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63939bde-3bb4-4af5-bfd1-8de822dc81e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.126.105.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a096238b-93a3-4019-9e82-d8c9b09875ab", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.175.61.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c00e7c-f00a-46b7-b1eb-ebea28cf15dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.26.188.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2f5711-2e2f-42b9-8d75-66b6582ccf99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.75.2.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c6f413-ee03-4244-a206-0de4f7466455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.94.131.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fe2376-2ab9-45bc-b760-647aeb010601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.140.123.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd128d9c-f483-4c29-83d0-e4dbbf09195b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.161.46.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23983f8a-de04-43ca-aaa4-81d1f41ec1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.71.192.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2883dcbb-2183-4e3f-9f74-a94616b739d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.237.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1daf08-08e2-4eb7-8c54-94205ee3fba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7544ff4f-41ce-40e1-96ee-d2aa94190038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553e4cc7-7573-4d90-96a3-1f681e547332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.162.231.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aaf4180-b002-4c73-9c6e-b64a978bf58a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.183.141.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4844ea9-36f1-4945-89ff-528b3006e8af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.194.98.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3697ef5e-971c-4d06-9bd4-be03c9626158", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.39.153.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dad51eb-f7e8-4ff0-bf6c-f0b893e3fad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.47.57.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bfd0e17-2a33-4881-8a12-b1ad749ed3cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.71.141.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3963e1-47a7-46f5-b6c7-774730dfd352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.117.127.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303c310a-9706-4fcd-aaf2-273234c2f2e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.146.251.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aae1dc3-375f-47c0-9f2e-e042dddd0870", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.153.20.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78878d3-925e-4c31-9586-2bae14e508ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.154.14.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874a1944-770d-4238-ad0d-3fba15ee55d3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.185.198.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709b0fdc-0796-4fbd-8678-c2ba1c7f7e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.189.195.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2625bb-834e-4669-a8f9-596c9d6e85d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.194.110.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9f25ae-2123-4116-bb70-bb9c7107b06d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31267d7-55cd-4226-aebc-81d20176619e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d523b1a6-a4d1-48fe-865e-d7450dc858e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4a394b-2a68-4faa-ad59-0bd999a49e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.91.72.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8dbc65-0545-417f-b467-d7ff82d73fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.99.187.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4623509-635f-44cd-963f-71ed74d25f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29af035-78c5-4274-bdec-96d621c48f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eedc3035-2ecc-4270-9c88-7445ddd19087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e6669a-f55d-41a9-b995-a39e0cd7324b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d31f3e-d3cb-45ed-8691-99f7a9648a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f508d742-81fb-4748-8c8f-b7dd6809cbfa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.169.39.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4050456-6621-4333-8035-ff6ba4fcbef3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.196.216.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd869272-65b2-4070-87a4-790d83f610b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a48986-7630-4316-ad19-0cffab1156fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9502dcc3-cf9f-472b-8cdf-ca9232a588da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a474e7f-72e0-4381-9e8c-96aac60d83ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f74c9b4-f82e-4db9-ae31-d0fa4de72d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6d8e01-8a33-4dbf-9b16-c16c7a3afcd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9a9106-6448-404d-902a-ad628f5262d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66feef9-554c-44a1-adf0-2e60d8d5cbc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80dd34aa-6e50-4951-9729-889493e42231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2afabb-d2b1-4dd4-a1a3-c36f4af42055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e67376-7673-44a0-989f-8da79baade88", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a489adb-dd39-48ed-ad89-101b599604f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2a5f7e-a9e0-453e-8b43-4d826fcf868c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f94e217-196c-4094-8409-0e130e76e9ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffa0f8d4-466c-490f-bec9-a796963f7810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62880ef9-f46c-4c9f-98db-4e9cf3ba5a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce587521-983f-44d9-bb57-98fc2f8f124a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b194e4d6-dae3-481f-ace8-ac5a38ac05ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b6e954-551d-4fb5-8a13-1d296944c5e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45311c34-ef55-4d22-88ab-4a6154b8bf5f", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5bb6d8-1b2f-4fbb-90a3-12f76e03a464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30940a51-16b7-4d4a-9336-c497fbcfa1c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75ea9ad-fc00-4f7f-b336-08b75338bdfb", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c745424a-fa1c-4bc9-a36d-31082431e289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aeaf46d-8290-452e-a19b-89e5986f3d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da0b1a7-582e-4b90-9aaf-24f578fd7e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94be333c-f6fa-469d-8db8-70688e935cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c360cb0f-cfd6-4366-84ee-5761d9286a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f5326f-25a7-4a63-8007-880950caa382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.164']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b4376e-2509-4dc3-b4f8-7aef90644171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbeb90d6-4d0c-4a14-b656-4fa16eba0160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.166']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7eb882-3c39-47a3-9143-658dcac18c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c62ddcc-759b-4bdb-821d-d6e0932e6f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20a59bb-41a7-481d-b874-e047fb851258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57e2947-369f-4635-9936-7c3245bfb937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe31aa35-a820-47cf-acfb-0d01bb203600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855c3128-5249-4b04-95ae-9c3235de5d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770e7cf9-54f9-462f-b789-0de9b21f121f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0471cd-b01b-45ae-af15-a9fc16a53fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abcbd654-02eb-4f7f-a08a-9396991e1089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89d3625-ff61-495e-84ce-a4a59ce01260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ca0ed2-4f3d-4433-80d0-792005aae620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91a3079-e0a8-4935-8da8-2bf4a9885830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc830f62-6de9-4881-805d-c82cec5d59f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.183']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a52ee0-0601-456f-8265-94f6d736dd0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efedb1f3-beaa-4de5-8214-21bd17034d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66584893-0940-4710-add6-f92074143c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.186']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c89724d-da81-427a-9a7a-260591225657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683094b2-6f8c-4df2-a83c-6dd6de0018a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.192']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2f7811-5942-45e5-8ad7-36af3022b9cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602ae1fe-aab5-4b7f-828b-640c68c16f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba32631-5a5e-4038-82b0-7d74075c45a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.195']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1079cb0b-1825-4f5d-84f7-5c7528299ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54bc2a2b-c06b-40e6-9243-31b223e4b845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.197']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4398115-0727-44a9-9741-87e8d391de92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71bb890c-acc4-43ee-930c-0937d36b1397", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa6316e-6b58-4968-82e7-af67469f1ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ddcc646-b2dc-4212-aa2e-1b52813fdd21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--185ba857-d104-4b38-baf2-2a7e086bb62c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bccd05f1-c1b8-48b1-aaab-be450b95e116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a96728f-9da8-453f-a2e2-6918256e39e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147959e3-71ee-454f-a21f-10f6d87379d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c258a40-efd3-4dc6-bd32-f24eea9b7b93", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da49aa0-5dbc-40e4-b175-ee6cf735d0bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761ebf3b-c8cc-4884-a446-42fcb4d9b259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa55c46-69c5-4ae7-a71f-1d1b12f68098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76abf68e-53bb-47cb-bcb6-bbf3230eb9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4d5278-2001-46af-b716-4a442d97d38d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d406cce5-3b50-4342-b103-aed962f76f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b166fbd-0f30-4a73-8d6d-1757d497095b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3651935-c3bc-463d-9e65-23472082ff72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475b6be6-91d0-4c32-986e-1227ff102c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d9b016-3815-4d96-817d-5471bf397a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.216']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc721585-2d27-4ce4-8725-245fc451c111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59758f03-f4c1-400d-b4f6-39a4ae060b62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55fb87c8-85c3-4766-9b4f-08ffde3ef8d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361615e2-aaac-4c10-ba16-144b41474788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.222']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a375bc1-7225-40c7-be8a-3152bfadb50a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680ba86f-62a0-4c44-9ad4-7a9ae752ec4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4b8083-9698-467c-a71a-79125fa415c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce4bda34-659b-424f-9a06-f74c24056e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bfb098a-b02c-45e5-98a2-eecfecf46f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.228']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--254ac515-b272-456c-bc4a-f3b591ac573d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a3e331-4ed6-4c59-a45c-89946e20ca06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf568b0-66ba-4509-be2b-f04f7bce7185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--902f798f-9cfa-4c20-9119-b25c10761aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1cec2e-8333-4bf5-b72f-aa9b97340c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.234']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ed44ed-34a8-4842-9cac-affa104952bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf07d090-e49b-4567-8c5e-832556fc2bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2b5e03-33a8-4950-9d33-f5ce918bd8a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1890ff-237d-410b-aef2-f70e9503b82b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.240']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdfbd27f-b477-4e4d-848d-d51d5ba912e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.242']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3db4ec-1aed-47fb-b199-e910d38d1015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f342e5ea-87cb-40ee-a402-36175c36c031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1fabcf-9649-463e-b2ca-5988c78334e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04f0c64-d0db-482e-81d9-3954e88f77d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1d9d6a-6b90-4fa8-bcfb-75cc652cde8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced1eaa2-2930-4a8f-a832-dea89696b77c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e5e496-d2a1-4a50-915b-7287791875f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.251']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd23f18d-4aab-488a-b854-dad8ee2f11e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acecf579-e40c-4bbc-bbca-a07719b1c2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c42fc0e-db88-45ba-a1f5-f7ff33af9e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b53c04b0-2c36-48cc-9f3a-03efe9545167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e46dd02-8344-4f62-91ce-94ff38bd36ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67bcf0a-2387-44b4-ae92-5639b07702f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26a39aa-5252-402a-ad2e-0db6fb8d12fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6298712d-5929-4b66-aa07-f75311a70c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840b7e2d-d4dd-498e-9ff3-efd3f28220e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--195f27a4-7120-48db-a4da-5726091e30bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b1fc9c-ebf3-473a-9267-57dca003fdae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b71429-0fbb-4d54-8a2e-70aabf24cccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac47b2e-72d9-4b00-a4da-9af6002a8bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306ca2ae-d8bd-47d3-ac42-a4d51537fa65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1468dc8f-1cfd-4a26-a5b0-a8bba02a98d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10eefa1b-b153-4970-8560-b2fb64c7d5c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d144bb-08e4-4573-af6f-da7ed3cf8ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6520fded-00cf-490f-9844-4c957475dc60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--617929cc-3afa-4606-aee7-f891d80f5605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c4b20e-7783-46b5-bbff-3010902a6c31", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61bc51ea-e995-4853-9201-033d9c32f9fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49aad0d5-4d5e-47d3-bb82-a7cde8867f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01623b88-f40f-46e3-b588-60f7b3a0f487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cbd533-80c4-4aa6-b7ef-ed4294150c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dbf0131-9b58-4d10-80f1-9179f028d6ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99994ce3-7832-45b5-8757-2934fa335a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.56']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523f7fb7-712d-4bd3-a319-4287d45fb0bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.57']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647a6072-1573-4412-803d-0fd3621d1740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f84f13dc-590d-446f-be1a-083d6276108e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac871a0-202b-4a42-9dfc-a33b8d24d493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8ecd9a-b516-470d-b598-bf158a5403a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00abe86a-9f57-4da6-9457-c9065ec7bd7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--206940d4-70f5-4590-a09f-861f430f7da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44cfaa13-54fa-4a6d-8ec3-a3490e97e7f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763b5204-effe-4f02-bc13-1085777e79f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858983a3-9620-4893-954c-eb2cdca1c9e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e285c7-bf2d-45b7-a894-3b1a3b6724fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d510ab-5b63-478e-9a5d-14b9473d50b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba73e84-875d-402e-b5d2-c855d6367b8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ced674c-9233-4465-ab3d-6d764d74b5eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607a4547-5b36-465f-ac4a-8fb5d3cb629a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d8c7d2-b5e6-48e1-9a6a-dad1432088d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8e1e9b-418d-43b3-a802-d1782a0ca190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79da5f2-2a61-4dde-9098-730bcd5dbcee", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27d44c9-4608-4a59-8743-b356bc77fe07", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1708ed-c838-459b-8553-a3e21cecc3a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3b5f75-8eae-4911-8e6f-e9164d3e06de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c9306d-d6b8-4714-9a53-0e1639b6897c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.81']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6e320d-b1da-4ee5-91cd-56cd005ef6ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0562f501-8973-4da2-9842-5a9f802062b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f88a05d9-8435-465a-8861-5609df7d6cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922cfb49-2aa0-48b3-b18c-e89810697718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9233fc77-8ca2-4f65-9619-330ad8eadf67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b62efc1-69be-4d8e-bf29-455e0c5b28c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f59e0e91-29e8-4090-a2f6-85b07c4317c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b203f65-24d3-43a6-8546-af6bc2a594e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d2114c-4bd0-49d7-9c23-181ac62c4807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4493a6-800e-4425-bd47-ed0575fe4454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9362a16-eb62-4b6d-ad84-261de08759dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a3f2fc6-4e3a-4852-94fc-ddc8d4d381f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f870efd3-dfc2-45c0-a75f-8b8eb7797e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2ecf0e-3c8b-4ec4-93a3-9236c5106ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e666aa5a-1a5a-42a6-ba4c-b234c08d81f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f2e888-76c0-4c4e-963a-de69e6973101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6fdeef-b6d5-4217-879a-9cd508969454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.25.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf7f27f-bb38-4247-8b55-c93a553ac638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.58.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c09dd7-b659-475a-afd2-74fa7830e401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.217.128.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a4d5e64-edd1-42bb-a67f-c73fa75196ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b6d974-aae6-484b-8125-9472719cf5e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.223.228.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4508f4-910e-4240-b998-f4e2d9ebdfff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.81.4.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51269ac-2481-48e0-84bd-dd9b5a0369d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.206.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822bd16c-0dc9-4858-a70c-abf83b906dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.255.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2cdb59b-67ab-41ac-b872-8149d1573016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.15.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d394ac04-df87-40bb-86f9-3a9fc26e3471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.25.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d03928-4fe0-4d14-87a1-579232cdb3dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.33.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d436aa2-a898-4713-8097-beef134239fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.78.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519cff95-56d6-4fe3-a3df-b0b4cab9406f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.96.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029d49bc-9181-4d1d-acef-66a400471d21", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.180.226.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8327a7-85ad-4c33-9b1b-a5c6752201b6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.180.251.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d13b64-5465-4c37-a387-1b7a8e2541d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3497008f-8758-4817-9980-099281a0327d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df13caf3-093b-48ef-b488-8e42e6f068a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6772033-63f8-49c2-b760-4bcd0f27519b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9c353b-c158-405a-8951-a33217c11750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9eaee68-5eba-4d74-b97f-91d26244f2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e710db1-d718-4980-9e5e-be85cd2b3ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730df323-b5d8-4caf-8931-7c6a95e15697", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.109.189.255']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2d4024-de1d-4b68-8395-bbee55e6136c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.115.214.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505cbb9c-0863-40a0-ae9c-0e1fd0098b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.126.81.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5210e8e0-1914-4439-8f1b-30edad9d9ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.126.86.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55504596-911b-41b4-a9d3-36ca70ae735f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.152.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903c3aed-04cb-4764-8128-5b11f992609f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0885fd37-1f37-4957-93d6-69ae888999de", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.47.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5220c8a-6000-4b35-9b34-50166192df2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.57.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f0ce9b-aba6-447e-b10c-fd73414ec742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.217.225.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fcc9731-6e96-42e1-b349-262eae14a78a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.101.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92def01-6c62-4dfc-a900-8020076ca7cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.98.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1585d049-112a-456b-b136-8fba37db24e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.221.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ff574d-9122-4e3d-840b-4f9d2c6b39e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97b4e538-a08b-43e0-b311-69e530b55182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.251']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22eb16b-ef78-4685-9c58-89df6698c138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a3c53b-269b-40c8-8de1-24a82ca72796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb22a24-32c4-4e3d-9467-e1a7dbd953a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.186.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca278712-7bb2-4f6c-97cb-12f13a42d251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.187.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f3940b-1a40-42d5-a982-182f6636db60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.240']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806aa868-7073-4748-b1ce-d835f4843bf9", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.189.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b40112-bf2b-4095-902a-3f7f5d00834b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.190.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374dc958-7d23-42d8-b36b-35d937f965cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.210.155.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5bd4f4b-af19-4bed-968f-5c3228d28b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.217.42.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097ea5ab-38a5-4947-a671-4bcc25cd732c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.106.54.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93933fed-5d64-47ae-90aa-70f1a0809a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.114.250.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14eb1978-23c6-4613-ac83-175c8f41de3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.138.170.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57b4e60-1e40-431f-bba3-de2fe9e78aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.180.105.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b25e182-01f6-49ce-8fab-186479d2d8c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.195.43.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab7a731-033c-444e-9a77-e06e59b9b437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.224.40.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bad2a54-ca6e-4c7e-9222-f5314d448995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.225.139.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8f521c-3f1c-4fb2-87c2-e6d441767882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.25.241.153']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b67df00-03af-4e4c-b127-e16c37c8a1e8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.254.212.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00008b7-c52f-44a3-8a85-5e42e2bfc7a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.40.167.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c42043-fb3d-4103-b9a7-83d98bda2ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.45.175.238']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f7b5c39-6fd1-4918-9d81-e68ddfcf1144", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.46.188.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925b7983-6e03-43f5-a512-fdb7e5e590b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.97.69.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c131cc0-69d8-4414-b215-208b2e7d88d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.102.40.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff2b86d-7c8b-463d-9852-4b8ea37fc02c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.112.108.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3220ca66-687f-44a4-8f8a-39effe1b857e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.112.19.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3111f7cb-98d2-4c6b-8543-79c741430442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.112.19.166']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--488beddb-61c5-41cc-ad24-92ea0452a448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.115.54.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f9cd92-1c3e-4f59-9bbc-56b6b4e6eadc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.118.18.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a5dbf4-4c42-401e-9550-1c5f8b31d767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.105.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74640ab3-9fc5-4278-8164-8180adbc17b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.127.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a69f3b1-320d-41ac-a780-c0152ba1cfcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.64.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5b5682-95f1-4f35-8f57-a17ce16a764d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.240.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd80408f-a6b8-404d-8c3f-7751f62808b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.240.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba0c57a-7a8a-4517-b46d-0839b157faa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.227.235.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09641df2-8766-4a44-b80c-cc3d26ea6e0f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.47.78.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4570d0af-5a27-404e-9311-4939f354cef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.83.140.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66f97be-f717-4c8f-a362-d121a94a29cc", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.83.165.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddad2071-e19c-4231-9b36-3c5999ee60b7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.136.80.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ecc202b-3689-49d0-b3ab-58b60f235cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.136.89.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f38d2f-1ed3-493f-926f-3db6134999f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.139.193.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab8a0e7-21d7-4525-8695-45a8fef45d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.152.185.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b1a6aa-b535-4266-a085-307b134b093e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.163.203.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19990c6a-0a43-47cd-82b9-e8933c73ce4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0f839d-4cd2-4cdb-b8b1-2280232ea40e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a264981-c38f-4482-9cac-4c64db0386f9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.168.248.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acaf3842-c9f1-43c8-b170-b3fbc77ffab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e3e5d8-859b-4679-995b-5168833e7427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c925245-91ee-4b78-ad0b-859b4a978609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8559df6c-d0af-47a4-aa70-62a721145f96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.199.46.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0390df2-981d-42c8-b556-85dc774044c7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.202.230.81']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e416b65d-4a75-4c9e-917e-e4b2e5799f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b63ea8-1be7-4841-82b9-457eea52acbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.154']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78907141-1c11-40bf-8df3-6c24c4f2ae82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2000-0778, CVE-2002-1149. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2000-0778", "external_id": "CVE-2000-0778"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e636fdb-ea91-4d55-a5bb-abec1b0dfd6c", "relationship_type": "indicates", "source_ref": "indicator--78907141-1c11-40bf-8df3-6c24c4f2ae82", "target_ref": "vulnerability--8cf44e1e-4684-4556-adfe-18ec18689016", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc408afb-0b29-4666-8df1-0127a8d8c71d", "relationship_type": "indicates", "source_ref": "indicator--78907141-1c11-40bf-8df3-6c24c4f2ae82", "target_ref": "vulnerability--32810b51-445f-43d5-aaea-a31a0abdef08", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1f778e-1c3c-44e3-84e4-2b40bd09be98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--267b93ff-bbce-4f1e-a4bd-a8498a1e7fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.225.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c61ccb-7a9c-4896-bcf7-96075eb14e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.239.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f55faad-d51c-4541-86f3-fc4fafe67d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.128.11.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b32a75-1900-4c36-98a1-bc7cb1ed8bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e58123-1b5a-45de-aa28-0ac54c1fbfd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d320787a-5493-400e-96ae-b21b68f9cf8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbda95bb-a255-4553-b18e-9dd66b0fa024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd613429-360f-4dab-ad6c-d6588de0a0b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9eef5c7-affb-44e9-b9e8-d7b95eface4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05c7512-7a17-49ab-8676-6b75fd7f52c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b8753e-c457-4717-975b-dfadbdbf74af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b7e9d2-bc9d-4444-944f-47fa25303709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee74a765-a36c-456c-9544-146602628ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8c2edd-1a7d-4bc0-84ae-013d778a0f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f51eb0-91e2-427c-90bc-562f1a853b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c402fd-379a-4a72-8cfd-2f90ff506f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98102ba8-92a1-47ea-9dce-358a3e99bab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ece9a4-e088-41ce-92da-a753828c35d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b982e97-8581-43d4-b97a-6d766b96ee4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c38805-7fac-4ba5-9697-fe49bec1120b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744d913a-678d-455f-8c2d-f6bf33ed8d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc4c526-0d96-47ba-bf86-debc86979685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437742ab-26ab-42b8-bf07-e85d673218ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d942e5eb-e16b-4d99-b66a-b7becbd3d1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7853bc45-e744-47d4-9a25-9c92eb954006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33fe9d0-7c25-404a-9a7b-91f9f3e0b0a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac04851a-dd98-4227-a1cf-b41baf9843c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--796838ec-60fb-4f23-8ad8-31d025a3427b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02384a6-e38f-423f-a87e-ad41b981f915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063428b3-4166-4745-bc48-c539908295cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d1ee96-fff3-4f6f-b652-1ddc3754f927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c089f1b-dd1a-47e5-899a-2f38d3848ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f954fa1-14cd-4070-9cb3-19e0aa0f8ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23569cce-2535-427f-be0a-1d3b5638ae6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662d7c87-f661-4f9b-966f-33e19d382bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365ea3c9-e8ce-473d-9ac2-9bd6baf456bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bfd5eb1-dce1-4d94-8173-52e4aa6d5687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4615bc5f-b883-4ef7-a5cf-098a4c89c6f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b973c3-226c-42ce-beec-e6c2a5b5c384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d689273-2d6b-4298-8dfb-0406c078de81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.225.206.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c39f43a-aacd-424f-812c-df123c9ca1bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af80d806-eb72-4593-a409-db8e49eef1ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37ccade-f51b-46b3-a10f-c4ec4333b4a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a4326a-1cfc-4b59-9eb3-41334106617a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b661c63-e98f-4ed9-ad56-02ce257b140a", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.65.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e42fe8-800d-4962-b3bc-28acb5ef1af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bbb30a0-2a29-4c1a-a450-361cd3dceed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1dbcc33-f4a6-4b54-adeb-71e53a95b5c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8db9c7-bff3-44a5-b19c-3de719d6367c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e26ee6f-a0de-4d61-a100-62da666c458c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ed2f96-a7c3-4b28-a93c-4b69029cca01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ace95c-bd90-481f-bc94-4005084e734d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b00e96d-3c4a-4e3f-9e83-3a55d7a830b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85f2cbb-4506-44f8-add8-fdeeadd629c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce260357-ad27-4f6b-ae41-f338322e1b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e25ef6-ebed-4923-963b-166f739a4abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b70a13e6-567c-41b6-abfb-6c171a09e574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2791c76-9897-4355-b95c-2a7fcadf8649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862de119-5f44-4124-bd99-62e4ab406ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf65b4c-d27e-4ea5-a035-a5f0fec2880a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e69f45b-7c8d-4093-bc62-8aa55d9fb3dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd73c16-1b19-4474-97f1-53e0992f07c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35163c93-f0ad-4629-9572-a5eb2035dd7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30d3a1a-3b29-4f88-b772-99843e69143a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc1e1dc-4506-43a4-b41d-87d7b96f7d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--059d800c-73c4-4a29-b4e7-2f831951e71d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f37400f9-ca8d-4b28-9bda-a01b6d3e7a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c2ec8a-926e-4aae-bc3a-adeccb8d3491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e6723b-c9da-4c6e-946b-e8f054b8f800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45be353d-d6d7-4735-9587-241b48ce82da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00ac8fc-0be2-46ef-8598-f33edaebc818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4dee2b-d06a-4234-89d0-25bacd9c475d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.144']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7fe167-9793-414c-83d9-693beab0f9f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--331aab98-f883-4150-9934-e6d51780c9fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a8b91bc-c2ac-4ba7-857f-2e366062488c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.153']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f40d5f-a490-4003-b988-7a6dd9ff7ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb81e389-985d-4902-b968-591ea8d027c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f3bf54-9371-4fe7-a3a3-ffbea4ebd1e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6661afd8-a5eb-4b69-a078-cc8bd738c2fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab424f89-a0ad-4f1f-811a-5e92e6811dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501f8ea9-e85d-4ca4-8d36-8a94c4204dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656e2bc8-945d-460b-93bd-247013fc9103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f262b26f-5828-4731-a7df-c087196c8aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad84735e-478b-4830-95cb-2ac85bc450a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd57508-1127-4418-b0f5-3fcb62226972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4d8c72-3741-4475-9fd4-cdcf6c444a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb2e2cb-75f7-41e6-8f81-55d8e8b07892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381a734c-20b8-43c2-85b8-f0f807b6f178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eda7b81-16ce-4388-a94a-6d4fee8231dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a4f3f3a-fc92-4b3d-a9bd-f9d327f1eefb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325afe0d-528f-4ef9-8fad-07c8082f7717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb708a39-fc62-4502-8888-4c09449a5947", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ba60c6-1a15-474f-a799-89d15beda0bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150b884e-3efe-4fcc-b031-b503c8da7551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150fc5fa-3bcb-4601-86d1-2be8b36a9f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3766a41d-1988-4a4c-9ca6-550a51df9b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.38.48.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4067b447-3eee-48dd-851b-0615c5a38504", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.45.50.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3990925-c227-473c-a16c-f9472073f7d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.70.97.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df359db9-b7da-488e-b920-dc25447020dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4c28ca-e85b-4b06-88e7-ee2f9813d423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.12.113.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a20ec75-a9a1-432a-9be4-3f1bcc0fa4d3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.144.132.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8185ee42-5cd6-485d-a02f-f51ea915b239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b13f84b-7d27-4f29-8d2e-fd1394fb5d54", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.45.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a46909-c9aa-4a3d-90b2-c31014adbdd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.59.228']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c91bf7-5196-4e8a-bb51-2b7f1ca8380e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.218.249.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951e3ecf-a22f-412c-86d7-c42f2123f173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e255f429-561a-4827-a8e7-a55ba2fd4504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.64.102.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242588a5-b338-453e-a3c1-97b1eaebd503", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.76.154.242']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef30e44-fc72-40f7-ab88-6c31a8e6084a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.76.55.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b82fed-82b9-4ea1-9a79-8c6eb5d86b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.0.56.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764c157c-c132-4cc7-b25e-62ed6af6b122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.17.184.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658e7e7a-60a8-45aa-bc06-943c6da31ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.203.249.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45c6a78-a1c7-43f6-bd3c-5da45d2ce3f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.203.76.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d090d57e-01f9-4936-a01a-3297fe79845a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.231.98.152']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79fb7cac-281f-4c54-8cee-1349e3fbce93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.245.1.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a28184d-a09b-4117-a5c4-698610d90544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.3.248.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a47c80e-1756-4a96-82ae-f6abf371f38a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.4.142.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef5f3f3-8c7c-4032-9954-3ff944f7de99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.59.201.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b04770f-90da-414d-899e-091b7a04e882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.75.92.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe192e4-89e5-43c1-8935-5c1f3e868aca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.92.212.222']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3aa7a26-202e-4868-80f1-384758ee54ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.124.194.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a99a005-a954-4fdd-8ed4-22c563d5a2fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.151.182.56']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af5d873-b02a-4ab1-9d0b-e952883a2a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.78.63.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1059b803-18bf-4d49-b1b8-e5c22ca7b889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.121.206.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de52ac6-d2cb-495d-b612-9187679bf833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.232.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc9e643-17c8-422a-8062-e21e7309bfaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.232.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7936a492-a18d-485a-986f-74daa1071a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.1.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39483447-a034-4bf2-986d-50d8da9e7e8d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3da04f-d678-4e4e-a972-df60316567dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ed27e1-7291-409a-be74-0f5277bedd62", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec914b83-9f9a-4bf9-92e3-61f5380445a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e222766d-959c-4cd9-9eb3-e506d18177a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90cc969c-1f2a-4a83-b68b-1a158060b20e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30bc3c7e-73cc-4841-a7bd-1e823cb40723", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--471790a9-6389-4c2f-9ac0-a00d1f45463c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd35c104-3423-4a6c-91f0-57a0c376d694", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1316247-0dea-4ec4-858f-eb710590fa1d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adeeda33-0996-4812-9aaf-3e79e3470053", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b117153b-1e92-4ec0-9ce9-13219672f945", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff7c096-67e8-4825-8bdf-dbb9eade7519", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3080533-87d3-4b8b-9993-a75d91e87513", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ffc37b-aec0-4148-8f4b-a75a9587009d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d6f431-01b7-4b29-ba45-2159088e02a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.51.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--234a4b3f-a1ad-425b-baf7-d0a823cd1d67", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.51.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cfce33b-08be-4ac1-b42a-4fb9bec62e99", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.51.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6f37a9-c5d7-455d-a7fe-e5bd91f13235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.85.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff83fca-1943-4e37-9975-89b8eb6ecbb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.85.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88acaad6-ef6c-4ae2-9480-b18874026f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.85.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c033eba-5dbb-4323-828b-0dfd04321340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a8a7c1-296d-497a-ac9c-56bd1bd8a641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74240b48-9178-4457-acfa-1989ff968500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a26449-fbb4-43bb-bfef-ddf5650c54cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df76c06f-9ac6-4c8c-96a2-16818fb2393c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e0ff1f-5446-4a0d-a6d2-d7a9769b4bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.246.79.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61274ba3-9695-40f0-bf21-acb79b6cb814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.247.242.178']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1031c367-8b62-4941-9ea8-982c2ecfb90a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.247.247.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c02e87-4d34-4518-9336-99b34138c6b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.10.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fef5361-2a7e-487d-94a0-753dbe263961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.10.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98fcca54-b431-48eb-93e8-5b9f6b08cd01", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.52.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11eb881e-6242-4f5e-97a2-6bf30c0b0431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.10.187.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22fdedfc-e42c-4999-a021-0d86475351a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.156.66.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1926f8-2e58-453f-910f-dcd5b140260e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.159.119.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ef6b64-9a17-46fe-beaa-45f30dd3676a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.228.10.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0252af57-b84a-490c-b4df-3c8bdb93017e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.236.21.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ad68a8-ce1c-46a2-9a76-e4ad1bb613dc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.108.100.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf83d9d-4a65-4690-a002-dcbebc037b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.121.168.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1576379-11d3-44e2-bdb4-5b57263a202c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.200.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51653126-c5d3-4957-abab-29aec07fe7be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.201.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def63354-1b0c-41e3-b0ea-7665c35f9963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.201.197']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8cfccb-71b1-4372-a69b-46d0b24b0e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.185.25.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f8e742-fadf-42ee-b160-c61bf25f557d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.212.1.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dca3630-cdf6-4504-8b06-a7981908a583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.215.240.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39834a2-93b6-46b6-a310-ce87f98d6487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.252.28.186']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258b8d56-fe26-4069-8858-7b0785691a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.97.3.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165a481b-a90f-4d81-af42-a7375bb5bd45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.125.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be286448-12fe-4119-8b1c-22b94a55b212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.42.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea20d56-85f6-4541-96cf-ac3d903100e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.43.0']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da2313a-97c0-4678-a05f-74c51da66184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.71.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d714871f-4154-4935-b867-a14c6b730476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.73.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb048ae0-18f2-402a-8fe3-ab4f54b3eb1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.166.85.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35868086-0571-43f0-99a9-8f4368b59002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.167.168.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74e8829-6a59-4a90-998a-6c4d309818a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.167.206.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15666c8b-87fe-4f95-938a-c3ef01f8c6cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.205.37.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c10164-ab40-4a00-8e9f-84f1bdbb29af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.4.51.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1614ae-3a75-4829-9083-8a3360deb72e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.73.51.178']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cfdef79-fe0d-470e-b5ad-216dad59b872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.74.132.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8018b6d4-7399-4cb5-86d0-eb5e1d7db8d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.83.130.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34730557-4f9b-4f52-8bd0-54284eabac97", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.85.102.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce06340-66ac-46a7-8d46-49dba888037a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.93.164.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32832ed-3186-4d1f-bac5-383cfa8cbd9b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.100.91.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d468b1d8-a337-408b-90f4-c193a258d104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.148.24.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e844a853-ed14-42b4-a438-f2823ad2fe89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.172.217.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1216bba7-60e7-4507-b6fd-151b966ed067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.172.217.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956a9e51-f575-4b6f-848a-821a76f76163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.234.102.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f5ec6f-f790-49a1-a06e-f7bb0605f89a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.234.103.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a25d06f-18b7-4561-b57d-b97f3fccefaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.234.109.222']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e244cbd-2849-483d-9f64-9af81b59363e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.234.76.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2839fab-afdd-4a9c-a861-7191b67bd39b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.237.188.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d2ce23-e404-428e-b0d3-3db988cad46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a475f93-b4cf-48f1-a2b8-f6d6b9bf0d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.13.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea6041ca-d16c-4f52-9c39-f5adfc93a1bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1556a24-fd17-40e7-ae42-e8717050c34c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.96.154']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94b90612-35d2-4e1b-a433-5ec6502bd9eb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.251.34.171']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1827ed-7b59-4090-aae3-c6ecb4cef712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.254.204.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae32d281-4f4a-465c-8824-b46e1eaf3b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.27.186.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc87859-70e5-4aed-9081-e8925b070325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.27.244.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0a1e0f-05e4-4bdb-978f-ac2f54f1810b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.81.44.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356bd9eb-a63b-4e94-9197-408c925c28df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.20.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dbd66e2-e916-4098-9f4d-7133f0792953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.20.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5857ab4a-3669-48b3-a304-a4516b663831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76319e19-cf1b-4f8e-a0fb-9115d054ca0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd56ac3-21c0-476c-812d-21ab7a481bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.23.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c0d52d-5b4e-470a-872b-3d163bd061d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.92.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb4ae61-cd60-4bc9-8d4a-ec376ae830e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.137.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9bdc7b2-d2ad-4bc9-8ae8-3dc54108b33f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.186.167']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357e6a86-8218-4368-aedd-1fe19fafc2ea", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.50.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae442b58-8604-4e4c-b1d1-48581c6ee489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.84.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98417dd9-45b1-44b6-ab6c-9eace1a9d7b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.16.195.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89830652-91af-470d-8814-e69d129353a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.16.238.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19fde3d8-da25-40cd-aa8a-36330d542e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.18.232.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994681ec-d9e9-4dfc-8bf1-d55b5a0d838c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.18.78.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb39ea1-a477-4b91-b9e4-9211e5af6ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.9.151.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb3b7d4-260f-47a3-8542-01b4695876d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.129.187.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b124fe6-2934-41de-a5ca-d2f0b49a17f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.130.168.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e090ab8-7ac8-464b-95ae-3c53fe5564f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.220.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f56d292-450a-4077-ba56-26ea79b79e39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7750ddfe-78df-469f-a7da-13d2e296c9ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.132.26.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dccb1afd-78fc-4786-ab9e-9fc44305f3c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.134.216.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ed61b2-b80c-4efe-bb64-4ea9bd155c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc015345-a911-4a2f-af8a-ca65011dc1d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.143.162.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a59d912-9c7d-4b49-ba45-7ff8dd436f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.15.28.192']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b2c5f9-bd25-4ebd-a910-d7c32ba6df21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.16.162.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c529cab-8079-418f-9eb4-62549361ea14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.18.108.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--595c3404-3d26-4bd8-8a05-5597a45c6a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.19.246.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9db8317-5254-4060-9b59-bf66bca1a0e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.213.226.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ca5740-1b2b-49e1-9162-5a8c3abc1499", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.215.121.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba72124c-2440-443e-b1a4-d8e5bef0e8e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.227.192.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97143b74-00b4-4972-9fd2-108bb19f6a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b2bf6b-b3c4-42d2-82c5-de4dceebf000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.76.217.234']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5fc684-a9cb-43f4-8f9b-ba9497c20c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.76.72.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab09855-0e1d-47e9-93e9-95a87da6b499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95ad690-7457-48b4-b69f-ba94d7c5105a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.87.27.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d412dd1-52bb-429d-9b7f-0214450e7477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.10.57.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b935c31a-6641-4d52-9933-44ea7a1b8289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.131.22.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85cfb36-26e6-4db3-8e7d-739ce2646c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.132.90.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab2f689-6f55-4dc5-9e24-a133ae6ee6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5751c52b-884c-4313-9707-263b40a3e4e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6421f5-a1d3-4a59-8f55-8c66bbbc841f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25b5d5f-ae01-4cb9-9054-7631fe0fd484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac0ca0b-957d-4eeb-b1f9-d8e971df0dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b9283bb-bf47-4a47-8c79-afd3769cd95b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294387e3-4337-4b64-bdb6-ed8add6e00a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f49569f7-b6c5-4bb8-b14c-f5cfe42099ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262f7f13-692f-4d72-90ae-8cfa9903e2ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490a4856-d6ae-43b4-9c0f-07b38406c51a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--734f0cda-f1b5-4389-b2ec-5d978c1117bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5266ebb3-be0d-4fe2-8ccf-23d463f66b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.177.41.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858964a4-6ce1-4935-b0ab-28ac0117d2a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.189.42.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0edbd4cf-bc47-4f04-ab97-88c88d9cda30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.210.213.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357764d1-b048-44fc-bbdd-9447d549ac0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.220.3.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d175645-0b34-4bef-8081-6e967bc81e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.220.93.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea7714b-319b-45b9-b0b8-f1d46474a302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.223.33.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a468dbfb-ec7f-4e05-8d95-68c6b69b1e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.223.4.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63759053-b39f-43da-89c6-5e503d033e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.204.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca776b56-2643-472b-a25b-ac51589f7944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.176.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b1fdec-6fe5-415a-8a2f-10b5b107f33c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.118.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99796dd2-846c-4f31-abee-ad54eafe731a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.160.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8843cb32-05dd-4d64-a37f-6524625c5fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.70.105.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2137f9bb-c59a-4f54-bae5-989b6020ab48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.70.105.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9abcf6d8-c2fc-4da0-80bd-7b2dafa0bef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.105.2.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa961709-986c-47c4-9c4c-c15fe05d295c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.124.149.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b0fd64-9351-4a62-ba38-3f3d1fd601e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.124.254.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abd4398-914e-40ca-b3e0-2037687085cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.129.63.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9755ac2d-a697-41a1-b1d0-30ffed83bf4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.130.188.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6471ec4-4d7e-41d9-9c74-626f9cac18f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.130.235.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b766cdb-9f5e-4bdd-b798-06d8b68bc92e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.131.13.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48cfe8e7-e175-4ce3-a89b-4a1c3ca671c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.131.251.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3e158b-b762-4190-a687-b858725c61b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.138.199.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ec7975-8640-4e76-ae19-d25b142bacca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.118.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3797939b-aaa4-41e2-8dcb-942563793d67", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.34.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c9a9af-42b8-4df6-b27b-753d766d5073", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.75.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b8d8ac-201e-4db3-886d-b48059b0b0c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.156.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e9ce06a-52f6-4f8e-96f2-afc2cb9b720d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.157.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa78594b-ff6e-4f55-ac47-36a5e481665b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.185.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea9517a-8eb3-4bb9-a207-6cb224777c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.195.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af55781f-d55d-474a-afe9-afbbfe6c6e0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.212.153']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c3006f-5e65-4ff4-b702-84a431b9fbc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.222.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557d9ff8-ac56-4bb3-9412-37d435a5d883", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.87.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab5aa06-a38c-4262-a1d8-8938cb6c0e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.88.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e34abc8-0bc3-4b23-aaa6-c1778094d7a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.98.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c150999-fe70-43a9-bf99-619725e8b381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.148.253.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c482840c-64b1-4e18-b914-9fc7d59ec083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.151.182.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a668bfad-9fb4-40cb-b73b-a61e246eb7db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.182.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa0a347-2f4f-46f2-b69b-1b70576c2fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.189.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f557302-60b3-4d6b-9fe6-b45021c51603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.192.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02893086-7ef4-4611-bf0b-9d90f83f04a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.193.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b341cf-bd94-4e57-aff5-cee65b2f7a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.20.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef2e272-b11d-4a11-8385-26a23dfa292a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.39.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec6f90c-d656-45e7-93dd-8c1e2736633c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.7.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b0679c-74c8-4f81-b682-0e893c487ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.76.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2225b7-a567-478b-89b1-4a8c71c387a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.88.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f0b85d-3796-4f25-bfeb-87f639db13a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.181.207.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63796c7f-f8e8-4ecf-bb70-b54223e2d645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.186.159.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca0c4ee-d6b2-4a1a-8267-d9d24473a9bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.193.119.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8190a11-51f4-4fcd-bd49-3d4165b7f361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6434dced-641a-4638-8846-d5e82d9a1af9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.204.28.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b4e83b-43b0-492b-9dfe-71dec4fd09c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.208.194.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9db281-3119-4d6d-92fc-6d3367b5ae32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.21.188.238']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77778076-6d36-45b9-a73c-46dd3964bef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.122.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0f11d9-b69f-4777-b0be-25eebf2b32f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.125.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea1ac32e-62cf-49ba-ae83-0e8d9e39e2f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.235.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e130c44b-8f89-4137-a2f7-0fbb268a9833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.77.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9cf245-1501-4170-bbe4-51575e101a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971b769a-ed80-44c8-90ac-fc930807c9fd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.28.163.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d2d96f-ffd4-4b53-a54a-565d9fc5647c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.32.217.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f35122-49b0-4031-8a7e-058fdfa8575e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.175.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6e235b-2d7e-4523-870c-dd5cf5bd99da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.163.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea384299-d7ad-4e07-bb7a-9ba5c673bc70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.179.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea01886d-4eb7-4bdd-a173-fed43a239355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.189.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4157aae-50b1-4798-9ebc-d1b36ba802d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.192.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7793125a-5767-458e-af57-645529c3481a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.211.183']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df50d95-90df-4d57-8911-f25681e7f1a8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.212.63']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8fdc506-5cff-447b-88bc-6c393b7b2691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.217.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--865318cd-c1ea-4894-b708-d061d52ffac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.57.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e9b7ac-74c7-4b47-84fb-2d46a4a87b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.97.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d1c5c2-95d2-4f93-a4fd-52a824a9bd4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.40.77.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7278963c-5e55-45c0-bdc8-1fe48fef4e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.50.63.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab291ce1-fd3c-4f86-9356-a09d8842397f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.135.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e1336a-649a-45c0-8eca-5f8098aff6d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.186.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3334d89d-e4eb-42b1-980d-3bc6a05a3534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.224.171']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2cd4a4-bde6-47ac-a292-6268f8be1bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.228.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e0ba91-147b-4cd9-8b5f-022b93655c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.158.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be604df5-bcba-4da5-99d3-6cc3f2a9bad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.192.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7b2970-acc2-4cb0-a1f9-1377ddd25930", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.110.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a634ee2-d8b0-464f-b291-3d072fc11615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.112.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e84c0fb-6898-41d5-afd0-e8c63599843d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.118.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f4bb48-45bd-49a1-b9b7-1f57de3b5a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.138.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031ad503-bd2d-4d25-b3ed-203da5a6b28e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.140.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dfe946f-84d3-4fc2-95d8-257a97e1a431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.154.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4e31ae-1481-4a97-8027-d95f3ede51d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.181.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d172cd8d-e80a-4b0b-9fd3-fcc6e8fc3685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.201.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c98b507-de23-4522-aeb9-91d8c033eb19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.219.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78738f4-1508-47fe-8b54-8a1d9e2cc2b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.35.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c535963-cf2d-423a-9e7a-700209ea652c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.83.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a291552-6787-4c4f-a900-63c4863fd9a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.65.255.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e96b71f-26dd-4e59-a0de-07d2777878fd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.73.187.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659ad47a-7612-4e34-85bf-ef68a972b5a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.10.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e793b448-5c25-4f6a-97af-9888be488522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.10.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd0380b-b261-43e8-9fa3-811f46bec1c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.107.251']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb922cf-eb93-4128-9a8f-dd519a0a97fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.111.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735d7b13-59c6-423a-9f7f-d35452ec0cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.128.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f265e9db-e5da-4897-ab3d-9a98e75ad2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.151.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5f7e26-fb7a-4dda-89fa-ced352524845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.182.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cae4be8-171e-4825-87a9-5507c4bc390c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.222.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16634b06-cf11-4371-9310-4b585e59a5cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.250.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c02952c-17b3-48ec-be74-edaad392da9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.60.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53665a2a-a887-4b7b-bbef-cf3fd32033c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.60.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9f5c52-6770-46f4-9844-1244636f3d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.108.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771553b8-2dbd-420b-8f26-fbd19d4828e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.138.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625fe46c-16e0-4753-8d4c-035f073e9eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.150.192']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a16ac0-2d1b-47de-ba38-220cc4e4bbc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.159.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50862883-11bc-4626-b9a3-268dce9199f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.74.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435ef122-358b-4fe5-a333-d0d1212eeaa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.76.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee0e8fe-8285-4a29-a6dd-bd4db32276ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.243.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf89dd6-88fb-4f3a-acd8-5868fbd99fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.4.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143aa5cb-54b7-4b53-ac9e-dab6e8df3e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.93.216']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46047de-3a44-4ea9-a202-501bece4d5ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.106.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63eec96-3030-4360-95a4-474d53c52f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.131.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf6029d-e7a1-41e1-8e0a-adde61aead0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.161.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04affcd1-308f-40eb-9424-b0ac07c5708e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.22.186']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bafec05-5dfa-48c7-964e-c6e5224f84f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.234.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2b0387-d833-4f56-9aa6-fb37ee00aee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.55.0']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003896c7-ddaf-4e0a-a860-990b997caa98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.6.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cdea82d-8e46-4247-b9f9-5e47d8ca859b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.73.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd4f5de8-7d73-4625-ac69-66e88c707ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.85.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392c8509-d479-433c-97de-2c9ac15b5f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.86.196.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a3cdf4-36b1-444a-95bb-4fb23ef0fb21", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.91.0.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c57424-1948-4371-a4e9-eeed7b107bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.94.81.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef92564-037e-4d1d-9b47-9ae97fa7f7c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.214.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7af1282-249d-40f0-b619-5d31b14dcc78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.167.108.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76af03e8-0c75-4fb5-8d3e-48e854404c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11dca26-8daf-47a4-b004-fecc4f6eeffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.177.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8637dcc-b23a-4db8-8a54-fc352bdae090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.23.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--445f5a85-7c51-4c3a-a438-6ddd3f28adda", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.231.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d617fa7-4461-468a-8e92-b2ef2bd49a11", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.189.213.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923c9cc5-46be-422d-94e7-77101318d407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.190.207.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69c97ca-b860-43e4-a9da-ebd413bccb59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.32.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b543021b-2037-4544-8cab-34537fd6eef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.6.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc358ff-fc91-48b7-b021-d0b0d1bc996d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.91.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7db5a9d-a1ea-4d47-acec-a30f0daf1258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.199.109.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90eb0005-7e9f-45c5-9a6d-d21f91220f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.200.191.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71490d89-8c9d-437d-954c-41d11c181222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e13275-8ca5-40a7-aec0-50fb47bc645a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e28ecd-b3e1-4f6f-a9f0-125a8c766da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04fc28b-8caa-4d67-8488-80a842b11cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb30fe1a-7ef1-4e77-80fd-88198da405d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8730c0c-4508-43a4-a37a-4e53ea4a9c8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7893ef-d2c0-4e7f-ae08-93bad02f02ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ded8fc6-1898-4190-8b1b-1406d7245501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf330777-4ed0-4a90-bb8e-e4d68c24079c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e06aac9d-ac2b-4543-b209-c146ab6b24f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d47ea24-0139-4c5a-9f58-8e7d2b7cf4b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306943dd-d1f7-4b98-a0f9-f45d8386b4ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b3579a-894e-4f41-82b7-cb67dca6f13d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5b22e9-a818-4dde-8b99-32090b80ec63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9e5b88-387a-4793-851e-19a8fe82439c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79f77d1-37a2-4c32-bba1-83192dcdbc03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60bcb858-3a75-4a14-a15d-aeba7ed63730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685db06d-1342-4f2b-972e-635dbddfd295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4320067-5107-4aad-9b85-95bdeb6139f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a779e4d-5c6b-4063-80e0-651b30997604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.145']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc476dc-3899-4a45-8ef6-c6cc6672daeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2492e36c-fa47-4795-9132-c7d25353c865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c811b8-4410-4475-934b-5db95c98360e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac2f4f2-fe28-46e5-9da7-31c57a965222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--051433a1-f953-436b-a491-8a6a03ade91c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.153']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00a7054-445c-4cc5-ba8d-7a4a5f71043a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b48019-e55a-44a5-ba85-1ba164ec98f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a73af0-4486-4f52-a6f5-e84bf88dc201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c9fb11-5eb9-4ea8-88e1-129f978962b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.160']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd5fa8c-ab5e-4c15-b97b-741f640d031e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa344ea-e8db-46cc-8936-6b0b37ba4d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b36c15-bda8-491c-a643-4dececbbe586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d15010-4598-4b9e-8690-328b29640a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3910aa-69c8-458a-83f7-70411b893168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9d5320-7f31-4daf-aa61-e53408dafcfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c33cbc7-5072-4b6c-a7e7-97525a2cacf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0e4f95-62e7-49ea-a5fe-9c1e5691a108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfdb4d3-5847-49e5-8500-df57afe8c963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--051ffd88-23e9-4b46-af0d-0f64e6e11065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2339616-5750-4d98-9ecd-7764b7e48700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75f12ba-0a34-4717-93db-db58fc454e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053aa64b-b785-44b7-b76a-14b227d607e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb01ef0-c001-40bc-a642-5b3b622018e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e23b7e-4459-45bd-a7b7-6371705ab8cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b1d8e1-08f7-415c-ba65-a7768e7fcd5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e63c23-1ffc-44e9-a3e8-b4917a4fc2c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6aab50d-0202-4842-81e2-a93374e2e4e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.197']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838c56e1-142d-48a2-a48a-7d7cc8ed8194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a19580-582a-4240-ba20-58c955b25c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352b2ae9-40ba-44f2-90e1-ab210fff8fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f796cf8d-f1e8-4820-9738-5a40249bfe0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ef9c1e-acd4-42a6-a3e3-b7fe8ede0738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0468f9e2-fd0a-4e6d-84cf-d0218072a96d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5e9ffd-d934-487a-9058-0e3abfa97878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0781ef1-6066-4abf-ac71-08834c3c9cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f497b11d-b387-4cb9-b82b-794a0cf36d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e57588e-c35b-42ae-8517-701982c8e8aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4936aa6-20b5-439b-a656-b89de5838313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789d3a4f-6ac0-4cbd-8b6b-a0d311c2473c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5879e32-2f2b-49d5-ac6e-06789b44c49b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.228']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ac16c4-5491-4eae-b30b-f67dda75270d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8f87a5-d12d-4834-9555-0baf3f27f01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8aef93-a647-44dc-8eab-5b0deb4626c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.236']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322cfd5c-d7ca-4a0d-b2b5-61ca54d883d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d51a07-31da-4ea2-90b9-1d972ae95ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec51dceb-0ab1-4b83-bbdc-e1adf943a472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc5e6b4-7656-4d4e-b543-d49089573cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08385fa-357d-4208-bb41-23ea3dfcd6cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c11394-4c47-4fcb-b6ca-a1e3b480f15d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc24278b-7acd-4edf-ad5d-33ab8a0f2b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5957d52c-6293-4b1f-bb29-f3a5b3ccc585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0abd490d-a5a3-4571-be4d-86a569d68212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a126a31-3e68-4518-8057-b348aed38472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192c5699-56ff-4df7-b60e-3dbd96937df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee42a52-54e0-4076-b77f-fd70632dd2df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754dd20e-e472-46c6-959a-89816a399943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7101d106-9264-42ec-9d9e-881cd8c91fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--008db74a-f8af-4b43-a3d6-0453712bb40b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.56']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770a2d81-5cdf-4365-aa8a-9578f578f9f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44666584-4aa3-4f08-ab43-90e23e7d2c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.63']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958fecde-9f89-49f1-abc0-19a540f0cafc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7199ad-617a-470e-9f07-1ce81d08f3cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e721b883-525b-420f-ac25-143b2938bf1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f62e3103-0607-4be5-bdf0-8c508e3af7b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c297ce76-cb87-4a1c-b159-fe903791f3d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4e231c-8232-4446-958f-0d344f3df61a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d285e9-0124-4b37-870c-51e0a6c90673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebeba621-c9b6-4c9f-af5b-24cbbc98f40e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b55898-2b19-4bc2-849a-c7f7d6fb9174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99891014-8084-4541-8ce6-1b538b36d39a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4b17e1-1cea-438f-aff2-389a987c1814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5910c7-a069-4dd9-a5d8-040ca6806c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf91a84-802d-4ecd-bb97-fb782e2e2880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649583a5-5aea-4490-9f0a-97e39b72e99a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.81']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4df06cf-f0ea-4edc-91b0-000e761585ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b63ba9-a276-4a57-806e-0151db16470b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f235df-b161-4f9f-ab60-6d6bf7328620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d111219-dd32-4ad2-9482-1861d4954d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8925ac29-5d13-4959-9894-5952b1d89003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ebf45d-8c9a-4bed-ac74-9b02bf9d2afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9886f28f-0343-4551-bb85-cc02e1244416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95dfd34-3a02-4d8b-8830-038621e80421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1748f44-4c61-40bd-9ea4-537ff9c0393f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d4311d-91d0-487f-8bc2-7160f6c5f5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df6fe55-f7bb-4ea3-adeb-c32ff82d1292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5519e648-55d9-4551-b726-ed354ebcc833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa286cdc-543f-4313-84b3-9516214a2a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95248cd7-77d1-4fa4-a1d5-85c35930314e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d48ffc-749e-4572-ad66-3502ebcd1bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0ca66f-c176-4b3e-ac63-d60520c7daa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dcb114f-c44c-4665-810c-38592d3cc23f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90243b6-291c-4112-bdd0-e7086d3bb9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9185abe3-14cb-4961-8544-7acef56d4f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c223479f-ac1c-4868-b640-0343c65db4b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e0fcd8-6fc2-4749-bc11-5ed8dbcdee24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6dd5f14-1fa5-43aa-af6d-7ed6cc5ba269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53d6552-3f45-40d1-98cc-ab2ed7479609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351ee64c-3d38-48da-bb13-eef9678feced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f2924f-4276-4711-a654-3c227776a89d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed78b960-446b-43dc-8b9c-824114f4d5dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebde6214-e8b4-44ef-a102-041c56731c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3dd4d3c-9c19-4204-a182-db61fb5d33ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7bfb875-7ecf-4b23-a2c0-4295e58281a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a93a367-f6dc-40cc-b7f2-1fc03dc93ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e7cd2fc-efb0-483f-b71f-e1985725670f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d17db057-28a0-4ba6-9036-08ca4badee00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d611482-8e6b-4c46-9014-48ffb6d94fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60cf65f1-9a22-4ed4-9d88-9c3212d457d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.154']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f2f162-8f00-4adf-9886-b4ad77636aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16dbe05-adff-4b11-89d7-e87c65149a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7eda6f4-117e-489d-8ba1-a5ba32065e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebf8cda-a468-4378-8d8f-7f68042aab35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5873709d-377e-44e5-b33e-2b8e8dd3ac3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.167']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a4e264-a78d-4826-8c8a-6d81580a7472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120ad2ab-067e-40bf-9060-f7f35afb3293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3132d31-6507-4953-8b66-1512d3b9416d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff128fc-9e25-4114-be6f-e8b0d3e34ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.171']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f7aa42-d0b7-4ed7-8f5a-112a2b887949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d19f90-f826-4a06-9956-1ba884cd9351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d528d75f-d3ca-4cc5-9285-ea3ef312cf0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.178']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66151b42-06d3-49bf-b715-69f959e918af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce18a45-c3c4-426c-a969-ac93e8926056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf01254-c066-4a64-8ecf-3cde0d3cbd1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09605799-7bc5-4ea5-8189-221bb82f1475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6a5a72-b79c-461c-b47a-71f143bd19f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6109623f-eed7-4b31-9f5a-431694e266c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a94316-0258-40c6-96d5-d49513df9c6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49bd3012-a01f-4b89-9c6e-6c20fc47c024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.197']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd08fbce-b076-4666-abb4-6f4a0c7110c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f3282c-9ee4-46c1-b46a-6ad8a0922a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db83cc3-4815-46f7-9dab-8882e06f2a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d6ea48-ff7c-4cc5-82fc-5dab00c0c5a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa2a9bf-5802-4695-b052-5d6b6a4473b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df46aa3-214a-458d-8bd4-f677f8f4e602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b3dc4e-2cd2-409c-8a0e-55e2531f29dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c55f8d-770e-46e3-8a02-44be8babf12e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e914b5-e6e9-4c0d-bccc-e655443f21e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2dcc8c-3463-4be8-b292-1fcc22152e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a20bf0-21d6-4525-81f7-4dd2ccdcfdef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf524500-e16b-47df-b950-336d47afc536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e7e1d8-8880-4aa6-8800-901db7dd9b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.216']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad68bda5-2d44-4d90-93b0-221b36739fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0790e4a-690d-4102-bde6-e83678f9dc1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2525e36-65e4-47e8-ac12-2160be9ea313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e9a245-edd6-4c74-a25d-50b2a934c2c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--843e6479-7206-4bdb-8bd5-960a87576068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.228']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8415e4-04b4-495d-a9b3-2240c0c1ffb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece19b85-6c87-44be-80e4-2e42b39be357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4785c588-47d4-49ee-8909-0c6ad1eef4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a351c140-a088-43a3-b0c9-8499fcb55f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619f3e9d-5d82-4698-beb6-ece5ea4a243d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c160c5-3a04-4430-861e-b002accc1632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e66405-3e4d-4329-9b02-e9458fc21c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.238']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1317ace-ca00-47a0-be79-6c389c54ffb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d79820-3a96-467e-aba9-4323739590d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45b33bf-703a-403f-a500-0e9b1b555a63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acdfb31d-c14e-4e8d-a4ff-6b183c88b45e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf4c3ee-9499-4a36-b20d-d815c8297be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49796c45-9ab7-4014-9d70-29ae449a6b76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f47428f-3ef0-42d2-9047-4562a1944aab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.251']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a3d4b7-2439-4a17-a1ff-b3cc72b80789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad42aaaf-9558-439b-a943-2e8c05299e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838043de-c0e8-44e4-9ec0-8440e85c8670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a043862f-2f5a-4fd3-8422-2dd5be421ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a9315f-a5f9-45b5-8ae5-163e65815ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32a013d-6580-463d-aed2-ca4cec054c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc57a982-7aac-4703-9084-673944b34920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a219d90-3c3c-421b-8d40-aa2a8481417b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83da5060-ffb4-4d2d-bf7a-ec3e1aa640cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039e6485-754d-4aa7-9949-84a357fa12df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c89800-d67f-4a4d-8014-527768e9c85b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e1f447-e961-4620-b680-8eed0a035d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58625bad-1443-4d94-b9e4-db3de05d4e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1367a192-bc70-4f90-af3e-20dc85a70c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc4ed82-78e6-48e7-8064-e49bd3cc3b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f99fa3ce-5612-44d1-bad2-d00d5f55e314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d328628-94a1-4e85-af1f-72f084ef1785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f27bd27-6119-4033-91b5-8ac2df4e84df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1fd52f0-0541-4987-890d-e8d09888178b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531099dd-4b9a-424f-b47f-7aa6ca48845b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.57']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68e9674-6b18-4244-8867-e99a7e2b1f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310a6593-2990-4e45-92a8-d5742f2bfc07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7405983-0b12-41c3-a289-47d6abd15f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0b7c43-d0eb-456a-9f2e-aade4f77222e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a27045-e9e3-4161-9ed1-c9adc7f6697f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b91aa2-423b-4b71-8c57-9a00599f8a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98cca91-fcd9-4a76-a0dd-752a3f17ccd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5728ce57-15c8-4c06-8d6a-6651806796d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f520b1c-0111-4890-a695-434c8f66be0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f2736d-20db-465f-b668-cd97c2988d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b54a706-fc71-4899-8cd1-36ab5cc30221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34757738-39f2-4556-9a4b-7b4a9bfe1d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e05748-4cbd-4bfc-8832-74ca8d47dedf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d077bb3f-8fa0-4d30-8930-c04565b8aa7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a138a3f-428a-49e0-8c99-095b4e4b9d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82afdc28-86a2-4265-b6d1-540198cc12e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca3d7cc1-f005-448d-82a3-641261b0460b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8e98cf-1047-458b-8937-196efb1bc143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a685a79c-8a78-4daa-8f1d-5831643222e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f586b434-d476-4571-8c8e-4d6774febb45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.119.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fffd0ddb-0622-4fc6-965e-d3ad28547e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.12.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35dec8d5-b393-4eea-8d63-bec34551f54a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.126.153']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04040448-1b6e-48db-b11e-31578fac73d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.140.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b023a65a-85df-4354-86a2-a08526c4e6dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.143.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2921a366-f175-4770-b2b0-db65b7451967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.23.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973d07ac-b35f-413a-84a9-7bc028e45c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.238.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b099456e-ef48-42c4-9045-e8d66ca8572f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.240.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d38055c-3d79-40c6-97df-263abcaa536b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.242.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6753f4-6cef-4735-be52-758cb29d2e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.57.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d913271-e0e5-4840-8b4b-e7d22d6cd2e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.84.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5431db3-0df6-4fcf-9dfa-d78cee5533f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.172.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bcaae51-1c66-4097-9eed-f633d6e4831e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.195.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7d76d2-b55e-4713-bc55-4e5ed709c3c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.234.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e36003-d05a-468b-93e3-40a7cff8a777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.221.136.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77261ec-0970-4865-8fac-f901665450de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.221.147.222']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951cacde-f41a-4544-8b12-b7b15fbc5182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.225.41.238']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4229a07e-c4f9-4294-b363-75520ad9bb7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.228.157.222']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5ce28c-29cb-4c3b-b496-1384116805f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.116.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18a22d9-49d8-4e18-b032-13831de218e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.119.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e295d7aa-2483-4a51-b1ff-0092301fdfe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.19.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b12bd9-7fd7-4302-95df-b76975ad1b51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.39.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a099103-8d92-4d27-9595-f65a65db81aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.42.242']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e52761c-fc3f-423e-ab2f-68662d3551da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.7.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e77ef4-1dc0-450a-afa3-a58a13cf6abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.90.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e19685-f450-495d-b6d2-e8452e7fac84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.119.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d39cb9-dba1-417e-bf45-afb8e62ca166", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.83.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48d20d4-5491-40a4-81e7-0d561f73070f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.246.202.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4179a5f7-20fb-486e-a147-b1358500ff26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.103.229.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd69ae9-11e5-497c-bb4f-6177f07cd850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.166.255']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--578796cb-1c84-4435-bf80-f677668d5db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.167.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922c976a-bd8a-4903-8e77-108ce09282ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.132.34.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8496c22b-5fa7-4462-b6e1-af130cfee244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.133.130.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb478826-abe1-4296-85a7-9b39fa56b388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.133.212.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35856556-651a-4f59-919b-5dc7b9ac0590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.138.159.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47923f85-a01a-466a-9c01-24e8a966f23d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.139.173.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6d7451-862c-410c-a9de-294bfdda84fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.230.169.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ae66e1-b5e6-4850-8b79-5e3d88e329ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.232.82.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d98fb0-d871-40c3-8943-9aada3f399f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.220.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee8d7552-753b-4101-ae9e-d2dd1f0949a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.26.74.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f45f60b-2016-4ef2-87fb-def1e2311e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.64.131.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08634fb8-1937-489c-a7d7-8f20ed5beb62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.77.227.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a6953c-b896-48b5-8112-720736d579a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.123.193.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a414915-2659-4cc2-aa31-45b371c0de0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.211.71.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c676d24-6e09-4e7d-b7c8-433e44f8c875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.27.197.191']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242e6e60-3fd0-4f8e-820f-6b863d3a701a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.34.177.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70323f90-c84e-49a4-b801-00df96626e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.44.238.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0bf6a4-38d5-41cf-9728-7bab28f88a49", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.46.140.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03256471-4df2-4dd6-be66-6c972710a5ce", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.60.237.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fad309d-ff21-47bb-998d-7960bed2307c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.60.239.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa56507e-6dcc-4870-b89d-472308bbb6c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.132.109.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a5e75c-ec15-4903-a914-135dcd9e61a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.132.109.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522859ce-442c-4aed-b195-a7cae64d5ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.172.56.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33726176-6f89-414a-b8b2-d6bbbbdf013a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.180.82.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1344bb-f066-44ee-b682-a2f33e187ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.242.203.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5b6276-d671-482d-95e3-aea5c1854d51", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.242.231.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8ed213-90b4-4f90-a9d0-1806177666d2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.242.235.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7401e1e-ccce-42fc-9dda-5093f78e9206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.250.161.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c669f0d-b245-420d-bfc7-dbbbbf288460", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.72.131.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58bc8899-2dac-4fce-87d4-7c5857a0928e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.83.60.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d72a83-da1a-4e7a-8b7f-c0735e84cedd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.93.206.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f77f0ba-81bf-4d51-9e6d-966b79de8e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.96.178.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db5c268-bd28-45bf-91bb-eaa14e5cb085", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.129.41.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b667f755-e09f-4b5f-afd9-267eafefdad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.150.69.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2353f7-4d6c-4dbe-93bc-aebdd1ff2b55", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.152.240.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d54b0dd-1064-40f9-a2ba-fb8e6c910345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.173.18.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3eb7cb-2215-4626-920b-0b49d68f589b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.178.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062306a4-6402-4e69-b2eb-84fb5b1330e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.190.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ccf5641-50b5-42b2-ab11-78b6ccab8da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.195.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8689097-128e-44ad-8dc4-61a7ecebed08", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.184.246.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1325928e-421f-4331-9c0e-84cb453fec2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.194.23.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23351dc9-e1de-42ac-b97f-d7f9cff67f51", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.207.145.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071b87c6-7fb8-42d0-88e1-e2f5c5ed2aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.228.83.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45fe391-3be1-472b-a4e9-2ae80d080ece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.236.161.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee11101a-be0a-416e-bbf5-02bccfc495e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.240.48.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0df2aef-2ff7-424f-b43a-ce0077059d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.246.231.57']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f05709-2c59-4774-bcff-0c97f80df544", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.246.61.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--819aadb0-cb07-42ec-8bb7-9f5be8fe1fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.26.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbcaf31c-133b-4339-9fc6-b4c3f44352aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.40.152']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422353cc-4ce7-4fc3-b716-2998a3866124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.43.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027433e3-eaea-4c12-8f8f-4e0ebf9eeb34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.46.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36d4232-fab2-4f07-ba0a-80c018dcb1d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490cbcdf-6cf4-46e0-b36f-e80e8ca4bb8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.116.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf3b3a06-f670-4d6e-97ad-95bdfc806f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.117.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb21b9bc-4a95-4e10-ac17-b30cf0e13a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.168.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef999f4-c26d-4699-96ca-d42d920c56d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.170.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb5d6cf-9a93-4dea-8fca-707fa273c393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.171.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd4e8ca-251b-4186-bee0-4ca6ff7109f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2f1882-b0ef-4aa0-ac81-46f207e03a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc50e03-6fe2-48bc-8bde-e2e825d8cf68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4258c6b-6355-45ad-949a-75a55c85db84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f9d75d-cb75-4873-98c4-dd01d4f65506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177d9a65-4573-41b1-96b4-c626f1d29b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943eadeb-94fb-4c7c-a2d4-eb9d5e2c0856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa1fa3f-042a-45e6-ad12-a1d7257b8124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa89512d-52df-42a5-bc52-11de36ee8525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a9d87f-9df6-4f1b-91da-c24df97bb94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3869ff-86b6-4a27-a5a4-c8efc5dea94f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a19e7cb-8f85-4b90-9f61-8c90acadbae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b060b53a-5af3-485e-893a-bafdf5cf3b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5a9511-c2d4-42be-926d-f806f447095f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c392d89b-d2db-48d8-9330-7a7e0e725db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a88399f-c8cb-46ff-8baa-b3f349929aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c05e32-b60b-44ff-af72-4dc0b451f798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.164']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b9a3ab-4e5a-4c72-83bc-6a8de1d470fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943dd08b-7aa3-4895-8386-307d0b7a5b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ce3768-cbbf-488e-b4b5-7330788cb04a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9134cbf1-fd2c-406a-aa99-c846158dae34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.234']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc3bea2-1bee-4611-b5a2-3475497449f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.251']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a960c0-cc75-4cec-88a4-212086ff0073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b105f035-cc56-4a46-9508-a347f32b62a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a5ad48-8666-4a35-b705-925c34b2df16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26abf053-c3d1-431c-8b35-c2f1409ad653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.176.81']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33eb4781-2ff6-48e1-ad77-493a30d97b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.180.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c0bec2-7159-441e-8822-67576bd34fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.183.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f301d1e7-d712-4385-a11e-0fb9ff770633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.184.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--866e72ce-cfe8-4952-ae8b-ce48ae48ea5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d8fa90-dc50-427b-b2df-e0666ca26aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf8e78d7-9b88-40f1-8f4e-e8c35fcb7aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081a0d6f-d43e-4938-867c-5fc442efd936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.233.27.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3cd491-ba8a-41ea-b384-7af804e0354c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027aec15-b02d-424c-abad-cb6d678eb071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.178']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a361d7-d336-4b86-a647-fa551a5bf50e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.75.94.154']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae66deb-b6e3-43e8-8d56-995a99b914ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.116.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d52c44-dfea-493c-999f-18652b991620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.116.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9fc7e1-0c59-45d3-8acf-8c3af184ed41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.116.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--296d7eb7-d0bf-405c-b678-379551badae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbab52d5-1413-4af6-bf85-1c079cec0cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.195']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d537d1ae-c431-4a02-9e05-29bd46dfdbc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.140.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b3cd0e-1796-421e-864d-d5ad4641b506", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8978dcd0-408b-4798-8c75-b43fd3aa380f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10fc0e35-f6a9-4caa-ade7-18bf64e4b368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b463c56d-438b-44cc-9ab8-a2b72af82cd9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23faebd6-4817-428a-b602-d217cbb34a31", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398488d5-836f-4087-a903-6c235fa93b2e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be53886-56e0-4b01-89bd-57353552b741", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.63']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b70ce7-b02a-4ecc-94ce-049d9624a399", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f623bc8-14cf-4b7d-92d4-2c9cbbd7a4e3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf755d34-65bc-4113-8885-a7770b06b592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.204.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5c9666-ea3a-4687-8322-d16ac3db74ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.204.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cafc16cb-82f6-44ff-b052-3c8cf9a8143e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.206.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0abec02c-3830-45a1-9d26-01f8af018451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.207.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97301ae5-e16f-44c6-978d-0d796da5ec5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.235.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f856ca-3dbb-4c75-b160-73fbba784284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.249.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e5d18a-6201-4c08-869e-c71d89ba6b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.251.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63924214-b804-4adc-b564-df7baaf3fb7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.124.74.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e37237-b9f8-49e9-8c14-c35961da9b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.143.200.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6944ed1c-5a96-40c7-9f70-05eb4ad51bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.162.56.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f4a887-1477-48c8-ab72-a2b77aec254c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.204.63.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03660cf0-71f1-40ff-83e4-b5862d7b0257", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.225.238.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e17607-a5ea-4ce7-bb73-1d1c0847a681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.251.134.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694eb0aa-83d8-4de4-9be6-b88114d284d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.36.241.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--666c34e6-2863-4a7a-9c9b-32343024674d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.63.62.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043ad57a-3ebc-45a2-b800-22fc30327364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.79.32.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d047cefa-8047-42cf-bd37-fb0e5a542b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.1.65.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8156827d-570e-4fe8-8b74-eb7020e7d4ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.229.173.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1037bd-7b90-459e-a6cb-ab5b78eb5a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.51.40.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ac45a6-4f6a-42ee-9cff-4cae1a0c8cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.61.48.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339383f9-74bd-4f1f-8e0e-ef844c5b7aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.106.119.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce65553d-8b95-4437-91a2-4abfa24d8c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.110.37.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6754787-7742-417b-b080-fd462e4c2899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.110.38.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036d9527-474a-4617-b6cd-6f35bda51e15", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.113.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713f2258-82df-40f9-a46d-b689730fd169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.89.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9b2d6a-47c7-4d30-aa49-a2e2af200f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.129.33.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--185ec4e6-9a32-4342-b089-823f4ba3bf32", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.100.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37568e79-3012-48f0-8339-f0ff9c968107", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.131.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d1d763-030b-4114-8027-17697e553a84", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.139.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eed654a-b38d-4fd7-b288-d8331f4ea82a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.141.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c5bf12-0eea-4916-9939-2f997e15b729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.15.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a86fb24-aae7-40c8-852c-ebfc52df705a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.150.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b08cd4-2581-4870-8dc0-66552eeb50ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.40.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4411d07b-b843-48c7-8f2a-162c4bb2bf0f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.71.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c13f8834-07ae-4b07-8977-e815c69276b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.72.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0b2f1f-8c89-4bd0-80e9-5379ebe647fd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.253.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ae438a1-c511-4dab-a4ea-e62c9fa65391", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.29.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6cfb26-35cb-4ba8-acce-a000c20174c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.45.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805a1f38-c31a-4b16-a424-f9a19bc3099f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.61.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8150469c-1eb9-46ad-b773-fdd160369cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.129.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10723e2b-25f5-4d8f-afa3-83714e4e961f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.230.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a280b1b8-2a2d-4326-9de5-e9bf0950836d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.41.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--666ab1c2-f9b3-4f01-be75-f2f33f6a645a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.54.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbda7fc3-6cc9-49d6-845d-8b404309b462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.68.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f0ba61-6c27-488f-9940-475c615ea0b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.36.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c46c12-bd18-442c-bcbb-4014036a8a4a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.140.247.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--489e2bd4-75af-4922-a97c-db2ccd217f87", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.10.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebce07a4-62a9-4343-a29e-1821080ceca8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.127.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3acb64f4-e921-43a0-b398-f4e37675f118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.140.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b524b8cd-f718-40d8-b465-f1d40dd9db36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.162.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85659bd0-ec17-47f7-aa44-59dc91645e61", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.195.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89fdee5b-dce6-4570-84cc-6f4837e91f69", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.21.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3dfc4e-57c1-4793-ae1a-ee76cb9d9de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.228.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a56428-de26-4def-8379-e388f6240785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.153.236']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82a7870-060e-4229-895e-411711222697", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.170.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8066da7-f9a1-4f0a-a979-59ff75bd4867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.170.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca506dc0-a70e-48f7-9f7a-6c0626bd4c2e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.179.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f41f68-628f-475e-9c80-ee8862200970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.181.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab448534-d5ce-488e-b103-e435ed670df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.52.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19a59f1-686f-4323-b537-3fb1baa0e9c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.95.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53046224-5586-49ae-adba-34d6fda9417a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.95.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72edb373-ecbf-44a9-abbf-fdda67ca9e3f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.128.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39bb7329-09f0-4aac-84de-4aa40ef8f407", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.143.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74cbe27-2518-4067-ad71-4c01757b9351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.145.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c34fad47-a12c-4438-b4eb-f624cebd2586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.34.167']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f52a881-c713-43dd-bbee-4deb041e8548", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.212.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d79ed53-e42b-404d-ba04-7ba8f2b9504b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.246.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5628086d-95b5-4d19-8824-25adc85a6bd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.80.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6926e1-5653-4f38-88e9-bd3533303e0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.0.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffd1052-52db-4f46-8f23-79563dc39b46", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.3.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff707add-a1b9-4187-9709-52457cdcd621", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.198.144']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0e0cc0-86dd-4cfb-9ed7-f425e009cac2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.65.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa48ca70-6483-40c3-a651-24bdaeb2159a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.1.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e340692-5742-490b-8c84-5e267ebd6656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.132.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--023e887f-b61a-4f85-9ccd-c433a360d27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.246.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5794e6b-81d3-4d18-ba8b-c004f2ad1478", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.241.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4ae62a-cd01-4ac0-af2f-55cd8d761696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.245.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3791de7-03ea-44c9-88c6-1f0b93e8ca35", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e89723d-1a63-4d81-aa17-02c0fd367b9a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--121537b0-f2ed-4807-b844-15eef6aa48b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d25a39-f852-4c38-82b3-460b57d6e09c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.132.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e418507e-3d04-476b-bc65-623dd27bd193", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.167']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3fd2d8f-0dde-4a5b-96c4-5c2e40f1abc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.226.34.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39dde2a-f1c1-4432-ae2c-78f69526bfc3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.226.37.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a86127b-fece-43f8-8c7f-64bd880c498f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21c29c8-36fa-47ce-91b0-cd5a5eec2d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e574a39-a103-4152-addd-4e96103cbc85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69134a6d-d19f-4d05-9044-411fb2ea8161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.240.65.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e3a7889-5fdb-476e-b6ce-471c7d1d3d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c6b3bb-efea-4dc0-9a3c-3df33437a27a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.254.158.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6653e7f3-f4f9-4390-9e9f-62c8b5b9098b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.202.82.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1785b410-2466-417e-9b25-5cf1e094f37a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.214.252.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6889584d-dc7e-4e89-a7a1-ebbb02addaaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.188.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42d4c4b-f5d2-46a4-852b-a503c231e892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.225.140.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c93a26-4166-495e-b64a-a060ff7b8a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.11.57.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d338df00-db0d-4a3f-a849-f9fd29195e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.112.149.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f097880-49ec-43c2-b9b2-4c8b85426006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.118.146.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9150bac3-0f68-4578-9ffa-dfc82b3ae7a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.119.15.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b5ceca-83dc-403c-939d-712fa2ee2bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.12.148.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70134bfb-6b2e-4ffe-b802-1bd4148b4f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.122.48.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8a7d93-34fe-493d-be9a-b3db17d1d887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.129.242.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2622a7-69cb-4cd8-b660-9248a308231a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.194.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f80311e-e6ca-4ed3-b5c0-643d59b9331f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.46.240']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0bf3ba5-1206-4ab7-8143-59ec196c624e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.132.115.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fffd6f5d-2a82-43b4-8dad-48386e2c8e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.225.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d5538e-8eee-4a9e-a2a3-29774c5edfaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.225.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0047757d-47b9-4c2e-a3ba-2d0c7777d27e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.161.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e07f9a-66ed-45b0-adcc-7519c5ad4eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56ab24e-1014-4f81-97ea-575c0a3f58af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1500235d-335a-4357-8e60-50cca0e2aa8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b522f7-6977-41ba-bcf1-44caaa0fd6b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f559a5b-383b-4fa5-96ab-74dfeb448241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a6ef75-c0ba-4c62-b9a5-8b7fb273e98e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.140.192.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8272f7c-f548-428a-b5df-0d176aa95697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb545459-c77b-4230-a9bb-0468dc0db6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0febdb-463c-4414-95b6-aec122f27063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a479ef7-9083-4afd-80fb-f7789b0a8a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--078d9e99-2a20-41a8-8f4e-af8f52dcd747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--addbc968-dc11-4c3c-86a4-3bf8c79bc86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683d4381-ee58-4d83-a803-f61044473d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ecb640a-dc08-450b-9479-2a5faea2d4ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbbe40d2-05b2-4bdb-a79d-0eaea3925e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.145']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a29cee3c-ddee-493b-8643-fcc119865edd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8b30e4-c550-4e78-9c55-4f6e378e6b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7f7fee-8a07-475f-9860-c0f301580d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.166']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35bcc9f7-833d-427a-8e5d-9d172adb9137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffbbbc6c-6446-487f-847c-747d6b715951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc92905-6dba-4233-811e-f706f41b07c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19859cf4-3861-4c57-abf8-77b1da76f967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.144.212.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192eb94d-ab14-405e-b8a8-3dbaaa330928", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a406c6-76d6-48a3-8feb-28db74f1ffce", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9a608f-df53-47a6-b438-e15190f31ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c174497-0f1a-4c07-b6b5-ac74cddd101d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f904eb28-0535-4c36-bc6d-3d60bbf18ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb0a9dd5-1c70-4f76-9d8c-0732a90528d2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31b5f33e-7e9b-482c-b8ab-78fc48664206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e02b332-596d-4709-9cec-c20a9a58e515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a938b58-cda3-48a3-bcf3-10126f7e6632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a93f81-6656-4d48-8d2a-dec17aa5eee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5f37e2-6024-49e8-a193-ede9b984a9b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.151.123.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f2f95b-9ac7-4882-b63b-87f63f2cc112", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e444dc-11f7-4a90-a11e-b8e10d0add50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e94ec0-fd40-434c-94a1-6d0b9e43664a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc62548-9542-4f7d-a21a-fa646c7905c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10203e2-5b6c-4499-b647-df01039a5d52", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a417c1e-0447-429d-befd-55f3b312b39f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c064a955-a95f-4210-a90c-e29c4c6a199a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7bef8df-2282-4566-b9d7-de767e466559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60555601-442e-4631-b5c9-25c870709ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb48e614-706c-494d-97a9-5ae51b962e96", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.138.191']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--543624e7-bf25-42b4-a186-4b0d3a3353df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0280b77b-2c15-4354-8d21-236eeb6dc3f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89272661-68ad-41a6-980a-7ba961784fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f291a98-2521-44fb-91f2-18502b48417d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c385de12-466a-4fb6-aa33-991a1aff7b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.171']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22aa3ebc-a69f-44e7-bcc0-ca2cbe5c7766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e4734b-4c5a-43cb-bdc5-4ca5d37e84ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a24ac7-3e78-47b4-8563-2322110ca32a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de477c4-2812-43a1-9cd5-1bee41b94ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a356aa5-d025-4e6d-b6c7-3b1180c2b124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb7ed2e-05c5-4e22-bbe5-5f105e220d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.57']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2fbe04-03a0-4e88-8fc4-af2213ae7fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f852d41-6927-4fa3-a1af-95d4ac9a35a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2850215-8d98-4892-ab20-9ed8f4edc4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1783d082-6cae-4d06-9f79-538f7363571e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.63']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f4b0ce-eb1d-4497-9d69-0488a8336c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4032d8a-1ea1-48ce-a45d-3f453d9b8c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df669f2e-b166-4faf-97e7-4f909e063161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9887cd07-a391-4fa4-b019-f6442dfb15a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0706267-9373-4a1c-a201-3679016bdfbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a769e030-4a2d-4bba-8c84-0d111d2d46bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc47ae62-0ef0-44b5-8248-c5575c761dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65bde4f0-8f2c-42d4-bd08-6d34d42d8d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.152']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e8e3a8-6edb-4435-9641-b5da89372426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b253e6f6-ee75-46bb-8444-a154464790a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.166']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2513519-eb22-40db-92c6-d7096b917dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d35f44-4bf6-4cee-b3d0-eda5e70b2912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91467332-c884-487f-a505-b3d0c056e7d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c654c6cc-3258-462e-acc5-097a01815e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af175c8-2f60-447c-a60d-20aef37bffc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7448f384-498c-4a1d-8e40-5c84325bdc5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d852b1-8e92-4382-a6e0-b5b7a639eaeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f84d95ae-ac62-4496-9cbd-8fe865f2a09e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5058d4-7661-460d-b613-9d673426807b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72fd6827-848f-4c03-b051-425f5d0ee675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3103b8d-99b8-4e37-82a6-53c2e1a8a75a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce9dc2d-c60e-4289-8441-f8e431ee5daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b50cc9c3-17d8-47f5-bb8d-353566e0be14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff7c5c6-04dd-4b81-aa40-7916b0a9c60c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87629fc-3836-42e8-a8ff-6ed5fba8b111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382cf588-da79-4f14-b13b-df253f479270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764bdc83-8fd8-415c-ad68-749ea4fbbbc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c12c23-bb0e-4e55-b393-c2285b5c2754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ab4476-6645-48ab-9b1f-d1af7faab538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed17e8e6-dc4c-4c29-8461-6ef1a417d177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8941242-2bf0-4bb7-a387-10b2da9a3b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75026729-fcb1-4a80-a1e5-7c354efdc662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf45718-260b-4431-a9fb-88ebfcf67792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af330c5-7a8e-4bd3-8d85-665beacf2ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6f89bc-c908-40f1-96b0-cb27abaed408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12452b6-e6f8-40fc-84c1-8ec73d845725", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.164.39.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59907a89-912e-45f8-8b47-b0facf9b3407", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.171.132.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a80311-e464-4972-9274-339220b5392b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.175.123.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ccc07b1-463e-4099-b674-9fcafe6630a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.179.134.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593ef7a7-143f-4ed7-9bbb-31e336f173d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.179.163.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8aae7c-d828-468a-be9a-71b804941914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.186.198.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85029cb6-b59e-4172-b710-13eceb4d5e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.184.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76946d6-e174-4f8b-a5de-c5268a8ebfd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.204.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d95d410d-721b-4c6d-88c9-a39475eae168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.63.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356477cf-0b9e-4f21-b2d4-154e9f1f8405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af53309-a3fd-45f2-b6dd-10af00ea5616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87cb50f8-1c23-4304-acb5-a08c80bdc0ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94610b96-999d-4edb-8b13-72f349e42051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de717e05-feee-478f-b3fb-a8022cae11cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b26d21-ad61-46c2-a531-580bc31ed8e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.251']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90825ee2-beb4-47be-ba35-c72d6d97d732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98c7af6-b28c-4378-afdc-a5f5e2a36b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bdc90bf-de42-4b0e-9202-3d20c7926b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6097c672-186c-4e2f-a0e6-e81cdb49e210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88e224b-0b59-4f28-a8c4-98c403b0b000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8f0adc-5717-4e2d-9e62-df7d8143c289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b87e9b-aa1b-432a-8531-e1dc863e43ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c18b24fa-0086-4242-8078-5de77dd881a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ceb34b-de13-4921-ae35-93dd21f0bfa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6621af-f48e-43f0-bf47-4d82b7dafa4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22232de-dadd-427a-8cc9-3ce7dffd6031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c690070-6a01-4a61-b049-08a06d313f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.226.104.1']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8550dd-3d07-4377-baf0-0ac2942c839a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.152']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71b2116-f16c-4d27-a924-f1bcf9630d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f02c230-bd7c-4f33-8f2e-da8e47d42916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b67fbb-6ce3-4bcf-a3ef-c5ac43ee7ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2690f9f7-45a0-4daa-b0ef-1d8bf6c23929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.240.88.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fd974b-c723-465d-ae2d-64246a35c106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.244.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e7a00e-3b82-4610-bbc0-760ec3945dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.245.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68c68db-61c7-43ef-889b-69de0d3b77a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68babdf-75c3-411f-b3b9-a891567b8f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcaaf5dd-56f7-433c-80b8-9bec763d6271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd00cc54-3f8e-4f40-adf0-1a87d7cc1f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d92aef5-c3c4-4783-8c19-c584efe4da87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34eda9b6-62de-475a-8b69-f3b7a2c6248c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9ca47e-ec7e-4922-b60a-85ee6136f7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1cb618-ec06-44e5-963e-f63b3439b892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66086747-0397-48dd-adfe-64d750c14ec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.113.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7e547f-3478-4e08-8161-e434dc08e572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082d1d14-7767-48fe-a542-649f0945728b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef16167-8077-452d-948e-e79580a66c39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.14.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82d98f6-a2e0-4a71-a4ae-39bd47155078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5405b903-7257-4707-80f1-e4e1144df850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.41.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f75a97d-deb8-4771-94cc-f43ea78c5d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fef512c-2e24-4bb2-9388-639111eb4bf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26211130-66c0-4b3a-8ca4-9430cae5dbca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.65.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37af6146-0d3f-4a3d-bd68-e15937004ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.74.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc3db4d-c238-4093-9146-df40876bb8ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.75.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--146d5869-5669-4e9c-9418-6eb8c4405917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1372cad-6c66-446f-b207-19f763077991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b73a8b55-fcf7-46bd-9374-dfeb0e41ca96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ce9c72-6139-4d26-89e3-056cf9af78c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f8ceae-544b-4be2-873b-97f4e59b2a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.88.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37286cb9-5fbc-44f5-af8f-bd92af005cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.88.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85a4096-a5b6-4378-986b-a6e1effc55f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfebbce6-c6ff-4be5-97e1-68dd7a94ee00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.91.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddea4d50-5d87-4c6d-bc8b-399259cc1b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49a6bbd-0a77-4e3d-a3c6-6b7a0ccdcc76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deadcc4c-46c0-4ba4-a13e-da7ecf4dff49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5bd86c-2543-42d9-bcca-4bffeb6dd08d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.96.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2438676-2e0c-42d1-b367-95a7a7712e95", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.4.179.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19b1a45-9803-4e16-8b8a-2b6d497fd6af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b67af66-0267-4664-a564-310c40d3d28d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d396ad9-d27b-4132-b09f-f68c7836aac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de8b9c2-8beb-45fe-aa73-1baedc857265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.37.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25afe080-fd3b-40f4-a9a6-a929fe7eaafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ed2577-71ff-4c90-b950-e8a08478aa5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18690bb1-0bf5-4b23-8e41-4fdb3b85e8fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.5.102.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592630f3-3dd9-48de-9bd1-6a569ce9d6b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.153.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2442172-588b-40ff-ae2f-c9df27ff9555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.109.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c03942-c1cf-494f-bb28-12ca7a88ba8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.109.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2aa91b9-12ca-4c22-afc5-895c3a9a8304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.109.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac4bb4d-f6f2-4091-8043-964239875e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eded2d6-1f0e-43b3-9b85-f67cc1122f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.218.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50bbc922-6c8b-4ad5-b386-bedae2c6125c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.79.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d62d19-610f-49be-91e2-94beda056ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.82.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa90ee1-e766-4457-b191-17dbe60a3f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d9ecfb-8b95-4055-95d0-1d12f3f969e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc25105-0740-4ba8-80af-3534b50cf887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e3d419-3f89-4f71-9b4b-d0a0e35d8e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae52474-883b-4971-8ce7-f1906309458a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d39ace7d-e13f-4a00-8b03-3455895e56d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.94.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9419b217-9979-4bbf-9c7e-f58918ef6cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.58.52.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f47c99b0-035c-4812-8379-ff22d8d0e886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.63.4.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cec2760-0fb1-4d6f-ae4a-5cafdfc4176b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.67.217.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07f78bd-006a-420b-9e49-5ad2e378a4c8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.76.188.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d9f431-8f75-4114-a08f-355c35b2b166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.77.2.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5652df3d-77ca-4078-b4c8-b140f05bbaa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf64614-3d9f-4453-b757-9c1a3a79256f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204482aa-bb3a-4fd2-8331-93ed8967ff21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bfa7354-5499-44ee-b888-23cdb16f10df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a30c9a5-0379-4eb8-b898-6070d4a6c750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8269bb-6f92-4fb3-bc8d-7a267722a994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.110.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fececc-c875-4073-9b98-2d4ef20fd6e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4046a3-c5a4-438b-b1ec-43fe712b9961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a808a3-31d5-4c4c-8741-b043d4df9c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ec1fc4-e871-4ba5-80ce-dc1df4775c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea499e9-81eb-4f25-98b8-053a839f19bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72da0cd-b04d-4f7a-9440-fb49092b2cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.134.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a141b9-6b0a-4161-aa54-50736d0e97a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.137.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672fcca1-aeb0-4b30-930c-b77cf3eafdb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.143.222']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10435c81-0f3d-4e53-ab2b-867c57bf90ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.149.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f78b6db-cc50-4c19-ae81-76fd7c96a48b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd27682-daad-4056-a25d-f771be8b69bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a964f90e-d96a-41d2-8839-f52c43df8b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.155.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19eb35f-5fbc-4475-9545-43ffc725ac97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.159.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e53afd1-8dd3-4937-9293-3009b59efbe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53a0258-c373-4ac6-a666-530ee300e19a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.167.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6b03f4-9b60-4ad7-af0a-3493516ec8a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.173.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffe9e83-41d2-4cc5-b269-64be3f6f34a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.173.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc53ee6-e35f-4ad5-96c2-840ac5b39343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.173.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1feb931a-05f0-4cef-b0c7-6decb4d2e303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.173.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c761b9-cd04-4958-9077-94f34d113244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.173.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe162b1-5356-4248-9da0-88800391d0b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.173.178']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d744bc9-284e-41bf-a37d-3d9cc13a4acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.173.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b4e08f-c62c-48c1-8a71-1cc92e11a65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.173.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e024299-3f75-4cb6-b79e-3d41c9a512d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.173.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe75c47-e444-4b01-8134-93db19029e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.173.222']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0ba2f1-6a96-4ef5-a840-5520af70be58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.173.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff447a7-e1cc-424d-9b0f-e2e9951b779a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.173.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83e0414-2784-4f70-b846-7787b69cb2a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.173.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31369681-a895-49cd-b7ab-22380033acc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2f77c2-0005-488e-81db-18b8a175e8a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c436702-1e21-4c18-92d1-da90e0d9a267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b0fbeb7-f687-44f3-abd4-a1d22afdb9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1e0375-ab89-4a5e-bbef-7aac11775cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.251']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd484e7d-0c79-4b37-8a67-c98ca598be39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdcf3f38-ed11-48a0-9d78-125b357ccc56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f170f976-4839-4b79-b95e-ac2fe1b9c3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.189.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f11e4a-fa58-4fd8-9fd7-3439524d4da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.190.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf98c85b-9e2d-4aaa-b0fa-5a5c3f0a21cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.190.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb44aea-d0c9-49be-bd94-cddea44b93a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.190.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02565d6d-9d38-46ea-b7ad-2832666bdfba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe69b881-6260-4537-b921-c83beb203f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2154b6a-4697-4ea9-a263-6544d645654f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd592d8-7983-4373-b101-5b8122e8a0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de8ffef-531a-486b-8728-24f774171d3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5ced98-91a7-4d8c-ac8b-96ecd1aa14f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116e6a54-c3ca-43da-8c86-2674a5f58542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01d670c-022a-4886-befd-5b941255aa1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.211.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717531b0-14e3-4bf0-8fb6-337c0d93a9f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.214.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13245b0d-37a8-4c58-a219-345ca086e080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f84a06d-d284-4e79-a253-2ff76ca6d7aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.5.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24738b79-5763-4653-89be-b1bf52bd42c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.8.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a69587e-d0a8-454e-b690-5034c8bb5aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f84d0e99-b5b7-48e5-bda9-9ffd90724b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55acefd9-78b7-4a33-9e59-389355741a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5683f770-9dff-47f5-aa0e-64cf4271dc58", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.81.23.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205a0562-0869-4e23-8593-d2a088dec0b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.81.33.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--203ea74f-b986-4006-9c4b-190b1899fd47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9c20e6-282a-413e-be90-393ead517615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f469b060-b147-4323-9c9c-35d20e8f7051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e600e7c8-edee-4703-b248-ddd4fedb2bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df5175f-547e-4449-967d-7b41c13de441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5b59dc-8460-4504-beb2-b1a92ddb4d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ef16c5-e2ea-4555-8f31-212975736cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa196b76-4acc-425d-973e-49dbd316bb22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a338838-f68b-46ac-8005-d5617fbb6273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925ed4ac-7cc3-4f28-961d-7a85936f938f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be3e281d-e12e-4700-ae6c-abbae5a3771d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e7ba49f-4a10-4a66-9b1b-279e7781ffb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47278c95-0bf4-4008-b684-0d4a7050a892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91bd35f7-250d-47c2-8636-5df33f8f59b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6e7ced-a2ce-42f9-9794-7508b1311c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3695ab8e-0c4b-409f-9b46-0d67c482f317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c58c7b9-9794-4eb8-ac8e-1c6ee581bf8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc4862bc-ecd1-4bb6-944e-c5a7544ca886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3797b1-4883-4380-b2c4-b1192eebbd28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51cbf560-e292-461e-a79a-184ae98403c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cadccdb-6a05-4899-b3e8-2d5e9482bde9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ecd860a-4df4-4b04-9241-b2f437e63938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc4b515d-d743-4a38-bd91-1b2bcc3f5179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c811909d-8f39-401e-9073-f4fc6751b7b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cacbffca-86a0-40cb-8298-f260d5d3594d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273474f3-f5ef-4e80-8f20-fd1c9033bdbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a63d65-7b6b-46e2-b906-de47ae77c700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be14ca92-7b35-4aac-b930-e60d6c9c2f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae10f767-77c1-4a25-a198-0b6a7d28b15a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a507fbc0-4e04-4457-b804-f71ae9ed0ba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae6433b-c3ab-4726-be58-afd9780a991b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f43979-8baa-403c-83fd-543658def126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee198a5-8dce-498b-9557-7ae664900a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d79a033-98ea-4465-a9ff-565898d2ec9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ecb9c6-e64c-40ab-98e8-aae14b3e081f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa152d28-28e1-42de-bfc2-fe0023bfb8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b795a0-6e19-4550-aafe-eb4688676f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d676fd-0722-4bba-b53a-daecb3e1cd9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4efff3d9-1d58-4d6b-9ea1-a0d9178c2ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a4a29e3-2896-4ade-9072-d82aa8c2b37d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49dce0f4-cb57-44ce-bfa1-1a84bdb21916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae401ae-d567-43c8-8841-f444f153e855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b76fcb-799d-4a02-8c30-b10cf50abec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.84.107.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d764bd-f757-40a8-a6fe-a79716faacd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.84.88.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6d4330-aceb-414a-897b-a12067c08c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.153.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc2be56-f0d8-4733-83f9-6147ece1e423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.9.168.192']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3dc53f6-534d-430d-9af5-2260c28585a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c551de43-546e-48a1-bbff-678e82f18284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87fb6b2-08ba-418d-97e5-cb03f4810ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.29.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10141722-e09b-405a-a537-8bef363961f8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.94.209.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8d4a7c-dbd7-489e-9f0e-a1d0f9b302cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.146.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5ebb49-6c58-4656-8d6e-fa3047883568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.167.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3c5693-f902-4eea-8c4e-d8b920b0284b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.173.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c0c2fa-8175-40ef-bd26-5a4c4c172b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.104.76.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac4b32b-222b-43bd-9c5b-96144d9c12ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b77861-d489-41bd-a447-05b3a0358e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac52762-57e2-44b0-b97e-1e3b09812c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.178.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9c213c-f9c9-462e-b44a-531ec486b9be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa603a9-820e-4e42-9e60-6cb9abb5995e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.16.202.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da37b52-6f90-42cb-9bac-0ae666a110bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.67.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a66eadb-af6a-487a-87bb-c30599fdb334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.219.3.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c3875f8-ec94-4269-97a3-104dd42ecc90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.225.102.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5004a680-3a08-4a46-95e0-de2b971825b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--844026d0-1a99-481d-ba63-5dc7a30e9982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea4bae3-3ea0-4aa3-a65b-382e9363c7f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e1c8ac0-cf38-4e29-9f2b-e84d8708a7a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579c6b15-85b9-4938-9bfa-59904ab0e709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa89b340-0a06-4082-a44a-5c87a3dd0e47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb0fc0d-45fc-472c-86e0-df21bf1540fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951034ec-8e1a-4f40-b34c-d9cf4eeb8e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.167']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e728c2a1-b1f2-45af-9fbb-6f8b0ead29bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6891525-f69e-49d6-9b0b-5838cb5ae32a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe0c338-89d7-414e-95c7-f7c8685167eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9cb050b-ecfd-4ec7-be7e-324be5314183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.183']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9535aaf-82b1-4869-a17a-cc6bfad6f3d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.192']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64e7e660-9d40-44da-988d-a8c2b94754a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.197']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b180d35-6369-4dfe-bf92-3c7d91ebb9fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--176f2904-3ee5-40d2-80da-467e65d035fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13cf9e7a-5c8a-467c-bf68-f29de36da445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9ff901-f39a-4dcd-942e-6f1e6fb75d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8863a0c8-5c6a-400f-a844-9ac81c8aff89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b59517-7b60-4bb9-ae1b-958d39874f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9213df-24f7-403d-89fd-a7ea343e5bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92dca9d-61a5-43b1-93d8-fe1f1780184b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b678a5-cec5-467a-bb7e-c354c5bfb372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4aa1bb-591c-466c-84e3-fc58fbe0bc6a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.29.234.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e1faa6-f0b2-49db-abf3-6669c2e59e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.30.165.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--370f1643-5fcb-43b3-801d-e61998e4d253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.35.93.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c00575-4522-46e5-9771-fc400ed0395c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.48.92.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a23d6f-d136-4306-a0d1-30773678b87d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.100.249.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86236ed2-8b2c-4b94-ae4b-48745fc0cca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.101.11.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969bde14-85d8-48c8-9339-78f58cb3ab4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.102.144.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e2c3ab9-0400-4f7d-800f-6332b155bea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.106.154.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4467de19-d511-4179-8176-06be28d1c709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.108.129.145']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274d2e87-4a30-4629-bac7-93a47ba43cb0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.228']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9fc122-98bc-4846-ad3e-e530b3ba546c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.147.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367f3328-6049-409c-aaad-189b3436fb41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.201.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45779070-9aab-44c6-b027-c645ef765dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.203.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f9f314f-d1ae-43c3-aa84-1e5a24c7fb18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.206.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c730e6-12e5-4f21-8aa5-06087780c756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.233.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a4fdb4-879e-41f3-aeca-3b30409f31bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.37.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d209a486-3eb1-4f84-bacb-d3e0c2e64cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.54.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49bb0e9b-28c7-4b25-8c4a-8a99398885b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.66.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5207b567-54b2-499a-9aa5-36f2ac373faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.90.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29cb71d-e69f-4022-bc07-dbd1ab477dad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.20.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f105c3f-c29e-4b76-bc48-6e64cd7289ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.238.101.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef7bff5-f9a9-4bb5-9e58-3447790885d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.242.111.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad188ad0-ad53-4ba5-9130-155930121207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.242.37.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b99c574-506c-4e6c-bbe9-168b3bd8c551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.10.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5a9956-7bb2-4c29-bf54-ee944f981f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.10.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10dbdcc4-ccef-4c3e-ae70-1517d80bc4df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.10.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef0e76d7-b2dd-4d7e-9013-8188db17c60c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.113.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0344d8-412b-4bf1-9db8-828542156b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.13.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6c1c8b-ab95-454e-9594-f2f6f4e1eac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.130.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e9c4642-6c09-4090-8256-731f7fb9692f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.132.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab15f42e-293b-4406-9b7a-90ae6dd0f53e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.132.255']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c64f22f-065d-4a33-a668-954fd91f5bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.132.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3095eb-c073-4fbc-858e-498ec26f9ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.134.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d89678e-6b49-422e-9500-a8dfc25d4654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547dcffb-beaf-4cf9-bf16-867a27b5694c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d0812d-3318-42b9-a480-eb78f3c8137f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75046d66-96e8-4622-80c8-90ac61aa903f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--271f6eda-e610-4988-81e1-af494fe29049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef9b75a-06b8-4195-9ffd-f6b762629aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbf63da-c412-4b7e-aec4-3518e2326774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca1b867-6b32-4df3-8047-468d81c00793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c0712e-35a1-4155-b68a-83760db88c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a45d9c-f721-4a50-92ad-3e727a92be96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97ccb13-46b0-4ca6-80fa-afc0b9557958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a330aee4-b687-49e0-bc97-a4434d1d7b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53fb9c18-b8ff-4b75-96d0-f3ea6c39e185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f82fbe5-cb3d-4252-954e-367151230ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74cc039c-46bb-4e62-ae5d-de231b1b9a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523f2e98-2e10-475b-a08e-18a7ded69d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e67d134-7d69-446f-b662-82935f90bbe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363f63f4-eb1b-49d0-97f0-961295c78f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.26.63']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f30a8c-d85e-4a67-a978-7df493dc14b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.30.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18da5341-90a2-4213-8aa1-c6b28a866dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.30.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e138f350-c8ff-4f18-9bf6-5b170c535f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.54.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f75df6c-f06b-48d2-9f17-51cf4ca4ba4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.54.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6e1a05-77b7-42fa-a3fe-bd5d08a6e8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.61.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f99af5e-25c7-489e-a451-486378abff9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.9.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78646fc5-808f-4eaa-ba22-c897bc8f70a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.112.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75268629-36bb-41ac-ac26-9a94d3656757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.119.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a17ba50-4cab-45fb-b926-34592327b62c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.119.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46db12ca-dc6e-4a89-8f64-a164f021157a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.120.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240485ae-81fd-45b0-a440-4fb519389207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.121.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04289ac1-833b-4cfe-81c7-be268caa9f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.123.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e419c906-4a74-4b48-8743-d7a8ddc9cb53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.129.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f88562c2-942f-4266-b23e-57ec46085df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c18fc1f3-f1fe-4357-99d2-3983fd690e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.138.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2cf8d8-b802-4255-8784-35161902edfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.143.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25e9b8d-a2e0-4f49-89a9-4ec17f94c6db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.145.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac110322-d634-4f50-bd1e-656d9fb33c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.148.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218dee0d-743e-4e77-b21c-a9889b9a7ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.150.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8cbfc95-512d-491f-a933-7ab8340daae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.152.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f2e41c-eeaa-4dfa-a6bd-5e0e06a74669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad493ed-52c8-430a-be60-c364dfd00dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b52e5c-3573-4df3-99af-95a5a4fe4f46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d024022-e62c-418f-b239-172981516675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10c527e-e7ee-4c69-8a64-923a16a32503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.161.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc92cd7-9142-4823-908d-f27dbdb2d0d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.163.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c6ee45d-6e69-46fc-8066-0c3e59e85a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.172.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f41b90-1fa0-4a5e-9cfd-5fa80b3e1f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.174.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4be429-f7cd-4809-a124-1afb05d79ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.179.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40569a49-1b7f-4c49-9a94-9051d83792b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.180.183']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b5d9be-957b-4e0c-a3e7-0559456b1dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.188.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2df8f89-aa96-49d8-8266-665f39a12c33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.189.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11fd6e0-3d3d-403b-866f-a8c7397e3aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.37.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb09946a-79bf-4c03-b71f-06fb9bd07b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.37.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32bacea3-0d03-4e0b-981e-48ac5c72cd0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.40.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962e76f8-2025-49cf-a6e2-e11ffbfaaeb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.43.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b35a657f-05e3-4ebd-ad44-54c44318b952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.45.238']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa2e0de-908c-4d03-8b90-ad8aef05aa13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.45.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f177374-4fed-42aa-ae19-b037c60555d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.47.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f35e667f-649b-4aec-960d-d7053b98fbd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.49.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95802dd-0131-48c0-81c3-bc0fd6482849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.49.81']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af0e42a-08d6-4289-9ce9-04109f921184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.52.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6163da-46f2-4e44-b5e5-f297106958c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.53.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f82c385-32ec-493a-8d2b-58e9ffe456a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.54.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f174cd60-97fb-4a65-8dfc-72f5e3495857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.54.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--002f7b6e-53c1-40df-b440-3ebb2df0c639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.55.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e14cb727-d6a8-4e16-9c58-dd9eba39ea5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.57.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2faebac5-d445-4eb6-a55a-e7698bdca7d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.58.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9cada0-466d-4482-be72-9538fc6d83ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.81.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9531643-bf48-4319-8f65-9a676156abf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a5becc-9b9d-4f8a-8148-c48ea9bd861f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.84.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d54a06-0a04-4fb7-a9c4-52e01aee3ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.84.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2fd6bd4-56cd-4329-9eee-47b29d012185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.85.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2bec9d-8395-4518-869b-67c5866b55f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.85.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507d5a60-31eb-4ab1-a32f-0ce56079a81f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.87.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2347d7ca-cde6-4436-bb59-2f3d90fb63bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.87.56']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55fc9444-69ad-493e-97f6-ac7753253e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.88.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b55dc4-56f4-4d46-85ae-99cc8f723d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4497e8de-b7d4-433a-b232-cfc0ba9055da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.191']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde5e403-90aa-4516-883b-b085e821bab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.90.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b0d21b-f364-4513-a55e-905217e9d8a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.92.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745b3278-46a0-4113-9201-7dbe76e7c869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.93.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609c33c4-4226-490a-9f6a-413189a46132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.145']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b077defb-3bd0-4095-b2ac-66f68c203634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36257302-0152-452b-9e64-6677aad74429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb7d786-f662-4e5e-9657-77f2c3f7f613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116f3b95-c28d-4c3f-9a18-76fc151c6c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a25689-2bc6-46fb-9865-4223d4b5482b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d13d26aa-d1d9-4252-8163-bc2d4e2b408d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.1.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310a374d-c586-4a3c-bbfa-b4804ddb0df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.100.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41433b80-aa6d-4408-99ab-6e247525f4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.101.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4412bb0c-0199-4d7f-bb1c-aabfef0cd899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.104.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa99d605-34a0-4f7c-affc-7e2e41a25d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.104.186']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3845294-93dd-480d-9f8b-7e72951231dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.105.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358750cc-7884-485d-b3ed-a678eaaf2bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.111.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a127da55-f33f-4934-8eae-adb48e4dff68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.116.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ea68b5-933c-4313-8b72-6ef41a4ddc64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.116.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07bbf72-0a72-45a8-825e-0b3a1adaa877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2931625-b251-4972-b913-1d3aa8a39159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a24ba6a-6130-4eee-8b7c-a6953f07688d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60cd368-529e-4b36-b3dd-8a89d514d1c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42913602-4728-4b26-89b4-b62a7efcadbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.118.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f261db-90c4-4be5-8587-175050dc447a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.118.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7552ca3a-bd86-4b12-9b1b-0382ad82f38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.121.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc308b06-7a05-42bc-acfe-eac42a018135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a3dbc3-d0f7-4d85-bd36-3a0fc4f82320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2b8fc2-2680-45ba-9fe0-51a94215647b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.123.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b220e5-bac8-4f1d-8748-891f989fe582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.124.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654683f8-1f5f-487d-8440-efaee0a029d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.125.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f567be89-2055-4e77-ac1e-06c369002fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.125.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--660aa3b2-ee4e-4df2-98dc-e5a1ee955853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.125.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d7b722-a84c-436b-8995-d315cd4ad103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.125.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52732208-f628-4d6d-869b-a2b0b5557cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7e64be-0364-4c4b-8e57-b05e704c3d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b611334-5407-4715-ac4f-fdcaf216ea90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.127.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf338588-ecc3-4942-9531-401a281621ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.142.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f678a0-c392-407a-b813-c3ebc338dcc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.161.178']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1947fbe-178b-48ee-9035-860f9eb6e223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.165.222']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9bd8b7-329e-4b4b-a3f4-0da8ce4e77cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.17.236']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68afb57c-77fb-4921-9905-d6c71d7aec15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.170.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d6ed4d-4233-4a47-8a95-afe140569f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.180.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5cdb05b-1c4b-40d2-8468-bab8bcee8b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.182.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2a3b60-7cae-4830-b807-75134d71a4d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.185.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8f97db-aeda-42a6-b948-6400e58c7b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b2e0ed-b880-45a1-9c08-4525f64dbb59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855c8a48-1463-4c2e-bfbe-2b0deafd0394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.242']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d296bd1-2772-4a5a-89a0-105b95514584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.190.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8b8e27-41bc-4adc-b97b-bb27d3ebcfd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.190.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5156fc45-26c3-433a-b374-e57c64be7e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.191.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20aa7367-f77a-4f3d-8c61-49831dd49646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.22.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6aa7ba4-aae5-47d1-b621-3bbd0c190e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.243.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b180103-7c3d-4452-826f-459d359bf4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.246.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07c808b-9656-4c37-b52f-7b4c10ef68d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf80e05-344a-45c4-8536-914857ee7364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c937e42e-32b5-4701-8d2b-cc5a9f7cefda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4746b9-5299-454b-9e9e-355ba15d0063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd54b0d-cbc2-4947-8039-a0ab7833fe94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cadeddd-532a-4bde-b05d-0d0a424a199c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.252.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1263b6d-400e-4f8a-b66d-97619b531b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.253.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9cc9eab-1923-4a0d-a49a-fd028d9cd98e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.255.1']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa42266a-fcc4-450f-88fb-7bcfd2edb38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.255.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b88ba51-bf0b-4119-a76f-764a390a955f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.28.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59be9a97-d0dc-486e-a33a-e4bbcd17a349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.31.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0777695-395f-4fd1-abf6-0f32694f2e03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.33.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3288cdce-0138-40bc-b25a-f8bcf75b71ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.34.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d3c611-f0e7-432d-8d2c-741326726e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.42.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--304aa8f2-cf09-497a-b8bc-fe30a27e1f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.42.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2957d1b4-475a-4fc8-a25a-30529f21f51a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.44.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc3a016-2213-4ca1-826c-a8bd45a2e6dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.45.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f91b17-e9c4-4aab-9028-751309e1d688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.48.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6494ce39-5952-4d14-bb52-72dfe3d37965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.5.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423db0d1-d8dc-45f4-8ade-4686737c4e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.51.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3793887-b9b4-4ad6-b6f3-16dc4419986b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.53.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1475bdbc-98d6-4e55-b02b-39052ba6f476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.62.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e7d7637-6f80-497e-85ce-5aceea624d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.64.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b262f8-75e3-421a-9650-67d4dad8ec35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.65.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6907eb-959f-4bad-a457-e450b3254526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.68.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c775e561-c8b8-4571-aa5e-6c26c111bd09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.70.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167d25d9-0b15-47ec-bdf2-e797d9244bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.70.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b4e464-ab75-40a8-a5e4-77aabe103c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.197']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24616493-561c-4e97-942b-59d1ac50e981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a59a5c-8ad1-428f-a6d8-376b9c785ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.76.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca3bb2ea-c4c4-4c33-b178-2a05b1fbbd87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.79.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4ee2a6-bb2d-4653-80e9-85c9bd5fde24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.81.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3398e9d-08ed-449f-bc9d-1839de0307a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.81.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3c0fb8-8dda-4694-aa19-b19a391b56c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.0']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba079e5-5588-4637-ac5e-2849c9c9951d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb7945b-6116-41ec-8b46-63419643e088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.88.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ce3350-069c-4a01-9e45-4f9badd75c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.9.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508f7e5c-4b56-4f63-b7f8-409208b93907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.90.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f6817e-9334-4fef-9d43-64e13acb65d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.90.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd5961c-51ed-423b-9666-63087d6ce32a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351da9fa-5c96-425e-8a3c-6a3eeba4dd55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.93.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb940907-9920-4c29-b315-02d6d12d2ece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.96.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e5b14e-1f02-46b5-97fb-1479c88f52b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.98.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414c384e-a65e-4f81-8357-bfb4d1dd9ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.98.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b410d96-0dba-4087-955f-524548f3bda4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.245.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04fb76b7-0244-4188-8d3c-2f2a50c49b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.5.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e342250-475f-42da-8a54-3d1730a69aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.126.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf867d1-154f-4c01-923e-82179e02fc82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.131.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e3fbf7-96d8-45f9-bf9a-b3754f98a41a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972f7725-3a5b-4a4e-bd19-0afbfa153ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.147.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c8ebf43-0c1e-4bbb-bda3-320297de760d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.147.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c709e7af-b0e1-4bb5-bb57-3ae9b58570f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.150.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86b8fb7-6ee3-4f05-bd99-7b70bcf60d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338c65fd-0157-4d65-8a95-2e9f85452d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b7f374-8e09-4aa9-82ba-167ac439aa7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd795e27-d64f-4b25-a607-5343b79227f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.158.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac89b032-1535-4096-8e57-098e6ade70f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.159.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb390187-3555-4093-922c-4701323a7ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.167.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78b9b89-b7a1-428f-865b-8a6f18724b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.170.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f4413d-1d5f-4b31-9122-2c5b4c5fe53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.172.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c6867c-46c1-47a7-a5e7-1d4ffa211f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.177.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be79f584-f917-4045-b8c5-87a0573c3c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.177.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeaae519-2c7d-48c5-b0b9-826cdf63df8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.179.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c0cb8f-cc15-4454-b44c-6b48990b6e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.195.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de01e6b4-976e-43d2-80a6-cf918e46180d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.195.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54157fb-a455-4c26-8498-483eabf0b2c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.197.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa24abd-b2be-409a-8e84-08f7bc905528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.200.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22761774-b9cf-4d7e-b014-83fce114a3e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.206.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c1a03f-63bc-40b6-8f83-5f4b71055fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.22.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a749033-7c2d-43e6-9414-9f374f2ab941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.229.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be63190-c783-48e5-a1b1-fe308963d6fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.235.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190bdc28-2443-40f8-b1f0-579684de57d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.240.228']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba9ac6f-9e50-45d2-88b5-c48929ea2062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.242.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5f61ef-37f6-4204-9c7d-d11556cf3818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.243.81']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2a8f1a-95c1-42db-897a-509a950ce86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.244.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef499da-c6a9-4ec7-8535-c65dce924dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.245.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b92473-eb20-41d2-a40d-01b67cadf621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.247.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31cc541-ff3f-4ae9-b185-fc07d00af0f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.248.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a1b3e5-01bd-4ed8-acf9-9288492cc4db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.25.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707ffce4-0df2-4666-b88c-1a83425e400c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.253.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccdd4cee-3c14-4f44-878f-d74aecffd7a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.254.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0830db-ec85-47f3-a594-eaff08376959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.255.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438d84f1-e2d4-498e-ac23-683d3b00bb48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.29.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f477936e-0b35-440a-8ccd-bab1a67b4320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.34.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--231c9736-9286-439f-9a30-3470e0c6afff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.36.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa127bed-fc9c-4c81-976d-1d7bdfb37734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.52.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abae8adf-9970-44ee-9344-fdaa8c580553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.67.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc8032d-6ff3-4bf2-b6d2-a64ad9907e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.69.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a3fd2d7-a278-4129-99db-c03f59afc9f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.71.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275cf9d7-f3f8-4d72-a029-56e18a310d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.74.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee05833-0daa-4d22-a5f5-517493938150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.76.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e634963c-d46c-44b8-999b-b95e1b21e160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.79.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5064c125-de0d-4d46-acc6-f64209439295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.84.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79eb6b5-b314-4fae-b7d9-dcc81e057af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.87.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fefacba-afde-48d8-b9ab-f67de76ad709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.11.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dade2375-0c96-4af6-bd2c-cea646989b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.20.57']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a085b62-bba0-4487-9cec-1a40626539fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.54.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c4f655-ecc2-481b-8b3c-89750fa93527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.182.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add02c07-02fd-4627-b4ac-2a75a3694553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.195.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ce1579-e21c-4f06-befd-0e5c13e2bef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.198.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc73d2a-9146-494f-a6f0-e0458baea83d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.214.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e7f17f-724a-437f-b0a9-8f019d4b0407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.216.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908053ae-7e01-4b90-9554-11b8df81f170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.218.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f805b407-7d0d-41b7-bc08-27a0fb11a600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.220.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2a2c86-1eee-4a52-8483-716452036b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.222.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f58cd6-0585-430e-ba9a-a49d4d2bb36d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.223.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2446aab0-5794-424e-a4c7-5ca33b7f096b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.228.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd991c8-52e6-4d79-9a94-b010275a4719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.229.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792bf532-6955-41d9-9926-6519c48ff637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.229.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aad2317-22eb-4257-a00e-0e20b1276693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.231.186']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f1a5167-7cf1-417d-9f47-4a66b3a5abcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.232.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d96547-82ac-457c-8f84-f016f56cce65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.1']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435f0e46-b4f1-4203-90c3-68c658b3ccbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf79251-1d6e-4ede-ae60-6ea3a3752fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.234.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43372f5c-5dc8-45df-9761-69f6234a4000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.239.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70866504-3ccf-45b0-a2ac-d8b9ce9fe7b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.80.29.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de698a9-e712-4163-92a7-0f06ee0e4c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2d37e9-ea78-4043-9c88-f80084b8bbe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3acadb-6cfa-4ec5-a1bf-1e9a750499bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd57c241-67f4-402c-9741-59cda85924f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f195c7-baa3-4b42-9acd-70d94af23bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.166']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ee6700-7a79-4bca-8482-ea2defe2dbb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeed1bb0-06f9-40b9-8fe9-fa470e13794b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9ad7d5a-d263-4d77-b8ed-92dc95636aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74ef262-b15f-42d3-83fd-d2ef14d2b4b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f96a84-0a70-444c-8c5b-3379ed5a6f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc0d332-2021-45aa-96a5-90b5307ac873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0f15b3-b828-496a-948b-c21570183706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94281a6-73cb-4504-92f9-41471f5afec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.108.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d31e334d-cadb-4f78-ae0e-d6072cc9f403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b81ad64-3460-431e-8d34-35a63f843cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648b0bf3-1df4-4127-8e5f-53e37dc0e644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac5c8db-ccb8-4806-9a43-acb781aa5691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.110.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4fcbc37-33eb-4725-bc06-559380105c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.110.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d08a427-59d6-4278-8fc1-b36c83f987a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5fc5f1c-e15a-4229-b09c-3d22ab86c722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.112.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b514889-bf78-4068-977e-0ef29a3dd98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.113.216']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a175cd9-b3c7-416e-92e1-3575316bc129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.115.191']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd8c242-b3fc-4c25-83ba-d2de9b7bec24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.116.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a647d7a-8903-4ea6-99ed-8e3b6e484567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f3a1ad-1313-404e-9027-6542d3cf5298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c67c54-6d96-485a-983d-afb001fc1dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbaa6187-5390-4c7e-8bfc-7872691b09a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.129.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee915be5-0be8-4abd-a250-1146d05653ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.0']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97b91b92-f9e6-400d-8c17-c3ec41358f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d9b6ec-1242-49a6-8a19-8d16f0285770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.63']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a04a5d-f977-4c99-a579-52d6c05fb816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb28f135-d403-4261-98d6-0d9d22d1300d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d31204b-4baa-48ef-b90d-c5445b43dab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebed85c-d1a0-4bf7-b674-25bb68501bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e045b89-5470-4bf2-9023-21ec0b0fbf31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b65fedb6-2430-4cbf-b132-bf6aec20f589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c724fe-a5ec-4d7e-9d4e-b5b19bda4a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55744184-26b6-450a-824c-d1b02f99071e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38843b0a-bc3f-4a14-a662-9c3037ba4d06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd6574a0-1267-4b6a-8e33-643b8b3adde4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8972012-d42e-44d7-892b-e1c7e1b8b483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c5456d-39db-43df-9bc1-247bd521ca27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada12daf-967d-4901-96ec-00af5ed8b46b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619d9eaf-2517-469e-beac-291cc2ea1310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e072ba-af95-4218-928e-f06f33e85012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b680f9ef-67de-4972-9e41-f0d527a60e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8423ec2e-e23f-4814-82ea-8f4c6a46f184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daac1c64-e436-4e41-83b3-8f9b980fe570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72688fa-2a1f-4e92-801c-2c921ef70eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34de70bc-6565-4608-a247-8e46e696e59e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce1e328e-2c4c-4c46-83d4-a476406be5b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea9c6ef-d2b7-427f-bb49-64acaa3e0a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a04505-099b-47d9-90c0-b3b02aef2c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aadcba7b-938a-4087-accc-a010f49ffcb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e9d1ad-5b6a-4a85-a2f2-32e3eb45347f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef239c62-3bb7-40e9-bf79-606774e3a3c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.188.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6442bff9-2668-4062-922e-b7f76909cc1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.191.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b95ff47-ed90-4490-afb4-420a0a6537d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.198.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a965091b-9dcf-4881-9914-9382736f0b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.201.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d631fa-211b-4bf2-ad5a-aff0e4865b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.203.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c113bb8b-91f6-43d4-af87-37f5c87825c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.204.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326e2cf3-1778-498c-9062-7032b9a207ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.204.145']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc963f56-595f-4635-a1e0-fac1295567f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda7e57a-c00a-441b-9bc7-3c6e877b38dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408f1f6b-36ca-4303-a3b4-b0fdf8ea2592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95fdddc-093a-4880-a83c-1ec0e5ae9327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.178']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ef2800-d9d2-4865-a1cd-46cc39291202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57dd10d8-fc49-4c37-b55a-0a2874977d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c41f788a-d006-43a9-9f73-b5c0aabec90f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a32d209-329c-484b-a00f-7a5b3fb1ffcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.224.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db75a878-41f7-4eca-883f-e42e8c6f88c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.44.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3c420f-e167-424f-8dd2-87d3d74588aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.46.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79bbcd93-bc18-4973-adaf-5accdbe9b838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.85.8.171']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b51175-241d-46cb-850c-915d32ca7849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.1.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac2c2ac-8b97-42ab-93f0-b66250f14723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.1.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd0848d9-3a3c-46b1-abef-ebb81d2edce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.29.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00148b0-b044-4914-924e-48f37f219848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.3.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afee6d64-f362-448c-9090-c6141286e2b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.48.236']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2b764d-ec27-4346-bfca-f889d68ebdd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.55.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baff0d2b-eff6-412e-b051-39327b594f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.59.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649ebf7d-a21f-4102-80ea-a14f0f4bb688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.78.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4a6988-e54c-46d7-b6fa-3d5df7e8db76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.84.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1c43c8-451c-4b76-8d1d-c6e63d15956d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.9.192']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24493d98-e2a9-48c2-ad6c-7adfb2963a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.225.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db363f15-bd20-4638-b342-9310d58f6e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.225.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6b09ec-1947-4c0e-9349-456625af44bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.231.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e485a0-a389-449a-8062-9017baf841e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.240.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af14ae0c-e881-48f8-8030-a3e5ccddf0e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.241.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb61a7d-8e9c-4660-b1a5-bac64b31ddc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.244.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae72264-4861-4fc6-8eb3-f56ef6e9aeac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.255.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28694e2-6dad-46f1-bb0a-1d78678e419a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.2.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcef6f16-4968-4232-8059-e21ad83825b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.72.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bea2680-b8db-4fa1-bbab-eae84629d273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.77.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6a092e-5b33-4751-b3b2-51203d93ab5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.94.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202ea6f9-4c5d-480c-8755-d11df1a44d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.93.81.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ed28bc-ecaa-4ff9-a351-2b8d2a85e90a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.234.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7049ea9f-ab85-4ccd-b84c-c1fdd4859552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.98.173.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9c713c-4ffb-4c28-9c20-9342d066b9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d822381-b600-4c57-a9c0-e7174d0bf6a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19d9270-0d82-4095-9a6f-5e1fe10d07e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.160']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b56b816-dd7f-4ae2-9ce9-efbbc6c03431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3b0a8d-b9e3-490c-9d6a-3ce938720ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.242.171']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d8a6c8-7d40-483f-b1b4-569076a01c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.242.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d70368-5dcd-4c0c-831d-6129eb86e026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.243.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8454accc-23bb-44c8-a9c5-49a6d3001049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.233.154']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db93c4b-758a-4754-aaa1-cd319b443d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.82.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5190381-9c19-449e-8211-8ec6b55dc9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.84.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89bc93b2-94ae-4e80-85a8-212ec4eff977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.118.165.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab1687ae-063b-4844-9517-76698dada7bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.231.149.154']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197af5cd-1a2a-4dad-bdc2-f3e6624060b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.232.104.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5406388-b73e-4621-b086-4738d495adf2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.247.37.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2948043-c2b3-4ed5-9432-377300a1b0dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.178.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b594764-d6ab-49d3-8a4c-4a29ee0cc2b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.195.195']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f87bfb-12d0-4b08-80c8-91955575535b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.243.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366d2f54-0663-48db-864e-89b61dd7a38c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.39.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b91cbe-7493-424e-a643-e85618d54b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.101.64.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8149cc44-f5e8-4e2b-998e-b1ce15e65216", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.133.192.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da07cda3-5261-40c9-81a7-9206212064cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.133.192.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d88dd83b-abe4-4a3f-8f67-b306c44dd04c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.161.101.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d5df2b-1d68-4f3c-898a-e62670d173b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.164.6.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67eb2213-8f4a-4ba0-ab63-0940aa1ff118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.192.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c3b7fb-e240-4915-be86-ee2cf9ca1d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.26.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02507644-d970-48ca-a490-c55271746801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.183.29.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c723753e-2699-4e7d-86f9-c8e0ac49a1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb3389d-0716-4f1f-8079-485ef603d3ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e62eb4c-a9e6-4daf-b571-f05ca9e8d33c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b0a74d-c0d3-493d-a9dd-30448fa3ac4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5fa0b2d-3952-43f1-8bdd-b41862942726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ca1992-b41f-4f0f-a2e0-ffffffefc996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.155.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432d4458-a556-4190-a400-a4f1f8de7dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a36894-fdee-45be-bd29-5d770cd17910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0878c0-3875-4c6f-9d32-6e7331d5b900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8403b82e-2b47-40c0-9cb5-007e5dae16a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72a92d4-19f4-46f3-a3a9-3e752424ad03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d0b0b6-7956-41e8-ad5b-b15bdbb28959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ffaa7eb-20a6-4ca8-ba44-21c8310112d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85a5e93-2ca3-4b11-8a28-fd632c3e9614", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.39.49.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0f9d72-2754-457b-87cd-b60eb0a832d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.42.60.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72d3eb4-470a-4947-86cd-513dac0bf283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a14cd323-4281-4160-8027-fd1d9c4d8717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2023-1389. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--585b8118-ae7a-45ea-95e0-9e461423f194", "relationship_type": "indicates", "source_ref": "indicator--a14cd323-4281-4160-8027-fd1d9c4d8717", "target_ref": "vulnerability--604e7a91-4ab2-4091-a564-9069e23b10ff", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41649a54-c04a-4660-b8bf-0a749c172299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88cc3fa4-d744-492f-99ba-85defc57bb23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.136.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb6d8cc-badf-4015-8ceb-24e988c16b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db9a2a0-133d-4b96-a4f6-4063d2df18f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.20.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9ec03c-f259-4354-8144-8f772218ed23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.26.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1acc51-6cc8-49da-956c-f45cbd3df6e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.48.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175e5fdc-a2c6-4cb1-8b1d-83d0feac2082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.48.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdcf7179-33d2-4125-8274-c7077fca549b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.49.63']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d70640-5efd-41d3-84e6-0be8b1c207ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.54.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b6356c-62e0-4445-85dd-479c1cb85b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.56.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b71329c-c5a4-4d16-a0f2-f08a104107e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.56.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a4dd9d-b35d-4061-a4e4-22927b87ab75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.57.191']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19680648-cfce-495e-a425-f8c7028186e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.63.192']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30db1647-75b1-4c23-90d7-04c8fd35cc69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.63.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58377282-1979-49e3-96b1-330b9c14d851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.72.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be91e3c6-9aa6-4ba5-bcd8-d544ae71cfa0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.46.141.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e065e71-14ed-4809-9345-b296855193a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.197.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580bfd29-aa94-4676-b8d5-b8690a80f09f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.228.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33dc9a61-4de5-44cd-9ec6-5f107bdea959", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.62.22.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0af1943-eb81-4ac1-9094-65658fff4219", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.63.162.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e1e099-b8ec-4b7c-b981-0311d5f17715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.127.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e0479f-cdcf-4a99-bcdf-4a40a75eb149", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.34.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3fcc7f-b592-4311-9c20-cc2ebee5a5dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.41.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d83ff0-0b24-47bc-8b66-3045ef13dff6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.13.121.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7667b3-e279-4102-ac3e-adbf9e2d5005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ac3d8c-f317-4009-92f5-1d2bfcb3ac76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3091ab3a-ae1d-4d42-8056-73de357bfc78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.248.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--224cb946-dd68-48e3-aac9-dc72b5d80e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.248.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22936848-c2b5-411f-8e8d-23af4f984d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.111.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52267c6e-b356-41c1-8050-0e94ed8058a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.128.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d4be63-3664-48c0-990a-6e8a68200e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.198.228']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b294fe-a1e8-48ad-bfe1-18d287e0315a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.178.114.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b7d45c-1a49-4cd4-ae70-22a5d480c53d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.222.96.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2d2eec-db66-4e16-af28-16bc095e2fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.250.105.222']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf30996-1f58-48b3-9f61-48de049cf42b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.12.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1986773-eecf-4312-8d87-4fa6448f9869", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.165.152']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bcb4c9-0f93-4fff-8e85-df6202f52eab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.111.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dbb2ec3-e91b-4ace-b811-cda04e42904c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.126.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1bb3b16-520d-4379-b44c-b8d000a5efd7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.236.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd0bb67-6007-43d6-ac8b-a99986310d3a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.141.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7a4b96-23c0-4f0a-a11e-002121aa8c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.149.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c45919-7ca7-4366-96ac-8eb312a417f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.247.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014d67ef-50fc-4724-b3a5-0fba7398b8d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.99.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99d6e3b4-4c35-48fa-b767-8279b5e5c09b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.85.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401c2857-8571-4b25-b1fc-e3405556e60e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.20.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec31017-b2af-4b68-af6f-bf51894de7a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.21.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4fcd997-30a2-43d0-b07a-2975020ef878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.21.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4885ecd3-5979-4edf-9be4-4f2bba1b2237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.88.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66968b49-55a1-4bd9-92bc-70ced5b29b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.90.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a28be0-483f-414d-b82a-8be29c363610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.93.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932d3305-7dee-4994-96eb-1324174a856f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.80.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc3f946-9535-4493-a65f-ba77e48bf81b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.251']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2adf4242-f481-436f-9ea8-4209bfe67aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.82.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26eef5a3-a0b6-47ad-91a0-65788d50c956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.88.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0617493b-3842-4ea6-a2af-edfe6936dedd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.89.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c3342dc-189c-4cd2-902f-3861b4fc6408", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa5f56a6-b20b-4bdf-a09a-51983fca09f5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a66ceaf-3488-4c4b-8c10-3ba7a01e5d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d3f97c-78bb-4e23-8c5f-f1b6ec7dd935", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01748bcb-4c24-4634-ac31-bd05f76c2358", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2dfa54a-21b3-40fc-af92-f466b5dc717d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.216']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e812454-4358-4953-b773-e6cf16b4a724", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0cebb23-39cd-4848-84e7-e7b03c485f2a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.168.141.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b083426b-a7ff-4f6c-9175-4199a3c869db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.136.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e014a0-cd1f-4f5a-8aa4-80e9517766c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.137.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3df6ba8-1b90-45d5-bc40-11eb29b3aee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.137.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a0ec6ce-16cd-4f8f-a774-bcc5fdf351c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.157.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2895160f-b44b-4cc8-ae35-1a39c7571610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.159.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946d25f5-8281-47ca-a47c-3abe4a88d61b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.170.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c14c48b-66cc-493b-926d-9cc004ade805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.182.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8355c775-182e-4fb0-98c8-03cacc0ee305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.182.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905accd0-d9e5-4230-900a-b64cbcdea541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.146.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c72e724-91d0-45e4-9e67-4b0dbc9900b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.189.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2e05f6-aafa-400c-bef7-0f80a1ac78ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.191.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c689d262-8cf2-4b6b-824d-7f247ff7199c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.224.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ffbc2cf-411d-435b-95ea-08ab6684ae3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.227.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e728c9d-32df-41a5-9ae0-8bb0a7ef5303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.231.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62975add-f3d2-4327-82fa-9e0ce56de1c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.231.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9bdc2a-f71a-4e00-a7a4-07b3dab9ce29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2aa8458-85aa-471a-9432-38cb4a72a777", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.224.109.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014b0b1a-a78a-4fbd-8159-59dbb361d162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.224.242.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d44d8b-d6e9-4bcb-943d-52eadc33f921", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.237.113.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--484c4019-bf2b-409f-8075-f4f008c2380c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.237.80.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab2f303-109c-4c62-b19a-ce6bdab23ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.43.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260639f4-79e7-4dbe-9012-87639c90d662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.43.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a748152-00c4-413b-97d2-42920308a22a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.249.221.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07685ec-317c-4b88-9128-4175aa81cf2d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.70.82.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3c3618-a37a-4559-bdca-9d4c26e61c97", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.147.8.166']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69104c0f-f213-4fa7-a96a-7c9dc6c6483b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.225.98.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064ee0f8-551b-4809-966a-07b427641123", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.227.149.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507a6848-2ca3-4766-ac47-1772b53cbfae", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.38.241.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef979544-0757-42cf-85f8-7d47e8adac54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.129.16.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d5b334-487d-4ac4-9eb0-f607c07bf59d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893072d1-a72b-417b-a04a-bf29fe2b3a02", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764bc87e-e70a-4507-bdff-f328540cd28c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.106.164']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4484f7-1ef4-4b84-af78-0a7c6f33a9bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.98.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3c416f-a2c7-43b3-acf0-bc605eebc495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.154.211.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6dc5778-b512-41c4-84b3-929e3f258753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.159.30.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ea85a4-683d-445e-a115-6c17ae2bf78a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.152.212.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2da861-4634-4847-b58f-80ad9d9cd1e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.19.143.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6d0588-e5ae-430e-be76-2ac31442728f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.19.82.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e5ad1a-9837-4c37-8343-53561ab8d83a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.237.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--059ca122-2c96-4ef8-9819-c7231010be4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.247.95.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d8166b-d3cf-41ae-9e5b-ed7b1f64985a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.59.233.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be293a84-912d-4734-9773-00cd4b218761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.103.104.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ed2af1-cdcd-4da7-8249-f14f56e4dd72", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.152.127.167']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc368368-6584-45c2-b3b7-2cecce9b0554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.153.19.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5a5548-e3f4-41b1-ace0-c5175cd50436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.153.86.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f15c3c1c-4354-49c2-97fe-9899a6a84b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.20.112.234']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0301e50-ffb0-4bbb-a043-84705794ab01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.3.45.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862be353-2ee0-4b1a-b318-69707123670b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.57.133.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f72eab3-489a-424d-b089-7690e5a1f62c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.6.202.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db90bb4-c91c-47bd-b5aa-0880cdeebb1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.194.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e8a64d-9065-44ac-b967-0638ea5dd11b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.198.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5250f5-a33e-4279-aad2-c651fb771c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.215.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab1e223-ff4f-409c-a877-7dfc8fbdc0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.166.83.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1fb215-70ca-4c95-9270-7cd8fa058b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.178.44.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d3ce14-931e-468b-b77a-fbd50dce2849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.125.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6230ec9-81b6-42f1-946e-a60b66b930eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.137.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791200d5-034e-46a0-8349-108f8da045e2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.199.224.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a27671-2740-4435-b370-b37f437d3a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.248.137.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f365fd-b93a-43fa-9d82-bcf2959dbb7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.255.229.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106a0f2f-8682-4165-a36c-aef7afbd6794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.51.210.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a08ca1-5bfe-4b6d-87be-0fe12345c981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.145.177.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed021504-1e3b-4f9b-872c-a24b3cc74a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.153.184.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dffe3a5-d626-4d3e-9be2-069508a0058d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.173.113.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffb66ed-713b-4f30-bdec-686099ad4830", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.178.209.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a15eb9-5aa1-4f2d-9d6c-efad2ef4fb4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.178.24.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d97abe81-7eca-4222-98d2-ae2b1d56b054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.216.77.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd62a4a8-abea-44c6-822e-a1c1b45ce1e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.242.178.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7d7a2e-6b28-4ea2-ba00-3b6eb19b6d76", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.84.211.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c0f98a-f377-4b50-8768-6d46f90e845d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.90.201.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--612b70a3-b2d6-477b-9999-96499249e3cf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.132.18.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05d754e-892b-4a6b-b63e-670a48f45dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.132.18.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58fd22c-9c32-4243-8f69-37ca806b1cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.62.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5425fe5d-9bd1-4302-937e-7e1966acecbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.141.63.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b260897a-6f4d-485a-b9eb-b8fa5defbb64", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.164.215.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c59767-f841-4c05-9ff7-e67e85e69e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.141.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd2b4749-df0f-40a9-ba43-8094e7f800bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.168.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c4ee7b-bb9d-4af7-a153-187c964a111f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.180.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b1367c-d8e0-4f7f-807a-22906d2d4b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.185.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a47b4d1-394a-44e4-b27a-e0c978a64175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.185.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96bae403-ab5c-45ff-9152-65cd5766a762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.182.85.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab5629e-1cc2-4405-a146-458c087281bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.142.160']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658620c6-0107-4f59-ac4e-5d59d2261b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.142.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c95995-1296-4215-88c1-030e428623ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.189.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2a6bf6-07d1-469d-92c6-0e65378c219e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.199.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6a2149-ca67-4190-b7d0-7a1e5653f70b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.207.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c00048d2-eaf7-4607-bcb7-19fdbc8dcbc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.209.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c81a44-596f-4f9c-a3a1-f60e3270bbf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.36.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8a3542-49e6-4d48-9b6c-2b2b43612e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.238.37.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f501bdc6-6e30-45cf-8566-e590db7fd0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b488ca0-74f0-4cc1-92c7-401b643c072e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.183']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f43165-0524-4972-953e-c348f7c0fa97", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c11239-d53f-4f5b-b090-16cc5bdf3e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342b2574-b466-4e9b-a717-e4aebdb4966d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.126.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--188d46d7-0ac8-418c-900c-d018cac5bcd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.94.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ef92b4-d248-409d-9bb1-97e5576db7a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.108.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c8cf82-d53b-4722-a666-4d400632bcaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.109.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef26eb8-08e7-4b80-a466-4219e8468e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.59.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52002479-f497-4213-a7eb-f517baa8da3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.90.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa8e9cb-d4a9-4b08-b2ac-69403b680ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.168.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66d772a-1493-4af9-9b70-30e10bf188a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.236.131.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f21d267-1e6d-40f6-8585-80ed86f1f147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.31.53.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1a6c10-aa1d-40e9-a7f8-5df5469cc010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c64fcd-0c3e-42fb-824a-2f5409b2d9df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76925b5e-c763-466a-b3ea-3b540f52cc50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b1a6d8-2b61-4529-9277-92ca53956c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4e31ba-9c7b-41d4-93a0-c8aa7349f2e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42b9523-19d3-4643-bf11-62c63d649685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70fdf66b-1ed1-4912-bde2-316504b4ed65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1caf78-6e87-4ac5-b352-0efeec17a74a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a19f0b-70d2-49e7-a156-9d845d385f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd4613e-1ee5-4bb6-8835-a2dc53d48d3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ce823a-9217-4820-98b4-ea1ca8b6859f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9aba59e-f863-4f2f-8dc5-d2f6c1723b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367d5a4e-9e8c-4123-b1ef-9e2edb7da298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f3cea8-8666-4dee-ada2-50f852c676da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e48b01-272c-4074-a726-47721c474cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b129ff1d-44f5-4b37-87cd-0ccec02b6805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4e6e1f-3708-4f34-b0a3-ddcc0284d9a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f35a4505-e9fd-478f-b5df-f7e5f28f574e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e54bb0-f5f9-4d6d-b069-1bcec88707a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb915f37-95d3-4f01-ad93-715f7fb64ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ff7ed3-bf79-42ce-8405-8d64862b8c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017571ba-e5b2-43b3-af7e-c401ceda7be2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0707ff12-f968-4f35-bbc0-932ab5e8d78a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c79b35-b9de-4f88-888c-2444d468b229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5da99e4-5416-4f71-afbc-69702a6478d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdbf2c90-66d7-4b93-b3e7-827ce832c2b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e6e0c9-9bca-40e4-899f-dbc9815c5086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9c937a-d340-4074-ab4d-6447663266a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c6c02f-20e7-4b6c-b0cb-689ccd69edf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68110987-aada-40d8-ad8a-ff83e6b2098c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9eea00-7dc5-47d2-a3a0-4520334b8474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d9cc6e-931c-4fc0-ad2c-d86b309c0789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a3e491-92ed-4e19-8e9d-d27ac66feb6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.145']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd72499d-63ff-4d3f-8584-3acbf04512da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b1038b-8af0-45b0-9971-5a183632356f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94fcf458-a4c1-4107-a082-e04ef0beee4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18df7e3-e1f5-49ca-a95e-26200d818111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af2bafa-af25-4290-a0c9-212e572ce0c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a433660a-9cb7-455f-a1a1-df6ab3bf8758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.152']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56beb38f-813f-4226-9ca2-18c85a1fb8b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.153']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2259a65b-e391-4b3e-9d17-28ace7cdf40a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89286a21-8dd3-48b1-a974-7652464e0b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e3b97f-dce9-4200-81e8-1fc6b04cfbb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--372fe47c-a124-416a-bef4-1746cd192602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.160']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a024b44d-52df-4833-a606-9fa729edb149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09972396-107e-4fce-9df0-8391d54fd78e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c548f5-c658-4a2b-be71-365925db7d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9629bdd9-4770-49e6-aa02-8e0aa68628dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.164']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae7095b-ea21-4a52-9cba-9751b29fbe57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82caa3ed-af71-47d0-9a09-c08ea1f00ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.166']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1902ad2-c97b-4cc2-a1af-3026541b8d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.167']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d25753-980f-4edd-ae04-4a687f61aef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e9c6bde-9780-4b20-a6fb-ad71c2241243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89d33ba-106d-4e6c-ab5a-6373c8cf4e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519754b3-dd71-4cab-abb7-0b2cf4491d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--613726c5-0fda-4f22-b71c-9640b60b8929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f73b4ec-1ff0-497b-8f7b-6c98cab7970d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66ee609-3054-4d4b-94d0-681bafb42c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f12e87e-bd35-46e2-9d48-c3e6257739d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562f3f43-74b7-4af5-b560-a6a63a36ef72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f868a805-8542-438b-bd04-8faabd7aa1cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a957842b-cea8-452f-acef-bfca3f821b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.178']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a1bed9-93e2-4182-95e6-5df8809bc804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b7203c-0dd7-44e7-b72d-08b1e51dba95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583dea09-d9cb-497d-9b11-d1f6306fcf86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--947b44b7-3afc-407d-a3ce-f04c0af2ed8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.183']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d915837-2806-4e95-b35c-4272978f6788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ce60d8-505d-479b-86d1-721af384b9c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890db4b9-3b3d-42e5-a305-da9c62bee257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67cee330-6a2f-48e7-bf5c-fa5a6d02ef34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7b28a6-167a-4c64-9bba-35d63ea20d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.192']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26643822-6e0e-4ac4-95d1-516460ce7eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--114d823f-4887-4db4-907c-c5ae29583d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e59d025-d628-46e1-bec2-0204a0c0c45a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.195']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d011c98-d6e4-4702-aa16-bc1d0bb1a3de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27fa024b-12b3-4a97-8f54-a5cbb86a24c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.197']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--471124ab-ffd2-4049-b268-8cfcab758ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57d88c2-c4c6-4ea8-9d18-46dc8376799f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876ac27e-07fd-495d-8f0c-b4978ba1192e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91273714-8330-4849-be16-d39382b5cf37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5cd0ee9-5832-43e6-ab4d-f630f9343284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78cf4609-bc92-4675-97b6-0e4841426ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9927c463-3355-4cb5-a70f-2accb97a062f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e902f9-7614-45f1-952d-8dddd852b647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79de1e80-dcf1-4834-bdde-dd4dfcdba288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4224f3f-d79e-43ba-ba8d-c7fbae7f5389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15fc6d17-aa50-4c42-b666-a27aad08e162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc89809-a3cc-4d3b-903d-aa0c52b9d924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc55343-9832-4042-aead-8d4c0e8ec98b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc01e3b-9ff1-49e5-bba0-96b7e1ddb934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a904b314-0eee-4bf0-8bef-76811bf7666a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672b79f4-14bf-457d-bd4f-3db216fe75c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4118e358-5590-4ab2-ad80-a9459747c0f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41360453-e487-4c91-bb3e-a5b48ad9b941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e4c66a-0fa7-44e4-a43a-89f176699433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b97e22-4d44-4994-a36e-8797a4e4275c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339a53f8-364f-4ffb-90f1-d0760aac7949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.222']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4818a0-b6fb-4b47-8227-808fa6092a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf016577-87d1-40b8-bc19-b5df782de7cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0091f19-7633-407b-9f8d-d7dc5abaf131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.228']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a6cac6-4ce3-4420-a81e-70d00b2cdc4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb34a96d-8b7e-4fdf-a074-c69404db7606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09028340-2b50-454a-959e-6580b230ab0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5640bf-7b70-4acc-80b0-7af93694f253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c43f3a5-ad7b-408c-b2c8-b87a8240ae07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3089f288-2dcd-42b4-ba67-e70055f03672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc1177c-1cbc-4db8-9ef9-7aceefcf246f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ec3cad-3907-4275-b99c-9cb5b6c294b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adef8498-bbfc-44cc-a505-76aebe7ae6ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c26139d-1e71-4946-8c4a-3f535b5f9d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a4328e-9f69-45de-8342-4537027b5079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd2ab19-d78d-4c6f-869a-1dac949fd3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021f43e4-c641-4ab4-a007-c2b9d259ff50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d602309-5dba-493f-92b9-408d9b839708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323257f9-f25c-45dd-a1f5-55d857662b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31703feb-80fa-4088-b1c5-5152a8de9455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb67056-1342-42b6-9781-c7364b62b082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212255f4-d848-4831-9934-3fe05d1119ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d151b8b3-e2a0-429a-b865-27d5c52816c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95fffe98-dbb3-46c0-a50d-c688f6dd9b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6686954-824d-4aca-bbbc-5dcc9fafd290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0573552f-102e-48b8-8dcf-7a0eeb10fcc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c1b60a2-aa4d-4154-bf2d-362978277fc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffa9657a-2260-4571-86da-16b3a1c32d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24917595-5c35-4e38-b45c-308cce4d2437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c75f4f-a03f-4322-8f5b-ed1930ca7928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.56']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7180f6b3-1299-4a24-a6ec-4f7c1308d026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.57']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4019b9de-deeb-41c4-a7ca-fd4ed1c0567d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045d2b1f-fe09-42e7-a899-bc09a014d9cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9946b3f6-1a9d-461d-a144-a2504887e2ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39dd34a8-676e-4fbd-bc44-8266cbfa1423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.63']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74484f47-c53b-4f3a-be85-e4b337af1722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4096b3b1-cfd1-482c-9a18-0a1ed2384893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27da121b-eaa9-4c57-80b7-bc626c6a1492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f825b6d-6ece-40ae-81ea-00019aefae67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd19bf22-997c-447c-8146-7d503922a762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184a9d81-c4cf-4e03-b40b-b9e9ee9a7e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b2dbcd-e221-4e16-a7b5-8e947115216e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a606227f-231b-40bf-925c-e11654543144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67cf8609-425b-4acf-8a4a-d594530918a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22862d8-6606-4413-9bd7-ee40eff6c880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ccf4a7c-e8da-4644-b60a-9241bdd69dad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfa66bb-dbda-40a0-b57c-fa87aede9e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.81']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25143c6a-836f-49ae-a148-80c48c6bbb63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ab07d6-b47b-421a-a0a3-629e8ed8d16e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eaf3797-1910-4765-ae50-5f52ce47d4b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02cc63d-3227-4047-a1b6-499df4238b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1693b5e0-bdb7-44b2-8315-7e828b4a538f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8999e87-0d92-4712-8d14-6db8123c86da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b0a074-2371-4349-9346-7aeb6f87e153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80969317-4b9b-43b8-bc8c-15f786e6f276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1284045-958d-4826-8a65-36d7b78b585f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10972379-9381-4f1f-86a6-7ee94975df41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a332d6-0e09-4ffd-a7a8-b29774ab567a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082be848-4b76-4f5f-8f82-1a3df47a7598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9abc282d-79bb-462a-b44e-1e97e5eff329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235a93fb-6a7a-47a9-b3b7-09d096143a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a576eef1-559a-4201-9d90-39e71daf7301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ce8dc1-5299-4522-af6e-276c521ad257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe52e5a8-2f4d-4e45-adba-d8a322995c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5ab67a-33f1-4e56-9605-cee266388168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c456e2-5f90-4023-a1c7-06e40ecb0f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6673c86-913a-4bba-9ce7-fc82ce0313cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eba7e15-3ef5-4ab6-9113-b3de8005f42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22055f3-a1f7-41af-9e3c-4b6bbd438495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816adae9-b692-4108-97b3-2cea2f60942a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfcf6b1a-cc66-4980-825e-6d74b1a9fd50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9a40fb-5101-4824-a385-952cd121876b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be3abf5-3157-44eb-9dd6-010700bbe034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3cd647f-4242-4a9b-9abf-dafcb1cee792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8029597a-a76f-4dcd-8106-3bba46a464ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3205bbf-f68b-4a71-b044-3142823d4f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439cf0d0-ad65-4bea-8f86-3d84a619e87d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3c3645-ba43-4c6e-ada1-0efbd6525383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ed561c-6b4e-40ea-bdf8-fb2f243af225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.145']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e922b5-e15f-4a82-9362-bc263508a232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02bcfc07-ebe4-42c0-8669-ef95a5ff33d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196907b3-753b-4577-9aa3-bac96a02cee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.153']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0cc149-d9a6-4774-9d1d-bcc2b6f63d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d15888a0-532f-4f82-b0d4-f7ddcf4c7429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814ce132-1465-440e-896c-5a16f7b9b996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d86ca33-c28d-4037-a6ca-474d05411dc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554a914b-17be-4562-a5fb-6fd30a09c1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7699b591-5c41-440b-ab70-acaf71a65592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d17850f5-0eb2-421c-b638-30b17beacb90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f09f8b-e80c-40bb-bc23-f1b9fad0ada1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad60e75-e8a3-4c49-97a6-d41bcea74903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c5ddde-b97c-4b6c-bc16-29725add934c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4302b8-3138-4672-bb14-838d1eff074f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50537a6b-f496-4461-9bf3-9af99ede4fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc5beed-2c14-4e26-b76a-8c35969b3bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef865254-7f34-4189-8cea-4dfbdf90f661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d9d589-e155-4ce9-831b-758050d137fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3873393d-ee82-480a-82ac-797bc1a7b4db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.186']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59eb7cb-089a-4bcf-bfbd-1783aa47c79f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5112e64c-07e4-4ad1-bde3-3934cf76caaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5a3087-038f-4fcc-a9f4-68dc08a65445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4945e89-0182-4d8c-8c5e-9f01ce2f2aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d75507-9e72-4242-a469-a74ba64d0b91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277a587a-f284-4014-847e-3e86965b9a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c647d88b-dde4-420e-a323-8836ff3a42b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4f5d25-3d15-4e5a-9e4a-9b397e860eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4eb3a1d-71c6-447c-bd8a-3c745475f302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05b4288-779b-497e-9841-e687b4eb2d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--334fa53b-e5b9-42bf-a5fa-04670c5a20e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420358ad-ed09-4823-bdd7-82c5b5150e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e43e5952-5b69-41b4-a8d8-6045fde21649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76630f53-d43a-4d7b-b17a-3824b7e38a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb95bbe4-da84-4ddb-b5bf-7f5b44edc17d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e108f82b-d965-4db1-8a3e-be20fdc07491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738e4f87-537e-4d0f-b5a1-80ad550c1469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b0d9bc-f40a-4d16-afad-ccf47fef6183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae562a7-7ed6-4bae-a06c-19b74d861834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9f2366-f7ca-46e5-9170-a6c0de111adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23d6c2d-48e2-4eef-a25a-a19766cb30cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f84afb-f908-454a-b119-f1eb90e3759f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5c54dd-b611-47a0-8327-d7f76654616a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83938e8-9718-47d5-a6eb-0b0133a9d428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7a42ef-f19e-45c9-b079-ab4eaec0e695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc89645f-05f5-48f2-b8eb-8eb4c8a4056e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ef923d-25ee-417b-b437-258a1bb289ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7adf4bd0-732c-4f46-9793-6352848974de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.236']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8675d7e6-940a-4262-ad3f-56e8363c9340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36ae5e5-da5f-4aa8-8018-98afcfc5f49d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2852b0f-38ef-4c31-9030-a083119d523f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.240']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41052d8-8a8b-404a-9688-9abb9f17ee99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17963235-fcc3-4b78-8bc7-97b2df212580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028d3a98-547c-4bef-bbe2-cba14d86511f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51bae3e5-9832-4589-9b1a-5182b3f1c71e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee861c9-22a5-4ac5-98a3-05e404194809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1677f0a5-ddb3-4707-aed5-90a2bdd5b5cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--269b74a2-6544-4331-b1a1-d9769c0af489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3705abb1-82b4-4707-812d-8e2f9b02bf42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--706a5496-e903-415c-90c8-62dd4a47ed9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3a567b-1b66-442c-933b-912234a46bbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e1ec76-688d-49f2-87d1-1edcdd885499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02bd0890-1028-4d73-9e4a-bfa27a5f9285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c998426-27f2-4a04-910a-f26a0e2cf17a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c48433c3-9b92-45e6-a980-a911493ff075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09840b9-0e1a-44cd-b91a-25b67b108963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af304645-d115-452b-a1b0-b9f1cccb94ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a95aad9-ee6e-49a7-8954-53ebe8319fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768c8e62-a8bc-4045-810d-da1543236ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216461d3-e355-42f4-8482-cdc11ec791d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47782011-ef34-4197-a7d0-c1770cc2279d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b5592f-8dcc-40ea-b2cc-cd2f78c71a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17987e40-6ddf-466b-97e6-d8c77bf1959b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--826fa1b6-5c9b-4419-9bfe-f2024859d60f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.56']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d27563-d088-4220-8c40-5331ade18dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.57']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7617c1b3-0942-4924-8df0-21447186e1f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e142fa89-189f-426f-bd13-4fd6e3a3ae27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1eb98c3-796b-4d28-818e-890fbf4d55d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6bd8fe1-2199-40a7-842d-1e4b9a33c595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083fe58e-a9be-4959-b94a-752c4ccad7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c937bfb9-ff7e-4093-af3d-d159713bb35a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9825d167-273b-42ef-8d11-0c1c03c2a984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a37bb20-8eb0-490a-9f9e-d8b501c77b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c957117-d48d-464d-87ee-b48219364395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f275aa5-c83e-44c1-9d9f-bb7c62c36807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9344f6f-06e9-4dd5-8ef1-ffada603be85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95866b1b-d2fb-4b98-82e5-15f4494c73ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.81']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639281f5-1262-490e-9412-94aa50c25c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5c4185-691e-4a0e-ad01-538d710da993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c5eb07-72bc-4dde-9415-c81b63b37fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9e258b2-24a6-4946-80c3-223ccabfe84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac771ae-cf41-48a2-81a0-33cc69895644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802e3139-49fc-4b6f-8a83-bcbd12d1edf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce08fb9-5f72-4f40-9a02-782447cb952c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de0ba32c-559f-4a59-a1a0-30ea26cbf8e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d4a495-1e73-43f7-84ec-6eefd3f2cf36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.164']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480ecd1a-21d2-434e-a71b-7ff12cb86722", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.160']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb355ae-1bea-4ec8-a8ba-dd830371fea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecfd52cf-37f0-43ed-bbf5-e8771ed6fde2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82fca2d7-2adc-4ba9-922c-6b5309ad8157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf8e9103-3b25-42dd-a563-c5bd527638ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a818dd3b-b82f-4d8d-af9c-f494039ff3b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4083e1-04da-4ea7-af07-ccae92984ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c57baf-5098-407c-a5a1-eab7c5684f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9640b969-a99a-4c4e-befe-81f6b7de9f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9af256-62ac-488e-a65d-14e43bbc9979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.167']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390d743a-8bfa-4588-92da-5506dd50ee23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9b5093-8e9e-4f72-9cd1-9b881edd1708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.178']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64a778d-e289-470b-b32b-bed2874cdf94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda26694-d0ee-4601-b85d-301b2731a1ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13c7d10-a0a7-48ce-bdcd-a5397e02722b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1e13e9-6750-41cf-8c13-e461b4149017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2260264-010f-4af0-a290-0e891335b9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c74914-97d2-4361-b031-14b3d8b30bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a71587-0932-46aa-8764-055891e753d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef61c465-8c2b-484a-a7c1-f67a08c0a7fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08085e4-5830-4c3c-911c-adb117f8e710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf0ffd6-20ef-4bc9-b325-0f63ad1ad153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c383d62-a6b6-4971-99ea-a997ef8e6ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.21.109.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6c970f-c912-4420-b69f-a888f8c5aa54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9116665f-77bd-48ae-84fc-6d7eda1e574c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80f7da5-204b-4342-b41e-884bcec12eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6263bf48-cbfc-489a-a2e3-581daf2df3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760ebea8-a009-48f0-b83c-3d44cd9db252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c242e2fb-0341-4bed-b638-b365a9cd3c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d251e5-2ebd-4e51-8d19-49c767899656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8074628-4a44-40d2-8bde-8aacdd0cd60d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12188e1e-8127-487c-9ef8-dddec5abb464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--418a24b8-b9ea-45e8-a3d4-d4994eb3d54e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c66430-3f3b-4329-88f1-2c4101def81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b480e2f0-8199-4d0e-a42c-19681099099a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5d6451-de1a-4078-b91c-2388cd049609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e395a588-2f95-40c0-a522-98807a00d12f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8b11583-bf65-4056-8693-9b09e1d6477a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16fd3d06-233e-4d7e-960f-bc7d1b1258d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ddf816-4688-4aeb-84a6-a63d5ec408f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb84f35-76f3-4f99-829e-e901843e399a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938e2f3d-0755-4fbc-857e-11137914f272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3e6e10-44fd-4615-a158-36651238ca1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d681171-8962-499d-856a-706d30053d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ff797d-caf4-4aa0-b407-8f89e57fe98c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9379aaa3-01d1-4e70-ac20-f7bd7a6fe85c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca4ee0a-f82e-4452-8393-7ee915c9ede2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc41d41-ca6c-480e-a510-ac66aed5e137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9fc7725-f6dc-475b-bc06-ecadde507495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7fb6e36-24d3-497f-b0a5-95e3f648ce7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40780ae9-8c80-4f38-a807-c73470a195bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e48329-2e42-4f9e-a43b-9421ecc28645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8d9780-9e45-483d-8fa5-934ae686948c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24acde1e-4220-41f2-b13d-a17ee5f6f6f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4532936-4d4a-48dc-8ed1-28887d5b6bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405c8414-364f-4000-863f-491328d55a85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d628e8-4316-448f-adcf-3b9035b80870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df30053d-d48c-4c0e-b500-c5a8b3af9299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2fe589a-5f01-4391-aa9b-db7370cf4a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8d7dc2-894f-44c0-ac37-382986824bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.144']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992c8677-1110-4d25-ae40-cb370b802afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.145']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ccc69a9-8b9c-4217-a4d0-24e7ef7b01b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c942645f-3a2a-40c5-964d-3be90e616325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--937ace7d-5b46-4551-9ee0-d3a7c2792af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e9ca84-c032-46f0-9dfa-60307eefbb93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.152']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12bad24d-626a-4593-93de-bb0e57a9e0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.153']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2d5c82-1416-4b0d-a291-46d960825249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.154']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67601b0c-968b-46e9-b655-3a3e222c3d41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4cfa730-b33f-4a3a-a413-287538fa264f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e2e3ea-079c-47cc-9193-ee89866e7fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--484d790a-b6eb-4809-a543-0184699ac6b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54fb5ba-c55b-4199-98f1-ca960a43cb05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18790acc-0aba-473f-88a2-ea63ff1d7d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38cbcc6e-c6ec-4368-bf32-7d99a216b4ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e4ea58-2467-490a-bd77-ae29973039a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.164']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22676399-f8ae-4c64-96a1-62e93be7e837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.166']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c49d81-1338-4659-964a-a74d9b3f0e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.167']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1a6f3d-ee73-468b-a5da-1a24503eda53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cc7360-0817-4c74-a1df-4ca96bb4c59a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7405b3f7-08ae-417a-9e6d-438b5b274361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc97280-28d3-48d5-a0ba-87bde481eaf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.171']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c01ff2-f529-487a-a26c-24b61194362a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4727c832-fc1c-4f7e-8ee0-b8425d9b76b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e1dde9-0cb1-45a2-ab3c-0a42be90f5fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b73593-723f-46d9-a7fa-46527f3ae48f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.178']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be3d1fd8-2c03-4f2f-a453-c43d9277d41b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a4e1e5-e78d-4f53-95c9-845adc9a1875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e553d6-5b0b-468e-a890-34897dd55691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04133436-1be7-4fe3-81be-3d30872d87f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4e0da6-5427-42fc-a055-cbb26717ca8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1987b70-e747-451d-8e5c-d0f659f99832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--395404c1-9b89-4de2-afa2-fff193fd8b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.186']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad35661-5dd0-4a1f-8ea3-cdf84a47107e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba47ba9-26f4-4a50-857d-7a8079cf9336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd0bbd71-6318-4652-86c5-a1fe9c6e86ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--483d64d4-3d86-4053-9e67-ac645d6b766d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9885e4c-ffd8-4a81-b227-e9216e01fb82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.191']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7aaa1c6-c81f-4311-b611-b25c9a8ea49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.192']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d421af-7213-4577-a3ec-7653d4489676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b92d10-bf46-4c03-beca-f8f14c7889b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eefa8da-cdad-459c-9823-92e96391f204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b79874d-9a80-4593-9521-afd1a86732b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e1d98f-8fe7-43cd-baba-6773be0d17de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e77156a-c5b3-4929-ad2c-f6bfd9da6288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeff931b-3ddd-4a3a-a050-9e52b6fee7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1909ee75-f254-4408-81e9-296e5e8892f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07311566-3db8-4d09-a984-827dc9511f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc585550-0724-4a48-8164-53cc87643f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb37670-3fc4-4623-b652-93ba87ce8ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99039379-425f-4c29-a198-ce201aa789f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d9d543-3077-42c1-bfe4-509b393c98ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7596388c-5347-44ca-bc42-bdfde12172c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473fc48f-5702-47c6-a4f8-aa9305ebca35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c24b06-7c68-4bb2-8b62-613176c129c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85570765-a8c1-4209-8fcc-f296deb4bf8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ee2dca-e67f-40f2-8506-d615456feeec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21282bc-d6c9-4a1e-859d-46dba83338ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e5320a-db4e-4d4d-a807-8259a350ae3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c2592b-8ac9-46d9-9b39-f3fa9ff0b069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--297bf450-67c2-43ee-8ee4-c382b5045c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96cb5add-8df3-4865-ade7-f325a859a56d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f578eae-580e-4c38-8f10-5658c4900b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3ba9df-ea14-44cc-985f-e711b3a33485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b465651-bf9d-4a67-a54b-815d2e71dac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2939db82-4ce0-458a-84bf-f5fd68e1e5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a9ac0ca-b0c5-4eb5-ace8-1bc59959463b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.236']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba6e501-33d7-4b87-9f96-6f6fc96ea715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.238']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b12cc60-43ef-4f10-917e-52b77e608159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40161761-9493-4f8a-a146-753188e4da19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74bcbc79-7762-4480-89f7-5992f1f390d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--606d4e48-ac33-45c7-b710-b4c452037544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624de2a4-2681-4245-8f25-d2faa61f6463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ba6346-8c6b-4f07-9c46-f8aadb201e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75cd3fa9-6ec6-4ec0-b757-5bf1ab37f6a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277c6937-2e14-4865-9325-9f0bfd49835c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0564cd31-b9ce-40cf-b9a0-78218aab9e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ffc008-5d3d-4f55-a47e-aaf07ff75abc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53db5189-8702-4a2f-9915-628e1aff11fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c232c11c-ee06-4053-ba17-15c747184613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91634b43-e3dc-404a-8067-43ce3893d567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8746a6-b3b9-4236-8c6e-5b2b887535c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30af0bcd-c01a-4337-b4ef-5ba39921cada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa97558-4920-4a6b-a426-ebc00ba6a344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9695ec0-a65b-4462-a1f3-3321e6634ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68665106-d12d-4e44-b4a8-5926102440b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0eec2f1-ea78-4825-a61f-ec46687e3014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449fa929-b623-4673-8788-601456b5d38c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe23cd53-5166-4a31-a427-2b7cbb80ea8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a5204e-d437-4a9e-bda8-60c395ee9c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cdf6704-91f5-4a0c-9075-b9cbefaec1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd902c89-bab4-4bcc-8c6a-a4850f18e3ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95cd253b-4643-4e85-b0f9-992dd9db106f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a19016-f680-4222-a571-fb921b4f6a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f028031-e7f3-4cd0-9079-5654ed83d46a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.63']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e83227-8adb-43a0-a232-dfedb54cd51c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287d4edf-ce27-420e-844e-e66767520a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aedbbb8e-ddb2-49b5-afc5-d4b93d604b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2b3a4d-90cc-4f6b-8fe0-bb3361759ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2dc56eb-4674-4e49-866c-efa2dac996b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b1be6f-b3ba-4492-8628-ddd5e1c44fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd13d79-80b5-4b88-aaf3-296faa7f5a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf656084-8334-489e-8e50-8206185d689f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea43d6b-1d70-4992-aabe-aae7acbbca88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5abdd1a-6eeb-487f-a3e0-d0646cc3627e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3125378-dd64-4f6f-bf07-eb4ddb41b38e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed3c230-cd7a-47d3-961e-6dca4b252cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8113233-6fbb-488f-a0e0-9423412084a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab716949-bead-4e88-b152-a5380547ef4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc998296-c7e5-4cb6-8872-343560dc12d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b69ca60-73cb-448b-959b-0c590c28b6af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59608852-a635-4a14-b219-d15a46fc2395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97c4900-b8a9-4a2c-b5dc-f0d34cf6f390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa56ae5-2bc2-4f07-8ecb-62f51cdfa4b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cacea12c-5e98-4739-aca7-6ab998c0deae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5fe264e-37d3-4f43-9f26-c2a9eb27c02e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d638ff05-52fe-4d56-9494-92623b52fa25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b4697a-0209-4998-a3d6-79cf8401b2fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150067e2-3db4-4e80-9d1f-4e3ae1b83038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e1b5c0-a40d-4cf6-b2e2-30e8a3937945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522753c1-08d2-4368-9fde-8765fffa1546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b69376b-f62c-4d64-8167-65e86ab7788d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71c643e-e38a-4b63-ae11-f7d547acf85f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--364b5aca-04b6-4206-9bbf-06161435eac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17fe3300-365a-4501-b149-14fd34b4b2de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40eb3572-d82b-4cd9-aeed-d121911a0995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8b8930-b569-4d7d-82c6-94fb474a11cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e7e851-f0a0-4632-bdd5-255161ca6e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517d03c3-d738-4e14-8d5a-fc31b705a021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74c21fe-07f0-4c4d-811f-ef2894b1580e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57c8d55-ecbe-4c5f-9e6a-d67bdf1d4da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135f363a-1795-429d-8ea7-55e220dc0959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d81b079-9431-4444-a0fa-e79ddb0dda49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a46197b-ce92-4c67-b19d-c2864ed2e8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa372e11-ef41-4c10-970d-4227d6e71712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4088349d-cf64-4d64-81cd-cba9ac9f5bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1f0b95-9aaa-4733-9927-8efac6f2d007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a689b78e-dd0a-4f4f-a960-39a42dee84af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3871d2a0-f2b3-46e2-a1b8-ddd2bf599977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e172a1-d88f-4f08-a50a-f109597521c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc4e778-acff-4f39-9651-e7620c87d080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.81']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b9e808-691c-4684-a845-701539d0ff97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b38a1a3-09ad-49e0-8e61-e10f7df689ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0aece77-440b-4fba-b4f5-bfeba289c931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8be1247-942f-4f5d-8c3a-fd1e7cf1d1c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a8452e-01f4-4909-8940-12b457b7fbfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1edc83-0c03-4c9e-8608-b0e2beb76262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2cbc2a6-4e69-4f95-8719-e3a238974551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4470fb92-7857-43a1-a451-48c0b4c5be46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59de8eab-015c-49b5-8e3d-17eba43cccc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc4fc0a-7b19-4de0-b07a-707b796d4d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.5.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb13ee1c-d998-4f0b-b8b8-4ed69f6e2b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46f0275-a6bd-433d-ae8e-e608e52a1531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92c55ba-d600-460c-8b9c-68b07a41cf76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a891bfad-3666-4ea6-908a-a44b2c703ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb1f095-a322-441c-9fa7-e25a05d8e2c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c34adb-b842-4ed2-8e2f-f791400e7414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15eed63f-7da8-4843-bfea-f43603313edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079bd98b-a7f2-4b1c-8135-fb8d20a970dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007ee94d-842e-47fe-8e7d-77c33befc8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b628f3f-996e-4e3f-8ad6-9386ba9abed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1829b087-1445-4983-83c9-821b5b68afcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547e84cb-da36-44a7-89bb-fa661528ace6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74aaec60-e217-4b1f-ba86-38def92e86ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a1b406-5a42-4e69-9bc8-aa4bd4e69871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b7c4eb-c31c-4063-bfc8-6d5f62c6ba49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee92bf85-1f2d-4b8b-b23c-6c5b32c0b22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b4350d-7cdf-4bcd-895c-b86255c1a9ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337853dd-19f6-4499-bb52-2912ab985500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c936e8-7520-4f61-af71-615d403c5ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95af506-6ee1-4fdf-b9f0-53eb4979cbe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e142a87e-5466-48cb-8ede-724f53069103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4878625-da56-43bc-ac1e-c02e4f1ca469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80cd9743-04ff-483c-80e3-85d4bde86637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219f8a2f-03a9-48da-8c68-eb98ab3c5d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f52e4ec0-2ec7-48d4-a7f5-4b42b2aecd36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06654d8a-d37e-413b-9a4d-ef36d5a24795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caccd333-d807-4dd8-a138-48846b9cbf40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02934a7-261a-4f50-9055-20e173562f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0892cda-2082-4b38-9017-77686259bb53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c0b1b7-3cfa-46d3-96ea-38d96746e08d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.145']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c27f30-4e6b-40ca-b227-f12b0b58197f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--074f31bb-9cff-4401-8ab1-29a961c72589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6873b211-9c0b-4a85-99f0-fe25aef25157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547f2649-a0f7-4c23-a672-34320a245f76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e5963b-f404-4784-8eca-c4f3c2df137f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8ac56d-0990-44c2-b0da-46580bddf2be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140482ea-cefa-439c-a75a-c5b9e82f53c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1a2956-7117-486a-ab74-2884d834671d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c7f35bd-909d-4fc4-a715-ff0049217e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dfcc723-a5bd-45f2-b3dd-a9842689a321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1694ea23-a3bd-4f02-90d8-cc8b48a4875d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d123a4-f56e-41f0-8889-80b60d636cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479e847a-c5c6-4bb0-8ad0-5667f51d72cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31df6481-fbd1-4fd8-8610-9d835ba6ac58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668fc4d6-3802-4196-a9ca-284a3fe4d2ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e0a4ca-d3dc-4713-b4cf-22fd6ed58af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.178']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d189ec2-1e1c-4067-8169-23b4260eb652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc30935-dec6-4fb4-9086-a743161820b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.191']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ce10b8-6da5-4fc2-a0de-95839aea2bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d6e55aa-4be1-49c6-818f-3d767d9602eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b7fc0e-59a9-49e8-8af0-bf460aeb329e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.197']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1532b5-25a4-47d2-a437-308747ba22f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3794aa7b-3b46-4b15-9078-8a342690d98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2758d721-cbfd-4fe9-85b0-e75230cfc5b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb860fbf-58e2-4565-8c12-5076df0d16d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--486b40fa-648f-4866-9585-799094684002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af30075c-43c9-4d4c-b1e5-f2af6e6df769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35bd9e97-1654-49df-aee7-cbf1fa3da179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10748b61-906b-480c-b116-4614d9793151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.222']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cec1896-2139-4c76-ac55-ca3e509a6902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a33e342-78fc-418a-b5e6-af3cddb13074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2182af-1923-4845-9a13-4e5e7690df17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd67326f-7ee8-443a-bcb6-41d09545521c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67682b6e-8d22-41a4-90c7-21ae85d52a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d049992-350f-4647-b3fd-23dbd48894fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e82563-dd77-4ae8-98c1-eed3e4073a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4e00d5-b0ce-4ff3-8d71-ef82406724e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89fcc0e-0fe7-4d45-9bdf-abbbe7354d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a321820-c3eb-4901-aa7a-a7297062f192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2bc857-da4f-4fe8-ab34-fff705a852cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e4273a-709b-43cc-b710-795b79c47e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fddacf77-c6dc-48d7-b05d-0dd1a4d1a584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8cd8f0-0790-404a-9eec-730d17ffd1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5cdfdc-83c9-4ffd-aa89-08312bbed3bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.238']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d591402d-69f4-4565-b016-8cf5c2befe1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ceeff5-88a0-4e44-8431-9c3a1d56f95f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9a8227-8cb7-4931-bd54-fdd7cf4892f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b0162a-9201-4929-916e-e3fa268a9dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198e7662-ec2b-4b32-8c16-31e9bf8938a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5ccf44-ae66-47a7-ab61-72894980b34d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba59cfbb-df2b-490b-886d-f3f0a8c20dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af5192a-008f-4fc9-a42c-693f0406ece7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb09d8e1-fc5b-4fa7-b03a-612334d75f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5232339-2cc6-40d7-8bbb-3032e3cce718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1271de7d-89e3-4a3b-aae9-56b41af5e19a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff37ed86-40ec-4b2a-b2de-694c99838d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb7da28f-f5f3-43c3-8ea0-a9f54ba545e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5229ab78-630a-4fcc-a1ab-04665050696c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6840c1b1-3663-4788-8d3f-e46187d937c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f524499-1d5a-4ee0-819a-3ed4cc2dfe91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--376e3065-cebf-4113-b443-79ea4f0a2785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ccc566-9477-43af-bd03-858616f18c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0656a8b9-5a19-4610-b632-3e6496e2486c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41474ceb-f6ac-4613-b3d5-28d8a572df50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02da207-b690-440e-9945-4619044d6d5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eda7206-8f43-4830-92c2-a9eb270878a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4de7e3-150b-4181-973d-733cbe77031b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e35d6bbf-4c2e-4376-a4e4-52be038a90b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef92284e-e2eb-4bec-8dc0-2e083c87982c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bcd40bb-80eb-4d67-9527-938fe0db7a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479a79ec-f6c9-4ed5-80b6-fb640cfea3f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb06b7d-86f4-458e-834c-b3407edfaa6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b533c0-6bc0-45a4-a2a3-515062fc23c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94e17a1-4e31-4aa8-a2cf-7a13ca0279c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693f5a19-4fba-48d7-98a7-650540faacdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae3f7843-c638-4b6f-a491-0c3ee941c5d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307c0a0c-a429-4f00-a8b4-1d73fcbf878d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.183']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c4cf5d-227c-449d-812c-3837c3c9f507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0cc106-4b50-47af-9c75-e0f0c640cab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.191']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3f8050-460c-4831-a9ab-8407ce261bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab8389ce-f044-4273-b258-1b6962210373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f052a9-e045-4177-b1a8-47d4d714fd2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f5fd41-2eae-43bb-a08a-f2504ae07b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3685f7-265c-4f85-a126-9349742868a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c59266-27bc-46f0-b44c-211e4a0b40e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881631d3-7f90-4694-b9e0-1bdbb24564dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c488e057-72ad-4a5e-8ca9-5348fdf80b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ecb8885-9202-478d-8e4a-38167271fcdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65110f4a-a8e5-41ea-a710-d3eb793c46fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8435ff-4285-4aac-a275-3b73e6eb1225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0935bade-1228-44bb-a2d8-bb17e4a99c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a93ae08-60b4-4af8-aeb9-48540e98227c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35b6248-f73e-4bc6-8479-d19a33cf50c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1afcee-77ff-4c0a-aead-bd7590a8634c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd11c70-51d5-47e0-ab0d-9a50dab09c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d31fcf02-553d-4899-bb65-a6cb797073bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7b3ea8-3df8-494a-88a0-9103f4ba9e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956dd0e4-4ef6-4a74-8f64-a44770d4fb10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40e1670-6664-4f3d-90ab-f1452d3cfa65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ecc4995-170f-4a45-8722-64356146f2fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe99e23-9f9a-4cf1-960b-48def0889367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655b0a8a-334f-4aa9-81c0-5c3de5948c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--935ce604-49a4-4e96-8287-4c0f942890fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3a58b3-a9d5-4acc-ab05-05b78d13a439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab57df51-f8e5-4888-884b-28f5bf40bb57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6db24a-bd1d-4e3f-b12b-0a7929e51b25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5555cc0f-66d0-4e0b-be20-d6cd61f2bb2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--795bd85d-f65c-4e03-9d5e-60a4f3492a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05309781-40bd-411b-b955-3f4cbfb48679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c2af80-a2c1-4f75-90b3-e1b233925e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6a4adf-c1e0-4b7b-b181-190306a81f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12581401-b2a2-4bd6-aafb-2d69cfd09efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc27e93-5f70-4a02-9e1e-137deb22f41e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073950e8-87c4-4862-aada-3fe41cc5a3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e4e5b4-f192-4875-8020-c556c812276a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64873290-8c80-4446-935b-44bc19336e47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ae6816-7e7c-41dd-a3a5-5cf3ba7a9f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8117e0e1-95a0-43a1-8027-4c475a2e0ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19fb40d1-cc5b-4585-91fb-155eace238ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0af98a-546f-4025-8f7b-5366fa8bac0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a9af3c-bbe7-4f33-9035-3198c50afde7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b34a59a-6552-4372-9ed1-543e4abb8eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a82eb3-b561-4422-8eb9-d0af3c7cd3cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a549123-8dc1-4432-ad9a-f052264f2d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988919b5-0d00-4588-b1ab-88cc03b520f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea40ddf-73cb-41db-b860-39f551119b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ebcc68b-995a-4a48-b0f1-02c1ff503458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5b8fc4-6124-4772-ac1c-9ce44cd76f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df30c71-74d7-4411-9e0a-00b0f8b41889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173484c9-886e-47a6-a53a-a1f6b338e5c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5fd4de0-1d09-4b3e-8b4d-550caac2f1f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa4695d9-c229-4c57-ae2d-b452f06c2974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31b7cd3a-5cd2-4dc5-8457-495e9d8cfd53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.103']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345b2071-1aed-46be-b313-30cb585f3797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1a1e79-b491-4531-bf90-eaab0901acb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3680cfb5-e4cc-4ef5-8b48-e0f75c31cd82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16a41b3-99bb-40a8-bf18-916590c0d17b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9bfc8f-4c52-4751-995f-d824c1cd5edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a34bb40-af32-4759-a780-4ef2a8dd46c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd9016b-3bc7-415c-824c-948fa51176c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aaacbd1-ee18-490b-b763-abfb31341222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55de5a90-977b-4b07-9439-4ed1f0c3b279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f65b7912-2729-4295-8e7f-e48229fc1b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557b485e-4695-4a57-a222-e38888afad8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3851f05-4415-478f-98b9-bf300b3f23f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.144']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc0c922-7c70-4558-b527-5d251fb6a2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa9c1d5-3e6d-4bb3-b3f6-27a2e8641c8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6305a5b-7f91-48a0-a202-0d36e4d1c5b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79139b4-59ef-419c-9f74-10c8efcbf777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.153']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8008b5-e15b-4935-80a0-20844fe2b6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a559ca6-13b4-4d8a-aa6e-5ffa7d6185ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1994016f-1366-4690-bc57-f828383d46da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ca2533-9eef-478a-a0a0-ae8ff9b49c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766810af-3fe9-4746-9757-cb7210066c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f76d8b-ba3a-47f7-a162-0fcbdd46ec0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503a5012-7751-47ce-8e09-bb00382dc5d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e9a828-ff9c-4013-beb6-a52415484199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ba122f-9a4d-4d01-9a99-12fddd96abd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f72ea2-3419-4bef-98d6-6e487610b3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200ee0fc-a218-4d19-9d52-51ca42018685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a90a85ca-9e80-461f-b2f2-1080ce4c9740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6daef6-6af4-44a4-b185-4b6919605284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24b7d20-23da-4a70-bc45-c65aa36d92f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65036681-4d0f-4665-a1ed-64db3503f71a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d57446d-5a8b-45ba-a6b2-c56adcff0247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a93253-0526-41aa-9161-62d7879eca83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093eaea2-4e9b-48a9-ae1c-647fccb9a614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23adeb94-ea7e-4716-a286-ac4eeecd07f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229a745f-3a55-445a-9efe-294ea7d2cbf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4aaa57-b8c0-47b0-b6a4-3238b8b6a3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe78809-263c-4006-9263-264cddcb4020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1cffa28-4f24-487c-a67a-988ef9f02c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090850a1-f077-41ba-a1df-88f04d13ca8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5229ebda-bccb-433a-a81f-69f49c7300a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e6840d9-a1d3-47f1-b445-e699d9d532bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1fbd87b-e631-4a87-bf67-08c590f14a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.56']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5656f3d0-87a3-4f2e-94b8-145d2dac938b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd0768c-ca04-487c-8712-7b495e12481e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a143f9-798b-4f8b-9b84-d9e500f24a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d3c43b-9959-4d05-9aa9-65fb3c68a4a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90fe7dcd-8421-4a3c-b6ee-d8696e79583b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f3cba5-dcbc-483a-9938-20a218bcf78d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d35fe7c-ad8e-4ece-9cfc-5c12a8106647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96adc2a-db8f-4c81-985a-4162eded80fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba474bde-9fcf-4d0a-9214-566e1ef7cbfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c534d6d3-2d48-48c1-b791-4e32fac4914e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0648b25e-2b27-418f-8a2f-ca2d5fbfdb37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8a4ef1-509d-4882-a778-3b821130a1e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.88']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9fe6663-8769-4575-a07f-a59f9fb532de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db35b87-0023-4310-989a-fafe282fdcc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a98e69-9b61-44a1-9e63-1ae2c79a375a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb5838a-d5eb-4b53-b910-2a5dc669ebef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4817e7-9331-441c-a543-735ee1a594c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ef429c-8a04-44a0-bc1c-a7d772f159c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9820e676-f262-43fa-9d63-f14e72bee910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe4aaf2-c6af-4f44-a433-ff28a7c573fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567437f7-0a45-431c-8d31-29b21eb7bd9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dde0de6-dd3b-4440-b5fc-e8fc8675d2fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80f2248-4232-4a1b-a1ac-b4439d4cd265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e71ba80a-fc2b-48fe-afd6-e238b1aa8197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279f83ed-ba12-46d6-a55d-30181078b39f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd13e3e-de5a-42b5-ab17-e4058da8d43b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0beba2f2-ec31-4d94-b3c0-28256f067eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5e19d2-cf95-4020-b683-dddd70980242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c72fbd0e-1542-4753-b60c-9ee4946264e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f34dd8-c609-4d2f-b77c-6067ff407570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0860b5c-2793-4593-a80e-0142e5a93f56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66902982-ce24-4395-9beb-283cca4fd39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a40db6-5034-4ba1-90ef-816d1ea825e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f41d1e4-d9b0-4029-9a78-6f767a59c253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ccca8e-8c93-4280-8250-f7346cf8b327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac92131e-dde2-4134-a397-d299c967fc14", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.168.115.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0082769-e4d3-4dbe-a5a3-cab5d977fa3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.209.192']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c46d4f-6ede-4f12-9d05-ef8d87808b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.211.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9adc96e4-5d23-404d-8e0d-af537907228e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.211.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91a31ec-b11c-4ad9-a2b0-e1311e2c2079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d83cba3-1846-45ae-899b-c13a0fc21925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b485472e-ca58-4fb1-85de-5aad6dcc23aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ed6b79-b6f3-418b-ad92-f38841e70bc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fb106a-56c3-4ab9-b82f-6f1bb70f2d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.213.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9b7ceb-94fb-4247-b3ea-a07a71744321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.213.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ecfb35-5c18-4900-a065-2aed5f9910ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.215.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255668e9-299c-4806-9e6a-2f26f10cb29e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4872acfe-499c-4311-b321-db50a1c6508d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.206.18.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e8bdf1-69ce-4534-992d-169f072f57bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.35.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--599cd7bc-e29c-4907-9f6e-4614982a709b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.37.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d59cb28-b249-46bc-8c48-84de49a971b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.37.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ceed16c-9dce-428b-bf18-fdab5fda23d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38346aa-0b21-4be2-aa42-f4358a2081c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6209721d-23b2-4b89-8a11-58f3342057ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.46.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75d7a0a-1c92-4390-adb0-e3c882ea63f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1ee90a-4549-4bce-885c-e239da998bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f7aae5-d13b-4049-84bb-a469eb2f2f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cbb1509-2e4f-40f6-b88d-1ebf9e52225c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02903766-d4ff-480f-a512-07310ea229f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.62.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58eed4b1-3788-40ff-8bd2-491b5850a34c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1a7d68-3058-45c5-93ef-51a3eed4ce62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.223.240']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651d7c5e-a60c-4d18-b2ef-70e4b60a4527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d00d624-76b1-4339-938b-d934def13314", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.69.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449a6c8b-a96e-45a8-900b-da07175282c4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.78.1']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa01400-0b6e-43db-92d4-304845c1f5b4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.33.215.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46299b02-d202-411f-9b94-3538f95c53b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.87.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616bdca7-d4ea-4691-842a-e456932644de", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.93.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef55932-cf9a-43fd-9457-884c42ab126a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.220.180.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77346c52-91fd-45f5-bf7e-81592a5ff142", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.71.55.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8671599e-d90e-4e6d-b8c9-82d8a73e889f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.178.167.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e14507-9d13-4db1-a66e-486a3bda8fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.105.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968ccc93-c6ac-4a8d-951d-4ac293f16a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.11.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f50b4396-eed3-4824-a1a8-c87503fd177a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.111.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13216880-bba3-4ebf-a959-4bf89d62be80", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.178.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e99755dd-7ef2-4b12-9652-b6f4e2f67957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.194.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d01f37-c90c-4ca9-8bbc-5420cb1912a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.200.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a85ed6e-1e74-4111-b072-8a2a29724fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.229.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069c4fba-d65d-4878-b5e1-b64921f6a4b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.234.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db5711cc-1805-497b-a421-e306fab185ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.3.153']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e8d0d72-82e6-4c6c-95e2-91ba18734958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.46.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6056a99-eda0-4e14-93cd-e77fe146bdee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.61.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b912e67-06c0-4bb8-8255-296432d6aa72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.69.177.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0233b9a1-cd8e-4185-9339-1cc13106fa9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.121.114.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24aff07b-abae-4c7a-8c15-b86e65ca953e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.163.185.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e481061-6ff7-44c7-b84d-9599627dcf71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.210.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd20616-a36a-44af-8cce-a4b9a6fe19e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.211.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327024d2-9e9f-4558-aae5-c1196e141573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.211.197']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d7263f-bc65-490c-9430-675918b600ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.211.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27195d37-900b-4ec6-b831-e91d9def7286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.211.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08817f94-4df2-4daf-a462-9c0cdd6fabe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.211.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b38a271-e502-4d4c-b130-2f29073c01e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.211.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f347f9b-8d96-4360-908f-898851326b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2386bcf5-d4c7-4369-8ddf-8cc43712f319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b092846-e85a-498a-afbb-df6d9f5c863d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df93711-e9de-4f6b-8b06-857afac31dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542588b3-2704-456c-83ef-fd31b2661d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.152']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee8022f3-aa4b-47aa-92d2-7201712d901a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54343913-2997-45ce-bac2-23e52f9011a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e92eb7-72c7-4d65-a7e2-8a65d37d504c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c8441d-7c48-46c8-8d81-97631bd7b500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.192']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb43096-cbab-48b7-b176-1ccf535e3c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4156ca38-8b14-4b51-9f4c-8b02b178f4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d55961-9ca4-44b7-b2e6-a90ca35337ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe2dc27-f3c2-404e-bd5b-37ced5168a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9eba999-7423-47cc-a333-4858f6ddf494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573fd107-c196-435e-9b06-193d1e2a342c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b649441e-db53-45d6-8ade-8391a7bd685e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc9e17a-3a3b-46fa-b965-e025a8d47109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822a10bf-4df0-43c6-8850-60e7cd51cab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.221.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3990f589-7e5d-4345-8062-fd35a8d13a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.249.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f62d37a-f7e4-4a45-9d40-629568b9f31a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.175.33.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd5e41b-43d3-49d0-b992-9b5068fbfd45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf45a85-c907-4114-af9c-d59194803a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a60f9c4-651e-4483-a416-05dfa4439f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1105969-67c3-4d8b-9d14-c98e3ccadac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4edcd80-670a-4703-84d8-39eec2a4ba12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c303d5a-5771-4130-975d-70c70789cff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9038c950-36cb-47a9-a65a-4349e40ed3d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea69b00c-7282-4739-beb3-0f6ded939a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa0b6cf8-5e2b-472a-bc10-793ced739c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1de346-8a0e-434e-b396-ae8a577d0ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3682f158-d883-491f-adec-c941c037bc20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c9ee51c-b850-42d0-8f3e-889b940b458b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da660bb3-87c0-41c5-a4a3-0bfd9df0b344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.144']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e04472-b9f8-4c81-b5e4-5b48acd67065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.145']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab129e8c-133c-4f46-9dff-3ac91618959c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455d5676-42ca-4568-bccd-ee9718da3301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e9504f6-79df-4234-ba89-5dfd4716bd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81bc636-cbe6-48d1-b273-767c43c621d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ac5fe7-c0a1-4f41-ac0e-095a66b9853d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9299411-efd2-4183-8fb2-8a667fc17d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.152']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0bcddc3-79e1-45e3-831e-7671572a1cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.153']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0031e1e6-05b9-4231-b6c0-366e306f4494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.154']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f25564-b996-43e5-a179-1692327fc2e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb222e0-ab28-4fe8-a32f-4f6f6ceb7d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a313d3d7-5b3c-461c-9a64-84220c1fb586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c215b50-4646-4bfc-9141-87cc63c11322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d901d8-e802-4be8-906c-53ed06836fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.160']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdea138e-e6de-437c-ba1e-dc349d5888a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5673ac84-bb16-4f1b-8bec-b35c7549b242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c5b506d-2b54-430a-937d-a292641ffbe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31b8f5e-5874-4ca6-b3f2-52cc9ed36b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.164']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb702215-03bc-4490-aa4b-d160d24b6a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0a7c75-0b6f-4eb4-81ff-0fb82c63f317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.166']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005b8972-9e30-4f33-a2bc-2049277e6ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5e1288-5854-4535-bc11-0f7eac1153b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd45a710-7244-4cf7-a40c-d21d0c452a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.171']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0323d85f-7729-480c-84d8-1ff637167f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b82343-452c-42a6-bf10-cb72918bf20b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f9c715e-0512-4bc1-9e06-ad387918d4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200cd093-2f75-4534-a9df-4750ef259245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e5c454-2799-4fb5-a011-0d46775e7512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.178']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345de77d-48f1-4c16-9168-27bf1c0654a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4110d487-2182-4eb9-a7aa-0ff2489d4526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a082b18-64bd-44df-9e4a-5cee4558d883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2464fdd3-123c-409f-bbc1-710848c46fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.183']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f60a56-88db-48d5-b720-7458dee77fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12a7657-a945-4a0c-9318-69a69f36eca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b773f649-0370-4009-a15f-c9ae510482ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791dc36a-9b8e-471d-aa5e-9e1b82e7cfcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.188']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd5c08cf-f20e-4c7d-8bff-f5461e1aa718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4bd8a79-f73d-40f7-b360-3e0fe0322d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3587c128-dbcf-4b3b-bcb8-2a0a23fa72a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36976bf2-7f52-47ee-9cff-6f9c0eaf99c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.195']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa504ea-8788-47b8-904b-615c87d0a92a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--418f8b1e-edb3-4f81-9732-c76553b8c2a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.197']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--237741c5-7e68-4ff0-8c45-97976fa26a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed5c6fc-a7e0-445b-81b7-e7a657b648eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53be20bb-f56e-45a3-9410-e4af2ae361eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c12822-dfc1-403c-8fcf-4d5c383bad58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f2b4ad-926c-41c7-8003-d2b32af10922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517dfa78-9c7e-4fbe-b054-432d720efd87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991abbe7-0a25-44c8-b876-a4ceaaff7129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a8f65b-a8e3-4e30-bb91-da113981d99f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9daa26-37b1-4e36-aac3-7c667e75ee14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11eb7cad-d16a-4bd2-96f2-4abef86e622a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390900a8-fc23-4819-bc48-a5b55b1837e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8221474-48ea-431a-958e-4459c1cd12ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf56562-ea50-4165-9872-9dfde6912d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f190c5c2-8922-4bfa-8789-bec214ffcfc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24bc719-9e60-45c1-82fd-d8331eaa2322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da868d4-590b-4741-9eec-c2d5394190d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5492cee-e4e6-4163-83ad-f12bd1a873fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fce480e-7a47-4c62-812c-2070b8001f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e75f32-029c-43da-8431-e78e67ce3790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.222']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6495ea68-8c99-4be8-be31-521b7f00d7bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b45359-2af0-4712-bdf3-753419f2c169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9057bd-603e-4ebf-aed3-20e9c2cf4898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56d4ca9-90aa-45a6-838a-99e0e092b563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7742b0-fcea-4d95-afd2-fec7de76732d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.228']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a75444a-e002-4fee-9677-eb326787fc84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7480e11d-6946-4d07-9a1e-c1db6dfde67e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87f409c-655f-442f-acae-0fa8e4da7c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc80a04-1e24-4757-b047-838040684cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7229bda-96a9-4afd-9a09-a5f726dfcde3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.234']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4035972c-451c-46df-84cb-d3f7daa640b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.236']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd5caea-550d-4d30-ab90-27a47ee9581e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.238']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec9859e-f2e8-475a-9f45-34a72acfdb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e01ede-d829-4b9a-a735-dad922c9bc3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.242']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a08ce9-76bf-483a-8559-118960853639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--935557e5-8fcb-4e04-8bbe-0da207d1af0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2738da-5b1e-4c06-b57b-c716c796293a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95510f9d-4da7-4af6-8d99-4bc7e7fd6cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba8f5ca-c8ac-4e22-a0a6-1d64b1008307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1ef93d-9a7a-4c30-aa28-68d23addfc30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce9040a-d379-44b0-a137-f9d4a0320aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876f77c5-f6a2-49bc-8839-60027c17bf1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967c6dc3-31c3-419a-bbc2-e13892dce501", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.21.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d78e823-cb3b-49d8-9fad-73055823bbfd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.7.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e5affd-5baf-4415-901a-ca0778c5a6da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.115.235.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2ab44b-2c1d-4050-a5ef-ffe29b08a39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.183.92.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8510364-a580-4b01-a96f-2d36d517bb83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cdadc49-6f49-48e2-a2ab-0c40fe20f4d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f611e8-1f0d-461e-9f74-c211c1186684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--775ca5a5-f4a9-438d-8915-6524ffead806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89166a19-cf2b-46ca-a267-51b22e07f93b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9743ce4a-0d17-4dcd-8aef-2ab24139f0e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf55469-d348-4268-a625-d8b577a4ec0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.234']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b1504d-b66b-4a45-9bc0-d2e4058253cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f117a21-bbe2-49d1-9212-bdee08c24866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.236']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d27d0ca-a11f-4828-a8b7-7722f592db89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c470537c-a04c-4b43-945a-14584b664880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735f0561-4e8b-4bef-aa53-a2014662e797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.146.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bcc0fc-9075-4854-863d-4411e04b4c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3af1408-3180-4125-a417-a1db9f80a81b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.167.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe22ba0-a2f7-436f-ba1b-1c0e2b6ad399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3600838-39f4-4db6-baac-7e78fab82a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0408978-0270-4e4b-ad6c-6fefde752e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503ec232-1ec8-45b9-9651-a7c1f8709f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c32a9b-c22f-4575-8821-433629fd9d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deff3093-9c0c-4da1-8672-2ac45fbf88a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1c3efa-a246-43bd-ae14-7aa3a1956421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d78820-2d23-44a1-98ed-3b4575087f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a975e4-edec-40c9-a601-3a5611a715d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8d4a34-7ea2-4d3e-8951-f8bca80abe65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bdc855a-16e3-40ef-95e7-62fcca59ad20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28ff1bf-c251-4db2-8e31-56f17ecfa509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.178.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6effc9ab-7415-49cf-88d4-037b6d029e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.43.57']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63451e70-8d83-4896-802b-d557d54c512c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.251.5.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461f18df-b233-4c62-9dea-c362a513b48e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.251.5.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e11993-d2ca-4ab9-9da9-06ef849d12b6", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.251.5.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c5a557-1e8e-4813-af85-e3fd8ab07950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.251.8.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28296365-46ef-45c3-98b0-a4159b62c971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.32.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0da78af-bf2c-4732-9a3a-032fbaf161cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.204.137.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb4686a-2b83-43f2-be80-3605c11fa0b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.0.32.144']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d0c793-9e99-4ab2-b78d-d9c0f83ffbbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.120.163.63']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884b7a83-054e-4ba4-bd8a-422bb1621d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.240.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6022075e-6bda-4e8a-863b-defe9d0e07fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.160']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9cd2797-1625-48d7-a641-74b6491cbd47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d85617-8dfa-4801-b2bc-560818446edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.108.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4d0318-95b8-4270-8a02-1b8cd7106e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.121.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3759ec34-b1cc-4769-8994-95b6e8af4510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.121.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3c8910-71c6-41d3-9c28-644ba9566214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.140.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f966842-4444-43af-90ca-b07814a083cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.184.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e99137-c8a6-41b2-a5db-766cdedfc193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.185.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72961ca8-bed3-479e-93bd-fb21d32bf9c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.188.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ea06cf-0c70-4115-92bd-6a26125074e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.205.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3041b0d2-28f8-4a7b-8999-49d282d4f262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c97137-63d5-4549-8bc8-cd2b87b2bcec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.154']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821dd42c-6c8f-470d-979e-404b5e1f9031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.129.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b245ba6-cd67-4605-a51b-25919ee2c415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e26ae1c-7be9-4b7b-adc8-6c43f2a3db14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.165']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501d1d77-342c-44ac-a71d-c00a7ff6bb08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.192.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8669c219-0bce-4d67-a17c-b467d8b5adaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.105.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a670fb-2516-4d42-8b0f-13e576a9745b", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.175.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822540fe-631f-4f1f-95b5-d152c6fca1ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.242.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f34a03-4dfc-4a2f-ba66-20b980963a17", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.244.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca7ac8c-4db9-411a-9255-9635576c7461", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.244.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20056e74-a519-4b5a-a30d-0320720079e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--600987c9-00c1-47da-869f-1e5bf02f3ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e3116c-a8ae-4110-b565-f19c9bcece11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd30cfd-3b81-481e-aa70-eebbe77048a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b0b2f8-62a3-4416-b160-07585ec08a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cabaeb31-b56a-4ff0-8197-1a8c50795859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b41413e-6725-49ce-b896-f48bf7ee206a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d90c23-7f6a-41a4-b889-c2677735ec6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7756851-2a81-476c-a3bf-b89ead77e503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece29587-4f2d-4db8-bca4-eb8668155216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3455e17f-4ff2-4e43-8c18-593ffa543bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f82c27-95a0-4bfc-bf9f-5dc164038008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--665b8c3d-82bc-46b7-8a51-d7861f78451a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a357dd-0770-4e68-9c57-9a7d244e7b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd52c1a-23be-4ae4-9894-b7e1513f7830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586ae199-143b-455f-bfc6-27ccfead974a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fdb931a-8e9d-4067-a97b-ba6c63abe8c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03df4052-1321-4e28-9a5f-787586d39134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c76b0c8-05b6-4689-9a1c-925648f88e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745a5da9-7ff7-4a66-90ac-823f9ea06314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e008f2e3-b2df-481f-94ed-1d95cd4520ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa6cfc0-e09c-4ee9-87e2-c9a37b2c4766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4538f15-3f74-4f83-b371-5f61b1757480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be3d019-0c6e-4feb-ba22-0c893508324c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c602be0-7454-4eb3-a221-baf469004934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b167da5c-64a7-4f10-814d-09a9cffcc96b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68bf909c-bc88-47a2-b2ca-595a721fb880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a62230-054c-4383-a6ef-c9d96212bec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6806376-cea6-4465-b42c-a8d20053ae01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470da12e-5f61-4b19-bfe8-dfa9433048dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592f70a9-2672-460e-8c0e-9c312c825bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2865b94-7128-4c0b-878a-5e519d272e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5533fdbd-e62f-4776-ab41-efbc72cbee9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f182c765-dc4b-44c3-8c57-1a6241462e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d092cf40-d3eb-46ce-ac4a-56e9dd131694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d2f763-edb8-4d4f-b332-4cd5ed965926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5090c3c-ebd7-47ef-b058-964ff4cbe92c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3187414-861b-41a4-862b-9416cd215169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a876c3f-9d68-435a-847c-1f923e2fd414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.119.208.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790f48d2-af74-4697-b5f9-2ce441d0f5f6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.247.67.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7416b44d-4b71-48de-8f3f-605f701dea5c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.240.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--236d4605-5bf0-4fa5-9d4c-d321974f2edd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc4a9ac-580d-4516-bb47-4f37b8375e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.197']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d26f4f3-2a03-4e36-98d1-fcf6b0237cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aedd5fb0-808d-4335-8339-88ad0c9d0923", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.87.199.234']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a62f212-7e2d-4542-9d8e-616cef88846a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6562453a-5d4b-4299-9a4b-1288e1a11cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.238']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4d2357-e2d3-4bfa-94fd-0e26887c247b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa6a10a-331a-491a-9a0c-bb9d759237f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555270d3-343b-4d48-9dbc-fd159cadd323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a1e4de2-14de-4fdf-80d1-35891ee5b84d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66886949-0cd2-40c9-8f61-e8f6dd088170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.60.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1790d7a5-f048-4681-a5c1-de2345bbc010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e05998-e4ab-463b-a800-260eeccdf8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf0783f-9934-4099-a449-0edaa554626c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2d1685-a117-4a78-b862-be773b4a4854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.94.47.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf701479-5561-4570-9163-8ae20f1b14a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f432ed-598a-4948-8fbe-c11d9576b431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.75.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac563d8-3bf3-4597-9afa-1b78d2ba8762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4840f81-c9a0-4cd5-95e7-a28af23451a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfd1619-e27b-44b3-b19b-7c6368440b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84628b8a-ac94-40ec-a3b1-b876c47c8a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0d7fd7-fc64-4251-a418-559de04344d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6d2f51-f8f9-4c8d-a443-2809bb89ef3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f8c598-4a90-4ee3-86f3-34f9a5ed217f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177e4db6-992d-471d-a065-8956f483cc4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.166']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d50fb1-ffd1-4d61-a946-ce9f9ae2e50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18de9cd8-a407-4091-9481-ec3a98d36d87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0ee80e-00b3-45c0-b3a6-60b7d5ff30e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.86']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4054333-e580-4788-a5c9-ddee2c8483d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6751b0-cd50-4b96-947a-f75f7c70d9d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8c9bc8-5f90-463d-9541-8c3581690022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8b4e15-917a-413e-a279-933b80a08aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d22434f-64b9-40d5-87fd-fa196fdba0df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c39e05-ee3a-445b-9b02-e8786937301f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b81d40f-c41b-4972-974e-18af8f3db54c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.187.202.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa7fae0-8786-4bd5-aef4-908e9a9d1fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.39.0.195']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b1c0f7-00e7-44aa-9db3-6be9a1dc7de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.39.56.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad02f6e-a348-4119-8999-46eefeb1ff3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d717958a-ba57-4368-bf62-39245bb9b6dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc526200-00bc-4adb-8eed-d2d43e0e612f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.138']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365b792e-da19-4328-b832-33041894e88f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e07d149-3d67-4965-a8d1-5f769b91902f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9e8d78b-d64e-4ccd-bc96-8a780f099c6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--985fc047-2258-4c23-9111-794feceee8f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b2b533-227c-40a0-9676-1f3422906beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da73c0e6-00c3-449a-9745-7d94bdc22067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--441bb0f3-b609-4430-b667-84e56c7a2f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--158aa2b8-3254-43f6-8092-55887fd89ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc2b619-68eb-477d-9fc8-df1957690767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adbf58b4-aea2-4b00-9db7-c09a8d021003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7195f3-59e9-4433-84b3-ad07d8534039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.238']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6070188-ede9-4d97-98a5-d8fee9af198b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.246']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e301c7dc-2f6b-4005-9376-1e5003b26a42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e28787f-4ea8-46ef-a528-997aef0c2b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d15ca47-20ee-4aee-8236-6a605709e16c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290034bc-ef60-4039-b62f-7ffabcf70bbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd03c87-0cb1-4239-b36d-efa43bb5014c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da4e3a76-2ebc-4565-ba5b-255bb5fb3fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.242']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c0c9fa-dd90-4e75-bbc6-259688f98c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.254']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83487d9f-ead8-4c5c-8782-baad27a46750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d53550b-1d80-486d-84cd-77a663cd9769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dadd5535-e63c-40fe-bbd6-645fe155bc8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b51aec-e155-46b7-ae79-1bee2539f2fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0f1f00-3244-42b1-a7ce-b3a9ebfd756d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.122']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--529cc297-8601-4d93-b7c2-8acc3694cd94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b27b1a-67b3-43e2-be85-04dbf66b1073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d660d1ec-42b8-4e99-993f-018b43bc3203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f2879a-5e3d-4734-a5d0-ef9093b15ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ae43ac-96d3-4629-9f01-c11d5e4980ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.136.189.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db86cd1-5a51-4932-bbd8-174750c13497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.219.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41877a29-7a54-44ba-be09-62fd6bd30785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.140.218.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e053d0-d301-413c-b903-84b386377d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.142.178.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6a87ee-5faf-4e42-a955-e74bea9051b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.148.81.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--828651ee-1e3a-4a54-b44c-ad3b26b13ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.152.209.0']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deca5ebc-2712-41b0-8e57-1aaee0088314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.163.71.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3143fe0d-1db7-4335-98e2-427e28b04fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.101.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc86762-d16a-47af-9fbe-3b8998b54b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.101.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277ca698-cfc9-4373-8156-f102efb02cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.107.224']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ebe16f-6d6a-4027-90ef-b2e8ff8b4772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.108.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8f3e4c-fb1b-4d5c-b74a-8b7a7b807c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.109.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e81496c-233b-4418-abfa-246afc482042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.110.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de32883-1e32-4c3e-9c20-0bee5af7db39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.111.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73fb1396-a189-4efd-8b71-8acc371f2d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.114.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452b8c00-9e86-479c-adc0-2afc6462d55a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.116.242']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6255ce9d-74eb-44e3-9ab4-3c629603d907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.124.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad9470f-a171-409e-a5ca-8e7f10cd7d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.126.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d94214-befa-495d-9d55-12fcfe9d3ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.126.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29cc6080-0915-4014-86e3-776420823ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.127.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f099292-7f03-4fb0-98fa-7993e2de7dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.201.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d0d732-9ca2-40a6-acb8-5dab63447cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.207.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd696af1-e188-4301-bf5d-c3d3c045ec8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.211.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd3b1fa-ca97-4921-9f99-9abf906b10e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.211.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65bdc5fe-f8a2-45f2-940d-436950cbf285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.218.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--914f19b3-3928-4083-8f6a-b416b645a982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.232.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37796b6-3ee3-4bde-ad01-f169d7a3454a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.238.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958c4e87-49fa-4829-b75f-58a3b6f0fb51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.238.191']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59bbe7d5-89f2-4831-a6bd-8e9d3a332183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.253.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebfcae0c-324a-4481-84d9-e4a50b237192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.64.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5cd9700-d750-400d-b6a1-62c36af98f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.68.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd0b95d-9abf-4a8a-8eef-d138a55460ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.71.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776d2dbe-46d8-4834-b38d-df5b0972d419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.77.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--574024c0-c01e-4b72-8404-dced323fcb1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.77.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593af3a5-7c69-405d-93f1-1cd806d18437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.80.214']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b407fa17-ba64-4291-83e6-787e7d349c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.83.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d2db51-47f7-4fbe-8041-028aa3b23146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.88.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404420e7-1a76-4d87-9756-19724b5d2508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.89.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda49e7a-8558-488e-b925-d2a9f5e81843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.96.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e735d45-9935-4ba7-9ca2-06db1f9b7e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.210.18.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d080e8c0-e21e-436b-8f0d-1847f60fd84b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.0.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50cbf04-b32a-4998-b646-d4cc5437ed32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.11.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52f49bb-a13b-446b-8edb-589db862a58a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2773b368-58e8-496d-871e-5269610f843c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e7737d6-e7f1-4aee-8bbc-377e09f11f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.129.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f024010-d31d-47b7-8ef9-fcfe2e05b41e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.138.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca0cf4b-e452-4077-b894-875e6e0866d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.142.197']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa09481e-8d4c-4dab-80f0-e5079336350b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.145.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2e920e-4b6e-4482-9ed1-7fce5b7aa334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.148.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c978db1e-386d-4b84-b8fe-4b0d06d666ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.150.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b116ba1-9f00-49cf-8e2a-3c0c8f578f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.162.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb289ac-d87e-4147-810f-bc153a205b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.165.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0daf35c3-227c-43ea-bd8c-c1eb9656411d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.171.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1fa3fd-dd6b-4c18-8155-72c07668c71c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.175.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f830414-21c3-4a4a-b906-c2635e833055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.22.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088a0d3b-86f1-469f-a942-73c8e1570381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.23.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3c6e69-8579-493e-9a07-73a990ba4e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.24.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b3481d-5c6c-4924-abba-511306d0fdeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.25.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf15a9e0-301f-437f-9a49-6e9f97125f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.26.230']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa72d6b-c673-4b72-8ee7-f4a4fd31c349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.31.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e74853-077b-41d8-8063-2e308d9dce9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ff6ea1-62b5-41a0-9993-50e4c7581fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df1fafb-b20e-42cc-8241-b6a49f7c7063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.41.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a8f76a-1f42-45f3-b33a-4469a973230c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.42.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6295cbb0-4ae0-4a63-ae4a-dc18cca7568b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.44.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e749c71c-96d0-48e3-893d-b4a272f738c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.44.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36b0eb6-be53-46f0-8fcc-42db9d108a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3596fa9-348c-4fe0-8669-fe84442f5cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.47.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eaa11d4-65d2-40ce-838f-b494cb007865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.47.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d16515f-e9a2-4b19-959f-6aabe6a5f711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.47.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf73e4b-30fa-43a1-898c-304fa416ac87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.7.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a26bc37-835f-4a21-9a66-50f6a637a6c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.9.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ca5533-53fd-4eb8-adec-9f2811dbb32c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.9.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02885c02-a0cc-4c05-89ee-171885c1f8a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.213.229.126']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c08fd3c-bd3a-4ccd-86a2-f748a5970f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d774bb-51cf-486a-a1be-380d60fe839c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252e416e-d624-41ac-952d-95829dfd1c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909dc053-ea0e-4353-9218-7fa425e66eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4740cdb-96ab-4aea-ac89-0d0d2b5d6124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fffe6e79-05bb-4f1e-8e88-d1818d6209d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c94a7bb-0753-4170-981f-8c8d0a00e4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb118dea-fc04-4802-b928-e670a34a1cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5140c81-4e92-419b-aff0-32aa2ed287e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd2f798-238e-49bb-ad01-f677a378dd5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.97']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72940bcc-46e9-4d76-9a2f-8a24d86574a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ee3f3f-ccba-4755-b1a6-42425a70f8b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f9d0b9-990b-4623-b42d-9c57b6437328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.232']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df5a690-9f88-4ed6-be41-e456d78f0055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2a2215-5893-4fcf-baf8-0a65d43d368a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e293545c-c392-44a7-9b1e-c85478d01545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.15.166']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2870959-da94-4470-90fd-982e3da87984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.15.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed067b47-9e77-40f3-b023-1a374646a578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.112']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013c7484-1388-4eb1-ba13-17ec1e851f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc68a62-76a9-4a2d-83af-2bac9ebd9200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fabec1a4-be22-41a2-8e7d-17c3e9881437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12f38f4d-0b2c-4af7-bf81-6f985beef42c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.120']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385cbd59-9b28-46ed-9b72-b9ab9bbf2b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c7e70cc-2a6a-4c92-8854-21201e090d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c2ae8b-d2c3-4cbd-9291-9cca978a07ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d15d8d9-318b-4f93-9bdb-87bfbfaac9df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b69d03-5fba-429b-9c3d-c5943a83d853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c6c73c-9b11-40a2-9543-ef4110893481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db38d317-19fe-4cba-9244-ff63ab37c6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ab2385-17b7-43cd-92cb-5294c888bb21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255db1e3-9583-4e55-96a0-36bdb36a2f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aacd39a4-11e3-42b3-8f9c-caa24987f2ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc8ca6a-04e9-44b7-8bc1-060c3906c7fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d407a20-eb4e-49dc-ae47-fd8632edb285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2f7608-9e57-4a7f-9307-81c827c35117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e8fb31-b62f-4eeb-8a36-2cd6ac77fbb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6df27a-10ea-446d-b75a-30c88f6e5a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5311e253-54db-45c8-b895-6f90214d1303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa784ee8-66a0-4fd5-9e43-8873a06b64a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.57']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2daab7-ca63-42cf-a334-661a6c5dafa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77033acd-0cd8-451c-a1f4-b0dc91246798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01528b27-a3b5-4ebf-a61d-0c99e3daa111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35be6bc5-b307-41a2-9523-a15f9515dd8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.176']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--961e3944-da26-457a-bbf5-0ce151a3e2df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300625d2-4abe-417f-8a9c-d2d798f75b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978cd28b-c476-4f63-a8c5-c625acaa3bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d91ec77-4c79-40ee-ae6d-b14e79988349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d157957c-eed9-4162-9b3a-80b8b74a70d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d344f135-6ffc-4e1a-99be-c977a7413149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc02062-c4e1-469c-9ef4-cc7d8523e45d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb8a6ff-3326-423a-aebf-c0114f665d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a079f7fc-0fed-4a12-ae4d-e99680d20032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def55d25-3bdb-4207-ab10-3262ef1c7ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978b7031-0cbd-4e7a-acf5-b7b12600ecbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc932f25-80b2-4ebb-9518-7d585fd58dfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d3cf26-00c6-496c-b3db-7ba443c12c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab1f944b-9994-43a5-9cdc-1bb83263babb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.161']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cbfb445-3327-4904-9dc0-c5cd1749e423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b19cc1a-2041-4d10-92e0-26994373b490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1164445-2b90-4fb3-8d55-0acac51640f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca661423-c01f-4f65-87f5-ab0e63bfa1d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.84.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f191c2f6-9d1d-42e9-a332-51a81a35c478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.87.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc32a5b0-b13b-4ab1-b5c9-02daa73a839c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3235e91f-8dbc-4467-9a6c-ca45ff27e344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a16ba6b-87e4-4325-88f4-e9d5ba2b403a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c004392a-c495-4022-8c2c-67f698e98d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b7be97-81bd-4b28-82dd-91b5ecaab0ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.104.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b22db22b-a468-418f-9dc9-0f28fc6d359d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.114.110']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95313b6e-b9b3-4909-94f0-9410b9d90117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.12.186']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1e7d26-b53d-457f-8001-1402e1802455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.128.56']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa22a41-51e1-4652-9cca-fd9c68332bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.222.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6246ac6d-6a97-48ee-87f3-91f2e874ce6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.142.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d05a13-88ba-4b37-83f6-7d825b2bba67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.135.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee6cb4c-355c-48cf-99e4-0fa030da630f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.231.161.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689b7ca3-6a4f-4628-815f-e7fd873586a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.103.63.136']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2811f14-346d-4a8f-a662-6f26bd0c864b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.249.180.57']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d81ff08-6cbd-4039-931e-e0fdff5e6e36", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.65.211.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b440c869-5146-449b-b276-b41f441d5aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.72.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe080024-8b7c-483d-bbb8-3da4cca22c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f7e6e05-7c3f-437d-b6dd-615abe75abf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45281405-18c0-4b99-be0d-4f1a86824046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.85.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de756b1-ac3f-4c8e-a79d-9b204b386f65", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.17.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d6d049c-40a0-454e-8da0-6280071f7977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4860aca-eed5-419e-953f-a1e3b923efe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac3dafa-45e6-4916-8141-4c976dc557df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69218421-5247-4694-84ad-24f99c93e444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce17c46c-1098-4f7f-9564-81783751cbd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.85.84.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e090a3e1-cb94-4e1e-a9a5-d6926622c011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.93.253.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3538f457-9adf-4b97-b8af-aa8ecb992778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.127.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec7f04a-0cc0-4e6c-9415-f518301f6b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.130']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726ba9b1-d606-4367-af38-883a1aefe87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef474369-397d-4a22-867b-79f98f5615b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df33eea7-7dc3-4996-810c-ffcad5f91d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb0e66a-1553-46d7-8889-c5f7021a53a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.10.42.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bce9e1f-6508-41b6-9b6d-912b3b13d451", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.107.230.148']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd93c60-d963-479f-ac69-640936343785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.12.63.174']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa4e521b-5540-47bd-b3d6-7a7813c0aa46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.16.240.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38a6b7a-d359-468a-a7db-7258bc058bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.17.99.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64fb94c-4d3c-44d8-8684-c7a867834bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d8196a-7dac-424d-a229-2deb40553fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe9c880-556d-4abd-8539-0bf19dd39d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5068d4ae-d568-4233-abac-51b4f5e90143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e6b2f2b-c897-462a-a5d9-038a1f3b1fd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.197']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b80b5e-b932-443a-bf24-c99d8b93c654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96761bf3-1248-4990-b33b-c80324f5bd3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718fa26b-154d-4c2c-9f17-e8f161ccbb4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5090e22e-65dc-489b-9928-de90217d21de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.226.129.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44cc5dce-0aae-4963-9bdf-2a3d8973f95a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.229.41.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e038531-3ec7-4f55-b4df-5c42bf3ba248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.68.179.56']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e469f6cf-28ed-40ba-89ec-78f35bbe7f4c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.70.30.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21047f27-a962-467c-87a1-6bf44ac2e61c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.102.18.220']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6736046-2ac0-45cd-b7e9-37dd088ce2a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.156.182.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6262e92-82e3-4ac3-afca-20fc803a1a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.208.97.234']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238506ee-169e-409a-89f2-332cc410a9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.64.200.144']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b7392f-d2cf-4c9d-a92d-eb5fba411f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.80.253.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0448749b-efc7-49f7-ac31-34c41c324553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.136.251.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c8cc0d-c45b-4c0c-9a35-db4f4d81e526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.106.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d8c0bf-ed81-4fb1-afc6-69d2fb2e7734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.69.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22bdf3c2-27f3-492b-adf0-815d3eda354a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.89.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671e4ce0-c591-4abd-8299-81d7e4043cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.174.217.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0500fb-6858-4ddb-9116-bb43836667ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.229.8.197']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580f1132-dd4b-4f65-8454-06c1370fc746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.55.17.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bcd616c-7acd-4097-b1bd-b3d6a9a97948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.97.111.116']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba077f14-a3d6-4a4d-93bc-42e653a173d1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.2.59.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e86c388-0e77-4627-aff6-5342dc6f3d04", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.136.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be10ab7-eac6-4e17-bb66-012190095bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.162.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8523ade6-66f4-435a-bed1-1d782b2f31c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.231.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d54b2b-d685-436f-8eea-e951887a8002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.40.94.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a918dc73-fa0e-4c73-aea6-b5cb161f08ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe40e65-f8bb-485b-a183-59ae2c181523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c737e2-f897-4705-9efc-2a539508aa98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a63cbe2-22ae-47cc-acce-c3035499a9d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f8df5b-ea7d-4254-aff1-6574ed773eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.132.42.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67fedc7e-8ed4-4e75-bc4c-267a8fd7f405", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01f7d42-5415-4eb1-b9e7-fcf5f5b016c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da74e72f-c8f4-43ee-9edd-97020180df5e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b0831c-ea27-46f6-902e-402ab726ce33", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e0c7ba-2048-40e2-85cc-eb60a6dae3f5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32737089-88d7-4e3b-8f1c-c4f191f0e5f4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e8dc26-5dd7-4833-899e-bf7cbd8ea3b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7895363-1aaa-40a2-9645-ee94ca14e04e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e63233b-e2e8-491d-9160-c6e30a846608", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b5d5af-f1e9-4187-a79a-5444eabc082f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2f6cab-aed7-45e8-89aa-bd3e9e7091de", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517dee2c-d8c5-49b3-88a9-a5bee61d2bbc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d400c15-e8ff-4ee5-8ce3-f71113078710", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1acd2e6-51cc-4d90-aab6-42190f3b4923", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb7176c-96d9-47e4-bf09-ab500615df9f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dcd5f9c-74d1-450f-be57-4450f0c76e4d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8e641a-b224-4510-969a-ab4298fa95fc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720b15bf-1254-49f6-8a4a-e4bd504b6f25", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7f9f3a-94ae-4334-899b-f4c2b8eea723", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f839dd67-2cc7-40af-a07e-9ef1c669e14e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de04973a-dd6f-44f8-ae54-20d246b3582d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.214.158.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9aeb322-3e9b-4beb-b5d1-4897c05d583b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.117.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b254f1c9-8722-47cb-89f3-66a9c9e289c5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.155.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61908dcb-4bc8-46ce-bdaf-8cb9050c4388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.250.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b973956-b8b6-4d68-9b01-7bb9ba757ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.1']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b19a73c-4901-4bd2-af06-70384a48d497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a533d56e-7053-46bc-afe8-5e63fe84776a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f089d622-0bb1-4aad-a13f-eaeb94e3599f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb32d3e-0a3a-48ff-a46c-69b02d65b3a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85a9789-9478-4a22-8c66-7f41f3b594b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125f7918-5d6a-48c9-a743-3cca5164d6a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5bb732-4766-41b8-8ea2-e55aee538c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f999492-f3a6-450f-aeeb-d5db3966e3f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--411a4a43-cf07-451e-8f3c-08d2d5eb87d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277abad6-d883-4065-8131-a154437fbd33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459dd5ae-406a-46d1-aab9-13559df1b4ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef80ad7d-2abd-4ffe-ba4c-e3d0968b87fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bffa451-c99e-4300-a085-2843ec545eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36278e70-3b4d-4a2d-b157-7ee4a0e1337d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11beb19-1102-4282-a674-2517a40c13e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99959baf-efe3-4687-8447-7167c1a0653c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df3cc905-e656-4beb-be30-1ca1dc368945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac6d54a-0b8e-47c9-b546-f21f193db265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5dbc49-ac5f-4fa9-aca4-9b29ccc9e6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c90773-0f5d-4f38-be0b-bde3c12e0c10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2bcda1-4507-43fe-aa59-e49ddbfaf6da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c6f1bb-fcdb-4955-bbf9-e7a830c11ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcfc5262-6b80-43dd-b7f6-7d1daf4f08e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af6a172-86af-4327-906e-36edd7ed55c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963b855f-cd6e-4446-b7eb-8ec10cb23993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0315238-93eb-450b-b56e-25564a88c7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42214d2-9205-4320-bae4-0703d4c15102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9952fa6-c50d-4b47-990e-51b7a29d2399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500dd165-a5e1-4feb-84d1-ea8c1db8785e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f9ecd5-a032-43e3-9d47-d125f7ff3c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212993ae-b30d-412a-95c7-5e54482dae99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840b1a3f-5aa0-467b-b264-de27bf543ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd69caa5-ceca-48f0-bba9-dc49c32cabfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc70e9f-a5e3-4c7a-8aa6-b2538154082e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769c949e-370e-40a1-8f9b-29eda2fc0b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d9d246-632d-4769-a3c8-dc9078ff088f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779549eb-7a9e-4d6b-b67b-c48f877172b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358d273a-9140-4833-a0ce-5045cd36ec89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba667bda-1728-44ae-929b-4a82a4ccf181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b7b905-edc5-434f-a57e-e0a3f2e94fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82828ad3-e463-4c76-9788-0c568115258e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b111f34e-8ea0-429e-9bce-7dedc648fbf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd9a428-68ef-49b0-ba67-3464ea78c53b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f6a80d-8111-40aa-90ab-06033a235a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a5e3ad-0117-4232-b8bc-4a8d91fc7c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ff817d-dd96-4211-9702-434e3659a650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe45cbcc-25d8-4ab0-bb4d-2d8f0940897a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f8ad95-4d18-4a85-ae45-f5ac5766c44a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f96c11-64e3-4582-8cdf-15330501beef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd34c395-7b21-4aa1-963e-1b3e13687fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.0']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b11dad-a05b-4ee9-973a-48f32184e688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.1']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef63837-a188-4b79-9dad-e6e937d3c1e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221d0152-e574-4c4e-91bb-5e522e7ee540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f49fdb5f-5265-492d-99aa-0b5e9df62b76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf67fd7-82b1-436d-b6eb-1524dcee4b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db1de86-0046-416f-bd24-c868119093a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.14']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad0c003-0e87-47c7-a559-7263e0ef93b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b23403b-d37e-49bd-8023-1c6633f1e73c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.16']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c77ce84-98e1-428d-9cf5-9f80732e095f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7e01dc-7883-4932-a482-2366700da222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.18']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8ab687-9525-4a7c-8dd0-3d4f3f66becf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419efd05-eb5c-4be6-a5b3-e070925b3c68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.2']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42015dfb-edb5-4a07-bae1-b6fbdb94a2ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373c44b8-9efa-408f-9c3c-b903b53bbe3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae8cebe-7890-4bf3-8846-5683654fec7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d483289-8059-498d-ac02-da63ed072d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09b4162-0680-4772-a90d-cb1c26b0343f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a439ac-0c6b-4d20-8a62-12c07cdcfa40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--429ac225-2ccf-49da-9a7c-caa5ebabbc78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8535b03c-de49-4777-ba32-8f1c3272334e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.28']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e7df16-39b6-4c16-b81a-6fa68437d3ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461e5b56-2e6c-4668-bc95-cc2e8e2b34dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f134c84f-b12a-4955-8a15-cfec35cd5cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.30']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ac517a-0757-4e6e-a76c-41e37e13b319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b702b1-e894-4231-8aa4-a10f2b607b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7885030e-b8ff-4a10-ab26-3ed3bc605d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9d454b-e422-4cb2-8a3a-c27d11b45f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5629af2c-82ee-4d75-8a10-f95ab2f4f10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d983cd5-865b-42a6-b3b1-14b4fd57c862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a78d92-86d2-42c2-96b5-57c3faba2862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc01b7fd-e7c9-4452-91a5-0c2c508563cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4579657e-8e82-4a3f-8a87-6f643dae65de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbea8cd4-f69a-408e-adf4-cd7b9732aaa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e18f8e4-fc3f-4dbd-807d-ba8099c5149c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee9e037-ce13-458a-bb44-247a4ad47d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51479d76-3fa0-47a0-90fa-602bbe6edbfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8c4b2b-60e6-4047-bf22-3bd2e1643780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6331b8b-b289-4976-965b-3d31290987f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d384615-0e10-444b-b082-d2234ac8face", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e687d4-3c53-4e91-aa94-9e44e29eac1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c77a30-89bc-4fd3-a82b-e9180d95905f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b3a636d-4cfe-48e6-ac96-9e9337033170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4c6bea-345f-4f40-a1e7-4d4faf3a8b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3aaf394-0c4a-4a98-8c14-37015faff42c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ea7ce6-18bf-41e5-b51f-bf09567dc0d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.52']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ecc306-1564-4092-ad3e-c56e2496dd9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.53']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6abd3e42-48a4-47f9-8f50-660f9b7ca812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2888686c-ee0d-419d-a95b-2c0180e9c902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96677bbc-361b-4ca4-86dc-8a6d3f7598a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.56']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5facda33-cbbe-4fd8-b825-76dd1dd79fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.57']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a657ba-d2cb-42a0-aa67-4451cea4f962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2320c68a-44d0-452b-ae39-2d266d08cb1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e28fae-067f-43de-9f42-76697576db99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6374ae95-794f-409e-9147-8400dc95a4f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477c18ee-c972-4bec-994e-abf3126ba041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.61']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb08e70-5c40-4361-890e-b302ac24e0b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.62']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd42c663-f9c0-49aa-bebe-fb2b9cae9bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.63']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac45bacd-d09b-446b-9635-0fa9af7a40b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4373c916-3dd0-4b96-9272-5d136b054d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--511535c8-d5c2-492e-ba0d-ace66f4b0da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.66']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfdfb78e-1efe-4761-957e-9f4b2a026569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d166a2ec-b945-452b-a6a5-d41fea2fa3a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.68']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e87047-b1c8-43e0-ab9c-2a5c195d3278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e225ea9e-890f-4e84-9d6f-95406dc7e734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed43dcd7-207b-431b-aeae-ee42ff1d1439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.70']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faea3281-da9b-4478-9ec0-45ca7d672b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226be804-2243-4b73-a1b7-08b134aca102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766d048d-ca41-423e-9b2a-ff320f759442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5572dd1c-85f7-46df-bf8a-24356c6a7e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369bd86c-bc36-4ead-82cd-25f5a2d9ad51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a225bc14-6d6f-4d77-8702-29926960f015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--818e78e4-806f-4020-a8a5-a443eed62701", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.225.227.108']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf96e02-867d-49f4-a5a7-a757e4a5263e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9fbe23-6f29-4c08-bc4e-54b2d73b58b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.8.130.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87afe94f-abae-4ce1-b7fe-2215ee6c7a39", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.8.130.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ddf274d-f3ce-432f-873a-3c0e271c6fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.9.217.92']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74eaa094-3301-4e1e-8677-a09aac57397b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.90.246.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d40f4a-875a-4aa0-a661-9bf31d936a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.176.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc82710-65d7-4eec-b3cd-2175acd5b889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.187.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1bc5eb5-1dbb-42b8-ab7c-f32a3e05eed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.187.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313b8db3-591c-4234-8500-f96d896b5bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.48.0.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8a5624-8a8f-4c4d-bb3c-c4c70a139b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.25.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693e85f9-36bc-48c4-ae34-3dcd7152cc1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf370711-1409-42a5-983c-bb6d7c7cf71e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27343438-a50d-4eef-9911-968424a8fba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59019e6d-e952-4b03-80f9-42fc925d87e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddae5c74-0b3a-4179-85a8-0838b63ebe21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.40']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791763fe-58e6-4ccc-92ba-dea11e8de86c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12681e19-df73-4fb8-a20b-41c8467da895", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.90.71.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c737094b-e7a7-40ce-80b4-f69fb95efb3e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.106.118.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38454a13-de9a-4ec9-950b-f92dac23510b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.106.35.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f9cc9f-b40a-4698-af35-1a9428218f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.104.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff2c3baa-ffd0-4309-96b8-61ce6d39032d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.124.185.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a114f3b-175e-4aa6-b3ff-f261e5275ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--becd6e80-bc02-411f-bf91-edf8ba67288d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.168']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6356558a-1a65-43ee-9de1-033a928f82c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3232e85d-db92-4b84-b14c-01a7bfb0c21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b98ff5b-0167-47c2-beb0-ee80fa05c417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0ed8e7-df3c-433b-bf6a-fae5350cf0eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc047c68-7984-468b-87cd-986d02038e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.84']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bbbc8a0-e97b-414f-bb4f-b62a0eec48ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.237.225.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e978ec-647f-4ddb-9e10-0b7546fd4ceb", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.246.54.153']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2973be9-81aa-4a3a-8304-7e7b3cbe0a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d42e9a-1977-4cf0-afc3-763134aa87b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03af2e61-bff9-4133-afa4-8e62721c0cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d04be9-6d4c-4fcd-9b42-8421e0907347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.158']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7e7f7f-0418-486d-9804-d6bd127d6763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.79.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c885e6-864e-453c-ad26-99f087a15b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.83.111.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b3cafa-cf19-4e97-a324-4d43c91e81c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.151.33.172']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf57669-d0a8-485d-9272-57e906fdf4c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326505d7-ee86-450b-bc5f-49c35a5263cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daff1abb-b8a6-47c2-b483-44ae7bc09b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396818b0-1ce0-4bff-9aa8-c7c1022d6b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.124']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d094c0b1-b73e-41f3-8023-32ee481ac9f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c47918ef-e78e-448e-a7ec-cd501d17b9a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.26.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07884ec3-cb14-4a76-9a0b-652c541be736", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.254.0.140']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31590e0b-9b9b-4f03-a748-a9f3270ec083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.47.170.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fba473-f2ff-41e0-ac25-576746fb0bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.189.24']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9379087-ef4a-47ac-ad64-4cc9fc719a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.20.49']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa81ca4-e9b9-4dcf-b809-7a2cc1ae6ff1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.124.110.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0896cf-b0aa-4a12-be85-9d1759041610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.186.10.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10672a8b-a3bc-4a53-97f8-02f93fb5539a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c1625d-19f8-4f98-b261-ea003c0153f3", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.159.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dcb1037-04c6-48a2-ae8b-1c7696ac9932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.134']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1856c2-0d4c-4271-84bd-181b27eefdb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.144']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161bc492-4e65-4c6f-a947-2992d7065dc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.156']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74950a5-f8d0-463d-9bbc-5fab3e060dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39246f66-a4a5-447e-9fac-e4ee56e95602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.223.69.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c125be77-b89a-4a9f-abdc-a4c457a8fa34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.23.108.58']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced1a25d-43f2-41a1-af50-659674d437d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.23.113.208']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5ec371-af83-468f-9cec-6d8c4b7863e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c236d211-f366-4546-8142-071f21fda6e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8476cdf0-4b4b-43de-bba0-d0eb54debfc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c5b21a8-b2d2-4e2b-8fdc-1e6dbfc035eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.34.96.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec7b6c0-45e6-47a7-81ad-b58604ff1a91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.132']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca82cc1-aca0-432c-a379-24c9407d61ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2aad9d5-fd60-4d94-a9cd-6451332890d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--151a9909-f69d-4418-ba54-d967b44418ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.47.177.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02d9dfb-f610-4c39-8f44-185e9466e6dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.10.182']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c417e5-bc1c-48d1-915e-26cf9e10df4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.10.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae4f575-4d32-4711-ac31-6bc45695c8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d325e944-ab28-4007-b3ce-7a763c9f59b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb7d358-626c-4ee8-a583-9d59b0803dfc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.105.238.198']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444b81e7-21ec-4de7-8645-2a7b0c2bf28d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.110.60.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c25792-37f4-4e3f-a6d6-c9e77bf34f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.151.171.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8fcb14-8e95-4498-8434-998527bb87dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.84.168.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e42ad2b-cd27-4140-a955-576ae76af360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.135.220.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a5c04a-60a4-4b7f-8e2b-4022d4b6b95b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869824ee-0b0a-474e-ab44-893f17450020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada1c72a-a20a-4709-8793-7a069c5dbef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e55a7e0-7f74-4a58-a403-463b90b3f4d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f852722b-55d5-4422-b23a-09db1ce401e5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.193.232.50']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95924c0f-13f8-4345-ab20-950e1e3706fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.101']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b1e113-7c62-47d9-86a3-7f4bed547b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515b2401-3ac9-41de-98d9-30118f82c27e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6cf3ad5-1623-4a80-8ca3-ddc191694e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd0e423-62ba-4b64-9a99-b1d37b317f96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f73fba97-27c9-478c-a264-5738a17b4cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf130492-2b5b-4dc3-902b-83c7a197aa92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b355b22-fee6-41d2-8a5f-11a823149045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04340faf-7804-4d64-af5e-91f3b747f6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac50fbf-ce12-498f-8aa3-bd4c438a64f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4cbf1a7-9cb1-49fb-85e6-294b0a7c024b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.177']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b6f1dd-df07-48df-9db3-ae812d2aacd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a811eec4-0123-4764-80e0-f1a7f578c284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.180']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f28c41-d2b9-41f0-92fe-e8d7d1e1915a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f43464-71ad-490e-b58b-c024f9bb0d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.183']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ee6ce8-30c1-485f-a8a6-dfbe0de4574b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f8f334-6dee-4d2b-bd74-844a3dc1eda3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396a0e84-f845-43e5-979e-f6b9dd74ce9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0299465c-3a6a-4fc3-9bc2-53706df15983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625eab01-32ac-4425-9fda-c4cb7b564f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.191']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696271f0-7b63-4fc9-bbc8-ea3cab75047e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d896a3-3de4-4092-9da8-29c8fd12d143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8cb2d2-cd22-462e-a5c9-dba699df95ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce062044-e6e8-47d1-8aa6-5468c41aef39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367444d6-b6d1-404c-8e82-9d24fe2f6a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42556ea2-9917-4f80-9633-22e9336632e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.219']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31a7f8b-0aad-45cf-88c0-5f661a220558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2263e0-af45-4e13-80a8-a624747a55a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae3dff03-2290-4d4b-842f-e2dcb70dee55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b5f0ab-c4cb-4989-b13e-02b0cac33d41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d0c8da-59a8-4ff4-aeff-1fdd069a2996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a12de4ca-226c-409a-8309-ce73da6f2da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.35']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de191a1-caa7-4ded-9789-517a4059d88b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3285c14d-0e40-4684-9ece-a8f9643e37f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.39']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15346995-06c8-4fa3-aaee-8e5f0039279d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.90']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9989616-3efc-4a62-bdd5-bd04bfdb4427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92378ed0-b029-4c4d-8d63-812b9f9ae1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0aa4bbd-e650-4494-ad7a-f86666f30fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.203.213.47']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c1076e-50df-4ae2-951c-775bf92e2adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.184.128']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c40d62f-538d-42aa-a861-e21aa74d930d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.184.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ed1532-456d-4d54-b3d9-dd66472a791c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.197.64']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba30cd92-2e41-4af7-a17a-8385c3cf1aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.215.85.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cf23d4-2fa9-4848-b888-993f03a2d3e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.219.23.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043ee8d3-50db-43bb-916e-6679f4efaaf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.223.69.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5e7d56-f239-4dfe-a59a-5bdcee05b394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77d786b-2d40-4c90-832a-a5d7a8c6bd6a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68ceaa0-2dc7-4583-97a2-e1270eaebe32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.1']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d8a032-e7c9-4a15-a003-deddd8766673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.104']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385c454c-22eb-4c5f-8477-52cc98b1f4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d72e0e5-2072-4fd1-a04d-d8e3be067fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac5a604-2162-4e67-80dd-a9a354e6dddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad54d76f-0e5d-43d8-8fc8-fc0f46de6c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.123']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42840f61-c8de-4304-b619-964ebe5831e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c4571a-378f-4b36-8cb5-d4c3ac039f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.127']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62524581-f845-4fb2-b8f8-c11de65032da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f721bc-1a8b-4859-a993-fc64fc1714cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb00438-9ea4-4b08-b873-11f4027182a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad48faac-df6f-4491-90c0-966d9d56897e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74e61b3-9666-4e17-a8f2-01068224ec62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807c0b32-9a02-4542-b894-831ca02f797a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16943e41-8cf6-4270-b2a2-879fabc1618b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fdfa971-a7bf-4e06-9187-94731d46da9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb64c15-c39d-4edd-a2d9-016c39d87417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.142']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1faada27-2f88-4c0b-9176-c27d6c468ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0562da0-2c29-4c6d-aa0d-985392d66433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e5dbaa-d0bb-47e4-a13f-349c5ac16964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a72deff-c711-4be2-8f09-6ca207c15e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbdf79ab-db72-48f6-9e6d-21c665c6fb65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f186b23-f477-4f55-9087-55700f86970c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.170']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6267bf9-3722-4f97-ba68-8e4f4493a470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba8ba9a-f84c-4e42-9300-fd4feb4e62e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.178']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a83532-ae8e-409d-862a-b4464f30544c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd24070-eb47-4619-8ccc-2aa7f19abde6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.184']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc8ca56f-7749-4e91-add2-e6cf46ed5d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.185']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e6b51b-b8ad-4247-9527-43171432a363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc525ec-8eeb-47e9-9a60-12bd9d5f6318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5268d26-be25-45ad-b378-130eeb231704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3acec090-6429-4dd1-bacc-9e392f6c5d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24c5b21-c50b-4dca-bc22-73ee1d314a85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea14f7b-f40f-431f-9f55-8f3db6d41aca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.195']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683d1754-1bae-4b8f-bcde-8005292ad2af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.200']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5481ef-bf90-416a-b89e-b518d3164a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35873446-7af6-43d7-8bca-30727a5eda15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b1557a-ab80-464a-bbb2-95817b1e8e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8110d77c-bdb8-4112-9d62-c2baa8d1988e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.21']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41657156-98c4-446e-b668-4e157b79ef7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ffa2850-4da2-48c7-9979-421f4c477f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d261188c-32fa-4484-87e0-0b69a45f8eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83344026-c149-4388-bb24-029fb8e6e2b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.226']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4108f6f-6040-4c95-b6c5-adf247a29bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea39cfcd-07ae-49d7-8b10-9b2756ad5f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e50d91-d709-41f4-97a9-4c379bccd959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f45c79d-1b7c-4da8-88ab-754863c6c1da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc53846-a82e-4c86-8108-08509128086a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea68943-a9e8-4e46-ba61-2b953d37ee86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb837f73-ae02-4c53-973c-1f49b01f2107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.242']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b630e5ee-91df-4b67-85b0-957eff503ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96213ad3-0e8a-41d5-bf60-ba63cbb4d076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0b5c8b-627e-4653-8cb2-a17ea06560af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.25']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a5938c-98a3-46f5-82e9-f5355a465606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.251']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96bdcc6e-f151-4314-9673-c3cca6453e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f3244a-0daf-4bd3-9f5c-a0ff3a6ecd15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.255']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1097c0b-8bb2-48c2-8134-91ef89eca465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873fcd7a-d035-4017-892f-c46720753ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.29']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d89bde-0048-40b4-bcdc-44ad482e38af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee8318df-dd1f-404a-bf9e-78ef0b345c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7e1bf0-3cfe-4ec4-ada6-af0f6a7c2a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77113a58-eee0-4007-9df0-fe8c452a0a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67551aab-690e-4fe3-8a34-3f71c650e503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed67133b-f6d2-49ae-9409-bfafed3cc4a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--930d0e0c-59aa-4b03-a774-9afa97654471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f758f5e-c9a9-4e42-b5c7-957b1cce3eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.82']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b11cd3-239c-427a-b8f9-32a625cd1257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--409e99fd-c987-4920-a086-e80de590d80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.89']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327d760b-20a8-4866-8c66-912eaafb990e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b524934b-f9e3-42f5-8062-d233c50864c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.91']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76420d1c-8149-4163-8749-3fe543ef554f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.93']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35423f53-971d-470c-84b5-c63ebe12a42d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.95']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9cb2d6-efec-49b5-87a3-145c0dc3c190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.96']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec4c4df-d064-4fcf-8640-908162504d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.98']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--719c64fe-53d1-4bab-8d93-b1090956059b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.99']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db94f8e5-ec4a-48ef-9795-40a586bad786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.1']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9054fc7d-265b-41ae-aec2-9e786be23c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.105']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090cfa25-1046-4fdc-ba24-fae8084205c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.107']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5abd8ad-5730-470a-b85b-b6f54d4f975d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.109']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f89cf7-48f6-4cb7-a38d-d44b43face0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79db8db-ceb9-410a-bd7b-2639fc296cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.111']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a677661-d4c0-4276-8c3c-6d797573962c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.113']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3308b2-970b-4e2a-b6a4-f85ab02e4243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.115']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a70ba0-9e3c-4620-8bd8-886bcb6ad0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.117']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ffbb59-7848-4388-98ec-17a730e681fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.119']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc75cbd6-9654-4cfe-8fd4-5a5d3e1a7b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.129']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b67bb8a-fb8f-417c-b95f-896b1ead16aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e31134-bb6e-4f72-ab65-0aa792049824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907f80db-fffb-427d-901a-28d04b882831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b762ba-0c42-4c61-924e-7d28b1c93255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.135']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--123df104-1306-4d91-bb36-f78768a82cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.137']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18847e34-0f8b-484c-8f6f-3a158795b9b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.139']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ea1aa5-704b-403c-9df5-a8750cfedb29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ed9311-e4c1-45ea-a095-3c9e2fd26d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62477086-6d62-45da-a13a-24c4bac088c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.145']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510fa5aa-150a-4fa5-830c-8a455502d1a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d36bc6d-fc27-41bc-831d-2f0e044be695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca7e831-d84c-47a9-8101-59afc36d032b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.15']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5423107c-0e15-4b9b-a25c-9ed39bfdda37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc233f6-f5f7-474d-a965-4cb1db1de561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.153']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e73326-5493-49bf-999e-741b62e769ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d252d15c-519a-4068-b642-9b508e3dd7bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad595bb-430d-4100-8192-3fa3a99a0b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.159']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a49829-d359-461e-b919-196424849bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.169']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b786d329-df30-42b3-810d-ad2da52ec7ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84878d06-7692-4dc3-a155-5bf468b78ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.173']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cba420b-e10c-4fa4-9e6d-ce56030fb309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c00f634-b19c-4a23-acb6-76e3bb02c1c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.178']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff9aebf-4dcd-4f4c-9913-a03f4fe8fe59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.181']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81b3951-92f3-4f29-a4f1-e4de0982d8ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.187']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a5e96c-d672-4159-a21e-06cd5976dd58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.194']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f3928f-4db1-44f1-b4ff-949283f35670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.197']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383e72d7-767d-4765-8d3f-1900faa846b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0e1926-7bad-4637-ab10-1ff27991c76f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.203']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7830b76d-dabf-48e1-b476-b7ce7db3d837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.205']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a03c475-3ae9-4970-8495-50ed8db61253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.207']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef4d5cd-6249-4f10-bc47-4e21e9b66739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.209']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646ea028-d44c-4f85-8e86-ada58e4e89fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d675cfa-d5e5-481e-a345-cffccf6768bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a762d5-ddf0-47e5-aaa5-369a1fac9886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622956f4-0fd9-4791-8e96-5e1cbf769f69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad99982-875b-45cb-9e95-9ac611092af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6cec6b-8882-47c9-924b-bfa78516e56e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.225']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68e12d7-89a4-4b55-b170-ee95e38b616f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.227']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85579918-1356-4bae-944c-776e45268e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.229']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434e2154-319a-4862-89e5-0b17f59321be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.231']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd0d5609-4674-4437-8e73-107bf50b8296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee64334-34b7-4886-b149-5ced015cf14a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50cb3091-ea2d-4dd2-83b3-6d9ad351f73a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.237']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9151a1ae-17e5-4c14-8e9b-c73f53e95dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.239']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53de140-32c5-4339-9566-4925bd12d390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.241']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6afd1b0-74ba-4cbc-a7ed-a54452a74bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d0e78a3-575a-4733-839d-bd4923142834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92ed83f-615b-4059-8aab-01f1ef1ffc9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.247']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a85e75-0e47-41d6-9bb4-a16cf4f55ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753faa7e-23d0-43ed-86b1-2275856d9e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8fcf955-b519-4277-b87c-d3e24306a14c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54903b83-3ca3-4a10-9f2e-f209a90bfeea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd100938-badf-4fcd-a834-3e64ae2125bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.27']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2fb31f-6b02-486f-b5af-36d9477db445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e2c2ee-557d-474d-93e9-9d3b03a2e37c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3240f63b-2811-4da0-ab91-0c624a0d358b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93770cfa-488a-4ff6-bb3f-16b9846d607c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.45']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c46d0df-a190-4b2f-9e87-501a38953928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e470186-0f03-4573-aa8a-51db67064a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a04e3ed6-a0a3-4ec0-b32a-5fba5d47d62e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.59']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8115cda0-5ac2-47d4-b019-59fb34569896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8d5c09-0188-450c-af5f-234a043c3138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.67']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ea3dda-43d6-4f1e-8a18-99175261bcba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b4b628c-f8c0-4cb3-8cb4-1add22fa73df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc22093-9651-4e60-8c39-9b8bc9939051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c7e35f-ce66-4c1c-be97-8bf582cdbbc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.73']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2ddbfa-9a8c-4823-81a1-f7aa48fa44e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.75']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f092e389-5d3f-425c-8fd9-f314549a119d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df987b5-f0d2-49bf-b920-b218864d18f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c41dd9ba-8e8f-4f9a-854d-f2dcb44f989d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.81']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125c7490-8e4b-4b30-957c-0e860903b686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8897863b-3220-460e-ae94-32a2d427a09a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.85']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--511edbee-4849-431e-b342-64d4751e70df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a37986-6293-4547-a367-37521b359886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f318e20b-fcbf-46a0-843c-d4ed2387ed61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.181.26']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2ad20d-be4e-4789-a211-0af05f56a257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.181.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c94d09-37e5-4620-a902-b58d0bad3289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.239.192.143']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ecec898-b064-46d5-aa09-87369436a808", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.241.196']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f457a467-e52d-42cb-b15a-14e4b92bb3de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.241.87']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2061ac65-78e0-4316-8952-4cc839f073e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.242.114']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ec9050-8822-4bca-b54c-abcdc00ff423", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.11']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09652ea3-9dd9-4a11-8650-41fe62717c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.202']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf784267-1b17-45b2-a42a-f848578926b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.233']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d722104-bd49-4d0e-a419-7aed8a6cba29", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.240']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97438ca7-8a50-4363-818d-fc99fb3e282a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2340797-ae8c-4d0b-9e86-1044f37f46e2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.37']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca1df80-1e5f-407a-982f-7a6d45e3a33a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.4']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54397b73-c9a9-4045-b56b-d4da174b8874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.43']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d515f5f-fd80-40de-859c-4193cfb7d8d4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.6']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ecd827e-3084-49a0-be18-46b4e4952094", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.7']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4902f705-baaf-410f-aac0-79d6c2b5dc66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33eadce4-e54a-4ab3-af12-ce17d520bd0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.243']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f450e917-94dc-42dd-80a2-94bf736f71b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.43.223']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf88290-02b4-4e4e-8457-04ce47e011ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b84d0bf-8b7c-424a-be3c-deec9a874f18", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.77']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--935ab422-b353-479c-b833-43f27cc710f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.204.128.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c10bb9-3581-4483-b9b8-f73a6abe528f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.204.138.51']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee16640a-2d5f-4697-a688-74ca615c4967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.205.160.118']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b2b211-d622-4099-8086-4c2bd344cce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.38.129.190']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8c84ab-b109-4216-8fff-1c830eb858d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.39.62.48']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f57d49-3ed1-4808-bcab-9ab8c4b40825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.5']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472e1ab0-2d7a-42a1-8e8c-1007d4c3a293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.109.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f992907-0c69-4f79-b0c5-35816aa11181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.72.183']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6833e103-bf09-483c-9272-31f3cd07f7f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.127.203.216']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b8f662-48aa-429c-b568-08d2a5e1e169", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.147.164.60']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52617ba2-c5e0-4c86-ab73-9c980024d27c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.224.102']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce22f86-7866-4fbb-a328-b1fc5380937d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.157.106.151']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abcf9943-dcfc-48d5-a3b6-73129faad833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29f57d1-ba85-40e8-a103-1956519ec785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c1410d-b363-4aa4-ac55-e0b509db1a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.39.83.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b9eea78-c136-447b-85cf-449c88ccb044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.46.174.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256aee87-f087-41ae-8539-6baf2c0162c2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.95.216.100']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681a8021-f9fe-4022-920d-4ca3cc193b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.130.130.141']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7dbeaf6-3266-4e71-b58a-52b1d6a7574f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.136.186.217']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360cca77-e297-4fc2-8993-5aabc1191ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.143.197.79']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d2fc3d-9c44-4ed6-bef6-33985378e2b6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.152.206.19']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f9a855-0f57-44fd-96d9-4cedd3c6f000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.110.201']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d61e89-952a-4a01-89e9-e41436db8e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.198.4.163']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc7d079-ebd3-4899-a1f7-40727a38341b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.206.148.76']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eaa3d9b-946e-4f53-bc36-a6f936a4e08e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.10']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691b8c76-dffe-4630-b336-d78009cf7a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.13']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3383f268-2a50-4e52-beb4-ba885555dccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.131']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c81bc78-a418-4ba1-a76b-3f8492b85ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.250']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eacb10ae-8c18-4bde-9711-cfee9ed13c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10aec57a-6881-48af-9023-3a89976610f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01a2575-afac-495a-8d90-90d767ff9a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.3']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42337540-2277-4722-bc1d-0ef202a6a49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.240.216.78']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c48c34-3189-4a11-b3db-f609ce22786d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.243.15.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8466b38-0fb5-4207-b3e2-a5c232f8dd13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.249.187.81']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724e04b5-173f-4517-b3f6-8ed41147208b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.249.59.9']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7588eccd-908e-438e-a89d-1da0c91ec9b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.147']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e1b551-4c0f-4829-b545-716b7346abbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.252']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc5c454-b7b4-4779-8b22-f33b2989942e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.33']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4e7434-8333-4338-a3de-00aa141f1ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.80']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5a28a4-72d2-41a6-8d9b-966151383f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.68.55']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f941d84a-305c-4a03-9d48-cfaebf5f0661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.9.233.149']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ae1e7f-602a-42f7-b646-9da109a16939", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.111.225.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f826cc9-d619-4586-a89a-5914b05a24d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.130.170.146']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9d80a9-a1a4-4a29-b5dd-aea5b4a0a47c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.163.236.133']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b7b07f-b6ed-4c00-82bd-3cac97c8134d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.182.96.193']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb1ebcc-adfa-426a-b3fb-68149d48a866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.53.157']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ac3984-1189-417c-ab15-26bdd053f477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.54.54']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca915807-99ba-495c-8baa-aa211de62c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.55.23']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1f7a77-40cd-4d19-9ee5-daeb10cf8cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.108.8']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1914985-1c6b-4481-a9e2-b76ba28a645d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.230.187.71']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4faa7dbc-8517-497d-ad8e-74c8abeecc7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.59.142.69']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1856f8a-c425-4b25-a6f5-43e33b78d025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.85.238.22']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52bbc7b0-42c2-41c6-82c7-2d6a165922c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.106.17']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040050b3-1d7b-46af-9ede-06f0c25e3ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.106.218']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6397bf-7e79-464e-bac1-305168df8b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.106.72']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ab4335-c802-4e60-9dae-21c6caf8fb5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.172.215']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--206bc905-a2b8-4dc8-82e5-b69ac6a0e3fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.241.201.20']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21003568-6794-4288-be0b-36e9aa877774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.44.174.248']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ceea843-1483-4034-bedf-5a0bb3813a65", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.78.175.41']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--758150ee-aba2-4d90-ad5b-98d80f8d2a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.8.116.34']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b24329e-6b29-4fd9-a01c-99a8671713b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.129.179']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a32183-35ee-4ab6-a7a0-7caea3b1f646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.129.251']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93b46e4-0c3c-4230-8f84-3a4a18936382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.129.42']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d36d734-11bf-4b75-b042-a526e3c4f38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce703c2-2ee3-4d8c-81f6-a0012e5dcc61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.134.31']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fde53c0-5a1d-42ed-9a0f-3997e7422db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.189']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa8b3f7-bfa2-41ec-a4a4-8296b6f21147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.253']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceef1be8-3ef4-4b01-a28c-98331e6657df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.139.94']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277b0662-93c3-46f2-b6af-6bebb79c7d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.140.211']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92874cb-335f-43f6-a082-22dc046145ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.140.83']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42150627-0879-4567-8ab5-af8e700dca3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaad6a62-284f-4e6a-9989-3588bdf912d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.74.230.245']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854fa597-4ed3-439c-9a6b-6d88094871de", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.74.6.204']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5021f6ea-84ce-4311-a38e-3c2f910a2f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.194.122.162']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71c7bf5-6bb7-46f1-a984-73dac4e1bbbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.23.163.221']", "pattern_type": "stix", "valid_from": "2026-06-24T00:00:00.000Z", "valid_until": "2026-07-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-24-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367ff66f-5304-436a-ac68-717d720a0424", "sighting_of_ref": "indicator--108df885-7464-4b69-96bf-65965e00ac57", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350a7277-ca79-4f2b-9cd7-ba68259e4cef", "sighting_of_ref": "indicator--10fd2476-ee45-40a8-8890-41639960f28d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316250e2-c34e-46a6-9fdf-7b4a2c8eb5b7", "sighting_of_ref": "indicator--e9f3e0d5-d7b2-4ffa-835a-4782e512a68c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9a992d-b9f8-4dad-b068-9a0fac608747", "sighting_of_ref": "indicator--d05cb638-1ba6-47aa-8b55-92239d735bf8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593e488d-36c8-43af-9dc4-6ecdbd14b8c6", "sighting_of_ref": "indicator--b9be3e43-3f39-4f1d-965c-e795e0d5dd89", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8872874-36f5-4709-9e31-dab01e636939", "sighting_of_ref": "indicator--5bd6700f-3aca-4d7c-aefb-3ff1eebd56d8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b489a5-240e-4e35-bbb3-1929013f2efd", "sighting_of_ref": "indicator--9796d934-ef83-4a32-b513-880b7174f1e0", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716887ae-2a1e-421c-bf25-2907a212947f", "sighting_of_ref": "indicator--a11ff7e3-241b-4aa3-b72a-aef05a5447c3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf45fca-c0e5-4315-9504-07fc6404ad94", "sighting_of_ref": "indicator--e7800ee1-abe3-4956-bd9a-238ab12da1cc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5644a5b8-4de9-4b11-bce6-f96ee7dc5a52", "sighting_of_ref": "indicator--6cabb787-7a7a-4dc8-a729-b4927dd33807", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96cd889d-3a04-4285-adb9-081614228e08", "sighting_of_ref": "indicator--9b799a27-1ee9-4200-8365-9dd663b24c2d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1701119d-cc1e-4e95-959d-0a3351ba003d", "sighting_of_ref": "indicator--e740a739-4901-4e48-a880-4afcbfd2d876", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983c7896-71b0-4961-9565-856adc6a9a3f", "sighting_of_ref": "indicator--8a1a8cab-bc28-4aa7-ac6c-f01e7be67e7c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b319d98-4aa2-4bfb-b377-b101839711e7", "sighting_of_ref": "indicator--74d702e1-d339-4815-9874-8e3cdbc7db8d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d556a44b-ccc9-43d1-aac9-7de4e1738f0d", "sighting_of_ref": "indicator--3c1ffc61-0897-43d8-9069-8f6f7a69280b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34b0756-ba80-4e35-9326-ca2aa2af5824", "sighting_of_ref": "indicator--3d0b36de-818e-4cf2-a5b8-c3d006715711", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6b1dae-1012-4f10-b7b3-3119b5b6f2c3", "sighting_of_ref": "indicator--3d0b36de-818e-4cf2-a5b8-c3d006715711", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5d0e40-4ce7-4300-b826-d53a50d85764", "sighting_of_ref": "indicator--3d0b36de-818e-4cf2-a5b8-c3d006715711", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c375c0-996b-4287-8bd3-2d78cae6ac55", "sighting_of_ref": "indicator--33b95011-f26d-4909-97e1-32f84f857294", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f550f949-3fdf-4e9b-995a-d747a71a42d8", "sighting_of_ref": "indicator--e2d1dacb-fa59-4493-85e9-6fc221214128", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b79bbc-9b45-4b05-88b1-a1bd70268cf5", "sighting_of_ref": "indicator--c26eac0b-bd2b-4de5-8cbb-d9ff20a23997", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361b099d-a774-47fb-9bfa-830dacc61a86", "sighting_of_ref": "indicator--f0bde041-ac4d-4a73-9061-7cad858d5d67", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9426c5-d3fc-41ce-8f0b-e25d4d8e10bf", "sighting_of_ref": "indicator--f0bde041-ac4d-4a73-9061-7cad858d5d67", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb291345-fc63-460b-a12f-9d3abe344099", "sighting_of_ref": "indicator--c6111d3d-6c1c-49af-a1cf-1fca9df854fe", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d29f0d-0679-455b-a64e-bf7e8731efcd", "sighting_of_ref": "indicator--4d76007e-74fa-4b1a-a05f-4f1b4ddd8fa2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac960c6-14f2-4931-bf31-a9d24e6483ef", "sighting_of_ref": "indicator--2ff5a9dd-52f0-4f4b-addf-291e866df5e0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8dc0f45-8250-4943-bf67-b9a9cb7d7885", "sighting_of_ref": "indicator--1ccdbd60-139c-424f-97d9-198707da327c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae081615-5509-4127-9416-dc3805ed0bb7", "sighting_of_ref": "indicator--7638197c-a4f0-4e64-8cd5-cc3a00606468", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfe72b7-c213-4c8a-b9bd-44130f981027", "sighting_of_ref": "indicator--383d26a7-1ee1-4d5d-9d42-6e9dcb30f6ea", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d40024f-36f3-4103-9b4a-69278872b78d", "sighting_of_ref": "indicator--95089477-1585-433b-a376-f3392a7ab4d7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad65260-9855-45e3-af36-e39e872d019a", "sighting_of_ref": "indicator--bc64f5c4-0c4c-4fe5-adb8-4d1c2b77bcc3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e05e84e-4d86-493f-bfb4-b5db423bcd66", "sighting_of_ref": "indicator--012a1c30-7faa-49a3-88c2-eeb4d8d561f2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2db0f8-df44-4743-9835-0ef1e21c598a", "sighting_of_ref": "indicator--1194eae4-d679-4cb7-be8c-0012d66165b8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4565e33-91a7-4540-922f-88ee15755abe", "sighting_of_ref": "indicator--1194eae4-d679-4cb7-be8c-0012d66165b8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22bd06e-1432-45f8-9a66-7700b3c5e826", "sighting_of_ref": "indicator--cabe32e2-8fd0-45c6-af86-f2e7569ed008", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d7acf8-e199-4bd5-a2f2-0f7b67453d3a", "sighting_of_ref": "indicator--c70e4aca-2810-4f57-a750-e8a5fefba0b5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9600995-f46b-4408-8bf2-fa9d91423a75", "sighting_of_ref": "indicator--e0b4f563-bee1-4902-bbf5-b48245ed8171", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e740c050-10ea-4298-ae41-8ae6425fc3c2", "sighting_of_ref": "indicator--899ba4a8-876d-4d91-890a-cc18a0f67e19", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f35597-f04f-4fbd-99e8-58e47fecf8b9", "sighting_of_ref": "indicator--e3fb4341-fa0b-4f21-bb77-1cd2b0f8aa98", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12600a1d-a711-4d92-a544-aab02bd3ac1b", "sighting_of_ref": "indicator--f3b7e2cc-afe9-478f-8391-05ad1e0cc21b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f8258c-f06c-41a7-a41c-d20ce7d949df", "sighting_of_ref": "indicator--f3b7e2cc-afe9-478f-8391-05ad1e0cc21b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d9e02f-edff-4557-b682-d4eac9dec556", "sighting_of_ref": "indicator--58d61f82-93c8-4740-a58f-2bca73b82201", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a0b6ded-b358-4f69-babc-384db446c3d4", "sighting_of_ref": "indicator--58d61f82-93c8-4740-a58f-2bca73b82201", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231c8bb3-b79a-41d6-b695-78f3311c7973", "sighting_of_ref": "indicator--17df3d40-121f-4bec-b7e8-0fb3af7d4fb5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b8ddc80-1c51-400d-aed7-670b5bf98a7e", "sighting_of_ref": "indicator--17df3d40-121f-4bec-b7e8-0fb3af7d4fb5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ebe6dc-cee5-4a2d-a0f3-d7e9fa1c1ca7", "sighting_of_ref": "indicator--4d07cb12-1d4c-4eec-8782-601543196650", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449c01e2-fb91-4b57-8408-fa21f50134a7", "sighting_of_ref": "indicator--77806895-a00b-44fd-8db0-038c41a468b1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca45ae1f-d678-472b-816d-5c198ca96d9d", "sighting_of_ref": "indicator--cfba5aa8-d262-471c-841f-67f54dd4beb5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94204fc0-28b8-4b1a-ab2e-95f4f5d9d65c", "sighting_of_ref": "indicator--e1523810-6be9-475d-b2c2-58e7551fcd00", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87db4651-8a46-42bf-989a-1ac9a847edcc", "sighting_of_ref": "indicator--73fc8ea9-e47b-42fd-8439-ff586885a23e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acef4863-08f4-4a14-857f-a0f825ee0fd9", "sighting_of_ref": "indicator--4420e566-c9f8-48aa-a058-ca670ceee318", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255d4f39-5af9-4bd0-8b65-e2b3468c02da", "sighting_of_ref": "indicator--2a0cb6f0-dec6-4e26-a23d-131d80c58251", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca4a007-a42b-4853-9640-cd9ac76873e4", "sighting_of_ref": "indicator--8667d9d5-41d6-411d-a718-7afccb1ea5e4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce79c63d-56c3-427c-afc0-6d9938fd5f7a", "sighting_of_ref": "indicator--96a0c7c1-c156-425a-8954-f3c595d3b45e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031f42dd-36e2-4796-aea4-92883a7ea8a0", "sighting_of_ref": "indicator--e72a50e5-adcf-472a-b860-d221e221494d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064892bf-a2d0-4f14-9917-d03424ea2f16", "sighting_of_ref": "indicator--8d14cda1-4f80-48e5-845f-a0122fd7eed2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2840ca-2878-4c28-be6d-f3ed3b5ffb42", "sighting_of_ref": "indicator--8d14cda1-4f80-48e5-845f-a0122fd7eed2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b527fe2-fe15-4448-83b1-9292c927b98f", "sighting_of_ref": "indicator--97bc5cd4-ad03-4f6b-8e56-1d2f1849417f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28a21ef-109f-4cd3-a1db-685853aa4126", "sighting_of_ref": "indicator--2358d77f-6440-49cc-9109-2019d91df83c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943bc4ed-3508-481f-8271-575ba1e05a3b", "sighting_of_ref": "indicator--b5c865bd-4e91-4fac-97e9-6d8685b418b5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212c769b-bfa4-46a0-9b5b-d07cdcba196f", "sighting_of_ref": "indicator--31fd3069-6cdd-4a2b-93e0-a8209ea3dae5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91ab8ee-60ad-44b0-a811-0b17b2241b40", "sighting_of_ref": "indicator--e5402d60-96a0-4604-8997-86fac704c74b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddbbafdf-cc59-4d4c-8785-d3a582bd97cd", "sighting_of_ref": "indicator--a09a8561-1ad6-41f6-a953-c8bd336bbc7d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef8224e-f924-45e2-8be0-1141b8664021", "sighting_of_ref": "indicator--e1606d69-0c63-46fd-8cca-997768464b84", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3849e397-eedf-4fe8-9389-6ef3b8c29a99", "sighting_of_ref": "indicator--592ab6d2-7483-4aba-a709-73a3e9aaef0b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43fa37a4-f65f-43f8-97bd-60a8fb8ae044", "sighting_of_ref": "indicator--b22dcbcb-5650-4764-9a5f-5c334986179a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4918272-b475-461d-a316-c314276a8594", "sighting_of_ref": "indicator--b4925979-e2de-4cd1-ac81-6689bbf02da4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7c84d8-85e6-46b5-aa57-ab1d68f2a814", "sighting_of_ref": "indicator--73426955-737d-4605-ba13-2be7ce1f21d2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2686681d-f915-4d0b-a8b7-aa1f3524d3a3", "sighting_of_ref": "indicator--73426955-737d-4605-ba13-2be7ce1f21d2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c77a9e1-b035-4315-ac6e-0a9b81020895", "sighting_of_ref": "indicator--4875318c-123e-47cc-b616-e404146933e6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b780d9c5-6f92-4d05-a38c-ee112b6c8275", "sighting_of_ref": "indicator--4875318c-123e-47cc-b616-e404146933e6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8520034b-b10e-430f-b304-a8fa4cac7651", "sighting_of_ref": "indicator--4875318c-123e-47cc-b616-e404146933e6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e48bea-a033-4821-9094-73c2f251be45", "sighting_of_ref": "indicator--c6008379-c355-40ad-85cd-93a104245ed5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323c89ea-7491-4891-a926-c2e5926d8020", "sighting_of_ref": "indicator--c6008379-c355-40ad-85cd-93a104245ed5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22b31b6-11f1-449b-a4af-de6a0de375a1", "sighting_of_ref": "indicator--6280e4d4-aca6-4c22-9ef6-a305a27ebf32", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea00c8b4-0bcc-42fe-bd0a-232ebbad09c2", "sighting_of_ref": "indicator--a5edb4d4-2a6a-4b60-aaa0-251d7cd2ac3b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3394fb31-b8b4-4a97-b21c-2a2cbafa52b7", "sighting_of_ref": "indicator--8e8a35c5-a51f-47ea-8f81-9e803cb5a073", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31aba69-4b9c-4c9f-a14f-9164c5183044", "sighting_of_ref": "indicator--c8e07534-00b5-4de6-a305-26496a1a65ac", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d06c65-9e79-4ea5-927a-090aa078fab9", "sighting_of_ref": "indicator--c8e07534-00b5-4de6-a305-26496a1a65ac", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa2b422-1a99-4039-bcb3-95eb92d01c9d", "sighting_of_ref": "indicator--c6aafa20-2ded-44ae-b289-dc14ad893779", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c40ce7-5975-498e-98a6-8b900ccc480f", "sighting_of_ref": "indicator--b4517ee3-73f0-4c3b-98fa-faffaa05fc1f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411bca6c-dc84-4747-9469-65061acfe7ec", "sighting_of_ref": "indicator--288528a9-fa2f-47d0-85ca-5b9b26c5d294", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b7135c-7422-4b52-9a8c-ffa98f642fc5", "sighting_of_ref": "indicator--288528a9-fa2f-47d0-85ca-5b9b26c5d294", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47978c66-5664-41b8-83b4-17ecb16ba696", "sighting_of_ref": "indicator--c0436b83-b44d-40a6-8bac-9235bd0c3ab6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4eaadbb-7477-4dff-ab22-b7571521ee90", "sighting_of_ref": "indicator--75fc6201-ce72-4bf3-90fd-30d6208d16b8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89aa8950-5a96-46ae-ab2c-33a1a47e2161", "sighting_of_ref": "indicator--75fc6201-ce72-4bf3-90fd-30d6208d16b8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936c76a4-b5ba-4ac8-b9f4-cdf24cad68a0", "sighting_of_ref": "indicator--75fc6201-ce72-4bf3-90fd-30d6208d16b8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a80590-f779-479c-9cc7-47ec7384e256", "sighting_of_ref": "indicator--0bf3e784-d2e5-4683-9f78-c32ba5f5818a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b545e284-c1c2-4450-b0f5-1cc0437e9b8e", "sighting_of_ref": "indicator--ed1ef8e9-4e58-45e2-8e29-a0cc875eb4a5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f27297-1dc0-48b5-86bc-ef3a15b8f67e", "sighting_of_ref": "indicator--ed1ef8e9-4e58-45e2-8e29-a0cc875eb4a5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3008c0-a661-4f19-af08-2485d37a83cf", "sighting_of_ref": "indicator--ed1ef8e9-4e58-45e2-8e29-a0cc875eb4a5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7129426d-362e-4bb1-ba50-606a20effb56", "sighting_of_ref": "indicator--df94045b-8c9a-4732-8292-90515bcd420d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d667e1b1-18cf-4461-9f81-878ff3e747c1", "sighting_of_ref": "indicator--df94045b-8c9a-4732-8292-90515bcd420d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d450f901-64c1-4709-b776-da2b417e88e0", "sighting_of_ref": "indicator--df94045b-8c9a-4732-8292-90515bcd420d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--892c1720-6d4d-4704-80fa-6502a7745c6c", "sighting_of_ref": "indicator--0adb55d4-bfa8-4606-8c73-10179c922a91", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb254a4f-6428-4f51-a289-00125b387387", "sighting_of_ref": "indicator--c9447fb7-a22a-4a19-b94c-fa17775ba5e3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad635f0-f518-4acb-b454-037e4647af64", "sighting_of_ref": "indicator--09cfea56-8dbc-4301-b0f4-c17c9641c554", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e9f0d6-ddc5-43ea-92e6-12a2b2e79792", "sighting_of_ref": "indicator--c28376fd-2eb8-45c7-b834-88bf71747eae", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4543c6e-b8b9-4cc6-b764-3bf30e553a17", "sighting_of_ref": "indicator--f2d5a482-52df-4d76-bd4d-4d359506ad08", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0af8f4e-8482-443a-9fa3-d429b74c48a6", "sighting_of_ref": "indicator--006525fb-1eb5-4929-844c-db0c567e5e6b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc0298d-bcc7-4a4f-b340-3664bab49495", "sighting_of_ref": "indicator--ad72a496-1def-4a8f-a8ab-c5b0b1864816", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054c5400-584f-4366-8aa1-46d876cc3665", "sighting_of_ref": "indicator--5e2fc98f-17e0-4f4c-bcc3-a83b89a5c578", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d65ab7-9c32-46ca-9eea-30829061402f", "sighting_of_ref": "indicator--f60eb973-a744-4591-98c1-3cce63cb6144", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06779fe0-5663-4854-bb44-e439cbcb2b0d", "sighting_of_ref": "indicator--f60eb973-a744-4591-98c1-3cce63cb6144", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acb85e1-ebab-44d8-ab9b-846562c4b826", "sighting_of_ref": "indicator--a41bb992-fade-4285-8b05-efd7acaecbaf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba1572e-4c59-4fff-ace8-ba5fb445d08c", "sighting_of_ref": "indicator--a41bb992-fade-4285-8b05-efd7acaecbaf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dea98de-d706-4c65-8713-f8a2a21a89c8", "sighting_of_ref": "indicator--a41bb992-fade-4285-8b05-efd7acaecbaf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff2896b-74fe-49bd-bf9d-3a8501d4c8ae", "sighting_of_ref": "indicator--0b929c5c-dd1d-4637-8fc9-58ee450db471", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62abe9b4-dc4c-4afe-aa95-d2a546bce6bf", "sighting_of_ref": "indicator--0b929c5c-dd1d-4637-8fc9-58ee450db471", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e39cf3c-ed02-495b-a3fe-8fc78ea558c4", "sighting_of_ref": "indicator--aea23d67-fb08-4844-a01e-3162d9807c4e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8322ef-0497-4007-b20a-690503911e92", "sighting_of_ref": "indicator--aea23d67-fb08-4844-a01e-3162d9807c4e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606ae65e-b463-4c9b-8c9f-fdcdf12aeb86", "sighting_of_ref": "indicator--aea23d67-fb08-4844-a01e-3162d9807c4e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12e6b76-7a29-4120-9993-b358d98f622f", "sighting_of_ref": "indicator--2016dfa8-4a99-4d76-85c6-60abf2a8b7bf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d125b4f5-c8ed-4c5c-886b-25ea15a9c20d", "sighting_of_ref": "indicator--2016dfa8-4a99-4d76-85c6-60abf2a8b7bf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f4bb1d-b38d-4693-bb2b-bb601767616e", "sighting_of_ref": "indicator--2016dfa8-4a99-4d76-85c6-60abf2a8b7bf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e88d26-5233-4f08-a87d-e1935ae47033", "sighting_of_ref": "indicator--edaf2e9e-5d13-4cc5-8399-b0f7f57699be", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e433a4aa-b6e1-439f-a2d2-ae352bf6cec1", "sighting_of_ref": "indicator--edaf2e9e-5d13-4cc5-8399-b0f7f57699be", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83712e4-35b5-4963-b739-1461fd337258", "sighting_of_ref": "indicator--edaf2e9e-5d13-4cc5-8399-b0f7f57699be", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60207512-5d8d-4999-ba48-7d244991bdb0", "sighting_of_ref": "indicator--454be7bb-8b37-48cc-8a57-996e5c41c357", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82b2b28-e9fc-4993-9b1b-e888756b5f99", "sighting_of_ref": "indicator--3caf9228-f6ff-4355-93d9-1d24b20b7b58", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a7821a-db55-4caa-bbb4-b4a34dba8706", "sighting_of_ref": "indicator--3caf9228-f6ff-4355-93d9-1d24b20b7b58", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0018c18-ace3-4712-bdbe-bf9b3e7cf4da", "sighting_of_ref": "indicator--eb04eae1-8c43-4c03-b3c3-ef2e172b620b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423fa3cb-09fe-4356-bdef-031a463de7b5", "sighting_of_ref": "indicator--eb04eae1-8c43-4c03-b3c3-ef2e172b620b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12b6f5a-63af-4fb4-834f-14cd58d33db0", "sighting_of_ref": "indicator--eb04eae1-8c43-4c03-b3c3-ef2e172b620b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d2e0bb-b636-4d50-94d9-b2f62b34cebb", "sighting_of_ref": "indicator--5e0e17d0-7afb-41bd-8093-9623862049aa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520e7e84-9165-484a-94cb-fc40113b9279", "sighting_of_ref": "indicator--1d3509b3-5592-4887-a6a2-59d0d376f786", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b54627-7ca1-4259-908f-15bbd0acc9d5", "sighting_of_ref": "indicator--f66a8097-ffa3-4601-a669-f45381844a6c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8730af8c-d070-4343-9616-9ae328908867", "sighting_of_ref": "indicator--10ba943c-fe49-4cec-83fd-7e86b1c38d0f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae92f6df-6f75-47e9-889c-ce1c13f68ab4", "sighting_of_ref": "indicator--10ba943c-fe49-4cec-83fd-7e86b1c38d0f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40bee954-7e03-4d7e-bc89-f0245f17a8e8", "sighting_of_ref": "indicator--10ba943c-fe49-4cec-83fd-7e86b1c38d0f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b2a342-cfe9-4962-ac72-a26eb86e2225", "sighting_of_ref": "indicator--a206ad88-5013-4ba2-b309-98fb9c8b9180", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e218bb6-50ab-40b5-a5af-cf1612af3276", "sighting_of_ref": "indicator--b8a01478-2d9e-4296-aec4-68dfe26d1a6d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa538a6-f766-4897-a041-023549f80664", "sighting_of_ref": "indicator--b8a01478-2d9e-4296-aec4-68dfe26d1a6d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9a9b2f-903b-44a3-bbbc-35dd99adb456", "sighting_of_ref": "indicator--a747c41c-b01e-411a-b86a-77d075024133", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0431fc02-d8b4-4a48-9899-78e57dbbff3d", "sighting_of_ref": "indicator--a747c41c-b01e-411a-b86a-77d075024133", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd52e6f-5ecd-4604-9c49-f14dc5921dec", "sighting_of_ref": "indicator--a747c41c-b01e-411a-b86a-77d075024133", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e03d942-631d-4eb0-b5ca-aea236c5c2c9", "sighting_of_ref": "indicator--0aa86e9b-b027-441b-8f81-0650fb13ea2c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988cee9a-f212-4b61-9a57-f8b8ea9db7ec", "sighting_of_ref": "indicator--0aa86e9b-b027-441b-8f81-0650fb13ea2c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3517668-e6ec-4fbd-9dcd-649c8a20c0a3", "sighting_of_ref": "indicator--54f44b3a-136e-4558-a4f7-db4f6266068d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba131d7f-80ae-46d3-a75f-74ad921c30f3", "sighting_of_ref": "indicator--1e77a181-a4e6-4c02-8850-d6c46cbe44f8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b3a6be-4e3c-4fcc-8466-14a32c2a927a", "sighting_of_ref": "indicator--1e77a181-a4e6-4c02-8850-d6c46cbe44f8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5b6d6e-d5ec-461d-9d90-05dc282af16f", "sighting_of_ref": "indicator--1e77a181-a4e6-4c02-8850-d6c46cbe44f8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb6e0bb-8f79-4907-9bc9-0e3b11a553e9", "sighting_of_ref": "indicator--a16778a7-cb2d-4381-b06f-a37ee0b06281", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70fbe15a-aad5-4ac4-a15c-1ba1b959775b", "sighting_of_ref": "indicator--a16778a7-cb2d-4381-b06f-a37ee0b06281", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d650e6-53e8-4d04-a7d9-0a3f10eb448c", "sighting_of_ref": "indicator--9f7f50c0-66b6-4696-9df8-ae0446e916bc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db901a09-b651-49b3-a87a-f1c4295a5aee", "sighting_of_ref": "indicator--9f7f50c0-66b6-4696-9df8-ae0446e916bc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dcc6fa2-ba44-45d7-bcaa-567f44fbe814", "sighting_of_ref": "indicator--70692f10-60e9-4b85-9647-9f769886c7cd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126d4534-9239-49de-8223-50b301abb26c", "sighting_of_ref": "indicator--70692f10-60e9-4b85-9647-9f769886c7cd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6b2827-7d25-4dee-b17f-6d4d4ea15ac8", "sighting_of_ref": "indicator--85a18a62-8729-4aa3-9a1b-84452e1f2c11", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ceb0fa8-480b-4e42-a7a9-4ec9c62b1118", "sighting_of_ref": "indicator--85a18a62-8729-4aa3-9a1b-84452e1f2c11", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af15bbe-5a21-406c-8041-88913aaf9e82", "sighting_of_ref": "indicator--e5f8f753-8961-405f-bfc7-25247a5bc6eb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd05a54-7c20-4505-aa0b-190aeb21cf42", "sighting_of_ref": "indicator--e5f8f753-8961-405f-bfc7-25247a5bc6eb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d1dc28-e2d0-4b81-9d76-99ad861a47a5", "sighting_of_ref": "indicator--46e12dbf-8b09-4ec3-a072-d74fb0d0752e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa44b59-f858-43f7-8702-544e86849be5", "sighting_of_ref": "indicator--6e8a8a86-6ce4-4470-8a99-4870619117ad", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696b4b9f-77ac-463d-bf6a-a437b36a5b19", "sighting_of_ref": "indicator--6e8a8a86-6ce4-4470-8a99-4870619117ad", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465bcc26-907c-4b2f-8fe9-01f811ab6fe0", "sighting_of_ref": "indicator--016fff58-8fe0-4404-be21-1a10ca8c4a8c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0579c2cf-4486-4795-b3a7-b3d9f2073ef7", "sighting_of_ref": "indicator--228f4f7c-4ce4-446c-bf17-54e7d84e47f7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e803a276-56ed-41f2-80ac-78b42d6e398a", "sighting_of_ref": "indicator--b571b38d-4648-40e1-a7b8-b4f5cd0fec82", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60b9f2a-0439-499b-a7d4-d0b0ea94e869", "sighting_of_ref": "indicator--a6f81758-453d-4044-a780-87db17da473d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96ca82f-0d72-4455-a38c-b90c7fd58738", "sighting_of_ref": "indicator--77ab655c-824b-4f58-98f2-bb52e2edfc0d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab2a9a5-76af-4247-aed2-769f86657dd9", "sighting_of_ref": "indicator--2cefb897-d6df-4c1a-99e7-7bcd6ac86783", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e303b51-df26-4182-9b98-ae6dfe174e7b", "sighting_of_ref": "indicator--6b4ec4a5-4823-4b17-9287-2fae34bde113", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3caba8-8cbc-4fab-91fa-158e7ca8a358", "sighting_of_ref": "indicator--f9756590-661e-4265-873e-d9f2b7f2360b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c0c5be-b672-41bf-bc46-e8c3d0cf8261", "sighting_of_ref": "indicator--44f31187-a5c7-4c27-8477-1bcc4aafba36", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb20247-375f-49ac-9ccc-ded85b618f87", "sighting_of_ref": "indicator--e41d12b5-e5ec-4cc8-b284-55e2f0f5dbbc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc74467-35f8-4a77-bc77-56be38e15221", "sighting_of_ref": "indicator--e41d12b5-e5ec-4cc8-b284-55e2f0f5dbbc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea9811e-71c7-4ef1-a6e9-7b1b8c2e97ae", "sighting_of_ref": "indicator--e41d12b5-e5ec-4cc8-b284-55e2f0f5dbbc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51791428-9087-4cad-a140-afb6fd9c4360", "sighting_of_ref": "indicator--beda7960-bf4c-4e03-9c9d-fd3cf64db039", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b418bbe2-a468-4283-8daa-d6a76b4e69ed", "sighting_of_ref": "indicator--a5518d02-6db2-4df4-9f36-8349c89705e2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8514f8a5-c38b-4fa6-b88c-6a4058e792bf", "sighting_of_ref": "indicator--4565fb60-8348-4357-a032-bbbf4a5aa749", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae7c953-30af-401f-bfba-3b66caa30515", "sighting_of_ref": "indicator--caa44930-3545-4068-82b7-ebd4c256b3c5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c96bc4-d62c-402b-9ad7-49827f7d82fc", "sighting_of_ref": "indicator--f60e63b4-cce6-4dd2-b75e-e47f76019f4b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45240f2e-05d9-4565-8de2-32ad27fae7fe", "sighting_of_ref": "indicator--039ec4a1-a1d1-4c91-95ad-8605848deff5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55bf13a-e4a2-4a8e-a9d4-c997031fa81b", "sighting_of_ref": "indicator--5dd1000e-353e-4c8c-aee8-721d0bee8dcc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a13782-4dbb-4b91-94a3-99b0faa56d5f", "sighting_of_ref": "indicator--0d23a55d-6e77-4773-bd78-2b4b1c438a8a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4eb3a3c-deef-416b-adf0-7f58c3b0ad4e", "sighting_of_ref": "indicator--5a413694-4ade-409d-aaf4-7a88786b6edb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65fbdc1-82f2-4324-8bf4-3de859a787d2", "sighting_of_ref": "indicator--e15f1450-99e7-4849-81cc-278f5032f47f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b608bdc-5448-4c0e-90ed-d320e2b5d262", "sighting_of_ref": "indicator--69a83022-40d6-4014-81eb-38f55d473627", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9731a6f8-e5be-4bd3-a33f-2bdc58803a5c", "sighting_of_ref": "indicator--e6fcec6a-31a9-4f14-aead-8317c8b1184d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec793d1-82bb-4a15-9429-f74b0da4f10d", "sighting_of_ref": "indicator--e6fcec6a-31a9-4f14-aead-8317c8b1184d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf919326-913b-400a-be98-9fad1cc66c44", "sighting_of_ref": "indicator--e6fcec6a-31a9-4f14-aead-8317c8b1184d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6805684-2e99-4a6e-a97a-9b4841bcd1db", "sighting_of_ref": "indicator--4fadab9d-50c1-4e3f-ad15-abc7fa7c2e8e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d4ed9d-b62e-45c8-a51c-5fdd8d3dd668", "sighting_of_ref": "indicator--535ae3e6-8ec9-440a-a19d-b2311c0aafc0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b74d953-f3ad-4c0e-9dfe-e36ea8477c07", "sighting_of_ref": "indicator--07915f05-3138-4a40-9294-75e6aacf5740", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e2598d-dd7b-446d-815c-cd125082cffa", "sighting_of_ref": "indicator--07915f05-3138-4a40-9294-75e6aacf5740", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0987de-0811-4aee-82a1-c705c6290a89", "sighting_of_ref": "indicator--7ce7be1c-b2e1-407e-ae6c-250f1ab9d635", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b56d99-7c98-4094-8e6d-d6715eb79614", "sighting_of_ref": "indicator--7ce7be1c-b2e1-407e-ae6c-250f1ab9d635", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e08d7fb-a9e5-42c0-aa94-f39bc947b6ab", "sighting_of_ref": "indicator--7ce7be1c-b2e1-407e-ae6c-250f1ab9d635", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de0f1e8-d438-4643-b088-87b70ffa39dd", "sighting_of_ref": "indicator--4ec9f88f-bd9b-448f-8723-bb7ae05f1635", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ec55bb-67f6-49e7-a6b1-72e6638ba852", "sighting_of_ref": "indicator--4ec9f88f-bd9b-448f-8723-bb7ae05f1635", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099a41ed-5daf-4004-b261-af050fc033cf", "sighting_of_ref": "indicator--d690a14c-a048-4b5e-a1aa-8bec51bc7de4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca158216-1e8d-42ad-863f-8168ef5ba877", "sighting_of_ref": "indicator--d690a14c-a048-4b5e-a1aa-8bec51bc7de4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37a076d-bf6f-4d9b-8b89-2a08d2f6a8cc", "sighting_of_ref": "indicator--b83b2998-bc06-4183-891f-8c99d5cf1207", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdce6266-2643-447d-8a1a-81d334e6a2e3", "sighting_of_ref": "indicator--b83b2998-bc06-4183-891f-8c99d5cf1207", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3d5f0b-2a0e-46e3-b611-ebca0a24461c", "sighting_of_ref": "indicator--b83b2998-bc06-4183-891f-8c99d5cf1207", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59722046-ec20-496b-9f75-ad7be7b91f74", "sighting_of_ref": "indicator--ca835e57-4dcb-43dc-9259-7169bd50ffdd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bac2177-c2a6-4cab-9a4a-2a1a363e109b", "sighting_of_ref": "indicator--f95d41df-06f2-4138-bcbf-77294a2d69f1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c5683e-240c-476b-9712-fb007173543e", "sighting_of_ref": "indicator--bcead2ef-8597-4523-9631-e6635eaf958f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea92a7d-860c-4dcb-b89b-77ca2552fd9f", "sighting_of_ref": "indicator--11ec3b22-3ac1-4e0d-9db4-33d21ab42fc0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472570c6-0178-4c7d-ba6f-8c1510915dc7", "sighting_of_ref": "indicator--11ec3b22-3ac1-4e0d-9db4-33d21ab42fc0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35dbe4e8-5593-4030-bcdb-99beeb9e01be", "sighting_of_ref": "indicator--53a36aec-bff1-432f-b98e-6e04e226a855", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9af4d90-637a-4886-ae52-faf1046bae43", "sighting_of_ref": "indicator--53a36aec-bff1-432f-b98e-6e04e226a855", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b29e761-054d-4f71-943c-a945ee7c3851", "sighting_of_ref": "indicator--53a36aec-bff1-432f-b98e-6e04e226a855", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d0511f-1242-48c2-a67f-5a6f0ffe7907", "sighting_of_ref": "indicator--d6b563c3-fe17-4801-b177-ed54bf1fa35a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0e8b3a-eb8f-49a1-a205-fe71f0fb3ef2", "sighting_of_ref": "indicator--d6b563c3-fe17-4801-b177-ed54bf1fa35a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f48f5a-bc6b-4be1-96cb-97c847f9e39e", "sighting_of_ref": "indicator--d6b563c3-fe17-4801-b177-ed54bf1fa35a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2c50b8-10b2-4e3a-9111-6b664a3168e4", "sighting_of_ref": "indicator--43fcd1ac-891d-415e-8321-57681b7252cf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222ad94b-6559-4939-b459-5e1b3d705f98", "sighting_of_ref": "indicator--db1eb899-e1a4-4aa4-bd1e-a02cda480b17", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a6abb7-b2d0-4090-879a-467ceb494233", "sighting_of_ref": "indicator--9e33e9b7-e679-4e84-82d9-32a375b5b4c3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b81d7511-86a3-4091-a9e4-8546d5a0c12c", "sighting_of_ref": "indicator--9e33e9b7-e679-4e84-82d9-32a375b5b4c3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86bfb9e4-6dc0-430b-a7d1-12e7fff0004f", "sighting_of_ref": "indicator--9e33e9b7-e679-4e84-82d9-32a375b5b4c3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c10807c-4ba1-4fa7-8acf-c71bee0dc56e", "sighting_of_ref": "indicator--d333fc25-3f00-48a0-aa41-41b13b7f613f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10746c20-4c1b-4f2a-a15a-bfd71c828dc4", "sighting_of_ref": "indicator--224880fe-6515-4805-8e05-b9b2e0888de7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a19477-bf98-47c7-8697-76529f502383", "sighting_of_ref": "indicator--224880fe-6515-4805-8e05-b9b2e0888de7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c24b16-7456-447d-85ca-8f041f42075d", "sighting_of_ref": "indicator--ab727aed-185a-455a-8a26-a93d8012338e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d94428-3477-42d9-bbe1-a6c1337a2a97", "sighting_of_ref": "indicator--ab727aed-185a-455a-8a26-a93d8012338e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03199121-2e49-4724-839c-19d6ce9acd9b", "sighting_of_ref": "indicator--dc1671bb-1430-4592-8e74-dfa42a75ef54", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b52c14-0ca0-4cfb-a8ad-523cd8c266a1", "sighting_of_ref": "indicator--2434136c-07a0-4bfc-893d-46edd12fd819", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96606b85-8bf9-4a20-a114-ba6d22fb8342", "sighting_of_ref": "indicator--2434136c-07a0-4bfc-893d-46edd12fd819", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c6e73e-2865-4f0a-b9f1-014b3a9c272b", "sighting_of_ref": "indicator--757b7ce5-34bd-4f3c-8d6b-b8896cc477ba", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534a2147-e4af-4a57-a25d-363f5ff0fd33", "sighting_of_ref": "indicator--757b7ce5-34bd-4f3c-8d6b-b8896cc477ba", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e05267ed-1cfa-457e-b35c-eb2b49e0dbc2", "sighting_of_ref": "indicator--757b7ce5-34bd-4f3c-8d6b-b8896cc477ba", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6eaa376-6fab-4331-b578-0459f53b784c", "sighting_of_ref": "indicator--5ec43b5c-bd38-42f9-bf5e-f18f9db6937d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7c6206-435a-4296-abf6-a666ca29e3af", "sighting_of_ref": "indicator--5ec43b5c-bd38-42f9-bf5e-f18f9db6937d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f17f85-4dba-4bca-b88d-f099b07a298a", "sighting_of_ref": "indicator--c984cadd-2385-49e0-ba50-9b1932a1d87c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567ff34c-9652-45b5-866e-209ff3fa74f3", "sighting_of_ref": "indicator--8c937c0a-48ba-4d2b-a8a3-273ee043c1b5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb4acea-4287-4422-99da-3ce38e0bd19c", "sighting_of_ref": "indicator--3606f9e1-a33f-4fb6-b2bf-1368b885985d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093830f2-82e7-42d7-ac6c-f72c73ef289b", "sighting_of_ref": "indicator--0e031758-395b-425f-be7f-ac166f5505c5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a986530f-ebac-4f98-ae3b-4868cdef1347", "sighting_of_ref": "indicator--0e031758-395b-425f-be7f-ac166f5505c5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7060a22b-f27c-4602-b3c2-3895b45a783c", "sighting_of_ref": "indicator--852de819-4722-4879-be33-ffd8fc24698c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350e7a26-051c-4088-8d88-4f8ae699cc21", "sighting_of_ref": "indicator--4e3525da-1448-4078-bc32-4b19ddf66240", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c9a392-b71f-46e3-bcb9-b9f63ab74d3b", "sighting_of_ref": "indicator--04a847e7-32a0-485c-bfa5-e2dbc4632c11", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a499e53-6ed1-4e9d-a848-c2364021e5a5", "sighting_of_ref": "indicator--6f6edaae-fd9a-4da5-a8ff-23bf65e25d37", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508966f9-6a77-4db8-92d2-821dc1b43c36", "sighting_of_ref": "indicator--6f6edaae-fd9a-4da5-a8ff-23bf65e25d37", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece5685c-2ef2-457b-8cca-417f3086dc17", "sighting_of_ref": "indicator--9267cc83-4cb6-4879-8635-79ccf04deaa7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e7fa75-296c-4a30-8963-9af7b46b6115", "sighting_of_ref": "indicator--32d4957c-47fe-409d-b13b-273c6c0c63c4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a708e34-4d1d-4638-bcfa-7fb4c0540f78", "sighting_of_ref": "indicator--031098c7-aee7-4782-a6b3-ef9e6fe55c53", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2a2cb4-c13c-45f1-984b-0e3d651b9a90", "sighting_of_ref": "indicator--90026b12-0246-4e30-ac1d-57f5e74ad7e4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906d665e-abd1-4331-a702-6f301377ff32", "sighting_of_ref": "indicator--a9e9406f-fd6f-4e54-b4b3-6d4bce492062", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ff7e48-e858-4401-9b9d-e5a099c679f5", "sighting_of_ref": "indicator--01bec3e8-f861-4e7b-8eb2-179c460d1da0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd7a92e-1203-4219-8d45-fad1e867331d", "sighting_of_ref": "indicator--01bec3e8-f861-4e7b-8eb2-179c460d1da0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf3c8ce-c9cd-489c-8de4-d8c2bc4c5f62", "sighting_of_ref": "indicator--01bec3e8-f861-4e7b-8eb2-179c460d1da0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcdd0c9a-86a9-4fd3-afe6-46cc4fa460eb", "sighting_of_ref": "indicator--7637d1ed-47c7-4dd2-be95-6a5d7c39a7b5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13363af5-06d9-4e44-bb78-83a7f5b74090", "sighting_of_ref": "indicator--b3cfe2fe-5aac-4566-b369-aa2c0ff599d5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89ab559-4e3d-4f99-b07b-0bbe27cde6f2", "sighting_of_ref": "indicator--505fc6e0-9ded-4713-9548-17f8aff2ba54", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29b0ee9-32d2-43fd-b4d6-b6cebc670657", "sighting_of_ref": "indicator--7328dfa1-a6cf-4f6f-9be9-6e7606ff21e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2428306f-19e0-4716-adb4-845d9cb49e9e", "sighting_of_ref": "indicator--5f299f33-b1c2-4d33-9fe8-75b954da9416", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de788732-a3ed-41ff-814e-9c5b06558139", "sighting_of_ref": "indicator--7311cb0b-ae51-4480-b819-fabdbdd5529d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e46b63-8ebd-4222-bb83-9d0dbd30122b", "sighting_of_ref": "indicator--7311cb0b-ae51-4480-b819-fabdbdd5529d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479170d8-9eeb-4a8f-a0dd-165eec4e211d", "sighting_of_ref": "indicator--6df76380-b8c1-47d5-bcfc-7737bd0ddd2d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a09fb4-ae63-4bf9-be0d-96c0d4a18598", "sighting_of_ref": "indicator--da61222e-8b09-4101-9fa7-34ab45829074", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec59d1d-a5f6-41d7-9833-dded4b44a232", "sighting_of_ref": "indicator--991407bb-7c29-42c8-bd6d-bedf2f084aa5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82b3e06-67fa-4828-977b-3f90ac3bb1b8", "sighting_of_ref": "indicator--3633e52b-2d6f-4e2a-8234-90cfa462dfe0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271c5615-6aa7-4472-a4ea-00887638e2f8", "sighting_of_ref": "indicator--92f71b79-aa10-41b4-9513-ed5b276676aa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3e5082-a57f-4fe8-9a87-203fc7c9390f", "sighting_of_ref": "indicator--92f71b79-aa10-41b4-9513-ed5b276676aa", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5353d8e9-bc05-41d9-91a0-07f10b9b8cdd", "sighting_of_ref": "indicator--4a3740ed-94f6-48f8-80b8-ff238f18f84c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b122999-365d-428b-aff8-2e2da907af74", "sighting_of_ref": "indicator--52b5d606-722b-4da8-80cc-d63437d76f65", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9864dd-598e-4bdb-adeb-61814fc01bc2", "sighting_of_ref": "indicator--7da5a43d-c99b-47a0-8f31-5ced1ff2c6ba", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f1635a-8b88-48bf-a757-b1a276881264", "sighting_of_ref": "indicator--71b47c08-921a-4e1a-915a-15dbe02d20c4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4d9620-49e7-49f5-9a3c-e1820ecb579c", "sighting_of_ref": "indicator--62e21844-ddc9-4466-9eb3-b94e74ea323a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9e15b7-5a5e-4cef-938d-68770e7d1033", "sighting_of_ref": "indicator--8ca858a1-349d-4cd3-bb46-6542f5210717", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b73137-6669-4577-a2cf-b400621be8f4", "sighting_of_ref": "indicator--f6064e41-fccf-41fd-baeb-2d5ce8a9c3e9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a936965f-d4bb-48e7-aea8-e7d882bc3d56", "sighting_of_ref": "indicator--3bbf6db5-7f54-4052-916d-7e653a525e4c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79580051-b9e4-4d36-b80f-0e19b595cc32", "sighting_of_ref": "indicator--93d6a5d9-46eb-4a58-96b5-c3d2ad9178c7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89714f6-a7d2-43aa-aea0-0063570262ec", "sighting_of_ref": "indicator--1fd662d0-acb9-489d-901e-24acfb80cfa8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7178185-5833-40bd-a7aa-62d00797233e", "sighting_of_ref": "indicator--2d92c4c8-84eb-4c55-ab6c-5f534daf07d6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313e89c4-350d-4c0e-a3d4-f9d9c62b92da", "sighting_of_ref": "indicator--5ef7242d-a698-4321-a6e8-f53ba8747f9d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d5a603-03ce-4ee6-a1cf-665ab0960238", "sighting_of_ref": "indicator--26adae97-a958-4ee2-8f28-0615f58ae9d3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48cf400-96cf-42d0-a194-8dd2a910daf3", "sighting_of_ref": "indicator--30634499-094f-40d9-a04a-678abe3084d7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9cee9e-9a89-4e4c-8507-b8448459c727", "sighting_of_ref": "indicator--05b93404-eb94-4e1e-a251-c46e7dd3cbdd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b580d8d4-4aa3-4ca9-9f5d-f9fb95ac8b54", "sighting_of_ref": "indicator--1a76b41d-02fd-47d9-8c88-77ba44ebe6d9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8677745f-f036-4838-be7f-5a36c6d276ef", "sighting_of_ref": "indicator--1f13889d-4672-4ce4-9d8a-aedd80a36306", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4576c5-8c51-4f7b-b386-d5dc1ae31869", "sighting_of_ref": "indicator--8c3cdbce-8b80-476d-9d27-b9f6116acd61", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d272c0d1-a4d3-460a-b2f2-fe8171f63d2b", "sighting_of_ref": "indicator--c74599bc-e5fb-4fb2-856f-ab1d33309125", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa67a14-95af-4a19-a0e5-a3c6600f36d0", "sighting_of_ref": "indicator--c74599bc-e5fb-4fb2-856f-ab1d33309125", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565bdb9f-d278-44bd-adc0-47b664733a07", "sighting_of_ref": "indicator--b8ae280f-5575-42a1-bdbb-be3b7d821143", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f079cd-2599-472a-acac-fb03b4162150", "sighting_of_ref": "indicator--b8ae280f-5575-42a1-bdbb-be3b7d821143", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d90464a-793f-4f88-8953-91067a53e916", "sighting_of_ref": "indicator--fda82b45-d7ac-4cd7-aee3-5a82321a29b3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8e6dac-16ad-4cb0-9a8c-2fe3af9f1e30", "sighting_of_ref": "indicator--fda82b45-d7ac-4cd7-aee3-5a82321a29b3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e456600-7e76-400f-a7ad-805e9d673997", "sighting_of_ref": "indicator--dbe74cb9-19c9-4556-b738-4774aee5e1a3", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51694a89-a2d0-4dc2-9890-c9501bd3d22c", "sighting_of_ref": "indicator--32dcc618-790e-44b2-a740-ee6f4f0013cc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216b0c56-70e5-4d15-805a-4a25db29f8e8", "sighting_of_ref": "indicator--8ded292e-21b2-47b6-8632-2a9e7878f981", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92409da1-b609-44b1-a75a-ea95c708724e", "sighting_of_ref": "indicator--1615e76e-eb47-464b-aace-57357787f783", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee32ed7a-ddfd-4d87-8180-a9def90ff892", "sighting_of_ref": "indicator--1615e76e-eb47-464b-aace-57357787f783", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85050c3-543e-47f8-a8eb-4b656a528f58", "sighting_of_ref": "indicator--dc5f16a6-cab5-45f1-9648-19de6f6ca353", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919c0ef6-290f-4888-a9d3-e315ac85e974", "sighting_of_ref": "indicator--dc5f16a6-cab5-45f1-9648-19de6f6ca353", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3883b60f-fa25-4dff-b7e8-cd51436b2feb", "sighting_of_ref": "indicator--26c32dd5-1e48-45ee-b407-50fd5a1521fc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945d4a36-01d9-4284-9bd7-960cda7a93b8", "sighting_of_ref": "indicator--a51a9249-9286-4502-a279-4894396cc643", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02bf4ceb-d849-4d33-b84f-51a77b781cbd", "sighting_of_ref": "indicator--0a690440-6565-4148-bc6c-def7e070528a", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd121bd-008c-4416-84a3-a675ddfd4161", "sighting_of_ref": "indicator--9722daca-a719-469c-86f7-1408cca2dd42", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd85a741-c926-41db-8035-025040347dfd", "sighting_of_ref": "indicator--9722daca-a719-469c-86f7-1408cca2dd42", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf0de04-99ab-4e58-b26b-6f40c1ed695d", "sighting_of_ref": "indicator--06021c9a-983a-496f-ac9d-c78b00ea3155", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14b4600-eedb-46c2-83aa-b26cb35189cc", "sighting_of_ref": "indicator--6f17bb31-cb43-4147-a98e-3f271583e15b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4bb565b-22ab-4ec3-9778-012f3f4e68ce", "sighting_of_ref": "indicator--6f17bb31-cb43-4147-a98e-3f271583e15b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b38d7f3-63cf-4e0c-b0b7-914d5eee35ed", "sighting_of_ref": "indicator--a4f5a130-e51d-4cb0-b09a-8b90e0c88f4d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30abe0c-00da-44d7-9cda-52d90999996e", "sighting_of_ref": "indicator--a4f5a130-e51d-4cb0-b09a-8b90e0c88f4d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7062a7-db45-4e77-bf9a-1751e5da2f63", "sighting_of_ref": "indicator--2c66e0b4-26fa-40d9-8566-0e90e8d2b1da", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4de4838-b59d-419c-bf0f-5b606692c513", "sighting_of_ref": "indicator--2c66e0b4-26fa-40d9-8566-0e90e8d2b1da", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adba5acb-053a-4c01-920d-023833ce9e52", "sighting_of_ref": "indicator--b275aca5-8711-4f65-8587-7f46738b8e76", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0e78bb-ca0e-4211-a667-1b6aca9ff002", "sighting_of_ref": "indicator--b275aca5-8711-4f65-8587-7f46738b8e76", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4baf9041-c774-4bf5-b4d0-ec78285132bd", "sighting_of_ref": "indicator--c0397423-27d9-4425-abbb-e4b51a9dba2c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ccbb78-59b2-4c8b-b5a2-13749a80e89c", "sighting_of_ref": "indicator--fd96c496-2390-4c76-8622-bd729a9968f6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eba5054-ff09-4938-a731-e952c2582ea1", "sighting_of_ref": "indicator--a4418813-0846-45ad-bb78-c84783849f8d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a9e288-ffcc-4125-be79-a9b607558339", "sighting_of_ref": "indicator--afc61939-18e8-40bb-8559-d6d0b6873d0a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f70ce3-5c01-485e-b56b-77d51aa21b01", "sighting_of_ref": "indicator--709bc305-dc8c-439b-b1c3-b7aa94eaf321", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf643463-d935-4c94-8d64-5160f434b703", "sighting_of_ref": "indicator--7cf9fd83-6644-42e4-8cd5-461b286d6b1f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c5fd78-ff1d-490b-8847-3ccf73662747", "sighting_of_ref": "indicator--89052212-59f1-48d7-bec5-cec2a348a236", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62fa122-db6f-4bce-8473-49a359d2f0c7", "sighting_of_ref": "indicator--5b865edb-0be1-4a75-951b-f0af292f937c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf5f6e7-beec-460c-81ac-8e0ea37ceaa9", "sighting_of_ref": "indicator--8dcb9bbc-5967-41a4-86de-df77ec28776b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a3b5e7-eff4-40b2-bb7a-9aae2a583aaf", "sighting_of_ref": "indicator--f892d647-1e58-4342-a213-e6e0676b65a0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55cc548e-32de-4953-a9e3-a0cc1724cbdb", "sighting_of_ref": "indicator--ed2658ad-6c2d-4701-82ef-d87085b33e3e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84afacbb-7a90-4aad-8bdc-6e760fd329ec", "sighting_of_ref": "indicator--37ef26cd-7338-429a-a6bd-022a2458b3cc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417cf943-d1cd-45f6-a8c6-64a9c39d1077", "sighting_of_ref": "indicator--918652a0-f460-4a0c-8a36-1f34bf70dacb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3135c39-1ffc-46d1-8312-c3f3051ffc40", "sighting_of_ref": "indicator--ce52321a-d943-4235-86ca-a2a09854c837", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b78fa83-291f-4586-a249-ee91bc0c3fde", "sighting_of_ref": "indicator--174bd21b-8cf4-4d61-bcf0-0b7d178474da", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ecfcd7-a57f-4581-b084-9e4909bd97a9", "sighting_of_ref": "indicator--c1c24b4c-14d1-47ed-be20-b4fb9fa022e4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2b879c-1704-4f4c-855e-1d26f8c8d013", "sighting_of_ref": "indicator--c1c24b4c-14d1-47ed-be20-b4fb9fa022e4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080ce75f-bf25-48f9-9fcd-0383811a36db", "sighting_of_ref": "indicator--c1c24b4c-14d1-47ed-be20-b4fb9fa022e4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7c39bd-65bf-4624-81f9-341477e97777", "sighting_of_ref": "indicator--bac601af-913d-4481-a4a5-a4caca082d56", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48bfac12-dd2e-495f-8e69-9bcbc559b673", "sighting_of_ref": "indicator--bac601af-913d-4481-a4a5-a4caca082d56", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2c1ad8-6da2-4a6b-a728-154e60c0c588", "sighting_of_ref": "indicator--2949badb-47fe-4e6a-866c-0c5c891867d2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f111b36-3610-47a1-9a85-12580bc69090", "sighting_of_ref": "indicator--2949badb-47fe-4e6a-866c-0c5c891867d2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b968bae-4c8c-4f2f-9c04-e759f1cc18e6", "sighting_of_ref": "indicator--f09bde78-cdab-463a-97ee-039328c974b5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e23997-181f-4718-af4d-3903d76468c8", "sighting_of_ref": "indicator--f09bde78-cdab-463a-97ee-039328c974b5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3eec75-6033-4627-b92a-fc31a14ac23e", "sighting_of_ref": "indicator--f09bde78-cdab-463a-97ee-039328c974b5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1a142e-fa6c-46df-b41a-28bb73c920f5", "sighting_of_ref": "indicator--6cc8fa57-a8a3-4785-b0a3-cc6b1e18c896", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06bf0d21-5af5-4a77-bc71-d0cf4ac197a7", "sighting_of_ref": "indicator--f885a44a-b513-40c6-a06a-0d823153be69", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a6d895-7f35-45e6-a8b8-e35172cc8a93", "sighting_of_ref": "indicator--5a7b976a-44d2-48cb-92bd-5c2484a749f6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e41089-3624-43c1-b42c-31370790dc6e", "sighting_of_ref": "indicator--5a7b976a-44d2-48cb-92bd-5c2484a749f6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5c707b-97fc-417c-93b8-7532e2c5034e", "sighting_of_ref": "indicator--682c2aa3-d75a-43f7-886d-c80f7bc5f5b4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28714e98-016a-4b4d-bf11-9d3140db0d84", "sighting_of_ref": "indicator--93a7cc37-c552-4f6b-b14b-c8daee309553", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06bacbfc-faee-4af1-a5f8-d92f65fd767e", "sighting_of_ref": "indicator--7e8d3492-0457-4c03-b28a-1d3421ace7b4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1d11ad-db0f-4a80-a436-fc16875ac58a", "sighting_of_ref": "indicator--3e0ade9c-4f5f-4871-92e9-c68e3f7fea07", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e759cb3a-938f-48cd-ad45-4b94a0ae4136", "sighting_of_ref": "indicator--0f491aab-21cd-4343-b8d7-01950afc1b8e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a4c60e-feeb-4538-b979-cbf3fe92a33a", "sighting_of_ref": "indicator--0f491aab-21cd-4343-b8d7-01950afc1b8e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c660b7ea-7e80-44e9-9003-9620b6362cec", "sighting_of_ref": "indicator--095cd6b9-7aaa-4e2e-af49-51d28554b884", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2502a91-4e50-4b8d-9ee3-60f55e51f7a3", "sighting_of_ref": "indicator--bc5b02a5-b7d0-40f0-88ef-f2176dc00cd4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47aed5f-20f2-4cd4-b43e-1a7f585d6453", "sighting_of_ref": "indicator--e55f97ba-807c-46a6-89f5-c8eaa26a67ab", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac3daff-b889-43dc-bdd4-8ef279e9eab9", "sighting_of_ref": "indicator--e55f97ba-807c-46a6-89f5-c8eaa26a67ab", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8773cc-ccb6-4721-b55d-c47fec24b507", "sighting_of_ref": "indicator--41a4c066-d823-4db8-9650-a5ebb4ad400d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d72106-c3a4-4415-a36f-5183037adf2e", "sighting_of_ref": "indicator--41a4c066-d823-4db8-9650-a5ebb4ad400d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766ea8f9-ac5f-4708-9f6b-886bf05c9b94", "sighting_of_ref": "indicator--41a4c066-d823-4db8-9650-a5ebb4ad400d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9fbe54-0a8f-4300-b6cc-91b93d3729f2", "sighting_of_ref": "indicator--5c88dae2-7120-4c11-868f-97c568af4223", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6f8923-2a4d-4964-8ab4-3491cfcdd658", "sighting_of_ref": "indicator--a0612d62-b0bd-4ea4-8fcb-43a92867bafd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85faef8d-4501-4250-8335-3f7b3da3e0a9", "sighting_of_ref": "indicator--a0612d62-b0bd-4ea4-8fcb-43a92867bafd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb56e9f-5251-4d98-ace0-673ab0c11dd1", "sighting_of_ref": "indicator--a0612d62-b0bd-4ea4-8fcb-43a92867bafd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a716ac-319f-42ff-9e09-d92c06a8bdad", "sighting_of_ref": "indicator--b25b4f1e-72c3-4afd-ad07-14a0fc4200f2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0396feca-a619-48a4-8700-eccb8d99bc7c", "sighting_of_ref": "indicator--b25b4f1e-72c3-4afd-ad07-14a0fc4200f2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d911c07e-5a88-43ea-9ed4-eca23ca89f7f", "sighting_of_ref": "indicator--b25b4f1e-72c3-4afd-ad07-14a0fc4200f2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00ff933-9699-48cc-b46b-ad1e21dd1115", "sighting_of_ref": "indicator--c45eba56-995e-4e7c-a58e-cfd753435409", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f664ff-1f98-4f7a-8056-54f671996137", "sighting_of_ref": "indicator--c45eba56-995e-4e7c-a58e-cfd753435409", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc7942d-fd4d-44ed-9458-5110ae7be4e8", "sighting_of_ref": "indicator--c45eba56-995e-4e7c-a58e-cfd753435409", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079f6f4d-9128-4a98-a1f3-735ad71162d9", "sighting_of_ref": "indicator--5cd8c381-3f20-4927-9371-4b019f064e09", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a941e7-bca8-4b71-ae58-0af6f6b4b555", "sighting_of_ref": "indicator--5cd8c381-3f20-4927-9371-4b019f064e09", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb47a722-dec7-42be-9581-f9832736b447", "sighting_of_ref": "indicator--5cd8c381-3f20-4927-9371-4b019f064e09", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881b4401-3e11-4fb9-9ff8-97c8f73d79e6", "sighting_of_ref": "indicator--a0cbee3b-b458-4710-aba6-4335b1842b5d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2af46b6-19f2-4c66-9300-fe66dbb939d0", "sighting_of_ref": "indicator--5f5cf9d0-5166-4c28-87a1-80680819c318", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3e31ce-edf6-436b-bc47-7ff62cd92798", "sighting_of_ref": "indicator--000cd760-db78-4032-8ba3-24f8d5fc388c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f96568-f457-442c-ab41-261c834a82fa", "sighting_of_ref": "indicator--04e538af-cd1c-4a85-b9bb-58aa74ceecec", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f75e33-ba1d-412a-9327-b9c920eb076e", "sighting_of_ref": "indicator--04e538af-cd1c-4a85-b9bb-58aa74ceecec", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff989214-6380-4521-a8c8-959c2b1b35bd", "sighting_of_ref": "indicator--04e538af-cd1c-4a85-b9bb-58aa74ceecec", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2df79ce-66ea-4e23-8bed-956989afd5b5", "sighting_of_ref": "indicator--762ffe6e-bedb-414c-a843-8e82873a2b83", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3733c8-9d94-47bc-b86c-83f2cd3301c2", "sighting_of_ref": "indicator--677d15f7-82b2-49b9-9219-f3479507acd2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0bd2b6f-833e-4e3b-b2c9-617dafd8545b", "sighting_of_ref": "indicator--710737e8-ed1b-46f8-be92-ba5d1c5ecdd9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8eed821-752d-4e35-90cd-9884f585cb23", "sighting_of_ref": "indicator--710737e8-ed1b-46f8-be92-ba5d1c5ecdd9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36274e2f-6879-492c-ac19-7f79a0c0f6e3", "sighting_of_ref": "indicator--3922eea9-65c8-4cdc-9eae-c8cd37cc1cff", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4849b10-ae5d-4198-9697-e7a1f9f94910", "sighting_of_ref": "indicator--3922eea9-65c8-4cdc-9eae-c8cd37cc1cff", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0033829-2db1-4f78-8ad9-172ab720abdb", "sighting_of_ref": "indicator--f6b7f81e-88e9-4775-b6de-9b6bd5288ac0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39842ab8-0e99-4abf-bb80-579899259c13", "sighting_of_ref": "indicator--6c8e189b-5531-490e-a170-f4783d78cde9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8641e4f8-2f10-431a-bd5b-95579328f652", "sighting_of_ref": "indicator--e109916a-ea0d-4c6b-916d-6b17cd35f6c4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--757b70b8-0c58-4165-9431-b221d6def689", "sighting_of_ref": "indicator--4ccb530b-be53-4593-b7bf-991fa6bd7a1a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9615995-1990-4861-8ff8-973d2d2fa688", "sighting_of_ref": "indicator--67a22a76-bb96-4a75-90d3-48a229b7eaec", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3558d5-f995-43df-8e50-0cc3b77bda25", "sighting_of_ref": "indicator--67a22a76-bb96-4a75-90d3-48a229b7eaec", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec85029-e53b-4d54-8c62-e53e5e713521", "sighting_of_ref": "indicator--67a22a76-bb96-4a75-90d3-48a229b7eaec", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255cb56b-68b4-4715-86e7-3e551f046877", "sighting_of_ref": "indicator--022e05e0-4ebf-43dd-aa03-174ae9e03731", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f924fc5-a368-4087-a8d3-e00a5934b4ee", "sighting_of_ref": "indicator--31541bdf-5eda-4af2-b25a-0f33df9ef07b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e656179d-294d-49e8-912e-0f000a75e5a0", "sighting_of_ref": "indicator--1470b8b2-9c86-4f37-9f64-d60391e4ce65", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2454bbc6-ffaf-4969-86f5-99c2068ae4fd", "sighting_of_ref": "indicator--500f64e2-ec5d-44ba-8567-72ac3e927003", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f191116f-4774-44e1-a89d-71d44e5a2797", "sighting_of_ref": "indicator--9c3912f0-4b5c-40de-85bc-3af50c218622", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637c7730-f4c6-4123-b914-95be434d4072", "sighting_of_ref": "indicator--6f5873aa-24ff-411b-a72c-c5e9a8ae4d8d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de7bbef-c196-41cd-a927-27c9755057cd", "sighting_of_ref": "indicator--8fa52c34-9779-4876-9d62-eed645470155", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9957be-8c35-47b5-9d61-84147b5e89ab", "sighting_of_ref": "indicator--9c76a6ae-af8a-490c-bf79-0f8175b08e91", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfcad4f2-0707-4d45-ae98-28bfb897d093", "sighting_of_ref": "indicator--9ec15582-efc7-4c0d-ae7e-04a2b27cf947", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1d8fac-4851-422e-8c21-17c25d5a0826", "sighting_of_ref": "indicator--0ccd72a0-9c80-4fdc-89bf-e8580836dd22", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9087cdee-9fbb-451b-8401-91fe83eda18c", "sighting_of_ref": "indicator--6a712b9d-7265-491a-bd61-e07ff33403ae", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d040a0c-eb87-40e0-8567-3a6702d11730", "sighting_of_ref": "indicator--116d254c-39d4-420f-adb5-134b8ad8e4a1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a2e8ccd-7bcf-4c20-aad0-70418963d0b3", "sighting_of_ref": "indicator--0c96df76-e952-4dc6-a568-d85491b2400a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf1248b-84ba-4414-9ed9-3e314bd0b22a", "sighting_of_ref": "indicator--bd77bb61-9139-48c0-9cfb-bb060e9f21ba", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f61844-5f42-475f-8b4c-094bab876e48", "sighting_of_ref": "indicator--5e6ce416-83ea-48da-bd7a-dce17ae6d67b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--146e5306-4bf6-416a-9c16-438c01c30721", "sighting_of_ref": "indicator--82b7a6cd-56e1-4b14-9491-5c42d64f6481", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12cc0840-f8ee-489c-8f50-ffc17a69ebb9", "sighting_of_ref": "indicator--82b7a6cd-56e1-4b14-9491-5c42d64f6481", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21811f64-94bd-46bb-9018-11f8aa8b80d4", "sighting_of_ref": "indicator--df24ca52-0a27-4855-9189-a1f74a8f288f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff4dbb7-ff9e-4a75-8dd1-8bbdfa0908d5", "sighting_of_ref": "indicator--df24ca52-0a27-4855-9189-a1f74a8f288f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7ba3bd-f2b2-43ed-a26a-1ce6f6045127", "sighting_of_ref": "indicator--80cb16c2-5570-43d3-bcc1-f9f44b2f40e6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f728c4a-3bf8-4e9d-95de-ec7dc08cea32", "sighting_of_ref": "indicator--80cb16c2-5570-43d3-bcc1-f9f44b2f40e6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc497fd-5157-4806-9751-e51c5ce27d06", "sighting_of_ref": "indicator--46ece95d-e7b3-4e06-b434-52660ef15555", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4c7b71-f016-4223-b1a7-25acf48b7afd", "sighting_of_ref": "indicator--08774ddf-4bd0-43eb-9f6b-62cb497b23c6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52cb1327-4265-4b70-869b-818816e403ff", "sighting_of_ref": "indicator--08774ddf-4bd0-43eb-9f6b-62cb497b23c6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8622839c-6dbb-495d-baf0-deb5fd3aa6f5", "sighting_of_ref": "indicator--47a54457-141a-4dec-bd20-55403bed4d3c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b33596-4655-47ba-95bb-3fce2c6a9f8c", "sighting_of_ref": "indicator--6da2f130-7950-4896-9fc8-9b6ae4c01494", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6cab467-bfc3-4690-9075-486da034c30f", "sighting_of_ref": "indicator--f4929d12-9ebe-46a0-9a1b-de1f153213b8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee96a7af-85ec-47bb-80a2-20e9ddff43ad", "sighting_of_ref": "indicator--e365cba5-6364-42ca-a8c8-584e061f1408", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43687da-f499-4e53-adf6-db8ef4e88d92", "sighting_of_ref": "indicator--7d4a7006-d750-4107-854c-54ca06955cd5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb879249-1038-49eb-9f15-a80cec22b62c", "sighting_of_ref": "indicator--6544c130-3ee8-40fe-bc8f-1ff9e951dc91", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea67c35b-46fa-41a3-a083-ce4186d018d9", "sighting_of_ref": "indicator--f1b66ac6-bc00-4fb7-8741-475f8c478a69", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73092d74-9ffb-4100-8989-8f9af647566c", "sighting_of_ref": "indicator--9903a480-0bb2-4207-9cee-9d18150c1593", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40fc3d7e-fc11-492e-9b7d-c3c4a5aa83cb", "sighting_of_ref": "indicator--cb795f2c-0940-4714-8b07-a0b8a2006d6f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09716c6a-b849-448e-8af1-a6616f50c67c", "sighting_of_ref": "indicator--cb795f2c-0940-4714-8b07-a0b8a2006d6f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e09dce0-a293-4682-b12b-e3dc7c8f94a0", "sighting_of_ref": "indicator--cb795f2c-0940-4714-8b07-a0b8a2006d6f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57ba8bd-2bf2-4ab1-a11f-47c0232f475f", "sighting_of_ref": "indicator--d6f72e63-22aa-44c9-b98a-60bdc6f4cee9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8763ebe-0fdc-4ece-976b-78bc8d212972", "sighting_of_ref": "indicator--2c987972-c992-4f1c-be21-3ebd92fee855", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886e16b6-2110-4d2c-880d-b5ff42b8bf19", "sighting_of_ref": "indicator--e2fab26d-25d5-4655-8afd-03e75dba8433", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3072d3f3-b42b-4608-9820-17dba4d30c48", "sighting_of_ref": "indicator--e2357bf0-df19-43fb-8326-0709cc9e5da9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c5fc72-4d70-47dd-b044-2f99c3a0f90b", "sighting_of_ref": "indicator--8b31b73b-830c-45e7-8457-6cc8e487728f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62675f77-6451-42d2-8e7a-1615f2a7a332", "sighting_of_ref": "indicator--5f3beb0a-7770-4653-8952-120e769e7c0e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a702b5d-1689-4fe6-84ca-6cb456b98e5a", "sighting_of_ref": "indicator--2ce3b676-afaa-4329-a1b3-af915acf45a7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e15d5ab-31ab-4634-8a5d-3c2aec3f6b80", "sighting_of_ref": "indicator--d6124faa-14f1-4d15-a433-180020cc65e1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12e5548-89a5-486c-9514-ab583b513bdd", "sighting_of_ref": "indicator--af67a74b-860b-4c22-8209-28d907b1807f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43256d3-ea44-4078-8985-41d0a7cb2704", "sighting_of_ref": "indicator--68d20b7b-a05e-42c9-bfbd-9e87a8dc62f7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1ef294-9c4c-4ee5-9243-038de5d1ce4c", "sighting_of_ref": "indicator--68d20b7b-a05e-42c9-bfbd-9e87a8dc62f7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f440a08-408e-447c-b0e9-954bf59f0fe4", "sighting_of_ref": "indicator--68d20b7b-a05e-42c9-bfbd-9e87a8dc62f7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a366d60-635e-4efa-acd5-ffcf828eea71", "sighting_of_ref": "indicator--4ed10a1d-d2fe-4300-98d9-49900ceacc6d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f47f691-fed2-48a9-9f77-4acd2e76e9cc", "sighting_of_ref": "indicator--4ed10a1d-d2fe-4300-98d9-49900ceacc6d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97470fc-0327-484c-870c-52bb70698249", "sighting_of_ref": "indicator--4ed10a1d-d2fe-4300-98d9-49900ceacc6d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4f14c0-5bc6-4119-9893-c99eeb4e4c60", "sighting_of_ref": "indicator--a9df046b-6d23-4056-86b0-611e1b812b44", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2630db70-57c3-4b59-82f7-7296a925fea4", "sighting_of_ref": "indicator--a9df046b-6d23-4056-86b0-611e1b812b44", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1ce0bc-1fc1-434f-8e68-ae9ef1c17453", "sighting_of_ref": "indicator--a9df046b-6d23-4056-86b0-611e1b812b44", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca13322b-1aac-420f-a7bc-fccc7b2fa507", "sighting_of_ref": "indicator--542282b9-4242-442f-891b-1143ce0c3d81", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e35a055-58d7-4ee3-876f-33ece1c06f98", "sighting_of_ref": "indicator--542282b9-4242-442f-891b-1143ce0c3d81", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1493391-30db-4ddf-9bb6-aadfc30f312a", "sighting_of_ref": "indicator--542282b9-4242-442f-891b-1143ce0c3d81", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecec640e-bcf5-495d-b022-ffe8ccc8d513", "sighting_of_ref": "indicator--acd49c06-ad0c-48b4-ad86-fe13224f2fcb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335ae79a-dee9-45a6-96e0-c6f8d5fc9480", "sighting_of_ref": "indicator--bab8c9d1-a1d6-4188-85f5-a135a6dd3e1e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd197ca-0167-4653-af1e-329e6dc48e88", "sighting_of_ref": "indicator--bab8c9d1-a1d6-4188-85f5-a135a6dd3e1e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6aec4c6-df17-4002-af3f-c56edb319d3c", "sighting_of_ref": "indicator--bab8c9d1-a1d6-4188-85f5-a135a6dd3e1e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f7cfcf-3f6d-48da-a9a6-7e97ce73c6ad", "sighting_of_ref": "indicator--b1b83b44-8a4b-4069-8229-a86e0cecabac", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20bf6ff-ce38-4307-9467-23e31934785d", "sighting_of_ref": "indicator--b1b83b44-8a4b-4069-8229-a86e0cecabac", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97de0969-1b1c-4ef5-aa0d-59350994d3a4", "sighting_of_ref": "indicator--49f2af8b-ebff-47a0-b41f-b71aa5726067", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff039f6-8154-41fa-89aa-f740c3e940a0", "sighting_of_ref": "indicator--49f2af8b-ebff-47a0-b41f-b71aa5726067", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925a3d93-60ce-415f-9da4-d4cf8c73a332", "sighting_of_ref": "indicator--49f2af8b-ebff-47a0-b41f-b71aa5726067", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120e2da0-8be9-42b3-bc4f-eb96ca11e1ca", "sighting_of_ref": "indicator--93b0a4ca-31ac-4645-962a-81be5a62c434", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51800e68-f428-4eef-a9bd-0852e2cb9c7d", "sighting_of_ref": "indicator--730f0f61-26f3-4163-afb7-be81226767b0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa719d23-a037-4bad-ba79-52297852c415", "sighting_of_ref": "indicator--730f0f61-26f3-4163-afb7-be81226767b0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197a7a18-bba9-4d97-a2d5-0026e49fc1c9", "sighting_of_ref": "indicator--730f0f61-26f3-4163-afb7-be81226767b0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac8ff7e-268a-421a-b7f8-ad39a06c15b9", "sighting_of_ref": "indicator--2c0d5332-9bef-4603-8c62-ec7bdc628408", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fce503c-3d2b-4b5c-bff3-12e06dfb3e05", "sighting_of_ref": "indicator--2c0d5332-9bef-4603-8c62-ec7bdc628408", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23668ff0-2599-481e-b306-58ebec3574b9", "sighting_of_ref": "indicator--ce6435b8-2bc3-4c25-a8f6-20fb5549f6b2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a26bdc-6ddf-41cf-97c4-cec1c241f900", "sighting_of_ref": "indicator--ce6435b8-2bc3-4c25-a8f6-20fb5549f6b2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287d0893-5077-4726-8696-0a8b48b884b7", "sighting_of_ref": "indicator--ce6435b8-2bc3-4c25-a8f6-20fb5549f6b2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138312e6-d5e1-423f-953b-60e791bf4859", "sighting_of_ref": "indicator--37ca7898-b011-4894-b421-9cefcf268df5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca3f4bf-062b-4de6-b34b-bd25ef204f52", "sighting_of_ref": "indicator--0444cfbc-59e1-4575-bb45-c65c3bab9733", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ac05a1-02c0-4b6a-acbd-3ed7c117dfba", "sighting_of_ref": "indicator--f56e8c4e-92f6-4d83-9ab9-c34166b928d3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32167272-42fe-4d3e-90dd-e8fbb96b7f6f", "sighting_of_ref": "indicator--2f1c515c-9f83-408f-9c51-86a9289886c6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c11be3a-4603-47f9-a1f5-eaee0dda0208", "sighting_of_ref": "indicator--2f1c515c-9f83-408f-9c51-86a9289886c6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1586469d-0aca-4068-9cce-6039c256e464", "sighting_of_ref": "indicator--db69c0fb-4e47-41b3-88c4-eccb6c961b98", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a65d953-b788-4342-9bb2-5eeedf566589", "sighting_of_ref": "indicator--f7f3fdc7-1b5a-4ef8-8ac5-09b6b134d6bc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd825030-6a49-4cc6-a7f7-177198a56e44", "sighting_of_ref": "indicator--f7f3fdc7-1b5a-4ef8-8ac5-09b6b134d6bc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5c81a5-9ecf-4a74-9444-1cbac274abfe", "sighting_of_ref": "indicator--404b7091-b56a-4ba3-ba71-973229d0f68c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92320351-1881-4dd0-a9b6-6166fceccf11", "sighting_of_ref": "indicator--404b7091-b56a-4ba3-ba71-973229d0f68c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6307e68-83fb-4988-a134-5898194cfc54", "sighting_of_ref": "indicator--404b7091-b56a-4ba3-ba71-973229d0f68c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8331221b-8ff5-4cc4-bd0b-f3f7dd6233a4", "sighting_of_ref": "indicator--d6dd6c69-3530-43dc-9a0d-655f35c48ce0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896b3b98-3b9a-4ee3-8a1c-cd4e1080ede4", "sighting_of_ref": "indicator--d6dd6c69-3530-43dc-9a0d-655f35c48ce0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05776192-2e5f-472e-a689-30446d07113e", "sighting_of_ref": "indicator--eac76ed4-e1c7-414a-82c2-701197ec6c54", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0793ea71-cd8f-4076-b230-74c59fbc29be", "sighting_of_ref": "indicator--d9dd7ea8-1a57-494d-a108-834babc75b08", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22b30c9-3155-49f8-ae11-d5f8ee8bf577", "sighting_of_ref": "indicator--e024f079-bc63-47f6-bae6-5bb5fcb0676f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b197a7e6-348b-47b4-a4f7-eedfd427a75c", "sighting_of_ref": "indicator--e024f079-bc63-47f6-bae6-5bb5fcb0676f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af962da5-3c5b-40ce-b00f-239bc4b0ae21", "sighting_of_ref": "indicator--e024f079-bc63-47f6-bae6-5bb5fcb0676f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9c4beb-09d3-4ad2-b205-3f27449e69e4", "sighting_of_ref": "indicator--40c4d3b7-1cc9-4f4b-9356-2488bf86e9ee", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef561a33-bc57-453c-b9bd-68a7159d5e72", "sighting_of_ref": "indicator--3fcf53fb-c8fb-480f-9d67-6675d9f93505", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb35085-aba4-4d63-89e8-d9340e362cd2", "sighting_of_ref": "indicator--1622a9c2-c4a0-4c6a-8867-2bcb6f63a196", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148f90aa-b24a-4f59-8481-1c6515e3d068", "sighting_of_ref": "indicator--1622a9c2-c4a0-4c6a-8867-2bcb6f63a196", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218f84f3-21ca-4968-b24f-048eada25e78", "sighting_of_ref": "indicator--1622a9c2-c4a0-4c6a-8867-2bcb6f63a196", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b46d184-a12d-44b1-b02b-f0ac45c80eac", "sighting_of_ref": "indicator--b51f3377-2fa6-4df2-8a87-2fe0ec192767", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99c293d-9457-45a1-af7c-a28c0ca4d6d4", "sighting_of_ref": "indicator--2a738262-eba6-4d76-b903-35dcd1b80986", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79bb4f34-9cb5-4dd9-bf57-363a185ec78d", "sighting_of_ref": "indicator--6c39ac56-cdf8-470a-b4d2-0a91b599db95", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2de93cb-ddd8-42cf-a8b4-fbeebf1b74d5", "sighting_of_ref": "indicator--49bb24f2-c4d8-4e1d-80f0-5eaebfb5d6e4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85808814-1b2a-4e62-94cb-c23cee079e72", "sighting_of_ref": "indicator--5d516d89-3cab-4e39-82e4-904cdc6a8b5a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f1a038-a426-4392-a9a0-b29074545b61", "sighting_of_ref": "indicator--075b6762-37a4-40de-9c8a-803482eeacc5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6374efb3-a86c-445f-a981-8f04c77b8bb5", "sighting_of_ref": "indicator--f55ae178-a0f2-4f92-93d4-5d68233a7938", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0466af79-c303-4d64-bf6c-67400672e1f9", "sighting_of_ref": "indicator--5a51b91e-3820-4ba7-9f5b-38bb6b1dc91b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951863d4-781d-4e4c-b0c3-f81c78abe417", "sighting_of_ref": "indicator--094dc963-a923-4c9d-b12b-6351ed134284", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62fdec64-b630-4953-ab3a-ff60c80a2b31", "sighting_of_ref": "indicator--3d2ee1db-15da-4fb7-908c-5251198e3cf1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf6113e-5cbe-452b-8380-06fc6e3927ca", "sighting_of_ref": "indicator--e9e09bb1-17ab-4a94-bc68-57a334bedd46", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb5ce7c-450c-4582-8360-4a20df480ec1", "sighting_of_ref": "indicator--ff6c9a46-8acf-4649-b043-37442877ff69", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5934b3c8-926e-4cd3-bac1-a98b9c1da24d", "sighting_of_ref": "indicator--8f89ea4e-6db3-4033-b403-85d01e544f36", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e655ce0-8f2a-4d76-b784-3ffd76f2aa70", "sighting_of_ref": "indicator--7dda1953-268e-4e11-8128-fc8cc364c0aa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120f6bd0-3c62-4c0e-8a35-8d2d1e45aa53", "sighting_of_ref": "indicator--295b3a63-c78f-4c5d-a4bb-750a8d8ab62a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5aac26-db22-4313-92f4-712845855e7e", "sighting_of_ref": "indicator--42268e75-7660-4666-aa88-c82c90b5e79a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515eb348-8f29-4013-bd9a-0f56cee77902", "sighting_of_ref": "indicator--e46b2f35-8479-4f6a-9d35-1a312dd4edfc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26edba4f-38b9-4025-bc21-3bdd31e95ff5", "sighting_of_ref": "indicator--54c856a0-bc29-4f54-ae61-b755aabf6288", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f926c7-537d-48e8-97b2-0d75736a475b", "sighting_of_ref": "indicator--190f2a53-5d96-41c3-aa4a-e4657ff1f03e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0039b46f-5ed3-4b5e-bc76-2a1a2c660132", "sighting_of_ref": "indicator--190f2a53-5d96-41c3-aa4a-e4657ff1f03e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38801396-9c5b-468b-befa-bf3f96904eef", "sighting_of_ref": "indicator--190f2a53-5d96-41c3-aa4a-e4657ff1f03e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6a93a3-136f-45da-a730-53bce2d99c1b", "sighting_of_ref": "indicator--027756a7-90fe-4e1f-8698-74f28874ac4b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34496707-30f3-4e22-82ec-e919dbf9e2a8", "sighting_of_ref": "indicator--027756a7-90fe-4e1f-8698-74f28874ac4b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8ea896-8e60-4e8e-af39-7660e6ebd26b", "sighting_of_ref": "indicator--f7761250-9308-429f-a7ae-78fb96fe8a18", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709bbf5d-75be-4a06-a057-fbd636e47735", "sighting_of_ref": "indicator--30f62029-b1be-4716-b9ca-ebc086964b7c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0adf6e7-6848-424d-bbb3-9d7ea0b3c454", "sighting_of_ref": "indicator--30f62029-b1be-4716-b9ca-ebc086964b7c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--339a4729-13ac-417a-9523-1fe62b53cdf0", "sighting_of_ref": "indicator--30f62029-b1be-4716-b9ca-ebc086964b7c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a062ed1-cba3-4cb4-ba0b-d299ed82d24e", "sighting_of_ref": "indicator--81cd6497-62f3-4f40-b05b-374c934fb1bd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0e2664-63c1-4e2d-9d3f-a786fed5fd9d", "sighting_of_ref": "indicator--04dc3efa-b475-4367-894a-7f0ce929ceb0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70a5c57-9cb5-41a6-a75a-8e93a94dd21c", "sighting_of_ref": "indicator--4f92f347-2005-47b7-9a0b-65c9be7f7cca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c3e999-00a8-4293-ad80-53677b2fcc7f", "sighting_of_ref": "indicator--d3a1818a-fb82-4bd5-98ab-e1e4a3a3aceb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db8e277-7df2-4040-8d09-630c1520caff", "sighting_of_ref": "indicator--65a1aeec-3350-444a-9b39-cf914f9a4d10", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79508665-2fbc-45ae-bb40-503605eeee60", "sighting_of_ref": "indicator--c5ee36f6-844d-404c-aad3-548db707ca8d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f085b6-4f1a-4b33-809d-39b1a5943cbe", "sighting_of_ref": "indicator--885c31a5-86c0-4564-a119-071f98d776fd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbc0a20-8b96-49e2-9583-778202de73bc", "sighting_of_ref": "indicator--a90b27e5-399d-4023-aef4-f47ab3dfd325", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce35bf6-4b2c-48fe-bd43-6910fb8b9b4e", "sighting_of_ref": "indicator--aedc1cdb-f0b8-417f-865d-05cd02403dc8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1794a0-b38d-4c66-9e15-06cea045e3e6", "sighting_of_ref": "indicator--0063ff2a-b12a-4cf2-a082-2a324c14a3af", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ad739b-1df2-4bde-88e9-dc38cd71355b", "sighting_of_ref": "indicator--a9477177-6104-40b0-8f39-b6caa9ad280d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90abb3a-44fd-4c59-a746-265b5a08c453", "sighting_of_ref": "indicator--4e294183-aa95-4043-8bce-92a472819887", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79fb749-e2b2-466d-9612-862a90641aa0", "sighting_of_ref": "indicator--7203ca61-b947-44fa-a4a5-256f22f1c66d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672b0f45-3ca3-469c-a495-89ab16e8492e", "sighting_of_ref": "indicator--92415f1c-361e-4428-b7db-741dfcf03b8a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df579c7a-9968-4a7f-a1cf-d4df6aca0a3c", "sighting_of_ref": "indicator--9af7b0d1-986c-4be7-89d9-81ac03dfc8c2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6baa53c3-7789-4cbc-9cd9-581901d04a46", "sighting_of_ref": "indicator--f022531d-70b0-4824-bb51-edbb01f49a5d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c71831-dd2b-43d2-95ef-6f26283e04b3", "sighting_of_ref": "indicator--a66e2b0e-c3fa-469b-b018-d44b4b99793d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1d62b7-a350-440b-8e12-74221e62c3e5", "sighting_of_ref": "indicator--d496a438-4cd2-454c-b2d3-79839451d8f5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875d5ec4-52eb-4f04-b64a-b912afd328cc", "sighting_of_ref": "indicator--c8b44cc9-5797-4d2e-a713-715b88e67945", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155ef889-d068-43ad-bcb3-f7e2846c2c20", "sighting_of_ref": "indicator--20256e99-70cc-43e2-ab56-265e493de647", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84541d06-b6c5-4b0e-a988-c35406f209e0", "sighting_of_ref": "indicator--bf58c061-6ffc-4aa7-a804-ce7c5fb12d9a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d94477c-52b1-480d-af12-9f3d14f3ee64", "sighting_of_ref": "indicator--9189e02a-7763-4576-8fa8-71615581a223", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f738dc-aa56-4884-b71f-eb8db914006f", "sighting_of_ref": "indicator--2b3c99f2-2743-4152-b9ca-c2f1c0f4a43c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c587c71-10a5-4367-98ee-3dda019698f1", "sighting_of_ref": "indicator--4a69ef3b-abd7-4934-8a9f-e4dcc0d47acd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a811f35-352a-45cd-b9a3-2a9f838ea726", "sighting_of_ref": "indicator--31544af5-83ea-4f5e-9962-3f833bf397ad", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2896bb2-48dd-41ef-b235-5fee296ece98", "sighting_of_ref": "indicator--4af11a4a-9551-4e0a-a53d-d999bd1bac59", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e8e094-ed39-4557-ba76-9bf88e35a3ec", "sighting_of_ref": "indicator--db92d543-3e88-4d75-98a1-d06717362b23", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa078b5-c6ba-44af-93b2-7881aefdd15f", "sighting_of_ref": "indicator--0b704d26-e3f3-412a-a2d8-3eac9e1f4fc5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9428886f-b22f-4213-b2e7-4acc0b901e35", "sighting_of_ref": "indicator--eb1c3bd8-cf5e-4aa0-a13e-d69591f0327e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b701c455-1980-4772-a898-43a8af07bf84", "sighting_of_ref": "indicator--32f515e5-b5b7-4c59-acd5-31ec13c5966e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb2d987-d7d1-4fb2-bce0-13ea1f503d37", "sighting_of_ref": "indicator--c794cef8-3301-4e4d-a002-39b8a4cd6cde", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc9eee5-6f16-4844-a7ac-76b0f1075fb1", "sighting_of_ref": "indicator--cd59777c-61a0-4416-aa5a-7c50fadd175e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b3a167-54f1-4c2d-8ee3-8e21f0f8336c", "sighting_of_ref": "indicator--012b8a1d-3fd7-4e33-886e-1cc179ee6315", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b280e1b3-4296-4ca2-b661-3220fdd65ddb", "sighting_of_ref": "indicator--749c573f-dc34-4411-83c6-c5f6d70c92db", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198d9b57-59ab-4655-8126-9a1a65a5011f", "sighting_of_ref": "indicator--f12f247a-90a5-44bb-8793-a111816546d6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c772a4-c92a-4ec9-86a2-1d8fff6af3fe", "sighting_of_ref": "indicator--b11daec1-18a6-4688-a107-bf8eb1d991d6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50ab229-ffad-4bbc-b602-2aa9c70e57ef", "sighting_of_ref": "indicator--8e22afc5-99ac-46a0-8d70-7f40f96e1b5b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b78693-4925-43d0-9150-08e3509b74fc", "sighting_of_ref": "indicator--dbeb7d51-80a6-4b64-9d0a-d42ba36935b5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dae497d-0f59-40e6-b62e-8315089eab3f", "sighting_of_ref": "indicator--0baabd7f-3f1a-416c-8095-37b3b83501ba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d20f3e-ecbc-4012-9b4c-a3ae1d302272", "sighting_of_ref": "indicator--038f509b-df72-4934-9b85-c53207816044", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95244404-0897-44f8-81a5-a43cfd2bb9f1", "sighting_of_ref": "indicator--6bb77bf1-3ef7-4ea0-8b19-8be400a175cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f63c8ad-beb4-49f7-956f-41983ea5f1a0", "sighting_of_ref": "indicator--d556ebc2-796f-4716-969a-0ed405ffd9ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af93eb1d-6cc8-4875-93e6-b4b451084df8", "sighting_of_ref": "indicator--0f921279-6922-4ec4-ab8a-18cde295c455", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58c6565-fbcf-4e9f-b2b1-f8a5d5079ca2", "sighting_of_ref": "indicator--ff3aaca9-590d-437f-844e-1099e844b586", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122e3a12-9796-4c59-954e-42bdf3ef7786", "sighting_of_ref": "indicator--b261422a-5cf2-43e8-af6d-493b132d82af", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f73691d-236c-49ef-b120-acbf24a3c017", "sighting_of_ref": "indicator--e3fd4c82-6f6d-440c-b637-9624e84be590", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b020ec5-585f-4c5e-bac1-807392ffc779", "sighting_of_ref": "indicator--544939c0-97da-4ac8-bd11-2025108c6158", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77cffcd2-b002-46da-8621-81c01d370b3b", "sighting_of_ref": "indicator--d7237df7-34cc-4785-aeb5-bb6cefa78b59", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453b89ae-e9df-4ff4-8edb-05b98b80c50f", "sighting_of_ref": "indicator--fb59d6a9-9a73-479b-a7f6-147c9b727d3f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ffc6fa8-890b-4985-b542-8e03fc3871e7", "sighting_of_ref": "indicator--25ae7154-5331-4964-9ee2-e4804830c5db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d636095d-5340-46c5-8a8d-3c17a2260f45", "sighting_of_ref": "indicator--8e7b6e14-afe6-4ed1-a1a4-9fccb47397bf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1511f9f9-5449-4bfe-bf90-5b51453789a9", "sighting_of_ref": "indicator--72aa66a6-a28e-43ca-83bd-17d70d5f96c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a57f40c8-8b4a-4f36-8a56-373b540c3698", "sighting_of_ref": "indicator--d7cbaace-b778-405d-8a0b-02afd63cacbb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2650e01-273f-4274-9cc0-6f43b01aacf3", "sighting_of_ref": "indicator--1bda6872-9d91-4405-9d17-80003eedc193", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef4e3eb-e144-469f-a0cd-4cefdd05eea9", "sighting_of_ref": "indicator--0c535f82-35af-4f68-b5a0-ce81369e1d18", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1160c257-1e3c-4e3f-a672-a559e951a7b5", "sighting_of_ref": "indicator--41d11e8d-2b4a-46b6-b5bc-b9cfa8998767", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ed2cf9-4880-4a96-a28b-42dfc1ae664a", "sighting_of_ref": "indicator--7b3e11a0-f9f3-4cca-a930-c5a989ae0efb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3efe65-1783-4074-a20e-63d155d2206a", "sighting_of_ref": "indicator--e1a9e058-d5f0-434b-a5d4-8b8071d21f98", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c137e1-f232-4b8c-b7b6-56c0c850297f", "sighting_of_ref": "indicator--c94d20b9-2061-4946-957a-21a0e75f605a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05cda2a8-3132-48c3-9a1a-0b146867e2e4", "sighting_of_ref": "indicator--99dd035b-f550-4a66-983d-a6363b7c3282", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--544c8c3e-c1d6-4e2e-8743-484c27b2e5d8", "sighting_of_ref": "indicator--92f3a1aa-5011-476e-93f7-230c02353dad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a818f6dc-c76d-4912-b358-d7e72d00ffe0", "sighting_of_ref": "indicator--59a05c2d-2666-4716-89fc-40463cb8cd47", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ecff01-c3f8-44dc-876e-b2cff4046f93", "sighting_of_ref": "indicator--6e11f648-0760-4d3b-9f02-818b40a4ef52", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72099600-acc3-4ff4-a28b-ab8390333008", "sighting_of_ref": "indicator--98eb5571-efba-4ef3-8925-75fa3d7a8db6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b499569d-579a-4df3-adbd-d0da30844f98", "sighting_of_ref": "indicator--dd4de2f7-a5d9-4ff0-a4fe-cec07b01e31d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2314dd05-19d2-45df-bc27-879f5b583901", "sighting_of_ref": "indicator--bbe6ab41-e91b-41c5-935c-8d9f89a84e7b", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f447d30-8767-48fc-9262-6ca73098ebbf", "sighting_of_ref": "indicator--e790da3a-111c-4767-8de6-94d7263f5fa2", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7d3c49-3e4b-4bd0-8934-d245054752c7", "sighting_of_ref": "indicator--5c570869-e17e-4d48-a4ca-aaf10a121dca", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ae6ef2-20f9-4a1d-b807-1ef8dbc5dc64", "sighting_of_ref": "indicator--b8fbdbbf-4c15-4c5f-9247-c7556d6f6e1b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3da4d28-7ca1-4803-a53e-4afbda98a89f", "sighting_of_ref": "indicator--45544e7d-036c-4c4a-8e57-4b613e9a6883", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6b966d-2f20-48e4-a685-ce87aea6cf83", "sighting_of_ref": "indicator--f115dd9f-37b2-4652-abba-0b50990215a9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b648c7-87b6-42c5-9cf1-88429f7dced3", "sighting_of_ref": "indicator--971c50f7-91fe-4a2f-abec-95818346c240", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7133f01d-cb49-4a6b-a54b-de297a97398d", "sighting_of_ref": "indicator--1d6ccf82-f9c2-4b09-a4ab-3d4c685c289a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f92d8d-9f54-472e-a331-f4f3729b0962", "sighting_of_ref": "indicator--8f993ac1-f5d3-47d2-9c80-aa9b7f155f00", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e379007c-32bf-44bf-8b15-9907bb5e0605", "sighting_of_ref": "indicator--b9fee2ed-5be1-4e7c-878e-716773c18789", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a862c4e-fadf-40ba-8b96-f31d91e66ec6", "sighting_of_ref": "indicator--9b3a69be-89d2-4e82-a67b-7854798c3bb4", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65503454-55d6-4301-ae75-a271d0387272", "sighting_of_ref": "indicator--a8248df9-ed09-4c22-8a5a-dd496c7ba566", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41959bd-190e-4249-8bdb-879bea605336", "sighting_of_ref": "indicator--8d30377e-dbca-49a9-b5ea-aad1523823aa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9133cc0a-2a12-4b5c-989c-3b4698c45e06", "sighting_of_ref": "indicator--3da80987-7d44-47ba-899b-d600db961dcd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f140fa21-7c9b-460b-9a54-314cdb47bed1", "sighting_of_ref": "indicator--27848e72-171b-4600-b50d-509beb958be0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1da678-84a6-47d9-99b9-88a1501fbd8a", "sighting_of_ref": "indicator--27848e72-171b-4600-b50d-509beb958be0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eae6d0a-2a2b-4bf8-a95d-7b8c75494c31", "sighting_of_ref": "indicator--a6b5dcf2-162f-44b0-af16-4622776c02a1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9fca118-f308-4373-b976-b5aee2cae982", "sighting_of_ref": "indicator--0bfee3d1-765e-4045-9fdc-63c745f63301", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e323d581-e686-4530-a646-09a619a86390", "sighting_of_ref": "indicator--0fb502a6-4b7a-4c03-8e8e-37db5d944f51", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642b293e-6b09-4089-b712-1fe5098940b5", "sighting_of_ref": "indicator--773f408a-67bc-4d7e-8c0e-71dc9d2bb792", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e415488c-dd7f-41c2-a1ae-ee4f598a13d9", "sighting_of_ref": "indicator--e2fcb2a1-b1e2-4da9-965e-46544ea16d72", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65fa55f-671d-44f9-80e2-e14685da4b30", "sighting_of_ref": "indicator--8f4f16e8-08c0-4be6-ba70-5580d33d2416", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5da079d-e522-4db9-9812-f5b1c5485eb6", "sighting_of_ref": "indicator--8f4f16e8-08c0-4be6-ba70-5580d33d2416", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c87b19-d676-4a99-8139-3ec8850c5c09", "sighting_of_ref": "indicator--8f4f16e8-08c0-4be6-ba70-5580d33d2416", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf138682-416b-46f7-95cf-6c8480f8972d", "sighting_of_ref": "indicator--22525f51-c877-46bc-9401-b43deda0c3be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61fcc98-6970-4c92-8000-3732937acc60", "sighting_of_ref": "indicator--9ad14b9b-accc-4953-a666-b452a7151291", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41bd0083-0d4f-4afa-a044-a70e02d92b75", "sighting_of_ref": "indicator--b76ddc9c-f0f2-48f2-9b25-c9258c24c158", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7fc5a1-84ab-4c50-8fcf-aa475f2a0d00", "sighting_of_ref": "indicator--4e3f0910-579b-4426-9b03-e144800729b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0ac0a3-e720-4a26-b41a-6b689d14f5bf", "sighting_of_ref": "indicator--4cead0a2-3aab-4979-b86e-5bce4a1cff42", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2566b9-e983-4cd4-a803-33cca3acf13b", "sighting_of_ref": "indicator--37cfa580-674b-4c68-b2e0-cae4fe11feb2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d2bc3c-1722-4a29-9d50-4e15e348abc7", "sighting_of_ref": "indicator--ce4bee65-4fc9-47e8-93b8-3a36b2814f0b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6996242-17c9-4ed6-a7c8-15168c9cb844", "sighting_of_ref": "indicator--d7fd6d50-6a3a-4fcf-949c-16b3e2fcb897", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad7a35d-4e0d-4e10-b081-f3e8ab775d48", "sighting_of_ref": "indicator--0188edaf-ad4d-41ae-a9aa-ab7c6f306bc7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e723dc8e-ae1c-4cf1-8675-160eaaa42b91", "sighting_of_ref": "indicator--51d03f33-f037-482b-b5b3-d48bc04c1d30", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec085f2-64d7-4638-abaa-e9355bc8f3e4", "sighting_of_ref": "indicator--5abe64b3-6f73-4746-87bb-0393f4627a1e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab36a8a-48a4-4b8f-a9a9-ee2bef28133a", "sighting_of_ref": "indicator--c747111c-3107-4286-8930-6fd1ea108d5c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0109a173-4f31-4dc4-b2bd-1344057849c6", "sighting_of_ref": "indicator--40605288-6d8b-404b-8f73-77abe5abf672", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0cb523-30c7-4fde-ab3e-cfd75288abe3", "sighting_of_ref": "indicator--2da4fef3-1e4d-4f83-817f-0bd64927cef2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd99cb10-eb96-455a-8424-694f022ea5ff", "sighting_of_ref": "indicator--956b5d47-b778-4d05-9c79-75297f976744", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca239c0-ace0-4f25-9b04-b1e60a369bac", "sighting_of_ref": "indicator--878137f5-10b4-4368-aa76-c3d38c1a492c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ad0578-de6f-4531-aae7-e9afa1df9153", "sighting_of_ref": "indicator--725a1de7-7bea-4882-9574-51d2fd02bdc2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a497a845-8945-4843-ad9b-73564622f9d5", "sighting_of_ref": "indicator--9cfae58f-9655-4bf3-bc49-af0b22706203", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26448e28-3ba2-4a77-a6d9-e7174d5d5524", "sighting_of_ref": "indicator--c9b568d3-e57c-404b-b6f2-ca91192197eb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5bdb37-ee1c-4e02-bfd2-f82ff255ec8a", "sighting_of_ref": "indicator--385e2166-e7bb-47fe-8866-cd8cd70ad82f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d6e04b-0f60-4b6f-bf98-800567c36ba6", "sighting_of_ref": "indicator--58dff838-aaf5-46cb-a954-e6d051ea6321", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e93cae8-f929-4132-a094-149492b37670", "sighting_of_ref": "indicator--cad4130c-ef98-4823-bd5f-088656d968d3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c37e351-612c-4c1a-a45a-25339bddc69e", "sighting_of_ref": "indicator--adabb886-6833-48f0-80f2-f0525ceb20cf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9374ff-a0d0-4256-a566-cf27d56c469e", "sighting_of_ref": "indicator--14982160-da2b-40a3-9a66-f1e2f15dd0df", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1fb000-9199-4c61-ab1b-1fee0990b60f", "sighting_of_ref": "indicator--705a9fcb-975a-4feb-b7b5-9fd60589ca3c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1237edf-cec0-443d-925f-ff984ff255b3", "sighting_of_ref": "indicator--a0b18be1-ccb3-4718-86bc-7da7ee6d89f6", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce009d2a-df52-4b73-83ba-f2403be6e343", "sighting_of_ref": "indicator--3524b47c-23a0-43c3-90f3-9ae0ad3c8b87", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448262fe-21fa-4add-b47f-8750c80b5343", "sighting_of_ref": "indicator--c8754df3-eb50-4efa-bbc2-22c5dd25c8f0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d780b86-0e70-4167-8a0f-40bd1214869a", "sighting_of_ref": "indicator--3b61894e-09fd-4829-aaaa-6c5f45c56075", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5d0ae0-27e3-46f2-9636-67020f2f9749", "sighting_of_ref": "indicator--8c7c92b5-b93f-4c72-b8dc-24295bff92b3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414f3abe-249c-4add-9b26-dbc58f631580", "sighting_of_ref": "indicator--2e14663d-d309-49ad-a1bf-4a14e7ccb158", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86cd3cc1-f02b-4178-a5a4-53aa5659dcf2", "sighting_of_ref": "indicator--99a0b820-174b-43e2-9661-d5783a72fb6e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a417c0-5296-417f-8be4-2c44293f7689", "sighting_of_ref": "indicator--c5671a8a-46a1-4fc8-998c-e4f64619b811", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1889e62b-fe97-4d8f-a0f1-445d34358ce0", "sighting_of_ref": "indicator--28079c94-ded3-4c39-9793-4e120c968344", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29368073-3cb9-4a26-b716-e6201f78f360", "sighting_of_ref": "indicator--3df790a0-3e1d-4868-bb4f-0f361d35864c", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b71911-bfb1-4705-8baf-18d4dc9b1735", "sighting_of_ref": "indicator--990d999d-a563-4658-9981-589ad0416903", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad344ee1-cdc1-4702-95f3-8bf2bcc32c83", "sighting_of_ref": "indicator--640ec239-ee96-40ca-8fe7-bd1ad6f075ae", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53706997-390c-496f-a5b5-69f839d820d6", "sighting_of_ref": "indicator--640ec239-ee96-40ca-8fe7-bd1ad6f075ae", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744ab356-efcb-47da-b6f9-afe0eb6c4567", "sighting_of_ref": "indicator--a7051ad2-d33a-4bae-bf89-f495658eaab0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5434d18a-d2c2-4324-9bd1-f9dc0d1d8d30", "sighting_of_ref": "indicator--782df0f4-c63a-415c-8ea4-93b67d87e62a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d1d4ea-1a02-4338-8d49-24d5a3d56ac8", "sighting_of_ref": "indicator--7f6b5c8c-fc40-4001-9db8-b761810dd64e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fd001e-20ea-49c6-9f65-cb0efd132fcf", "sighting_of_ref": "indicator--97604bf6-1684-4448-b78d-75869afab290", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6388da0a-c315-4883-a3f7-cf6538c03305", "sighting_of_ref": "indicator--97604bf6-1684-4448-b78d-75869afab290", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab2302f-ca12-4920-a09c-bde65cee4d3d", "sighting_of_ref": "indicator--f5869cf4-3e97-4c59-a069-a4fef0ec4336", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9bea36e-0b40-442c-b6a4-467d23b7f1ec", "sighting_of_ref": "indicator--036adf45-e6ac-49a0-9806-572ecd8103fd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c55e91-20da-48ff-932a-256806cceec0", "sighting_of_ref": "indicator--036adf45-e6ac-49a0-9806-572ecd8103fd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c12e3a-42cc-4d69-bb8f-86b4745825af", "sighting_of_ref": "indicator--036adf45-e6ac-49a0-9806-572ecd8103fd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5898c0fa-b9bb-489a-bb92-f326306622e4", "sighting_of_ref": "indicator--cd629595-dd17-4631-8c58-bd8b1860b776", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e162b48-5a3e-4d2b-9489-2951d02a9a65", "sighting_of_ref": "indicator--e21410e2-c61b-41c5-a188-aad1391e7260", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b2567a-b706-4275-a843-af08f0dae860", "sighting_of_ref": "indicator--b3735896-4136-4b54-b066-8b6f710d25fa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed35b11-4ea4-40f1-8421-20e9212dfc78", "sighting_of_ref": "indicator--298ee7be-fc1a-4f67-a73c-a4647ebafa64", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8f77e9-86c2-4034-a1dd-623453b08942", "sighting_of_ref": "indicator--95e95d19-ab9d-4741-9fb6-3910f6e9208a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e535705-4111-42a4-a0fa-2d499be516f8", "sighting_of_ref": "indicator--c5f017db-8f37-4c5b-89d1-567ab76599ae", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fedcfcc-4e5e-4981-b4de-25f15e0bbad0", "sighting_of_ref": "indicator--402f2ea4-768e-4ff4-8d25-66fa86437308", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0948cfc-d58f-4423-9723-98e0f5fc1ed2", "sighting_of_ref": "indicator--70dabfb9-69d4-4173-ab53-ae2dce9c0f88", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a2532f-5bbb-46be-bb96-47ddd1beb2db", "sighting_of_ref": "indicator--ea557d0f-5c39-4b46-84b0-f3acd023c421", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319d2626-262b-4098-aee2-7552d8a232d3", "sighting_of_ref": "indicator--ea557d0f-5c39-4b46-84b0-f3acd023c421", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee97e692-a0ed-4fb3-b6ba-d53a55d34e87", "sighting_of_ref": "indicator--861c5a2d-6691-4190-8e9c-6c1f7c291b7e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a72dc88-0b78-4ee2-bc1f-025622165013", "sighting_of_ref": "indicator--9482b04b-70c5-4057-8c5f-32873b6987c7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a870f9b-547d-4849-846f-636e357c8877", "sighting_of_ref": "indicator--3b22a69e-342b-4d3a-804a-5c1a35aa1885", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a928a481-9c2f-41bf-96b8-d768d77e9467", "sighting_of_ref": "indicator--3b22a69e-342b-4d3a-804a-5c1a35aa1885", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2866bf9c-9b98-450b-8487-4201072e48fe", "sighting_of_ref": "indicator--3b22a69e-342b-4d3a-804a-5c1a35aa1885", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5268656b-52bc-4138-b276-6bdd776f64bc", "sighting_of_ref": "indicator--5af5b8e3-cee8-4e76-9c98-bd94cd2d2434", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527d6c20-c2e5-449e-99f0-4b6046e0ed40", "sighting_of_ref": "indicator--dbbcc427-a8bd-4703-b153-a178ebfe1412", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26bd927-4c6e-4a01-a26b-c9ae7dea03bd", "sighting_of_ref": "indicator--dbbcc427-a8bd-4703-b153-a178ebfe1412", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f17234d-906f-40aa-b86c-c5f1b666c9f1", "sighting_of_ref": "indicator--ef418a58-7532-47e3-a780-13b6860717f5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8c3e46-0cf6-4b9f-88a1-3b1a375349e3", "sighting_of_ref": "indicator--ef418a58-7532-47e3-a780-13b6860717f5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9b8115-1c02-43fc-ab7c-5fef5edffacf", "sighting_of_ref": "indicator--60f9a2c0-73c2-4688-ac5e-99ed179a29e9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9224693-f500-4f8d-9d22-4eebde464d00", "sighting_of_ref": "indicator--329dc76d-7397-4d8f-bf2d-e3a4308319df", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8caee60f-8e06-41a2-90e3-807fa00c8dba", "sighting_of_ref": "indicator--4c02db2d-874f-478b-8eda-9d09e3f03aa3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427cd88b-0ec2-4e53-8a32-ee224e2a9a19", "sighting_of_ref": "indicator--4c02db2d-874f-478b-8eda-9d09e3f03aa3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--264d9e3b-22ee-44ec-939e-a765bc873a02", "sighting_of_ref": "indicator--c674b69d-6ce7-48ea-830f-604f5b1291c2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4fac27d-ce46-4477-9568-964f9fc10b4c", "sighting_of_ref": "indicator--ba29e901-1fa0-4d6d-bd0c-faf32d3536e4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83d08ca-ba36-4dcb-956a-92d976cbcaf3", "sighting_of_ref": "indicator--ba29e901-1fa0-4d6d-bd0c-faf32d3536e4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635da2a2-3e9e-459e-a8c4-57b9a4fa9130", "sighting_of_ref": "indicator--43f741df-2868-4e86-9fcc-1d64d1c5da86", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfd8f28-957e-494e-ab4c-ff30b254bd5d", "sighting_of_ref": "indicator--67d3f8fe-44ae-4be5-b193-6057ef611c55", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b88e862-586c-42a1-b9d5-dd7796045394", "sighting_of_ref": "indicator--e57bcda4-8a23-4e7c-bbee-59517fec9464", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d296bf37-ef7a-4611-9a83-9384bd9d4414", "sighting_of_ref": "indicator--1ea6ee04-d44c-4c6f-ae05-bf8d7755737c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413db6df-c5ec-403d-bd04-bde2f2a4b27f", "sighting_of_ref": "indicator--1ea6ee04-d44c-4c6f-ae05-bf8d7755737c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f72bfbe-08d6-4ece-af9c-5c2f1aa9a54a", "sighting_of_ref": "indicator--abb96845-1491-461d-8819-11273f895928", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c53190f-3445-4481-a236-d30d68d31459", "sighting_of_ref": "indicator--abb96845-1491-461d-8819-11273f895928", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2deb4fd6-334a-48a5-984e-d49b2a91eff1", "sighting_of_ref": "indicator--6e6b0da4-a40a-46c5-976c-7a0779ef5ddb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87f8f24-bc85-41e2-bedf-815f562820e3", "sighting_of_ref": "indicator--7663d65a-8004-40bf-98ed-6777d27e4d55", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14715019-6164-4255-826c-8ad79bc74212", "sighting_of_ref": "indicator--a857ca5f-b3cd-4072-ba25-54ee0a05138c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3d387a-34e4-4ec4-8f16-3cf26b7063a7", "sighting_of_ref": "indicator--a857ca5f-b3cd-4072-ba25-54ee0a05138c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e37fd4e-93b4-4330-80f6-c63a72d718b7", "sighting_of_ref": "indicator--a857ca5f-b3cd-4072-ba25-54ee0a05138c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0c1057-4b2a-4aa8-be78-ce18ac47c439", "sighting_of_ref": "indicator--bf2a9ef7-d2e2-4c69-9a93-262ef8764e9b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0387b802-f312-4485-a430-0952e01fe380", "sighting_of_ref": "indicator--bf2a9ef7-d2e2-4c69-9a93-262ef8764e9b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffda262e-963a-4af7-a912-b4f7eae6f726", "sighting_of_ref": "indicator--88ed0783-d961-42a2-ab2a-55b88fda3b82", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd8a45f-1f7e-4c31-81dd-3a33a7e8e523", "sighting_of_ref": "indicator--88ed0783-d961-42a2-ab2a-55b88fda3b82", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71f9daa-55c4-47ed-8063-12001c36f241", "sighting_of_ref": "indicator--94cc44a7-750b-45a3-b076-6c3b2a90d1ab", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0dfb4d-4692-4db9-94ec-6df25639e539", "sighting_of_ref": "indicator--94cc44a7-750b-45a3-b076-6c3b2a90d1ab", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8748e387-b1d7-4684-b703-1953bf90339a", "sighting_of_ref": "indicator--94cc44a7-750b-45a3-b076-6c3b2a90d1ab", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b2ca55-e167-4b16-8866-ec5eb93199bd", "sighting_of_ref": "indicator--d921e188-e33e-4c9f-b73b-f8f8e237c776", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643cb578-e223-4456-bf86-f483d8553aa6", "sighting_of_ref": "indicator--328e5b61-ba4a-449d-8034-08c9fc4adf5b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae8230c-abc0-4d99-b78a-6439466991ff", "sighting_of_ref": "indicator--328e5b61-ba4a-449d-8034-08c9fc4adf5b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f96f7bc-80d7-4fd7-b3aa-f07669dd8a9c", "sighting_of_ref": "indicator--b6e6ebf1-3f50-4080-8da4-07ebe428bc9b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641de339-93a1-445e-b7f1-1c97a5344a68", "sighting_of_ref": "indicator--b6e6ebf1-3f50-4080-8da4-07ebe428bc9b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd5679d-b44d-46d0-ba79-0a826e11131b", "sighting_of_ref": "indicator--b6e6ebf1-3f50-4080-8da4-07ebe428bc9b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84c04f8-0778-4ff3-95ca-7e191f22e7ab", "sighting_of_ref": "indicator--5ee370d9-e13f-4329-9c40-21c0893992a7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f267a364-7cec-4c19-8ee1-41a6ce39311a", "sighting_of_ref": "indicator--40a4f01e-877d-4f66-be09-20b05a4fdc11", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568c5606-3b28-43af-93b2-56ea5ddac4ff", "sighting_of_ref": "indicator--40a4f01e-877d-4f66-be09-20b05a4fdc11", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c6166b-3512-4721-9138-8efc6d57ff6c", "sighting_of_ref": "indicator--4d298c80-7781-4c02-b5a8-22ec404eb640", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27183ba6-d4e6-4c76-bdba-af715812d393", "sighting_of_ref": "indicator--a4c3af26-e9bc-4ffd-a74f-b19caf8cbbdb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e415d3-2095-43ec-80d0-cc046a3d7cd3", "sighting_of_ref": "indicator--6a6abfd4-abaf-4350-ad56-10d6c4cc068f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f51dc48-f9e1-4793-a3ba-0b77da283569", "sighting_of_ref": "indicator--6a6abfd4-abaf-4350-ad56-10d6c4cc068f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e955d5-d6a6-4fec-8b99-fa77b4dc32c8", "sighting_of_ref": "indicator--bcdf92d6-8209-46f5-898c-79c86bf20a2a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d80a5d-9ca7-40e1-bca1-3d3ebf936461", "sighting_of_ref": "indicator--bcdf92d6-8209-46f5-898c-79c86bf20a2a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d2d9a5-6209-4df9-9ce1-e73f5d22f0a0", "sighting_of_ref": "indicator--bcdf92d6-8209-46f5-898c-79c86bf20a2a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f578dc4b-acf0-4d56-8832-732343afb00b", "sighting_of_ref": "indicator--9e3d3ce0-567e-4f5c-a030-ff695be2713b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d631f354-2496-4bdb-9330-378830bb89de", "sighting_of_ref": "indicator--9e3d3ce0-567e-4f5c-a030-ff695be2713b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927e8739-6970-43bd-a0c3-b3a7e771b482", "sighting_of_ref": "indicator--3e099eee-246f-4c76-998d-9c5bd16ec8e1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e348cf2d-21e7-45d7-8c47-2ead3addf846", "sighting_of_ref": "indicator--3e099eee-246f-4c76-998d-9c5bd16ec8e1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c1f19b-bc7e-4044-a750-eb1ffa838bec", "sighting_of_ref": "indicator--046ff516-4f7d-4394-8d92-a1bfe470a787", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdae1779-d3e5-4b9f-82ee-ddbfae2af463", "sighting_of_ref": "indicator--046ff516-4f7d-4394-8d92-a1bfe470a787", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d99b1a8-00fb-4244-ac84-182a295d3423", "sighting_of_ref": "indicator--046ff516-4f7d-4394-8d92-a1bfe470a787", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8f4f3b-f24f-4d20-8970-29a2ea2b5aca", "sighting_of_ref": "indicator--b8382f4e-291b-4062-b328-7aea73feca35", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc516f5-41ed-465b-bd20-5bbf81def5d6", "sighting_of_ref": "indicator--40035fe1-92a7-47b8-b06f-63a6e76376a5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--974413d0-64e8-445f-833f-cd62eec72d5a", "sighting_of_ref": "indicator--40035fe1-92a7-47b8-b06f-63a6e76376a5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f43bf7-8b2f-48eb-9d7b-c7af8d03bdfe", "sighting_of_ref": "indicator--40035fe1-92a7-47b8-b06f-63a6e76376a5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32dffba-e9b0-460a-a430-0993e97a458d", "sighting_of_ref": "indicator--6f856332-e0d6-444a-8e51-242edb6415bc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f71ad2-6f48-48c3-9b2a-477ef8b019df", "sighting_of_ref": "indicator--01f13e6f-b3ae-4116-908a-76a5824e9b1b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f064e7e-3e27-40a9-887f-025dbd3ea687", "sighting_of_ref": "indicator--ae17f39d-ddfa-4807-8044-bc99e54dc93b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e47aa3-056a-4b36-b0dc-f6078fa50581", "sighting_of_ref": "indicator--c31ab3b5-fe93-40ee-ba04-881df6d1c406", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79231ce-53e0-4d45-ac05-e90e548efba8", "sighting_of_ref": "indicator--6e43518b-b759-4524-a02f-fc67ec5007e4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2435cb-b06e-42b0-98aa-a4e31636b7f8", "sighting_of_ref": "indicator--363299e3-d809-4127-be58-2ea0fdc57810", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5292a60d-2970-4c68-9bba-92c556085bb4", "sighting_of_ref": "indicator--363299e3-d809-4127-be58-2ea0fdc57810", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6f2a0f-898a-4cda-b446-853f4beec81e", "sighting_of_ref": "indicator--363299e3-d809-4127-be58-2ea0fdc57810", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13517b30-28ee-4764-8786-70177e96b98a", "sighting_of_ref": "indicator--ad241b84-4538-47cb-ab83-6680d063e8d1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fff6544-157f-4ae3-8a6a-69ff2225d09b", "sighting_of_ref": "indicator--e87e2d43-2363-4e29-af85-66564c3e7ba9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80bbd52d-7590-4299-9cc3-1694071ab214", "sighting_of_ref": "indicator--e87e2d43-2363-4e29-af85-66564c3e7ba9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aaa9b2d-ff08-422d-a009-ef6f8c7661c2", "sighting_of_ref": "indicator--e87e2d43-2363-4e29-af85-66564c3e7ba9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b659526-ec6a-432e-b6c4-d19b5e20483a", "sighting_of_ref": "indicator--856b46ee-d12f-41df-9309-813232c22c46", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11ef0f2-3f8b-4692-a8ce-a4d2686d6c1f", "sighting_of_ref": "indicator--0142b233-ce91-4a89-acc3-6c43c02e137e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90529f34-33c1-4427-aa40-913e9c21db52", "sighting_of_ref": "indicator--0142b233-ce91-4a89-acc3-6c43c02e137e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e663af-796e-43f7-b1ea-339e0b2e07a0", "sighting_of_ref": "indicator--0142b233-ce91-4a89-acc3-6c43c02e137e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec3dab8-8f1d-42c5-b9b4-9978f261de6a", "sighting_of_ref": "indicator--b7f08df1-ef5e-493d-854c-ca1809239865", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec998b63-fe08-4b66-9b72-23d94e88170b", "sighting_of_ref": "indicator--b7f08df1-ef5e-493d-854c-ca1809239865", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed0080b-31fa-4d93-ac63-67ea9c90c42d", "sighting_of_ref": "indicator--b7f08df1-ef5e-493d-854c-ca1809239865", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91efc5b-7f79-4a77-ba10-e81491575d07", "sighting_of_ref": "indicator--89ac7335-3fd4-419b-bed6-4dd8a29127bf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1562872-b5ef-4a5d-a2b3-d2b34e22abb0", "sighting_of_ref": "indicator--0b8a778c-26f8-4982-bde3-77ba8e8b0cb2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f10233-ec3f-454f-883d-12aba36bc290", "sighting_of_ref": "indicator--d2f963db-0b31-4739-82a1-176af08b8ff0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabd0809-4538-4617-b34d-759a636e4f9c", "sighting_of_ref": "indicator--d2f963db-0b31-4739-82a1-176af08b8ff0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602af899-d4e8-4b22-b571-ba846f39c945", "sighting_of_ref": "indicator--d2f963db-0b31-4739-82a1-176af08b8ff0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86f8772-dee8-437c-8a23-bcfb938d8412", "sighting_of_ref": "indicator--a6d1ace2-706d-4af1-a6f2-676533af7f05", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1731e480-9af6-4dbb-b2b8-291c41d839e4", "sighting_of_ref": "indicator--a6d1ace2-706d-4af1-a6f2-676533af7f05", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f69cba-c336-4d80-85e5-68e678bc1057", "sighting_of_ref": "indicator--a6d1ace2-706d-4af1-a6f2-676533af7f05", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc875cd8-ea82-4ccf-8d74-d7b19208af3b", "sighting_of_ref": "indicator--812d1758-c65f-4c76-83aa-39f2a8844f4c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4062213e-441a-47d8-bdac-6620bd4c63c9", "sighting_of_ref": "indicator--812d1758-c65f-4c76-83aa-39f2a8844f4c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c083a9b-ef87-4cca-a7c5-f918deba4193", "sighting_of_ref": "indicator--812d1758-c65f-4c76-83aa-39f2a8844f4c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9feec5e2-a2fc-475a-95f1-eba857ca1dc1", "sighting_of_ref": "indicator--1060ad1c-259b-4aa5-99f9-8c2e03519e26", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da253cb6-b021-48c6-a040-0c0549272151", "sighting_of_ref": "indicator--09ee9589-dba9-45cc-9150-133e025fff93", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be9fc00-863a-4850-92d3-0ceeaf317b12", "sighting_of_ref": "indicator--8cd9b121-765e-4a94-9a5f-c12ebec604d2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7950c0c8-9d62-4326-b9ac-dedf7172db7c", "sighting_of_ref": "indicator--9207a46b-72d2-455c-8065-a1bf13ae63db", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dadcba2c-deb3-49c4-b5f3-8b4bf58c060e", "sighting_of_ref": "indicator--d275e27f-a362-4887-b623-ae5a841e9368", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b3e40a-2ae4-4dd5-8754-636ffe4eb7a2", "sighting_of_ref": "indicator--1e6943c0-54c7-4632-8983-f6a8bdc90e8d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ea0aa2-34f6-4865-b68c-6991fe206fa5", "sighting_of_ref": "indicator--1e6943c0-54c7-4632-8983-f6a8bdc90e8d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174d3878-7a74-483c-b230-c78a85f20c72", "sighting_of_ref": "indicator--4bd4b66c-98e0-4c89-ae8e-bab77bfbef71", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbdc34af-22a5-48ea-a2df-0ab2005a375b", "sighting_of_ref": "indicator--6e7c2b01-b36f-454a-a178-845847ff9993", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f08bb8d-78d4-4e4f-a094-1741c91f3d0e", "sighting_of_ref": "indicator--fb9272a2-5432-4420-8fde-174608219755", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd73dc0-8dea-4472-ac6b-2fae93c31360", "sighting_of_ref": "indicator--fb9272a2-5432-4420-8fde-174608219755", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65843761-c0ea-4d6f-9950-2c6f8a4c1e53", "sighting_of_ref": "indicator--11c3a7f1-c871-41d1-94eb-71793f3ea34c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--166f94df-3a47-4c09-b298-ada0bf46b1ea", "sighting_of_ref": "indicator--cbd50a87-4760-44ab-98c5-5f973962a91a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2344a075-3a78-4236-b0d4-899d5695395e", "sighting_of_ref": "indicator--94826832-9b67-4282-bf72-396818c7a020", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9917b2fb-9f86-49ea-9465-14bb01e45e73", "sighting_of_ref": "indicator--29b21120-e495-4f21-9763-2e14460eed77", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3e36a8-a7be-4211-94d6-2d70d4f112f9", "sighting_of_ref": "indicator--29b21120-e495-4f21-9763-2e14460eed77", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20bfd8d3-7eea-4953-a390-74f98a07782f", "sighting_of_ref": "indicator--575144d4-4bc5-4b49-8d2c-cca5fb6c9e1d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd23f563-bd9d-41f5-a282-9ad12fb14ecd", "sighting_of_ref": "indicator--575144d4-4bc5-4b49-8d2c-cca5fb6c9e1d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211d3951-3bf7-4908-ad10-8ee953db759b", "sighting_of_ref": "indicator--d63cae1f-e556-4725-9746-073cf3f31db0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351510e6-5764-41c7-8864-42b1c7d7e9ab", "sighting_of_ref": "indicator--d63cae1f-e556-4725-9746-073cf3f31db0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8263e485-fe20-4f20-b86f-4d6f3c71c4b0", "sighting_of_ref": "indicator--0192daa2-9e88-4c25-b00e-2b387420bc91", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de870620-cb31-4cf5-a61a-2cc879864cc2", "sighting_of_ref": "indicator--0192daa2-9e88-4c25-b00e-2b387420bc91", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80fdae81-0f3e-451d-b06c-88ebb206ce57", "sighting_of_ref": "indicator--0192daa2-9e88-4c25-b00e-2b387420bc91", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e651b7f4-7f8d-4ed7-b0c3-0c1b4b21903b", "sighting_of_ref": "indicator--3f4b6305-ad23-4f5f-833c-44be69aaa539", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f8cf86-0a38-4c51-85ae-11863dbbcc4e", "sighting_of_ref": "indicator--3f4b6305-ad23-4f5f-833c-44be69aaa539", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f68a29-058e-4eda-a3a2-76e3dbf7a730", "sighting_of_ref": "indicator--3f4b6305-ad23-4f5f-833c-44be69aaa539", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b739e3-bdc2-4595-9048-b35cd9c97504", "sighting_of_ref": "indicator--18573f91-5511-40bf-9141-a8b493827e18", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02ddc51-908c-440a-b4fd-1680d36621a4", "sighting_of_ref": "indicator--18573f91-5511-40bf-9141-a8b493827e18", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54e2a7c-b3f7-4945-929f-357f6c4b32c5", "sighting_of_ref": "indicator--18573f91-5511-40bf-9141-a8b493827e18", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c921dc5b-3ce9-40f8-ac1a-210c0b454d27", "sighting_of_ref": "indicator--7ade99f8-1e2d-4cc2-ae8d-e8c532eef262", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d041fe9f-3e03-448c-94ea-8cefb6e5277d", "sighting_of_ref": "indicator--7ade99f8-1e2d-4cc2-ae8d-e8c532eef262", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a030aa-4daf-4d07-8d38-eea39ed6f3df", "sighting_of_ref": "indicator--7ade99f8-1e2d-4cc2-ae8d-e8c532eef262", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179b7114-a303-402a-9a10-8613f76d6454", "sighting_of_ref": "indicator--fa2c05a5-8338-4dc2-bb89-13455eeb22a3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117b6e94-5928-4250-8756-555d239fbad7", "sighting_of_ref": "indicator--b68994bc-05dd-4593-9fc3-8a2d6d4214ae", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2feba441-b4d2-48ee-ad56-49c2cffb277d", "sighting_of_ref": "indicator--b68994bc-05dd-4593-9fc3-8a2d6d4214ae", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db83627b-aa91-4aef-8a25-4ff0a2486f84", "sighting_of_ref": "indicator--10c460f0-1c98-4d2d-afd4-76d3b9ffe571", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10909b95-c3e5-40c2-a828-784013e0450d", "sighting_of_ref": "indicator--4dce203c-6009-4683-87a2-4e6b287806bd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59798a2d-61a5-4cc3-963b-8f21541d4482", "sighting_of_ref": "indicator--4dce203c-6009-4683-87a2-4e6b287806bd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e630b079-8dd4-4ea8-ba3a-7b003aac3a4f", "sighting_of_ref": "indicator--2a4da10e-2d6c-4fd3-86ba-07d4e6201d3e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdb2932-a739-44d4-9b0b-2016d45902be", "sighting_of_ref": "indicator--f12dc195-a3c5-44dd-9f0a-d9b79066135e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c0bdc5-6658-40aa-a889-69167f0eaf3e", "sighting_of_ref": "indicator--f12dc195-a3c5-44dd-9f0a-d9b79066135e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa4fd0d-c066-4b93-b5d7-7bd7ac28f842", "sighting_of_ref": "indicator--04c0655e-27f7-49ed-a998-497941e2954f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d57c35-ae46-45d1-8c6f-a859587233f1", "sighting_of_ref": "indicator--dbef2ddf-3888-4cf1-a911-f7c3655115c7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3209a4-240c-484f-a37b-5ce453f54295", "sighting_of_ref": "indicator--53a6b3b6-1cb2-4dcf-acee-ea504954d742", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee002ac-ceef-436f-9d58-0866591df04b", "sighting_of_ref": "indicator--b97adc11-7103-4cb0-891e-79acc377a917", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1d13f6-8890-4fe7-b1b7-4b4dfbe6a22f", "sighting_of_ref": "indicator--01244412-51e9-4015-8920-a1fc9fb51345", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b50e0ab-15d4-4e46-8e4b-c25645b4cb49", "sighting_of_ref": "indicator--948d0a95-6bd5-4120-b02e-803278702f31", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0af66f-b92b-4119-a390-e448e0feeee6", "sighting_of_ref": "indicator--3ffcb880-16e6-487e-9272-bc41f0ce0cf4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c3fb62-954e-4871-a932-35dc080041c2", "sighting_of_ref": "indicator--bd84846a-aabb-44f4-96ec-054016dff9a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b09e84-b379-4ff6-80c8-e924869b801b", "sighting_of_ref": "indicator--26145e6d-9484-4235-863f-2f68051a0135", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc32077b-b98e-43aa-af27-79e8821ee630", "sighting_of_ref": "indicator--11cccbbb-a742-43eb-b24b-90889278ee45", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80c0eb9-6a6e-4ab1-92cb-0b396194ba72", "sighting_of_ref": "indicator--e464de50-063f-4821-a02f-ac307bf10139", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f062f1-b5db-4717-bc68-dd4210c2f9d9", "sighting_of_ref": "indicator--a0c846b0-8865-44fa-af77-366276529cbd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24231ef-0804-4197-924c-131fbe2637d3", "sighting_of_ref": "indicator--b1495b80-9028-4167-8d5e-99adaf93e64e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a822b9bf-53c5-4bd4-926f-8e5c0d3f1bea", "sighting_of_ref": "indicator--3f9673fa-e4cd-4ee8-897e-d148901cb79e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ff8946-d511-41d0-9058-fe67a0a61ccb", "sighting_of_ref": "indicator--c8bffe48-b160-4c6d-a52f-3dcfda62d905", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d86d4a-df3d-4185-8252-e9ffdfa7845f", "sighting_of_ref": "indicator--01a10589-3243-48c8-ac21-0bbacd5a0dfd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5313427-0fe4-4cbb-80de-75e1a28de687", "sighting_of_ref": "indicator--7570633e-0b45-4de7-b11c-534a2550c130", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400c6d27-fec1-4751-ab8d-39e994a5c18b", "sighting_of_ref": "indicator--b76515f0-9d37-4bea-9873-4d45ab940bce", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c1cf2d-1047-4e04-8fb2-259e4dd8cb9d", "sighting_of_ref": "indicator--b76515f0-9d37-4bea-9873-4d45ab940bce", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50158c72-bb3a-4750-84f4-1de2b505ce86", "sighting_of_ref": "indicator--8f16e0a8-1e13-4761-b6c0-d5851597c404", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e7b034-748c-44ae-9492-06f6c11aff1a", "sighting_of_ref": "indicator--47678829-da15-42b2-bb02-51d9068184d8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f1f755-3447-4fab-8e96-7f093680301e", "sighting_of_ref": "indicator--18e1e3fa-ba06-4ad6-b330-e8dd7850267d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e17cb7-3a05-487b-917c-53277109dd72", "sighting_of_ref": "indicator--656f1598-1ba1-4173-b70a-45e58e834a6c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105c20ba-e5f4-404a-be0e-207d9411445c", "sighting_of_ref": "indicator--656f1598-1ba1-4173-b70a-45e58e834a6c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001dd47d-b0d2-4188-b093-b8e13d44b456", "sighting_of_ref": "indicator--a075ffef-82cd-4f07-bff4-8c37dc009b03", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b496c3-3000-475a-b062-40a749c67624", "sighting_of_ref": "indicator--bc83312a-c1fb-40d2-9e1b-80f0d8faa70b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f37b55b-d410-4229-82f2-99633b6922fa", "sighting_of_ref": "indicator--b8a1eabe-492d-45d3-8ab6-4c5a4d4d7702", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bebddf9b-afed-45b2-a342-71bae317bc12", "sighting_of_ref": "indicator--b521dcbd-2043-4460-a452-31b6ae2fc81f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200cc813-0864-463a-8a86-03cfd8f4774d", "sighting_of_ref": "indicator--0f3278a5-87d1-4477-88db-b09143ffbf3f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5123e72b-dd35-450d-9227-e26332bedd64", "sighting_of_ref": "indicator--979d4dce-87af-44e7-8b4e-7d4fa35e346c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13db3a3-95be-4a6b-834c-4e9a8f41ef21", "sighting_of_ref": "indicator--95035739-5ab1-44b0-ae9e-405328e461da", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f2aeec-2183-4ede-964e-100d71299586", "sighting_of_ref": "indicator--12d3f587-ba7c-4983-ae17-8b01c9552302", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4496c98c-3ffd-467c-98b2-9ef10b038561", "sighting_of_ref": "indicator--38202ab3-9e1f-415f-9fed-b397d7c289a6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb00469-9f1e-45a8-aea0-13100f2dc4f8", "sighting_of_ref": "indicator--be6eb768-57c9-4bb8-9955-9cc23b33e04c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edfa1a74-a601-4862-bb5e-d7b71ed3d67d", "sighting_of_ref": "indicator--f8062aa8-e01a-480b-9e35-64ce01d9dbc0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793f7a57-c97e-4851-aa75-d038732693ec", "sighting_of_ref": "indicator--79896210-dbe9-4214-8fa1-f35696de972c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faab6ea3-6181-406f-9852-9e37fe69f752", "sighting_of_ref": "indicator--14037b9d-d6ed-48fb-959c-9779d91c775b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4a76a0-8de9-43a2-a3bc-d9e463a43cb2", "sighting_of_ref": "indicator--36d189bb-91ab-468c-a400-c9acb142a0a7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ade43ba-7562-4d9e-a299-ac7c0a9bc6c6", "sighting_of_ref": "indicator--3fa3e1d0-78eb-44e3-b3b4-af0792145b92", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51aaead3-22ea-4c0c-8589-8dd1978dd04f", "sighting_of_ref": "indicator--c8efb49c-1aa0-44d1-904e-090c46df0f7b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc405c5-38d1-4ed3-aa74-2c05b45365c8", "sighting_of_ref": "indicator--913b9c21-063c-4b9d-bcde-6c23c9d72ef6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d54e75-58f8-4695-a810-b02d7f4d7418", "sighting_of_ref": "indicator--dfce20dd-f1cd-41c5-bd2e-46f825822037", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99d38cd-626b-42db-bceb-c147f659f887", "sighting_of_ref": "indicator--80a3b7ba-e884-4e1d-a090-02b332514ae4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1770cd7b-ab3d-495a-9c55-3025340f064e", "sighting_of_ref": "indicator--d7e8722d-09d0-4182-aa7f-00c5d398a1eb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ff5fdd-ec3d-48e8-b29c-8094b302bffd", "sighting_of_ref": "indicator--f3778cd1-9341-45b3-b906-cd92aaf13c07", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d7d1f7-1084-4a43-bf59-ee5b363679ae", "sighting_of_ref": "indicator--79559360-48bf-42d4-a8de-26d69554477c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10233544-b465-4f50-b3e4-7e69ab27c5d8", "sighting_of_ref": "indicator--329adb43-e078-4b6b-be8c-cacbe7e6eccc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc72ae2a-84a8-49f9-aec5-6b81b51fda1a", "sighting_of_ref": "indicator--9250ee31-d200-4e40-92c2-1c49d89c7db4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c0ea23-92da-429b-938c-341294abec02", "sighting_of_ref": "indicator--bc0b4d13-5c90-4142-b27c-ebe63a8013f0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbef9eb-2fe8-4b6f-ab70-6ba270ef6e40", "sighting_of_ref": "indicator--6627c1d1-7d8d-42c2-bbe7-049c1cb2a4c5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46ed753-b189-4b51-aff8-38c6be07604b", "sighting_of_ref": "indicator--52260fb7-9a6f-4cff-9ddd-4caa9ab73113", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eba1527-61b6-40ee-9596-6a30f8d9933f", "sighting_of_ref": "indicator--c27b9207-44bd-4722-a34f-b329981a83be", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6449f0-56d6-40c4-bb07-ba29d9351319", "sighting_of_ref": "indicator--4681be96-c696-4c15-9ef6-67920ae11880", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d216a0-c436-4a4f-945e-3971740e6780", "sighting_of_ref": "indicator--b468cfcb-3b8b-4c97-8ed1-da42463b769d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13973dc4-63a9-47bc-9b31-da98cb80c3bc", "sighting_of_ref": "indicator--1c8266ec-7a82-4057-ae8d-c5834e286716", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc9b170-5a48-49f5-9745-60c35c51b51e", "sighting_of_ref": "indicator--01a77e0f-7236-40bf-853b-5cdff31848aa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66bac87-90e1-4309-ad08-2d551662cfb6", "sighting_of_ref": "indicator--dfd21237-f6bf-411a-8615-95e5e49940c1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2692ec61-f7ed-410f-afc2-dc8d0197c51a", "sighting_of_ref": "indicator--87075e10-3f9b-4df0-b279-b1d4bebcd50a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec54f86-6b8b-4ff0-95f1-4f1e50ced258", "sighting_of_ref": "indicator--9a31eeae-df09-46dc-ab32-fe1aae624581", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89639ba1-71d6-482c-aa84-6a62baa1724a", "sighting_of_ref": "indicator--cc800b4b-1278-4fe9-8815-49cddf3d8d5d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5474f5-82de-4e56-99df-5e1928160165", "sighting_of_ref": "indicator--764f9a6d-80c5-4f11-a14b-fa500a511ba9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6428e7-cd17-496b-8aac-078046341062", "sighting_of_ref": "indicator--1e799150-7150-4f3e-816f-a2e6d1f6db3e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200a45d6-93e3-4e0b-a96a-762b757e1879", "sighting_of_ref": "indicator--82474561-c1db-4a6a-9861-76d0eebb68c5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84039668-15bc-4e07-93eb-ef4335129cec", "sighting_of_ref": "indicator--43139d55-7317-44b5-a948-b7866c07ad5b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c5b7da-d61b-4c79-9df0-ed618b6008c8", "sighting_of_ref": "indicator--9fd21a66-0440-450c-a107-06334d82a9cb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd537c8-f5d9-4a82-a417-0c0f97061677", "sighting_of_ref": "indicator--c794d9c6-0bb3-430a-bfa2-a9a07234adb3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e478150e-28f9-4c3b-adc6-c6e664de3762", "sighting_of_ref": "indicator--1a2e4f43-29f3-47d8-b30b-5f3a15908797", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d076e042-7206-4119-b180-e8efa6b70ab8", "sighting_of_ref": "indicator--d8e9f705-5d66-4a6c-a5f3-34370189b1ef", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a5282e-3522-4e22-a0da-013cd1490b8a", "sighting_of_ref": "indicator--ff4b73b8-41e4-4021-85c6-3dbb38b32765", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af78e0e-a4ba-4c22-9c87-d52a65ea577f", "sighting_of_ref": "indicator--89d22693-5f30-4e08-975f-ab38679128a9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--618519f2-2455-43dc-85c2-e114c195966a", "sighting_of_ref": "indicator--c615a8b0-e2f6-430e-a575-3f65c237f722", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fd781f-e652-47c1-8dba-8c6156f00519", "sighting_of_ref": "indicator--4872f5c5-5efb-4cb1-bdbc-230c41ce80a1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d3f196-6c23-4511-8ee9-e2133b9c0809", "sighting_of_ref": "indicator--b9c53232-9a42-4e3f-a150-587619e2eb22", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908ce9cf-b2c0-44a0-b1ac-d4c4c63a9b7c", "sighting_of_ref": "indicator--b00270dc-e708-4489-ae3a-6f0eaec38808", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b29ac88-a7b2-4da2-88bb-f2ead3b8aed7", "sighting_of_ref": "indicator--335cfeb2-ce09-4ef5-80e9-8c52e96cf664", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0984e627-e95e-40e6-8d3c-94f9b739083e", "sighting_of_ref": "indicator--f1254b45-478e-4dde-8bce-5627ca02923c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55251608-d5eb-4621-b4ee-e21ab73aee7d", "sighting_of_ref": "indicator--81d4ffef-989b-4a3c-9be1-5afefce129da", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75af3110-9359-431c-adfe-f28639054f1e", "sighting_of_ref": "indicator--2a35781a-5eba-46c9-88ff-933e9db16475", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5e41b6-2385-4a18-8caf-9bd33b723852", "sighting_of_ref": "indicator--474bc111-28e6-4671-ad56-fda16e349ff2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400a3007-2ca3-4079-8c67-7ae1bc5af4a1", "sighting_of_ref": "indicator--18a023ae-cda0-482e-942a-6e253768e75e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b694a0-77d0-4473-aaa2-2c17447d2e81", "sighting_of_ref": "indicator--18a023ae-cda0-482e-942a-6e253768e75e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1a0466-d25f-43a1-b3dd-13a1dd0d567a", "sighting_of_ref": "indicator--18a023ae-cda0-482e-942a-6e253768e75e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4fef41-9643-484c-a40a-a7cc403eadb8", "sighting_of_ref": "indicator--03e6ede1-1b31-41ae-99d7-a0f80f6a920c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eee4f1e-099d-4134-8f36-96d89c9c755d", "sighting_of_ref": "indicator--626818b4-7160-42e5-a578-7796cc8c656a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92caa49-13e1-4fad-866c-3a6d3304bdb2", "sighting_of_ref": "indicator--6b169e22-b46c-43cd-8beb-85e9c6b9c8dd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ed6ca6-524c-4e86-9058-ec66766d9238", "sighting_of_ref": "indicator--6b169e22-b46c-43cd-8beb-85e9c6b9c8dd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--982df71b-935d-4aec-899d-7b26ab732dde", "sighting_of_ref": "indicator--6b169e22-b46c-43cd-8beb-85e9c6b9c8dd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e492bc-6a1e-4c6a-b36e-7469e50d2b91", "sighting_of_ref": "indicator--7b6f7b6c-4322-470e-92d7-d384dcff3c2b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e07d27a-de26-45b2-928d-74a1822ac8e6", "sighting_of_ref": "indicator--7b6f7b6c-4322-470e-92d7-d384dcff3c2b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07dec6f9-7425-4a37-9943-5fa73192ec28", "sighting_of_ref": "indicator--7b6f7b6c-4322-470e-92d7-d384dcff3c2b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb6a334-8874-467e-bb48-9261b6bf015c", "sighting_of_ref": "indicator--a47d1da5-db33-446e-a560-5b5a2ae47ec9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51204a95-5c22-4f29-8eb3-612f9c52544c", "sighting_of_ref": "indicator--6fd6efd5-3bc2-4242-b946-3c3da37e3224", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7edb66c-8faa-4499-995c-73fd411f11c4", "sighting_of_ref": "indicator--6fd6efd5-3bc2-4242-b946-3c3da37e3224", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72200e50-297d-4c4e-806f-cdd0d9a97e9b", "sighting_of_ref": "indicator--6fd6efd5-3bc2-4242-b946-3c3da37e3224", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db58286-c2a9-445e-b6b4-7727d1c98eea", "sighting_of_ref": "indicator--f012cb4e-c7a6-4713-8718-0e0e399c5076", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa70a2a-5e69-4305-b0bf-e5cfd5e35adf", "sighting_of_ref": "indicator--90862559-b310-49e4-b246-3b84087a0c6c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c93c95-02f5-4b76-80f0-7f0852820874", "sighting_of_ref": "indicator--dfa81686-db9c-47bc-9ed4-85946b49fc01", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdb5668-4719-41b0-a307-a103626b77cf", "sighting_of_ref": "indicator--1a491dda-6149-40bb-840b-e25494aaa802", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df733770-dc7a-4c1b-9773-a476d5e0ce68", "sighting_of_ref": "indicator--1a491dda-6149-40bb-840b-e25494aaa802", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e6b2f59-2e38-444e-908a-66101a3fde0a", "sighting_of_ref": "indicator--1a491dda-6149-40bb-840b-e25494aaa802", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe3f46a-aad6-4317-aedf-f3df6c6afa38", "sighting_of_ref": "indicator--19aea5eb-7a73-4442-b21e-6a738baccbc9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed9e71a-2ae7-436e-b58a-0809bd4bb114", "sighting_of_ref": "indicator--2bb6dd3f-66d2-48f8-adc1-15dbe3099e76", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ab221b-8cd2-438b-874a-374a0dc9ae2d", "sighting_of_ref": "indicator--47fafea1-49a2-46ba-9a71-d9a3fff3376b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc604e45-625f-4924-80b2-a9086527ac2e", "sighting_of_ref": "indicator--3f284d86-aee3-4259-835e-69414fefd003", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb6740d-af95-4ae9-9567-311cdc1019e3", "sighting_of_ref": "indicator--d1f34266-014c-4dda-85f9-edd8c0621a01", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2927c0a-5d82-4b65-b53d-17a54bff1266", "sighting_of_ref": "indicator--7de3013c-fd6a-4840-a694-49fc648ce646", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875b7a5e-72b3-4f6b-9de9-8ef7ed4e1128", "sighting_of_ref": "indicator--7de3013c-fd6a-4840-a694-49fc648ce646", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5aa794f-234b-4c58-a080-8d0928be3edf", "sighting_of_ref": "indicator--7de3013c-fd6a-4840-a694-49fc648ce646", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542aad4d-68e1-407d-b6a8-b7539a729d69", "sighting_of_ref": "indicator--81c3172d-4433-4166-8990-ad8b896a43e7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ccd2375-65ef-4cb7-ba3d-8f33aaa34144", "sighting_of_ref": "indicator--bb376934-2506-45aa-8b0a-bd93d4fbfe8f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb1d7b0-6b7d-400b-9eee-71836b665eda", "sighting_of_ref": "indicator--ad84ffab-17c1-45fe-a162-0d9aecbba0ba", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a477aa-f822-4d7c-92f9-9d8a8197edd7", "sighting_of_ref": "indicator--fcf3ef95-432c-4b5e-aae2-a9b6b336a684", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b54448-84c1-4ef4-841c-053866343921", "sighting_of_ref": "indicator--d36a3f09-5aa8-4616-b8f1-da4a8842a742", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ea98e8-b4f2-4265-b1c3-a37039972757", "sighting_of_ref": "indicator--e9385691-a8d8-4b2a-8954-a28b0113e278", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99b0e5f-6aa0-4304-ac12-67aad374aaf5", "sighting_of_ref": "indicator--e497e4f0-9896-496b-b0eb-81ec185b5022", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87bd41b5-cd18-4be0-ba6a-fe79e33be7fc", "sighting_of_ref": "indicator--03d436e0-bb38-47cc-897c-a7505367b6da", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe7aa5e-5cda-4136-8bc7-3a1386f86027", "sighting_of_ref": "indicator--b154ae43-c938-4b5c-9e88-63340d1f6222", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a60f6b-4a92-4de9-8f57-28e8c16de0e2", "sighting_of_ref": "indicator--91e496fb-167f-4da7-8fc4-9731272c50ec", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09a7c52-fe0f-47f4-a2d9-cf52655cd633", "sighting_of_ref": "indicator--c8d3c054-22a1-414d-8031-f3e280e387a9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1286e8de-05bc-44dc-8d50-62125cc68fce", "sighting_of_ref": "indicator--8e574421-ac11-4107-8870-f6bc29198481", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb4a1e6-35dd-4657-a3ab-adf0655eeb8a", "sighting_of_ref": "indicator--9e90fbd6-e6ef-46ec-b595-3624e41d18cd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eaad5d2-5040-4420-a9c3-b1857e81add0", "sighting_of_ref": "indicator--e1f44b12-3dc8-4799-80c2-e397e7be74da", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9b110d-1353-4186-a939-f92fc6de7188", "sighting_of_ref": "indicator--75a07f67-0a3a-4ac0-858b-38da94007f54", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4a6728-3485-4273-a15a-527fea1976cc", "sighting_of_ref": "indicator--5cd76834-e52c-4bf1-be86-660924a475bf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2fb46f7-9dbb-400e-894f-d1604b13731e", "sighting_of_ref": "indicator--29564c30-216c-4704-83a2-784563a7cac1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de6706d-a7ec-4f77-a09a-f31f39d117e0", "sighting_of_ref": "indicator--17a88440-fb85-4706-a2f3-24b13481baa7", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9428ae-fe66-41dd-b1a6-f78c1492b4f5", "sighting_of_ref": "indicator--57b54a4f-fe67-4559-87e2-2ef14d6bc1c3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432f3b44-f12e-4873-b556-3abdbf847581", "sighting_of_ref": "indicator--537f3942-fad7-4ad5-b719-5261a765070c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00df55e-af91-4b27-80bf-442c8fa237bf", "sighting_of_ref": "indicator--537f3942-fad7-4ad5-b719-5261a765070c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896304ef-5af2-4a47-afaa-f226057be3a4", "sighting_of_ref": "indicator--537f3942-fad7-4ad5-b719-5261a765070c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--425b0472-cb9a-4a77-a3a1-b42ae088498c", "sighting_of_ref": "indicator--16f3e4b2-0a44-49a0-a5aa-96976737d8ac", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154b008a-e41a-4a9f-bfa0-a72b334c6bd1", "sighting_of_ref": "indicator--16f3e4b2-0a44-49a0-a5aa-96976737d8ac", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d340f72-6e5a-496b-b23d-420488898136", "sighting_of_ref": "indicator--16f3e4b2-0a44-49a0-a5aa-96976737d8ac", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8086976-a9f0-4216-9261-a8072cff2269", "sighting_of_ref": "indicator--c3c0597b-1386-4df3-bef7-ee00c320d08f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8563b561-51b2-49be-b730-8df546245a9e", "sighting_of_ref": "indicator--08e45716-ca0c-4fca-a3f0-00763b4283ba", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ffc2bc1-ba37-4a23-bac3-3d57a1f6bb88", "sighting_of_ref": "indicator--08e45716-ca0c-4fca-a3f0-00763b4283ba", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfc9802-f106-44cc-842d-8660dd8ccabd", "sighting_of_ref": "indicator--08e45716-ca0c-4fca-a3f0-00763b4283ba", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ced945-251d-41a5-878d-0b75ecc8c5e0", "sighting_of_ref": "indicator--a0d127b7-d118-4cb1-b1be-e50f4cfa2815", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3710d4fb-bbc1-48b5-99e0-f3f171812f1a", "sighting_of_ref": "indicator--a0d127b7-d118-4cb1-b1be-e50f4cfa2815", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377e940b-9d0f-4fbe-b640-b54beb906f3b", "sighting_of_ref": "indicator--c04e5b52-8828-4e18-adfb-301b450d13cd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06d9bb7-dc04-424c-bc97-4fe6a68fa07b", "sighting_of_ref": "indicator--c04e5b52-8828-4e18-adfb-301b450d13cd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe1d1872-4cba-4dad-bc54-261792e48f7c", "sighting_of_ref": "indicator--c04e5b52-8828-4e18-adfb-301b450d13cd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6b8944-cd17-4436-b272-850988c2630d", "sighting_of_ref": "indicator--44c0fb99-74f9-417f-ab5b-a3fba0b56461", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c94975-6858-4d80-a223-ac89143910ac", "sighting_of_ref": "indicator--44c0fb99-74f9-417f-ab5b-a3fba0b56461", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c5e53d-76ae-45bf-a5e3-808d6c370423", "sighting_of_ref": "indicator--44c0fb99-74f9-417f-ab5b-a3fba0b56461", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edcb5a71-8b48-4838-879c-a260ba04606c", "sighting_of_ref": "indicator--a0e80155-1667-4499-ac01-6d1632e5bb08", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9514b8d-0f95-4a9c-bbf4-2480e501d55e", "sighting_of_ref": "indicator--a0e80155-1667-4499-ac01-6d1632e5bb08", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0ce6e8-4f10-45b0-b7ac-f85ffba70897", "sighting_of_ref": "indicator--a0e80155-1667-4499-ac01-6d1632e5bb08", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a9aa50-3de2-450a-874d-f66f22bcb61e", "sighting_of_ref": "indicator--1024608d-39fd-4def-bc54-5981d6d71671", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d825e6c-fdb1-4559-8ee8-bc24dd911457", "sighting_of_ref": "indicator--1024608d-39fd-4def-bc54-5981d6d71671", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d085b3d-cef0-4ecf-b6f5-d5d0efdb3c12", "sighting_of_ref": "indicator--1024608d-39fd-4def-bc54-5981d6d71671", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6af099d-3b36-4162-bc3a-fe81614eba8b", "sighting_of_ref": "indicator--3c58dedc-8f3a-4edf-aac6-d8be476551d5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c0dce8-6dd4-438c-9791-0ee705f3d4b0", "sighting_of_ref": "indicator--dd9d1966-7eb7-459c-b894-7c0ecb7891c1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97af825e-18b7-408b-bb12-7f853e481c9e", "sighting_of_ref": "indicator--beb60f02-ece2-47c5-896c-7e24cec1be56", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d369f6-14dc-4eba-858a-999af5e56ed8", "sighting_of_ref": "indicator--f76b8880-4bde-4493-b646-1030517218d1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814d2b92-b05f-4532-94b5-2d9b1cf40cad", "sighting_of_ref": "indicator--f76b8880-4bde-4493-b646-1030517218d1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542a0bc0-a39a-46c9-bc84-8b36bc7d41fc", "sighting_of_ref": "indicator--f76b8880-4bde-4493-b646-1030517218d1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670c96f4-3698-4aa0-b3f7-fd22d7d3f9a1", "sighting_of_ref": "indicator--1cf9901f-89ca-4601-90f8-bbbdf5b0a7c2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a583acb9-ad12-4c06-942c-433c59456442", "sighting_of_ref": "indicator--1cf9901f-89ca-4601-90f8-bbbdf5b0a7c2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab6129c-a8e6-4ca6-a500-f08724e0b585", "sighting_of_ref": "indicator--1cf9901f-89ca-4601-90f8-bbbdf5b0a7c2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52eee6e0-9e33-404d-aa22-061cf39e910d", "sighting_of_ref": "indicator--9b2c0120-7324-49ea-aaa2-d2edcc631ba2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf48487-f225-4af9-b20a-87ee050ed02f", "sighting_of_ref": "indicator--7add77ae-8161-4730-8118-a05097122eb9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f155dac-e69c-447d-baf8-0525e6a711ce", "sighting_of_ref": "indicator--7add77ae-8161-4730-8118-a05097122eb9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86c2300-2e49-4a65-834f-a7ceb0997ce8", "sighting_of_ref": "indicator--d38e797f-29c1-4870-a975-f8f045654b64", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622afe39-ca8c-40cf-a086-6ad3ad9c7755", "sighting_of_ref": "indicator--d38e797f-29c1-4870-a975-f8f045654b64", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b9779c-d794-4463-9481-0d7e8dd1aa12", "sighting_of_ref": "indicator--d38e797f-29c1-4870-a975-f8f045654b64", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4155950b-bbfa-4e85-8cc5-881d0cc0a30b", "sighting_of_ref": "indicator--591699a7-6a57-41cd-86ee-e2163c52be74", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aecd7881-adfe-4d54-ac64-13317f4e7d68", "sighting_of_ref": "indicator--591699a7-6a57-41cd-86ee-e2163c52be74", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4e44c5-4b21-486d-a85d-7c24b5534367", "sighting_of_ref": "indicator--591699a7-6a57-41cd-86ee-e2163c52be74", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177be6d2-68a6-418c-a180-c26b00a95bb8", "sighting_of_ref": "indicator--ef17243e-b9f0-4040-af19-85e907cc0e70", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73c2899-f1af-4e32-9eca-e289a802b029", "sighting_of_ref": "indicator--ef17243e-b9f0-4040-af19-85e907cc0e70", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec41daa7-d1a9-4c41-bdb1-43198f2f83fc", "sighting_of_ref": "indicator--d0ba159d-039a-4cf9-9110-111c15b4aaac", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de25b80-2212-45dc-8216-421544cd94ea", "sighting_of_ref": "indicator--e596812d-c82c-4dc9-942e-f8e53df911d3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ce1108-bbb9-4152-9441-2e0806375dab", "sighting_of_ref": "indicator--e596812d-c82c-4dc9-942e-f8e53df911d3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f78d806-a42f-4557-8c81-448e15530394", "sighting_of_ref": "indicator--c53154a0-583b-44c5-9021-a43ecfe6909f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5cc0e2-2d24-4293-93f9-2175fdbb9b2a", "sighting_of_ref": "indicator--697d9ae8-3bbb-427b-a351-7c696cdece0c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0f80ab-968a-4004-aae2-5f4d7fc9a463", "sighting_of_ref": "indicator--88447ebc-fdd7-4755-8912-73675d52f893", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e279e146-1abb-491b-89b6-9ddfc7455efc", "sighting_of_ref": "indicator--bf7afe54-1b1e-45c7-af28-d72d4f03db31", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b6c35a-5df3-4f53-8cbb-5b18e5bedcd5", "sighting_of_ref": "indicator--5dc770b5-7162-493e-b609-9bff5a8dba78", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca5ad11-f6df-42b2-9260-598f12577db3", "sighting_of_ref": "indicator--a11eea35-e348-4b6b-a2ba-3963a1d5bf57", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8edeacb7-5d29-471c-8b89-af502c1f61cf", "sighting_of_ref": "indicator--0f1e6e01-0a0e-4615-99bd-68045a4048ad", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a45b93-c9d5-4922-87d7-574727bfa824", "sighting_of_ref": "indicator--0f1e6e01-0a0e-4615-99bd-68045a4048ad", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ccc4cf-e29e-473a-9cf1-3d40859d4448", "sighting_of_ref": "indicator--0f1e6e01-0a0e-4615-99bd-68045a4048ad", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4f2001-269a-44e0-b21b-439208884ae8", "sighting_of_ref": "indicator--bdd59db9-bc98-4384-a08d-93e2eb50cae5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de45c0d-fb4d-4694-8368-e3629917794f", "sighting_of_ref": "indicator--ed039414-b86f-4766-86e6-f9b3e96d0724", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24022449-8226-4210-a295-c022f541e404", "sighting_of_ref": "indicator--68a60504-34cb-441e-a1ed-3e74663da7c9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e1da0d-b20a-44c6-8beb-fbcacef236a9", "sighting_of_ref": "indicator--ab74f9df-b7ae-4d37-bd16-54c229795bc3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5211eb07-c685-44d8-a31d-2ade8feefcd4", "sighting_of_ref": "indicator--cc1e4d40-4fa6-40a9-b61b-f5e78149f05b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abc9d88-25bc-4444-af1b-6010ff49c46c", "sighting_of_ref": "indicator--b084d389-f1e6-4ca8-830a-32d9d3f37e4c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49549f7f-32f6-4d64-8567-066f8e9bf1d1", "sighting_of_ref": "indicator--b084d389-f1e6-4ca8-830a-32d9d3f37e4c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb72af0-95f6-4e51-9d46-caf988cd5155", "sighting_of_ref": "indicator--656b766d-4029-4420-b617-510ecba8d18f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbec077-19ac-4229-9872-a01e83cb60b4", "sighting_of_ref": "indicator--656b766d-4029-4420-b617-510ecba8d18f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc03debf-d6e6-47ed-b328-8fb95398cbd6", "sighting_of_ref": "indicator--59fd7b01-57dd-4f2c-b65d-9103124db4fe", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28d4028-9a3a-42e9-99d5-e02e7b460900", "sighting_of_ref": "indicator--703bb8b7-1ecb-4d9f-9e6f-ef4017675203", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eabb5058-c815-4a80-9a77-402c4264d4d7", "sighting_of_ref": "indicator--10521c10-a3fb-492f-9205-c905e7c1537a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428517ae-176a-4824-9dfc-147a679b8929", "sighting_of_ref": "indicator--de2d8e79-ba0b-4936-8bcc-a9a299041812", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076a7504-3c93-4c07-809c-5ceb8b581d0f", "sighting_of_ref": "indicator--de2d8e79-ba0b-4936-8bcc-a9a299041812", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95de09f6-b609-4efe-8379-d7e668b1a7ea", "sighting_of_ref": "indicator--3c3191b8-efc5-49bd-bf01-b30b5f971c50", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce141584-591c-47ec-be3a-e0df33f66c6a", "sighting_of_ref": "indicator--503cdcea-bbb1-41bb-b0ef-e5e238dcceb7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb74a1cd-ed4a-4b2c-a266-7016da05b43c", "sighting_of_ref": "indicator--ee5e3070-e544-4e68-ae74-b22acced64f9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952ecd61-4058-43ef-93cd-f10953a90fc3", "sighting_of_ref": "indicator--9ebcc05b-adbd-4427-9c1b-5f583ee62416", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17959c07-8cb9-42c5-8725-93a4ff700d2c", "sighting_of_ref": "indicator--8f87777a-5172-4c65-8e16-2869f32b3364", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688919de-cdb8-4d08-ae9f-50915f11550e", "sighting_of_ref": "indicator--71d4171f-1918-4095-bef6-d9d83bcdd803", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa81920-e6ae-4a48-a305-8cee3446f6e2", "sighting_of_ref": "indicator--ab0716e6-8e8a-48a3-b094-9732ffec6138", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07bc1e4f-cf33-4244-889d-3dec8a1b10f7", "sighting_of_ref": "indicator--8412c9d6-f57a-4c4a-ae03-b7309aacdc43", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f362226f-506e-42ec-985a-f95541f25ad1", "sighting_of_ref": "indicator--fc39cdf1-b740-4e7d-88a4-165f8fb64bad", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfef2c53-b92d-43f6-b926-39399e19adc6", "sighting_of_ref": "indicator--d8330365-7773-415c-a4c8-48bae00bd8f6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70f24a3-76a4-4db4-b5f0-fe7c208cc8ec", "sighting_of_ref": "indicator--0ba026e9-d924-479e-bdee-5d113861dda5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9e270d-d31a-43c7-9de8-2f75bbaf079e", "sighting_of_ref": "indicator--cd67f847-8269-4978-9695-09ace61baabe", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78597e6-9b39-4b65-9670-3b6674fb05d2", "sighting_of_ref": "indicator--8fb68bce-766e-4405-987f-0b5290efb5bc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab17a9c-5067-40eb-ae6f-813dc5043111", "sighting_of_ref": "indicator--da7caa5c-73d5-4c70-a85a-0fa836f2017e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519b6b88-5c30-4b10-a55d-565d2e849fdd", "sighting_of_ref": "indicator--3e60f245-6d48-4e09-b7a2-d08e4a154f8f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868c3d15-c088-4957-bcea-08caf2c85368", "sighting_of_ref": "indicator--435f1361-75de-4edd-aa36-4e38433202b2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2035acd-b0d6-4731-88e3-7d05fa2651b7", "sighting_of_ref": "indicator--f07bb455-7ce7-4ad1-89d6-d33331181ddf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622fccbd-9822-4416-bb47-e81358a9c251", "sighting_of_ref": "indicator--5d2adc8f-503a-419a-9bde-830ab221a169", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f889b516-e788-42b3-a152-2dbf173e8bb9", "sighting_of_ref": "indicator--2678e209-533c-4d0f-adc8-7eb7cdb93b4e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9952884b-7ec3-418d-9a9d-7638c2ea512a", "sighting_of_ref": "indicator--132f94da-c58a-44da-9923-be3abbb68061", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea03062-8586-451f-b09e-769ed8a944f6", "sighting_of_ref": "indicator--d2f9b6bf-7723-478c-bcf1-ce838774a999", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895de052-cc41-4ac2-9948-30abc0291cc7", "sighting_of_ref": "indicator--085ffce6-2246-4341-b598-82e0f240a291", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f8a20b-f7e4-466d-b6d3-4feb404d8f21", "sighting_of_ref": "indicator--7738a847-7845-4a56-b8cd-1c831fe74ed6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3995c5a3-ea03-4793-93bf-e78c219f8c3b", "sighting_of_ref": "indicator--a5358bd7-b8da-4c22-8ce1-9b0a3edf4617", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e441a6fc-cde3-4279-adf2-80b84335797c", "sighting_of_ref": "indicator--a5358bd7-b8da-4c22-8ce1-9b0a3edf4617", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03474d00-911e-4837-a004-cf1d5a799fff", "sighting_of_ref": "indicator--40660d06-c372-4bd4-9e5f-aa7d1e420ac5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bed7dc-5690-463a-b9fc-25529847fafe", "sighting_of_ref": "indicator--224f4c60-7127-47e9-a2c2-2bd848219943", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e575812c-b89f-4be7-9944-48864a9e0537", "sighting_of_ref": "indicator--8d51c69b-0e26-4aef-86d5-73a85950a7fd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950d6631-1d6e-42a8-8408-88ea787670f0", "sighting_of_ref": "indicator--49e153e2-5eb4-4350-aba9-75138f712431", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e812bc1b-8a6f-43c3-a639-9aab01c90c3c", "sighting_of_ref": "indicator--908d88f1-7859-4808-a266-e98e57c821ee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cafe7002-8ce9-45dd-9bfe-bf583bb727b3", "sighting_of_ref": "indicator--fd7c09a9-2cc2-47fd-a531-5c8a0a3b0c87", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c2e17f-c25e-494c-addf-2d12429e66fe", "sighting_of_ref": "indicator--fd7c09a9-2cc2-47fd-a531-5c8a0a3b0c87", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30c3e8b-7bbd-4c05-a140-cdf37fb9430e", "sighting_of_ref": "indicator--fd7c09a9-2cc2-47fd-a531-5c8a0a3b0c87", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18981cce-b5a8-4721-83e1-63fdcfefea6d", "sighting_of_ref": "indicator--ebade8e1-e089-4d88-bbf7-4344b710733f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388ab92d-c03a-4319-ac8b-67fddaa7c5d3", "sighting_of_ref": "indicator--ebade8e1-e089-4d88-bbf7-4344b710733f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff51bb9b-b0a1-4d25-862f-2ac88b8fcfd5", "sighting_of_ref": "indicator--ebade8e1-e089-4d88-bbf7-4344b710733f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d7a195-1433-48bf-96b0-a8a751199cbe", "sighting_of_ref": "indicator--a0488cf4-902a-43f1-a3c8-eeca0ea1af59", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c041029-5aea-4d71-9ccb-4d7320974c31", "sighting_of_ref": "indicator--a0488cf4-902a-43f1-a3c8-eeca0ea1af59", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b679443c-4581-4e39-a37d-037f9015fdee", "sighting_of_ref": "indicator--408afae6-7bd9-43e5-a51f-a0a4b85a0414", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d78408-aced-4485-b0bb-68c691085c0b", "sighting_of_ref": "indicator--3236c35d-d5cb-43b6-ac39-f7b93877a6e1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5494c987-2f4c-4752-a417-6edde15b8af7", "sighting_of_ref": "indicator--3236c35d-d5cb-43b6-ac39-f7b93877a6e1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037cef63-3498-4a55-8be5-b47c52bad1d0", "sighting_of_ref": "indicator--3dca0ee4-d848-4620-aedd-102fed80d669", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb4f953-ad50-4b2e-a1ce-d816364eeffd", "sighting_of_ref": "indicator--b9207a08-b5d9-4b61-ac8b-45e806b6b4aa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83aac6fe-f02f-44ab-bfb8-be52aa4430de", "sighting_of_ref": "indicator--b9207a08-b5d9-4b61-ac8b-45e806b6b4aa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00903fc-821c-4615-9223-f99d0cd1931d", "sighting_of_ref": "indicator--1404e33d-898a-471e-82c5-926151bfa260", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83fef3bd-8f67-4bdc-987e-3faeca82a2c6", "sighting_of_ref": "indicator--9f532ccb-4519-48fa-b3cb-6c66d79cd216", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22e8b23-226e-4d74-badf-361b10ae656e", "sighting_of_ref": "indicator--eb5cb17d-de48-4492-8d3c-2acb249aacd6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34417c4-e76b-4c5f-a6f3-44fbbd267c84", "sighting_of_ref": "indicator--eb5cb17d-de48-4492-8d3c-2acb249aacd6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e45b00-b7dc-4d6e-8dc3-f69c7633037f", "sighting_of_ref": "indicator--643b86b2-9099-4c67-aa54-61896242fb40", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde0ac90-6959-4606-9d2d-2ca02717c9f1", "sighting_of_ref": "indicator--643b86b2-9099-4c67-aa54-61896242fb40", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd92816-7fac-4293-a077-5b476b384d4d", "sighting_of_ref": "indicator--83bc6f7f-0ea9-44a8-8b60-16f3c14b01d6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b57957-a8cf-4106-9209-8c73c4c4622f", "sighting_of_ref": "indicator--83bc6f7f-0ea9-44a8-8b60-16f3c14b01d6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42fdfe8-e484-4a09-8d38-5adc409f23bb", "sighting_of_ref": "indicator--374c673f-a9ca-4085-9d7c-96251a1c88f2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3403e4c0-2eac-4448-88a5-99bd76118b5d", "sighting_of_ref": "indicator--4d2f3c81-dcd7-4e87-904c-e0ee1106325d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55374f26-06a3-41b2-80a2-1e98563cadbe", "sighting_of_ref": "indicator--30a7e27b-0257-44b1-b560-2d08db91f118", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d838aa-0004-46e6-99a6-22038522f169", "sighting_of_ref": "indicator--30a7e27b-0257-44b1-b560-2d08db91f118", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c29cd0e-0239-43df-9c7f-0f50e4579d5d", "sighting_of_ref": "indicator--7ae754aa-aea2-45f8-9517-9885256b58ae", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096c9621-61f8-4ce7-b559-7f95d9169ea7", "sighting_of_ref": "indicator--7ae754aa-aea2-45f8-9517-9885256b58ae", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d75ef6-46d9-450c-8dfa-b93d32a87c43", "sighting_of_ref": "indicator--a5195f30-c70f-402d-bb3b-d6f4a79da4d1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7018f09-3282-4952-8001-6e5f5c96d5fe", "sighting_of_ref": "indicator--153bacaa-40a2-4f48-aace-555c1df60789", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491474e3-0226-4b6b-954c-adea1db4e373", "sighting_of_ref": "indicator--4a3395fb-787d-439d-8091-c28814d79941", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b56adee-1dc7-48a7-ac31-19df110b2ac4", "sighting_of_ref": "indicator--a9b26182-72e9-40a1-a899-ea59a9487ad8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868aa0e2-430b-4ccf-99f8-df5b5ea41a81", "sighting_of_ref": "indicator--31c0b0a2-1ad6-4573-bded-d4be9b47cce7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee931ff0-0bd2-461c-b43e-b736f13b7da2", "sighting_of_ref": "indicator--3702551d-7e4e-46fc-85e5-10544439e3d2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f8c3ab-7b5a-4859-9184-ab72f1945d3e", "sighting_of_ref": "indicator--4e3fe706-b769-4fc6-af25-4cdf8b294aa2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cd686b-3e4d-48ea-a443-9662e25ee597", "sighting_of_ref": "indicator--bca08cd8-65b1-4985-aa8b-f682a6bc61e5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d907fa49-124d-4282-8e59-ee400439a5e8", "sighting_of_ref": "indicator--eb7a9cb6-caa8-4793-a8f6-47953442486c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3aade50-e026-4306-beb5-be527f81decc", "sighting_of_ref": "indicator--eb7a9cb6-caa8-4793-a8f6-47953442486c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab1f9f2-bdcb-42d7-ac26-ff02c80bcf88", "sighting_of_ref": "indicator--15020596-cf5e-4b4f-a353-949e7aff85d8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3928879-412d-4102-ada2-025be3e5c986", "sighting_of_ref": "indicator--227327dd-2304-4717-a7a4-eee676034315", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a63da1-1c5c-46f5-af9c-7b93c0b3802a", "sighting_of_ref": "indicator--0be3947e-5e4c-4f87-9a56-9b8ada756ec5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc50369f-480e-4cfe-9e11-b333730ba30b", "sighting_of_ref": "indicator--8fbb9a5c-2155-402b-9ed3-f88b213b8080", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577b8e8a-ab99-4806-89b8-259a6b2f21ac", "sighting_of_ref": "indicator--c4843a46-bca1-4225-887a-443c0409b53f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea31ec3-0a6f-4ea9-9547-13711793617f", "sighting_of_ref": "indicator--cddb27d7-84b7-4ace-b86e-45cb767e59c1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f25f6e-7602-426d-8195-51fb37e9dcf1", "sighting_of_ref": "indicator--cddb27d7-84b7-4ace-b86e-45cb767e59c1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17c00bb-63d5-44e0-b49e-b2712d5d4b09", "sighting_of_ref": "indicator--86eef2c2-d2a8-47b5-b878-dbc79c9bde70", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16d511a-a4b5-45c1-a044-f8f437edbbb6", "sighting_of_ref": "indicator--d27b8cab-09d5-401f-b8d8-132e22f96252", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7fe3fa-0719-4bd5-8957-b972e797e0af", "sighting_of_ref": "indicator--ea67b4cf-f0a9-4051-a1e0-41a076f6d51d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e549ac4-fa6d-497c-b578-228262b09762", "sighting_of_ref": "indicator--02cb5018-4c33-43a9-9757-bf9bd1a116e4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a09703b-1140-4533-a01f-211d566f0902", "sighting_of_ref": "indicator--6e976427-5b0f-4d74-9e19-6b291303915e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387f8998-2519-4640-9715-5bf474a6b113", "sighting_of_ref": "indicator--999a72f8-6b5a-4fb7-bc00-b588de78e522", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff027f1e-ec0a-432c-b7e9-08ca81ff1c93", "sighting_of_ref": "indicator--adc830be-19f1-485f-ae07-18d50271e955", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30193170-8df7-4059-83e9-3ce5ea3a6b67", "sighting_of_ref": "indicator--9eb88a0f-a3f4-4ffc-a5f9-3441ef95cc62", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd997f2-3205-4d51-8afd-77fac6a8aa3b", "sighting_of_ref": "indicator--ed3d6df3-4e65-4828-86a4-d4cc9d575039", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d536c27b-9faa-4260-93f1-1476a9024c51", "sighting_of_ref": "indicator--15b62f66-66ad-4353-ada1-9094ceca0456", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0dfa7f-f301-4faa-925b-927348e964fe", "sighting_of_ref": "indicator--ae951d43-bf6f-4aa2-b226-0a95a0d59c1b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976ccaf5-87e3-474b-a3aa-277aa012e7fb", "sighting_of_ref": "indicator--6b6bb19e-f74e-4b21-8c61-28b6b4406ce3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac07c55-3551-4c84-8732-cdd659c2ba20", "sighting_of_ref": "indicator--6b6bb19e-f74e-4b21-8c61-28b6b4406ce3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715ce0e9-f3da-41e0-8cc4-aea44959d95b", "sighting_of_ref": "indicator--62f5ef5d-e6e2-490d-8114-e26e7e571430", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1dc55f1-2b24-44cb-bbbc-eead7b325035", "sighting_of_ref": "indicator--f29b1931-7a30-4a98-ac85-f75ac274dee4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49a495e-6203-4275-9a45-22182f0df318", "sighting_of_ref": "indicator--dbaa5e2a-5de0-45b4-804b-a7c789d3f4fc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6840f5b6-e830-488c-973c-3c1ac9270e49", "sighting_of_ref": "indicator--dbaa5e2a-5de0-45b4-804b-a7c789d3f4fc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba9f9c2-d240-43b2-a495-b5c1f8495b88", "sighting_of_ref": "indicator--6bc65bf5-3e5f-4453-8e47-cefc6755f0da", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5c2501-7a98-4275-8ec9-48abfd4430a1", "sighting_of_ref": "indicator--6bc65bf5-3e5f-4453-8e47-cefc6755f0da", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6876a1c1-24cc-4360-b5f3-858731ab7382", "sighting_of_ref": "indicator--4c161910-2b81-4bbb-bdf0-5f5d5be57065", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e1e9d7-9840-4303-bf00-a18fced3ad2e", "sighting_of_ref": "indicator--7e322ad3-6b76-4026-b115-e38c864db9c0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ad5082-debd-4811-9de4-512afdf9e752", "sighting_of_ref": "indicator--74e36c2a-2e79-4458-acc2-b57d43ac05af", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303a80f4-ca77-40f3-a277-01853142a664", "sighting_of_ref": "indicator--f420a202-4e2f-4dff-8d6c-72490e8d2be8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08fbd3af-d928-4998-9c5b-23635f3eeca5", "sighting_of_ref": "indicator--6e6fbf83-f18f-4810-8782-795eacfcb853", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c078b0-18ef-4e93-b176-d092a2780a3a", "sighting_of_ref": "indicator--9dad2152-e73e-4fd4-8ab7-7ccf04dc6bbe", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5f595c-7a2a-4f5a-9858-e75eab3548ae", "sighting_of_ref": "indicator--9dad2152-e73e-4fd4-8ab7-7ccf04dc6bbe", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972b3c07-81d4-465e-997b-446daf73fa7e", "sighting_of_ref": "indicator--c0c1ef71-7ee1-489f-bb9b-e1d75148c878", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a175082e-1cd0-4f04-901a-ad6b5fb2ae5f", "sighting_of_ref": "indicator--6e639812-de87-42c5-ba5a-ad4e7c8340ec", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712724fd-b21c-446f-b1a9-76eed35aaa96", "sighting_of_ref": "indicator--d660e5c7-43bd-4ab7-b474-ab5b856d892d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b187af3-0411-4163-ba0d-fbc2fc622bb5", "sighting_of_ref": "indicator--d660e5c7-43bd-4ab7-b474-ab5b856d892d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5401605-1fd3-4989-818c-f740bd54f619", "sighting_of_ref": "indicator--d660e5c7-43bd-4ab7-b474-ab5b856d892d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a974c24c-ce6e-4b3f-bc90-81d2aea18c14", "sighting_of_ref": "indicator--726425d7-196d-4167-ba8d-b9e6ae1639a3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e220f28e-962f-44e0-b7ea-64ec8a6ca2ed", "sighting_of_ref": "indicator--0325ea0b-d147-4eae-8754-aaddcbbf118b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0327c1b8-e387-4f68-8cba-7a564291ea8e", "sighting_of_ref": "indicator--4641dc90-cf84-498b-8ca5-279da49d1681", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20853dc5-fcb5-41b6-b30d-20374d10c67e", "sighting_of_ref": "indicator--4641dc90-cf84-498b-8ca5-279da49d1681", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2237cec0-ab8b-4511-a446-93859a15bc14", "sighting_of_ref": "indicator--4a2f95b6-192c-45d4-8d21-051438c0d9ca", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8deaad92-dfce-4b1e-b063-184169bd8037", "sighting_of_ref": "indicator--15c8b7de-7c2b-4a36-9f64-65ed44a82506", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b16252-1142-42aa-8c6e-8f2333acb85a", "sighting_of_ref": "indicator--15c8b7de-7c2b-4a36-9f64-65ed44a82506", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37009f22-ebfc-43ee-a36f-e9f62b6bbe9d", "sighting_of_ref": "indicator--87beeac8-c3c3-43ee-aae5-d5d43141eaf4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2cb8f34-79df-42f5-8d15-05e4e50dc89a", "sighting_of_ref": "indicator--d5aa2a98-6e4c-4abc-aaec-73ff325b7273", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f1935e-5366-4bed-8bec-46de93a50514", "sighting_of_ref": "indicator--3840973e-ac1f-4fae-9a99-c4044a1047dd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c61bff7-603a-455b-bc08-eb129e6622f2", "sighting_of_ref": "indicator--528dce2b-795d-4b9b-823b-48edb5389850", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fc4680-8a92-4302-acc3-b8ab454d17fe", "sighting_of_ref": "indicator--23a3b96b-0ccd-4b2a-9f4e-14896246ec63", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79cca3c-5b3b-4c20-894d-7477fd7fbe16", "sighting_of_ref": "indicator--23a3b96b-0ccd-4b2a-9f4e-14896246ec63", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b5bd9f-b3c0-4939-aad3-8e049d3409b7", "sighting_of_ref": "indicator--8afa26b0-64bc-4388-9f96-58d14f60403e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041bd4b1-45dc-4c94-a839-0bdf8a3424ff", "sighting_of_ref": "indicator--325fff1e-5bcf-430b-9b1a-d8969e10dba4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02593f37-b213-4a3c-a404-8b16a900b2d2", "sighting_of_ref": "indicator--157dcfe4-4fb2-4a18-a250-5a6923f97d29", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dca27c6-b532-49de-a564-32911912f0fb", "sighting_of_ref": "indicator--bafcfdec-9c0d-46d6-899d-86d35281e874", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313b8630-743d-479c-bedb-2258aaff803e", "sighting_of_ref": "indicator--cac4ca55-f71b-42b6-985f-d16d533da9cb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d9c74a-9f46-4206-b7c8-c8bc4bf1040f", "sighting_of_ref": "indicator--77c3d412-d74e-4a13-aaa4-7f39e6184c90", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542d7bfc-dd64-47b6-aade-59690171aa86", "sighting_of_ref": "indicator--b79c1d73-cd77-407d-a91f-2430bbd84da6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09fd309-41ca-4f6c-97f2-9f221cae30f6", "sighting_of_ref": "indicator--b79c1d73-cd77-407d-a91f-2430bbd84da6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056013a0-2a87-4c38-9608-e1a6526a8d43", "sighting_of_ref": "indicator--41dfecfe-cfd0-4d22-bb19-89de368b11ed", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee63d6e7-9a02-449b-9a5e-d676c7f2995b", "sighting_of_ref": "indicator--9c757b83-0d8d-4d9c-b749-bd8824d837f8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffabf24e-3c56-4182-af60-8a25011d764f", "sighting_of_ref": "indicator--46df240a-902d-4be5-a62e-2c67aebbb3e4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2352fc-ed02-4a72-b978-7ec773f91d65", "sighting_of_ref": "indicator--4424d72e-793c-4cd1-b8b6-1871541030e6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310e32ba-8c91-48a4-8bab-edaab7ba2deb", "sighting_of_ref": "indicator--dcc93d74-1cec-4379-8879-040b8ee604d4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7237a21-468b-45e0-9f67-1c2cc2efc9cb", "sighting_of_ref": "indicator--fe3f463d-99ac-4d06-b27d-ba7f43166840", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd579e7-b74a-491b-8969-1c423bc8673d", "sighting_of_ref": "indicator--64828a56-5046-4d04-b547-c35a9cb84757", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a0153e-e223-4bae-9451-b50ff2036543", "sighting_of_ref": "indicator--64828a56-5046-4d04-b547-c35a9cb84757", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c3dcbe-5b1a-4f67-b04b-00429fa27e71", "sighting_of_ref": "indicator--4b02975e-9334-46c1-bfca-7ff130ea5275", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18624680-a524-4514-b8e8-ce8dc8ac9d74", "sighting_of_ref": "indicator--e0af9a49-8786-4d06-b1b6-ecbe7c64227e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42591233-6800-4901-9547-4e43b655d793", "sighting_of_ref": "indicator--c65857a1-2263-4b49-92cd-ae3d9bfa2dc4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226beb27-5ebf-40a7-aa5a-d7007e3faea7", "sighting_of_ref": "indicator--9b6352be-c366-432a-87c8-5f23c1c996bd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904d2f6b-e55a-4a75-bbab-bbf6ed197694", "sighting_of_ref": "indicator--9b6352be-c366-432a-87c8-5f23c1c996bd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1434238-6d18-4918-b775-8ec1bc624a88", "sighting_of_ref": "indicator--f4d7d3d4-a95a-4931-86d2-ab923a93ebf9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ece26b-3c0f-48a4-85df-9ab1d5796025", "sighting_of_ref": "indicator--1df3a717-89be-4846-ac67-d480e3bea389", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a21577d-cfcb-4916-9bac-feba71431485", "sighting_of_ref": "indicator--0293b6d8-7370-4a60-81dc-8dde93c1d67c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b3c57f-1388-4e4e-b6ba-0838ca4dda33", "sighting_of_ref": "indicator--340df2b3-f36a-4a0d-b8f9-3c71ac624c15", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f2ca74-23d1-47ed-9a7b-86387429775c", "sighting_of_ref": "indicator--7433f927-baab-4b6e-a275-0311980c8254", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa05906-7d02-43d2-a843-fa326ac70dec", "sighting_of_ref": "indicator--7433f927-baab-4b6e-a275-0311980c8254", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c98c19-c16a-4cab-807e-9f1c1cc578fb", "sighting_of_ref": "indicator--7433f927-baab-4b6e-a275-0311980c8254", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee552330-22ae-4e24-890b-b4a9d730db9b", "sighting_of_ref": "indicator--7e4d1e21-3e87-4578-a26e-96d8e4152f53", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052e6457-40f1-42d4-a40e-976eee25dc37", "sighting_of_ref": "indicator--be81001d-5c6b-469a-881a-483093ee56e7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af98d9eb-894b-4e91-897f-d26087cdb61a", "sighting_of_ref": "indicator--b5358c51-fe01-493b-8679-c5bf92d9d482", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f869ef0-0bf7-41b1-bba1-c074a00d494e", "sighting_of_ref": "indicator--332c6f21-9573-4621-a75b-509d7dfe56e0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56ae8e9-7459-47e1-9ae0-8033004aa4ad", "sighting_of_ref": "indicator--592fe88e-3ce9-40d5-919b-37beb8a9b067", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a590fcd-7239-44d4-9980-0ed4ace60d23", "sighting_of_ref": "indicator--283109f9-a64a-4149-b337-43d38ad470d8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816bc2ea-2a7a-4615-87ad-b4828865f3d9", "sighting_of_ref": "indicator--9448f9bc-59bf-4baf-8b5a-b4ebb3c3d498", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb196a8e-7891-4ecd-b494-a74d5fe8acc2", "sighting_of_ref": "indicator--0f9812fc-30b9-4ef0-81fa-df053b38d78d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea7cb2f-622a-4e32-b2cb-965159139c2b", "sighting_of_ref": "indicator--0f9812fc-30b9-4ef0-81fa-df053b38d78d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e76d2d-b12e-4daf-8937-07d4ad6d39b5", "sighting_of_ref": "indicator--0f9812fc-30b9-4ef0-81fa-df053b38d78d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85c60b6-2c11-474c-83b7-8897d50dd49a", "sighting_of_ref": "indicator--d0a67790-c0b1-4e36-b529-243814333842", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a84793e-b64b-4b91-9ac3-f8ecb9497506", "sighting_of_ref": "indicator--d0a67790-c0b1-4e36-b529-243814333842", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7666c6fb-c62c-4114-94a5-be0f1c29ea9f", "sighting_of_ref": "indicator--d0a67790-c0b1-4e36-b529-243814333842", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c8f212-a282-4c2d-bd2a-f29ac82fdc09", "sighting_of_ref": "indicator--b2da1b1a-68d2-4cdc-9ab5-2fd04b231af8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6e0e8e-23e9-4ab0-8b99-d6c176b27d2d", "sighting_of_ref": "indicator--b2da1b1a-68d2-4cdc-9ab5-2fd04b231af8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4b65a0-7bcd-4eb9-bc23-e25cdee8f884", "sighting_of_ref": "indicator--b2da1b1a-68d2-4cdc-9ab5-2fd04b231af8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a1f870-6aa5-4402-ab4c-0f8f22d844f2", "sighting_of_ref": "indicator--68f9a287-16a4-41e2-9014-d003b33ce361", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1463706c-0c8f-4048-82f2-65ce2b34ec55", "sighting_of_ref": "indicator--68f9a287-16a4-41e2-9014-d003b33ce361", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e3f69c-6d85-4781-8b27-9d30143566fc", "sighting_of_ref": "indicator--68f9a287-16a4-41e2-9014-d003b33ce361", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f1f367-1538-451f-86ff-76f8bcff148c", "sighting_of_ref": "indicator--a63c8841-da7b-44a5-b8eb-00a62befc27d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5b97f7-260b-48c6-b73d-d199a7cfc052", "sighting_of_ref": "indicator--cd18c73f-3832-4bae-b1eb-15bd874e25c7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448a402e-07eb-4281-8d7b-6701efbb0ff4", "sighting_of_ref": "indicator--c3aaa7c3-293a-4b1e-bbdf-5bfed32f32ad", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51bd12eb-7a91-4b72-ad71-47102f148d74", "sighting_of_ref": "indicator--c3aaa7c3-293a-4b1e-bbdf-5bfed32f32ad", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5fc74b-4b51-444e-b3b6-5f320a943091", "sighting_of_ref": "indicator--c3aaa7c3-293a-4b1e-bbdf-5bfed32f32ad", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a86903-7485-4dcf-8cd5-f79ae870da3b", "sighting_of_ref": "indicator--dc5099e1-f4fc-4e71-817f-6377635703d3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219e2b93-0d63-4607-b70f-e2c2ff25cd44", "sighting_of_ref": "indicator--48e33e72-d65f-491f-82eb-0213a52a0449", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6874f850-4258-4977-89ee-33db7710ba43", "sighting_of_ref": "indicator--48e33e72-d65f-491f-82eb-0213a52a0449", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df683ee4-1d9b-4bd5-aac0-e71b4a2ba4cf", "sighting_of_ref": "indicator--0bfc017e-d8ec-4901-8efc-5290441ddd1f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17fef894-9c42-45ef-b405-ea53a640113b", "sighting_of_ref": "indicator--258f98e3-2914-4997-9c61-1f90743addc8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817f43fd-b531-4549-b5dc-750bebd0e077", "sighting_of_ref": "indicator--258f98e3-2914-4997-9c61-1f90743addc8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5907241f-f08d-4cfe-8449-21fc7df3f824", "sighting_of_ref": "indicator--258f98e3-2914-4997-9c61-1f90743addc8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ecd64e-85d0-4c3b-ac5c-feb5d7c10278", "sighting_of_ref": "indicator--3751f420-2fbc-4f95-92bd-62b26d4cab41", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fadf266-86bc-4078-bdf5-2a3b24d08839", "sighting_of_ref": "indicator--3751f420-2fbc-4f95-92bd-62b26d4cab41", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3dcfaa-39e9-4d9c-bc54-e15ed101b8de", "sighting_of_ref": "indicator--3751f420-2fbc-4f95-92bd-62b26d4cab41", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff31a7c-14ac-4b17-a0ec-204cfaa5210b", "sighting_of_ref": "indicator--f082e534-577e-438e-ae9c-c100e21dd6a3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb6569f-b7aa-423b-bbb3-2fb9770c90e9", "sighting_of_ref": "indicator--f082e534-577e-438e-ae9c-c100e21dd6a3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e9ac1e-c62a-4d5d-84cb-de3062a81b0b", "sighting_of_ref": "indicator--f082e534-577e-438e-ae9c-c100e21dd6a3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c7f95a-e5fe-4c0e-b415-e1f3cd98cf3f", "sighting_of_ref": "indicator--87f2489f-9c51-42aa-b9ab-90493022efb9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8530baa5-452f-45ef-835e-1d95a742dc7b", "sighting_of_ref": "indicator--8a1008d2-62ee-4520-abfe-2a0bb0ce3388", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a928ac22-bee5-41bc-9546-52e3b1ebb649", "sighting_of_ref": "indicator--8a1008d2-62ee-4520-abfe-2a0bb0ce3388", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ffa3a7-1b2b-4328-afad-3b6510f7af37", "sighting_of_ref": "indicator--006553ae-0aef-477b-b4a7-a1e9f2bb0267", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe83c54-c60f-4841-8f15-f55625f9bab0", "sighting_of_ref": "indicator--006553ae-0aef-477b-b4a7-a1e9f2bb0267", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6fa796-4b3d-4a62-978a-cc27b44ec79e", "sighting_of_ref": "indicator--006553ae-0aef-477b-b4a7-a1e9f2bb0267", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9aadee-5c47-4b4b-a768-e618064bc5e6", "sighting_of_ref": "indicator--c81106be-f251-4f8a-bca4-1e8bc50056ed", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb740c94-42bb-405a-a8ac-13077b0b47a4", "sighting_of_ref": "indicator--c81106be-f251-4f8a-bca4-1e8bc50056ed", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b97483-e5ac-4eb4-be2d-a940a2acf654", "sighting_of_ref": "indicator--e1e2ec42-2ad3-4684-a4fa-ed9bc3f5e8ee", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62da8458-6cba-4697-b184-867c0615b8f1", "sighting_of_ref": "indicator--e1e2ec42-2ad3-4684-a4fa-ed9bc3f5e8ee", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37ce8a0-63a4-47b3-8579-d49deefca40a", "sighting_of_ref": "indicator--9ed91acf-d410-4b1b-b750-676d7e7e5d93", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b61e73a-8a14-4410-86a6-1c462422174a", "sighting_of_ref": "indicator--9ed91acf-d410-4b1b-b750-676d7e7e5d93", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d63907-5e89-4a0a-b0c9-dace53f71fd9", "sighting_of_ref": "indicator--65aa51c0-2b38-4286-a0f5-33e0154c357f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2219b8f1-70af-4f05-8cfb-4664c9fa81a6", "sighting_of_ref": "indicator--cd6a5c1e-c386-419a-a75c-d70654765d70", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30561b7-c736-408d-aaca-0a07437a2c55", "sighting_of_ref": "indicator--a22a6e5d-7359-47cd-bd74-fc6d4175749e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b86443-eb27-4f20-aff2-f364cdbc1522", "sighting_of_ref": "indicator--562bd26c-cdc1-48b7-9616-bbb85ad79e5a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0ca6a9-b810-4cd6-80a7-928f85491177", "sighting_of_ref": "indicator--1b85060e-0a4c-4ce1-babe-3b8e27b8737e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3ac7ec-d261-47a5-94d7-a87c15701c0e", "sighting_of_ref": "indicator--aad459c6-f3c1-4679-9ca9-8a380dd7f7e5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05255ae-cefa-4397-94b8-4c84b9ea9389", "sighting_of_ref": "indicator--669aadee-0aa8-48c6-a2c3-0044ca0c87e0", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ecd793-f203-4d49-a6f1-4df828108b77", "sighting_of_ref": "indicator--efc955b4-b5d0-4a43-a30c-d40b9938a406", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef23e30f-f82f-4892-877c-7c318ffb9ead", "sighting_of_ref": "indicator--155705b6-ed3b-4dba-bd80-5fe411f0bb4e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91c2afd-6075-4f02-b4a2-7cc766192c60", "sighting_of_ref": "indicator--155705b6-ed3b-4dba-bd80-5fe411f0bb4e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b01cf3b-b0d0-45e2-bb19-e30806644a11", "sighting_of_ref": "indicator--155705b6-ed3b-4dba-bd80-5fe411f0bb4e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47637190-4204-4a3e-97db-879e024f6075", "sighting_of_ref": "indicator--b60a768b-fbd9-41b0-b708-43aed857a82f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0eeb47f-636d-4f81-b3b1-ce07fd54363e", "sighting_of_ref": "indicator--668f4aa8-d32e-46aa-b932-46b4037d7472", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a54066d-1c9b-434a-be1e-8fbaa5f93414", "sighting_of_ref": "indicator--5cfc30b6-9582-4490-8cf0-aa13c2222a11", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce21e7b-bdd3-44d6-b406-66ad414e3e9b", "sighting_of_ref": "indicator--dcea3a6b-c7e6-40f7-8d29-33c282cdef56", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4ac36f-6d30-4aee-9623-9bf05a09d62c", "sighting_of_ref": "indicator--02ef44c7-edac-4eb9-a50b-b8f9e389ab8c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1404b3a3-449d-477d-906b-751c209d2454", "sighting_of_ref": "indicator--dfa2d87b-4f11-4beb-b5d4-599e9d7d059f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb71b3d2-672f-49f5-acf9-f79fe01b05d2", "sighting_of_ref": "indicator--dfa2d87b-4f11-4beb-b5d4-599e9d7d059f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa58e95-e9f3-4140-9853-2693acf988c2", "sighting_of_ref": "indicator--4a24107c-68d4-462b-871b-cd6012a761a5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3cc05e-cbed-4f7b-a6e2-91c77ea3b24c", "sighting_of_ref": "indicator--bc510f75-9e09-4278-8324-2be48111812f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9ad031-6054-4f76-92a2-7eacd002eaf1", "sighting_of_ref": "indicator--a40af58c-8afd-473f-a94b-43b39312bdac", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51104df-9a86-46a8-9137-3b75f9e21bca", "sighting_of_ref": "indicator--8f92c86a-b148-4c4f-b5fa-d93626f8c04a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba2a468-e69c-4bda-a02b-46f81a76d8a7", "sighting_of_ref": "indicator--8f92c86a-b148-4c4f-b5fa-d93626f8c04a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aef6485-2e5f-4001-9acc-975637b40fa5", "sighting_of_ref": "indicator--3268da26-b2c8-44fe-89df-048ffd001ef6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7331ff-2001-4611-bec9-1a8c4750b94e", "sighting_of_ref": "indicator--3268da26-b2c8-44fe-89df-048ffd001ef6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a400b84-16c4-4753-8261-f419d67574d8", "sighting_of_ref": "indicator--b6d3203f-8f65-45c3-943e-34f8ffe5db39", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4099ad1-6aef-4a84-85d5-00801ca55c90", "sighting_of_ref": "indicator--b50781ea-9823-4b96-a19e-8ed05240821a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec55bc2-c578-4470-b282-fb97f97239fe", "sighting_of_ref": "indicator--7b919619-6d35-4b43-95b0-7e92b9a1db35", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6fc240-4760-4317-9ea6-ba6497136683", "sighting_of_ref": "indicator--765a538a-35e5-42c9-b294-3028a92a6b11", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c92a206-8472-4bdb-8cc7-99b50e64b48c", "sighting_of_ref": "indicator--8649e176-b456-481c-91a9-319cb5fd2199", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78f3ac9-f73d-4d71-8f14-8d6b774ab6df", "sighting_of_ref": "indicator--e8bf6427-adc3-4914-9be4-8947f6e96667", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6367ea0-019d-4c2c-b01b-5c3cb45538a0", "sighting_of_ref": "indicator--64ee964e-9bb9-4e68-84be-b341b65153e3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f57a3d-ddb3-47ec-a48a-006aebc7909f", "sighting_of_ref": "indicator--57ff8cd1-9f52-4d83-bab0-040b4bc887f1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a65b3c-f109-4745-b410-aba5a36da6ea", "sighting_of_ref": "indicator--57ff8cd1-9f52-4d83-bab0-040b4bc887f1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c754b5d0-6bf1-477a-9391-4ede8ed386ac", "sighting_of_ref": "indicator--57ff8cd1-9f52-4d83-bab0-040b4bc887f1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d8697e-ecc8-4586-8213-bd2e50bc8744", "sighting_of_ref": "indicator--671edb72-a9e9-4859-89ae-d802b2968efd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149dfe5a-da98-46db-9fc7-295b038b44cc", "sighting_of_ref": "indicator--671edb72-a9e9-4859-89ae-d802b2968efd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49fd5cc-ea6b-4552-9ab2-694185a75bf9", "sighting_of_ref": "indicator--671edb72-a9e9-4859-89ae-d802b2968efd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3093a93c-e7de-4612-83c4-df651d634228", "sighting_of_ref": "indicator--3efb061d-2dff-471e-8910-bf228d4676f5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b4deb6-3899-4d23-b0d7-523acb95a08d", "sighting_of_ref": "indicator--64307250-f722-4733-8f1a-59121aaaed90", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc8977a-e845-4e3b-9a78-1d336838b156", "sighting_of_ref": "indicator--c5ffcc8a-13bc-481e-bd99-25541424bdd7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07c1fce-e4cc-4145-87e9-ae0a8f88803d", "sighting_of_ref": "indicator--d44d94bc-63c9-4bed-88ec-fe856d43e708", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf235ee0-484b-4259-9d61-bebd0ba226d1", "sighting_of_ref": "indicator--40b06e01-1e0a-47ed-8fc4-e0cb03449beb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27654284-0e91-46d6-b11d-cd3f7d7458e8", "sighting_of_ref": "indicator--362b2868-dae6-4d49-8d0b-bb982df3ca24", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ab0df1-a633-4a56-944b-41f8205167c2", "sighting_of_ref": "indicator--9cb8ab93-592c-4cc0-8982-bc4824c8ec72", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88044c15-490f-4e9e-adad-8a6785f6678d", "sighting_of_ref": "indicator--61b00f36-92d3-4ac1-80b3-6206a2e64d59", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce959377-2f1a-4cb2-a20c-99c6db2bf9d9", "sighting_of_ref": "indicator--f87d2f90-ba0c-4f51-8b67-35129a32bffb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50132be0-e475-492c-b379-3b68a986fad3", "sighting_of_ref": "indicator--e850daf2-0010-4e23-94ee-992cbb86600b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af8223d-6e82-4364-a907-133c5ac77643", "sighting_of_ref": "indicator--64b7cda5-ae62-428c-a8e4-0c9d38be5ef6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8aeff1-e420-4182-8ccf-176e04b2d1bb", "sighting_of_ref": "indicator--7cd04349-e8a8-4e37-bc2e-028739003f90", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93cf1561-d189-43d6-ad51-e7a57af00813", "sighting_of_ref": "indicator--80561968-785b-4753-b5a3-a53411c99816", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b67794f-5347-420c-9cc6-ba4b986153c3", "sighting_of_ref": "indicator--2a01e83a-6ed4-4253-8a1e-b2f2c3cdc9f2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d0395c-1f7b-40f3-b5e7-1cf11fb50ec1", "sighting_of_ref": "indicator--2a01e83a-6ed4-4253-8a1e-b2f2c3cdc9f2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7dd608-7e93-4369-ae05-65df69a56fe7", "sighting_of_ref": "indicator--2a01e83a-6ed4-4253-8a1e-b2f2c3cdc9f2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168c96e2-4879-49a7-993a-c73c31382b1c", "sighting_of_ref": "indicator--8f98a04c-30c8-4f79-8e4e-515b6d80640b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d576217-ee0f-4e82-b736-55a3dcd8ed32", "sighting_of_ref": "indicator--8f98a04c-30c8-4f79-8e4e-515b6d80640b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6c936b-4641-43fc-8054-e5386994ce56", "sighting_of_ref": "indicator--8f98a04c-30c8-4f79-8e4e-515b6d80640b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b24f9e-ed6e-43bf-b600-3784123294ed", "sighting_of_ref": "indicator--cbb40fd5-32fb-4b94-9ddc-d5cdd22f7441", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e0752e-cc95-4718-b7d7-97ff7ca7b774", "sighting_of_ref": "indicator--cbb40fd5-32fb-4b94-9ddc-d5cdd22f7441", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd9d97c-0f14-4184-a91e-885f3663308e", "sighting_of_ref": "indicator--17ef0cfb-13a2-4b82-8745-11bf24308c8e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df881e8d-f939-4986-9011-bfa865cd06ad", "sighting_of_ref": "indicator--17ef0cfb-13a2-4b82-8745-11bf24308c8e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9273ce-5494-40e3-bec9-b10f71c44745", "sighting_of_ref": "indicator--17ef0cfb-13a2-4b82-8745-11bf24308c8e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1a81fc-e3f4-43e4-8532-9538417dba63", "sighting_of_ref": "indicator--e5106d06-a2a3-4b6b-8720-530fae459c36", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a262b2-c25e-4efe-a0a7-8378fd0e5199", "sighting_of_ref": "indicator--30be59c5-9f6d-4bf0-a583-b8aa3e5985a4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8979490-1396-4297-b4e5-b00f9b26e037", "sighting_of_ref": "indicator--30be59c5-9f6d-4bf0-a583-b8aa3e5985a4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16df169a-14a7-4556-99e6-6cc1e2c749b9", "sighting_of_ref": "indicator--744245d6-c070-42b9-b107-4edecaa67332", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28af6d3b-2fce-4092-8179-97054a4fd423", "sighting_of_ref": "indicator--a25f2658-976b-4bca-9083-c7cd0b42d52f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a79d2e2-36c6-4974-800d-a05c99aa0577", "sighting_of_ref": "indicator--a25f2658-976b-4bca-9083-c7cd0b42d52f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2a7ea7-b708-4a55-9f98-f717065a434d", "sighting_of_ref": "indicator--a25f2658-976b-4bca-9083-c7cd0b42d52f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c249969-bdf3-4056-8811-f1d74edee579", "sighting_of_ref": "indicator--5227bea4-6f83-484f-8027-c5301a1148f9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba47e5e-1ea0-4ce2-8a05-95f57c847b5f", "sighting_of_ref": "indicator--d9c4ec2e-b179-43b2-ba40-67f0ede7b431", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87e8d51-3734-46f7-859b-2a62cb9d992a", "sighting_of_ref": "indicator--d9c4ec2e-b179-43b2-ba40-67f0ede7b431", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03505ee-46d3-4061-b894-52b08b4676a1", "sighting_of_ref": "indicator--d9c4ec2e-b179-43b2-ba40-67f0ede7b431", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c64c93-81dc-4559-9d16-f6e517298e56", "sighting_of_ref": "indicator--9af16157-c682-4874-b181-492c121458d1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f383f6cf-71b1-4483-8da2-e589677eebf2", "sighting_of_ref": "indicator--9af16157-c682-4874-b181-492c121458d1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495d9cb9-cf03-4f10-a43a-ab2952e420e0", "sighting_of_ref": "indicator--9af16157-c682-4874-b181-492c121458d1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ac88bd-0955-4bbf-9cac-aca2329f7042", "sighting_of_ref": "indicator--9af16157-c682-4874-b181-492c121458d1", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d840a6f2-ace7-4d0a-be68-bb02a0f07c07", "sighting_of_ref": "indicator--1ff56679-653f-476f-853f-4be93b6cf2a1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5a2d6a-ff4a-4cd1-ad36-c3418d6d92ea", "sighting_of_ref": "indicator--1ff56679-653f-476f-853f-4be93b6cf2a1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8303925a-97f8-4692-a59e-22b0338c36ba", "sighting_of_ref": "indicator--1ff56679-653f-476f-853f-4be93b6cf2a1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c005ea-e951-4dba-89c0-aa17c19ccffd", "sighting_of_ref": "indicator--00badefb-b06f-4c7e-86ed-aa443ddfd44a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca2a1ff-e0ab-4673-8485-101af872692f", "sighting_of_ref": "indicator--68ee72fa-26e1-415f-8b2e-498d2f9f4d21", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f440078b-9f64-4268-bcfc-fc1a90965e0e", "sighting_of_ref": "indicator--68ee72fa-26e1-415f-8b2e-498d2f9f4d21", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1948e9a1-927b-4abd-8194-51ee58a4f073", "sighting_of_ref": "indicator--68ee72fa-26e1-415f-8b2e-498d2f9f4d21", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca5252e-0075-4a5b-93ba-c282c09f4bf6", "sighting_of_ref": "indicator--897c4588-9be9-47ee-ad8b-14599a3483e2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17393c5d-c25a-4947-856c-e89ef5e2b173", "sighting_of_ref": "indicator--897c4588-9be9-47ee-ad8b-14599a3483e2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec0d50a-6cab-4e0f-896a-4196b1f645f3", "sighting_of_ref": "indicator--6815d548-8ea9-4cd3-a7b2-22523c5050ab", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e99f41-74c4-423b-9052-59033c049b1f", "sighting_of_ref": "indicator--a109a0a2-d3c3-4913-9d9d-a164c6f8009d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfa7b22-d358-4cd6-969c-9c3bae685b5b", "sighting_of_ref": "indicator--c5677a9f-fd77-4300-80cf-16b13e818440", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfcc407d-5f26-40c2-88a9-2aec62681de8", "sighting_of_ref": "indicator--da446a2a-30e3-4a27-8958-00ad45c538f0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27eebd5-b1ee-484a-9c80-2c55a9fc6deb", "sighting_of_ref": "indicator--ab96d145-3842-4140-9051-aedf7fc1e0c8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a95803-3d4e-44bd-8ac7-93508e278823", "sighting_of_ref": "indicator--eba90940-1bfa-4be9-a826-2c05f26d3fa4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be40761-5a0c-4428-b814-cb8c595fe3f2", "sighting_of_ref": "indicator--41f574af-6386-415e-a8e6-85f411345a53", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736f2d38-2d4e-4d78-963a-55103c018257", "sighting_of_ref": "indicator--c9bcd56b-a6a2-46f3-9c75-b20c5b3dd992", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d12b2e7-a94b-4fe1-9805-140698f835eb", "sighting_of_ref": "indicator--9d63d353-dc89-4198-9832-5a5149b8cab4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e656b11b-33d0-4c9a-a9f6-66c18f107f78", "sighting_of_ref": "indicator--221db2a3-3a10-40ce-bfb1-7da00868851d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2931f84e-579c-4a66-8f36-911613669ce2", "sighting_of_ref": "indicator--4aa4503b-d879-4b59-aa1c-4d4562270284", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d1794e-304a-4aa1-81c8-851d86d5e70a", "sighting_of_ref": "indicator--e00381d0-4420-4c10-a63e-b74559e078aa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7bf5ff-3995-42b0-b99e-2a32a3b2dc6c", "sighting_of_ref": "indicator--e00381d0-4420-4c10-a63e-b74559e078aa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2430c0-4cf4-4576-af82-bec53c072746", "sighting_of_ref": "indicator--1b703b76-daea-4b58-9c63-8f7fb35e4817", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7d568b-fc0f-42a3-98d2-4501bbb2a6c8", "sighting_of_ref": "indicator--fe94fc98-bd1a-49cc-8e15-7bcae0ef4f4e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c05608b-1ac4-4627-8768-525ff0d595d7", "sighting_of_ref": "indicator--15fe8a4c-01dc-48ce-b7ea-b7db1400f23e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a813214-1ecd-4232-b794-72b84b8e95a0", "sighting_of_ref": "indicator--67e1ee3b-fa5f-4fc7-aa26-a054e09b5d26", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41fb255f-8557-432a-ba06-1ccfac20753b", "sighting_of_ref": "indicator--67e1ee3b-fa5f-4fc7-aa26-a054e09b5d26", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab4e666-b6b0-491f-aa4b-6562398760e9", "sighting_of_ref": "indicator--67e1ee3b-fa5f-4fc7-aa26-a054e09b5d26", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ba39f9-e6ba-4dc0-9838-85ef08f419e4", "sighting_of_ref": "indicator--8c12353e-1f31-496f-b384-05d6c66877d8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6e8d21-c3b5-41fc-84d7-0211134a3251", "sighting_of_ref": "indicator--8c12353e-1f31-496f-b384-05d6c66877d8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7656ed0-7b60-4d92-ac42-3c6721db8c72", "sighting_of_ref": "indicator--8c12353e-1f31-496f-b384-05d6c66877d8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ae3042-e105-475c-8f4f-62a6c61b4e9d", "sighting_of_ref": "indicator--16b74545-6b5d-46ff-a7e9-23cb669e50e7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76cb0cb9-28b6-40a3-883c-22facc549f5c", "sighting_of_ref": "indicator--16b74545-6b5d-46ff-a7e9-23cb669e50e7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de252489-3341-4851-b525-3c97ed1ce406", "sighting_of_ref": "indicator--16b74545-6b5d-46ff-a7e9-23cb669e50e7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2c0129-d5b3-4b83-bed2-cf3b7b57009e", "sighting_of_ref": "indicator--ce9916b5-16f1-4fcb-8ff4-40e01c12825e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29471a36-07af-448e-a0b2-93e9ea6c4bf6", "sighting_of_ref": "indicator--ce9916b5-16f1-4fcb-8ff4-40e01c12825e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb3065e-b3b9-433d-93d9-ca094f4b4334", "sighting_of_ref": "indicator--ce9916b5-16f1-4fcb-8ff4-40e01c12825e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a8e956-96f6-4950-a3a1-5a140f96096a", "sighting_of_ref": "indicator--b7b3ef78-b3f2-49d3-b862-8c0bbc27437d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267438e3-1e5c-46bd-b679-3c64c78ef27d", "sighting_of_ref": "indicator--b7b3ef78-b3f2-49d3-b862-8c0bbc27437d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e02f93e9-ceee-445c-bddf-054d2a66ed33", "sighting_of_ref": "indicator--b7b3ef78-b3f2-49d3-b862-8c0bbc27437d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab7b086-4466-489a-9585-16aca95edaa8", "sighting_of_ref": "indicator--fd5a5ef8-b612-4420-8bbf-5d07519fb31f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47efbd69-ecda-40c0-9efa-b2b930e6f575", "sighting_of_ref": "indicator--fd5a5ef8-b612-4420-8bbf-5d07519fb31f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73c0d7c-469d-4749-a25b-182cbaffe285", "sighting_of_ref": "indicator--fd5a5ef8-b612-4420-8bbf-5d07519fb31f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36386981-7b67-485b-ba09-42bb96e5b14f", "sighting_of_ref": "indicator--5a68a9a5-f5e3-4589-a3f7-5b49b74ec783", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08e99fb-bc92-4edc-b3d3-3769cff1676e", "sighting_of_ref": "indicator--5a68a9a5-f5e3-4589-a3f7-5b49b74ec783", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1118ef-8767-4761-8908-969eb32d7903", "sighting_of_ref": "indicator--5a68a9a5-f5e3-4589-a3f7-5b49b74ec783", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a84554-c0c9-4f14-ae0a-747c2b0a95dc", "sighting_of_ref": "indicator--038465a3-aad1-4949-b7fe-c40cadd28afd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c4b517-06dc-43ec-8767-8dddaf2870d2", "sighting_of_ref": "indicator--038465a3-aad1-4949-b7fe-c40cadd28afd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0418591a-2157-44fb-b31c-01bef4084168", "sighting_of_ref": "indicator--038465a3-aad1-4949-b7fe-c40cadd28afd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b43a42b-e5d8-44dc-b47d-2e70442d12e6", "sighting_of_ref": "indicator--3d2e22a8-8dc5-4e16-af93-95a945b24d8e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fa677d-be6f-4ff1-83ed-ffca3bc0bb54", "sighting_of_ref": "indicator--3d2e22a8-8dc5-4e16-af93-95a945b24d8e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74896fc-d36d-4d82-ba30-4f069d61f606", "sighting_of_ref": "indicator--3d2e22a8-8dc5-4e16-af93-95a945b24d8e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c883db-5fc2-49d8-9927-c7c765074bac", "sighting_of_ref": "indicator--673af2ca-3f96-4f82-b065-72b1ce1c9709", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b273ca9-de76-41a5-bf6c-b4222e8f428b", "sighting_of_ref": "indicator--673af2ca-3f96-4f82-b065-72b1ce1c9709", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f882085-2074-482d-816c-907ef6029a46", "sighting_of_ref": "indicator--673af2ca-3f96-4f82-b065-72b1ce1c9709", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed81cb6-39e5-470a-bb54-45ae9280e2a5", "sighting_of_ref": "indicator--e7984107-3daf-4e8b-89f7-97c0d9b0582a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7343446c-0257-4e33-b2b7-4c4eaef90023", "sighting_of_ref": "indicator--e7984107-3daf-4e8b-89f7-97c0d9b0582a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d58702-f4a0-4777-ae0e-3d3cb007b5e4", "sighting_of_ref": "indicator--e7984107-3daf-4e8b-89f7-97c0d9b0582a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da8c7d0-4be8-4734-8ee3-a7f65ad7c3a8", "sighting_of_ref": "indicator--2f3d8d65-a899-4fd4-b2f7-1957d4cb746b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0e42a7-b23c-4c31-a6cc-6fd73c8271dc", "sighting_of_ref": "indicator--2f3d8d65-a899-4fd4-b2f7-1957d4cb746b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe3f4f5-705c-4a77-93c7-6a6ea183178d", "sighting_of_ref": "indicator--2f3d8d65-a899-4fd4-b2f7-1957d4cb746b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5dc1e5-7415-4ec1-a0a8-b617b1716068", "sighting_of_ref": "indicator--e9227d57-5e6b-4c3b-bcd7-12ff72515396", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4984da3a-18a1-42da-9de1-f4f5dfc99f03", "sighting_of_ref": "indicator--e9227d57-5e6b-4c3b-bcd7-12ff72515396", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac29f6c-099b-41af-b4f6-71d73b53b182", "sighting_of_ref": "indicator--e9227d57-5e6b-4c3b-bcd7-12ff72515396", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52741f6f-04d4-4da3-be3f-4b6b0b11e272", "sighting_of_ref": "indicator--251f69f4-b55c-4e3d-b3d2-7916d2277b83", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25bfc0fc-13aa-4072-a526-f8961bca3a80", "sighting_of_ref": "indicator--251f69f4-b55c-4e3d-b3d2-7916d2277b83", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493c3d94-3c7a-49e3-a54d-859c0c4a6443", "sighting_of_ref": "indicator--251f69f4-b55c-4e3d-b3d2-7916d2277b83", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e08246-3548-46d8-890d-4ef5d01d177e", "sighting_of_ref": "indicator--2e06da5d-5b3d-46b9-9a22-23930dc366d2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c507a994-f04d-4a17-8644-428b5e1b5861", "sighting_of_ref": "indicator--2e06da5d-5b3d-46b9-9a22-23930dc366d2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2982c5c4-8fcd-4080-a410-11be9f178d0a", "sighting_of_ref": "indicator--2e06da5d-5b3d-46b9-9a22-23930dc366d2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee666ea-25c1-4114-a648-5041640931c4", "sighting_of_ref": "indicator--db3adde5-e798-4bc9-8deb-71e28b9dd928", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0dc73f-7eb4-45ee-b335-c0db3b6643a1", "sighting_of_ref": "indicator--db3adde5-e798-4bc9-8deb-71e28b9dd928", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc977def-d4a9-447a-8c23-be9028dcd5d6", "sighting_of_ref": "indicator--db3adde5-e798-4bc9-8deb-71e28b9dd928", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d96e9ffd-e0af-4059-a556-4a7fbfef4c6c", "sighting_of_ref": "indicator--8d33940b-5937-4e30-8af8-77824be28eb1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3380c668-a021-452e-bb65-f5514152ce2a", "sighting_of_ref": "indicator--8d33940b-5937-4e30-8af8-77824be28eb1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28dd11b1-2dc3-4b83-a0c4-d0c65e043f1f", "sighting_of_ref": "indicator--8d33940b-5937-4e30-8af8-77824be28eb1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b8016c-5715-403f-960f-d54f8050d108", "sighting_of_ref": "indicator--2bd47fb7-9789-47f7-900e-f97eec98589b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ee9b71-cea0-4643-8d8c-dec8542fecf4", "sighting_of_ref": "indicator--2bd47fb7-9789-47f7-900e-f97eec98589b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477a597a-7080-4137-acd9-0db5a0a98faa", "sighting_of_ref": "indicator--2bd47fb7-9789-47f7-900e-f97eec98589b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd12d53-740c-47be-85b5-fd9e55587a9f", "sighting_of_ref": "indicator--15071aa3-3a28-4c37-ae24-a389df2b3d43", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311e6669-5101-4a8d-a197-af57f8f3bf89", "sighting_of_ref": "indicator--15071aa3-3a28-4c37-ae24-a389df2b3d43", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1e04aa-b9b5-4687-a88f-8380d55931ed", "sighting_of_ref": "indicator--15071aa3-3a28-4c37-ae24-a389df2b3d43", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b844cb-5d27-4e0a-9565-bfead2f8f4ae", "sighting_of_ref": "indicator--d749e452-0ca0-4058-93a5-7d02dfead0c8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1f3775-9cef-4509-b7a9-1851f788e255", "sighting_of_ref": "indicator--d749e452-0ca0-4058-93a5-7d02dfead0c8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847b5dae-b87e-4ebc-8617-df49d11e6c12", "sighting_of_ref": "indicator--d749e452-0ca0-4058-93a5-7d02dfead0c8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf5ab71-e323-4ee5-a0a1-3cf687b2b64c", "sighting_of_ref": "indicator--46a14bd0-1715-4330-aab7-e0f240599ad8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085b9f26-8464-4799-9df8-f1f8c8289d2f", "sighting_of_ref": "indicator--46a14bd0-1715-4330-aab7-e0f240599ad8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07aee690-9741-4187-a2a9-bf2ab57e60c8", "sighting_of_ref": "indicator--46a14bd0-1715-4330-aab7-e0f240599ad8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fff4b50-464e-4e0f-8711-dfba8390b004", "sighting_of_ref": "indicator--e5782715-e446-4591-81de-0a69b3285f2d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ffa41c-193e-47d9-9410-4553c903af56", "sighting_of_ref": "indicator--4d5c469f-8826-4043-b5e7-c4174845a1dd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e490c5-3876-481f-910c-f55b813d6bbe", "sighting_of_ref": "indicator--fb1c997a-6084-40ba-8c03-893b4e22b42a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a556eb5-19b4-4a0e-b9de-6ba70d3d1566", "sighting_of_ref": "indicator--91bf5069-7db5-4a34-9fd6-a88c5cc9e1e9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d818fc0e-e630-4ceb-b535-4e99bd61dcf0", "sighting_of_ref": "indicator--a6591318-d18f-406c-afaf-29e895fef711", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb762aa1-d297-4240-bb8b-1e032967a459", "sighting_of_ref": "indicator--77914a62-26ea-4349-9e3c-10b999187fcf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d0853c5-feba-4ab8-a44d-e562feb69d68", "sighting_of_ref": "indicator--cbae2e37-354c-4c0e-9df5-da6ec61c538b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a648e886-870b-4164-b96f-febab4eb06d1", "sighting_of_ref": "indicator--64d1000b-3d87-45c9-9fc5-3cff0bcdecc2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e13d489-cc74-44fd-9357-29bb1a7c1383", "sighting_of_ref": "indicator--64d1000b-3d87-45c9-9fc5-3cff0bcdecc2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc02936-5400-4fe6-887d-89b503de3dc0", "sighting_of_ref": "indicator--64d1000b-3d87-45c9-9fc5-3cff0bcdecc2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdfb030f-6d32-4fce-84b1-3a72975ff291", "sighting_of_ref": "indicator--bf4b3973-1a56-4426-b0af-c1812c59ab92", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab4c465-15e0-4182-83c0-79615eaff3d8", "sighting_of_ref": "indicator--83d334e7-13d5-4fb4-a337-31b41d3ec70f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88188637-dda8-4ce0-b6fe-d88a80c646a3", "sighting_of_ref": "indicator--8eef1af0-3ae5-448b-9457-5f939f0954d1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909d8fc1-5987-4d11-a4f5-4b2d80ccf57e", "sighting_of_ref": "indicator--fab0e5d1-28f1-4492-b4f0-b67a77921b69", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62906cc-362b-44d0-9230-18c127272e19", "sighting_of_ref": "indicator--fab0e5d1-28f1-4492-b4f0-b67a77921b69", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76173067-c1a9-4ec9-ba8c-9a064cc44e6e", "sighting_of_ref": "indicator--fab0e5d1-28f1-4492-b4f0-b67a77921b69", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67cb40a-82ae-42f5-b3ef-44dcab67c7da", "sighting_of_ref": "indicator--1cf23c84-ced4-4437-80ee-7144f5502d07", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f42608-0083-4541-b5dc-cca8be144cca", "sighting_of_ref": "indicator--da3b7af6-6bcf-4de5-ba6e-a8f74845de63", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff6e6f5-6f2c-481a-9241-ccf7aa24c5bb", "sighting_of_ref": "indicator--e9543071-56d3-4eb9-bdc8-6a5c2fa748e6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2611117f-0f2c-43a9-b3b2-3c93fe78664e", "sighting_of_ref": "indicator--e9543071-56d3-4eb9-bdc8-6a5c2fa748e6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec322cc-6422-4d41-a48d-9d3e3cc4e6b9", "sighting_of_ref": "indicator--a21c9959-b09e-487b-a69e-bf9ec1617a23", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf58db63-0aba-470f-9bb2-ac060fcc421c", "sighting_of_ref": "indicator--a21c9959-b09e-487b-a69e-bf9ec1617a23", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--115946a3-aeb4-4cfe-b46f-6f613b087711", "sighting_of_ref": "indicator--b46643b5-fe7b-4fc7-a6d7-08774ca8e1db", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42805ae1-3d93-4a57-b69b-a495a06a202c", "sighting_of_ref": "indicator--0a3320a4-15f2-49ca-8cfe-16179a4faa41", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d095dcfc-dc59-43d2-9fd5-80556b360c97", "sighting_of_ref": "indicator--d2e20398-467c-4913-a933-d00f91303cf8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b0446ab-f1d2-4d3d-832a-8f1995e64a6f", "sighting_of_ref": "indicator--d2e20398-467c-4913-a933-d00f91303cf8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887f8c56-a547-41e1-bbf3-1fae256e9645", "sighting_of_ref": "indicator--d2e20398-467c-4913-a933-d00f91303cf8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf24275-f37a-448f-af69-731ac3e63d48", "sighting_of_ref": "indicator--e465b0dc-0e93-4e63-b056-fc6eaad553a7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d35374-5e23-4791-a744-029f8adbf958", "sighting_of_ref": "indicator--eca27884-b9c1-4c14-a92d-013c0c5a7052", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6303dbb-049c-470d-86c0-e13fc352cf62", "sighting_of_ref": "indicator--8b34d93a-3489-431c-9b69-7a7b68922db7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6074fc75-2050-42e7-8b51-a617295c278b", "sighting_of_ref": "indicator--0309bf98-9601-4d9b-93e2-2a872d72ee67", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a93b352-c19b-41ef-9310-887df354939f", "sighting_of_ref": "indicator--0309bf98-9601-4d9b-93e2-2a872d72ee67", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba8a7df-8ab8-4ddf-8f8d-52aca336770b", "sighting_of_ref": "indicator--613a7a61-8724-4a6d-8bcf-ef7bfe389453", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c51217-076d-4f1a-9e83-fefaa39af8a7", "sighting_of_ref": "indicator--c6b71a87-d9a0-459f-a257-b3a2d71bed6f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ad798d-4ddc-45b2-95e4-ba89215166fe", "sighting_of_ref": "indicator--6ac49173-b845-4c0b-82a6-ec2fb177380c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1a421f-45a3-4474-a4b8-c78a921344ef", "sighting_of_ref": "indicator--b686f4c3-e7c4-4ab0-9de0-40c79ac5947a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed7b7a2-5d34-4e1a-ba33-d5056ae2b562", "sighting_of_ref": "indicator--cb0781eb-8201-4953-9e56-795c544f07ab", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fd708e-6a3c-4443-a6a5-08f990e042cf", "sighting_of_ref": "indicator--b6d25b93-a386-4c79-af37-a4755b10ab2b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516612d6-e77a-4d4d-80a2-a97c6077892f", "sighting_of_ref": "indicator--b6d25b93-a386-4c79-af37-a4755b10ab2b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2fc0e2-a77f-46ba-a984-52771e44d97f", "sighting_of_ref": "indicator--b6d25b93-a386-4c79-af37-a4755b10ab2b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b1e10c-0922-4208-9cc9-3adf61337304", "sighting_of_ref": "indicator--3b433849-5730-4f76-b0ea-09455a1a5dc5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2138e38c-55bd-4878-98ba-454e1c249027", "sighting_of_ref": "indicator--3b433849-5730-4f76-b0ea-09455a1a5dc5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf9e491-ca2b-43cd-984f-c49a82dd6060", "sighting_of_ref": "indicator--3b433849-5730-4f76-b0ea-09455a1a5dc5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae48cde7-f6bd-4baf-b1da-e46cc4f4700f", "sighting_of_ref": "indicator--aa7d7d3b-9a58-4901-b420-f71b1fdc259a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15de69d0-fe94-4396-a8be-440e7f8ce8bd", "sighting_of_ref": "indicator--aa7d7d3b-9a58-4901-b420-f71b1fdc259a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64673ef7-8f86-44f4-ab1c-d375e36e50ba", "sighting_of_ref": "indicator--aa7d7d3b-9a58-4901-b420-f71b1fdc259a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b687cc-af11-44d7-96fe-9b5e0b48b18a", "sighting_of_ref": "indicator--03a83491-6245-4ba8-96fc-c049014ca753", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2c5b38-740f-4a49-a285-932dc5cacd03", "sighting_of_ref": "indicator--22a7be96-eadc-42f9-a148-58ecc1146806", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e0aeb4-1f65-4b8f-a323-6d6ed786dfe9", "sighting_of_ref": "indicator--22a7be96-eadc-42f9-a148-58ecc1146806", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0fa3c52-110b-4598-81d3-b8db195e7877", "sighting_of_ref": "indicator--4f044ecc-781f-4937-933b-d90c11692bd9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e22103e-052c-4114-9f2d-a458ee940220", "sighting_of_ref": "indicator--4f044ecc-781f-4937-933b-d90c11692bd9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18f1c51-58cb-4f33-bcda-bbc8901aab08", "sighting_of_ref": "indicator--bb6ce2a2-ec6c-44a0-8524-db6932a13ea1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96a8e5c-45b7-44f9-81ed-513ed33555bf", "sighting_of_ref": "indicator--8b02e1f3-3e7d-4bbd-a0ff-131cc134baaf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fade0561-de43-4f51-8e30-8cb8dbe7a450", "sighting_of_ref": "indicator--5fbc392d-35e1-4c25-933b-add1a2f2dc7b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59dc34a6-ae14-4b16-a81d-5ab7f258d58b", "sighting_of_ref": "indicator--25b984fd-e43e-4249-87d8-526517026921", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f37e21-e130-4255-aaab-10fdc1a5a38a", "sighting_of_ref": "indicator--934cde59-bf2e-4016-990b-0a05b64aacb4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d83bdbf-35cd-4153-af69-fea74903d983", "sighting_of_ref": "indicator--c34987bf-ade0-4426-981d-b6919eb95e6b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00fd4c2a-b682-4626-a0fe-08e7b7f8c535", "sighting_of_ref": "indicator--c34987bf-ade0-4426-981d-b6919eb95e6b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a34d257-0959-4a8e-820d-b0253fd9d751", "sighting_of_ref": "indicator--654f0b51-3113-41a4-955b-b8bd34ae1370", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbae4c4-1d4d-44bd-bbcc-e42164cce818", "sighting_of_ref": "indicator--f7ecba02-5e03-4453-ae7d-47b12a5f9da3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc767bb1-d807-439a-afe6-8fd8a0a22663", "sighting_of_ref": "indicator--4662c4f7-700f-4258-ac29-1bbf2d592735", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0bcca7-1d40-4dd1-825d-9e0f46661c55", "sighting_of_ref": "indicator--b3dfcbb9-10d5-4d2c-bf74-35c947314b1f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00d97e3-0ee5-4894-8c96-d5f9928f0713", "sighting_of_ref": "indicator--b3dfcbb9-10d5-4d2c-bf74-35c947314b1f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d00c93-6621-481b-b153-90f429010dfb", "sighting_of_ref": "indicator--b3dfcbb9-10d5-4d2c-bf74-35c947314b1f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905703ac-144a-47b3-a0c5-f23df594bce0", "sighting_of_ref": "indicator--8902c238-0d78-4242-8df1-f4b8253ebcef", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c643ff85-2ceb-403d-b736-717b640808a5", "sighting_of_ref": "indicator--f37b9961-65fc-4445-b883-db5af26a76ba", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0adcbe9e-1f27-4ad3-962f-d50c111d9c48", "sighting_of_ref": "indicator--5947432b-5e81-4b73-99d2-449b3365e54b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1945751c-2d92-4d4a-9cc2-cf976c21950a", "sighting_of_ref": "indicator--5947432b-5e81-4b73-99d2-449b3365e54b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80cd8da1-1034-4d64-b042-7b5e3c535c52", "sighting_of_ref": "indicator--913c055c-b627-4a8d-b76f-7b0d02959d68", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce07737-e60b-41f6-9353-bb65258892cc", "sighting_of_ref": "indicator--5face34a-dc21-45e4-aa63-f0b6ee7c9677", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e2c86c-4f47-4429-8b97-6eddffc47275", "sighting_of_ref": "indicator--5face34a-dc21-45e4-aa63-f0b6ee7c9677", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e32616c-c884-4e27-8c0c-34bc990868c7", "sighting_of_ref": "indicator--ef2c1e92-f010-4542-b8e8-984c6075385f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ede3a7-c4ab-4779-a659-0181db91d7a3", "sighting_of_ref": "indicator--b3081bd1-b1b4-4c08-8a29-c33c939ac6c8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e98a505-ba17-4a2f-9548-a0ee5d239ae8", "sighting_of_ref": "indicator--c7183dd2-86d0-457d-8cd9-b3db597d3e93", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ddbdca2-7def-44b5-9a3b-a0173e30dd88", "sighting_of_ref": "indicator--c7183dd2-86d0-457d-8cd9-b3db597d3e93", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38fc6ef4-0e80-4b30-ac70-d9167fd7144e", "sighting_of_ref": "indicator--d1a7d9e0-7c47-4bb2-9e0d-afac25e7f9db", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9fbdff-dd81-41b7-8b46-03c0b3625faa", "sighting_of_ref": "indicator--d1a7d9e0-7c47-4bb2-9e0d-afac25e7f9db", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e9900a-6214-4ff1-89b8-94a2ea63a75e", "sighting_of_ref": "indicator--91a853f2-4ba5-41f2-91fc-b1af652bf6c8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8e7a78-3c5c-4e41-9e22-a4617b1e072a", "sighting_of_ref": "indicator--7043c2f0-f60e-44d4-8c27-babf9fd07b7a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38f7478-ed42-4226-9c10-9000ed995ca7", "sighting_of_ref": "indicator--a97c6cd0-6ce7-4395-896e-bdf4bd356642", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687541d5-c8d4-458b-afd9-7d5f2fb446ab", "sighting_of_ref": "indicator--dcae64a9-e7f0-4309-a8ec-dee6a2943b48", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05178d39-132b-494c-94f0-c8f937dcb5cc", "sighting_of_ref": "indicator--3b3bfda8-da00-4d93-898b-e45ac2f88e21", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02af78c-2589-4d4e-af9a-159e7091b6bd", "sighting_of_ref": "indicator--b2639656-9a4c-44d1-bfd6-559ec73c246d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6120a9-83d7-44b3-a788-d9f0a7548a4d", "sighting_of_ref": "indicator--8fe2c62e-4842-49ca-8a11-1cecca645f29", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2105f5d2-677a-4d7b-b9d2-f11a1f309213", "sighting_of_ref": "indicator--08b343fe-1e43-462b-9330-f58706859743", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36f5691-981f-4ab0-a8d6-7817611ce83b", "sighting_of_ref": "indicator--08b343fe-1e43-462b-9330-f58706859743", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45bf9e95-f40c-44c0-ae38-05c5d848dd9b", "sighting_of_ref": "indicator--08b343fe-1e43-462b-9330-f58706859743", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14393e0d-2f99-4340-8ca3-129529894d2f", "sighting_of_ref": "indicator--abfffe4f-3e1b-46ce-92b6-fdd508db6071", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f95926-2426-49c6-833c-7ec7eeb1f6f3", "sighting_of_ref": "indicator--46f8dca6-10d9-46ec-b04f-016ff34fcfbb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e4e150-7131-4785-8b97-6154060be457", "sighting_of_ref": "indicator--30dfed20-c779-4eba-887c-4e72d0571116", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f0c886-5d04-462d-a08b-70c036fdc8f1", "sighting_of_ref": "indicator--4686b3ba-789b-4931-bfd2-a436f962c975", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42247d6d-5273-470c-8477-95091b3acfb6", "sighting_of_ref": "indicator--23472384-f027-4ef4-a622-0fde9afdf33f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e589db65-9d3f-4edc-9c88-7cf2f7f30325", "sighting_of_ref": "indicator--23472384-f027-4ef4-a622-0fde9afdf33f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22b3bac-9c66-46b8-8edb-360c1684d8bb", "sighting_of_ref": "indicator--f9c41560-d426-490f-8c21-005eb76d298d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45feda6c-7056-4a50-98cb-927166f8e0a8", "sighting_of_ref": "indicator--017f7bfc-6f11-4eb8-8ff2-52ff540c1f01", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80252dc-fa04-4062-b33c-5fd40ed591df", "sighting_of_ref": "indicator--1abdcb14-71e7-4a14-b2b9-94c22fb9b7c0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89631d68-6ee7-4342-b5af-84b6448d5e96", "sighting_of_ref": "indicator--1abdcb14-71e7-4a14-b2b9-94c22fb9b7c0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50a4893-3931-4090-aeaa-2b8cc63b2d90", "sighting_of_ref": "indicator--b402eacd-8578-4b96-89f1-2e385c4aa550", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c6b5d6-74ef-471b-b6b5-f3d3a0f0a9af", "sighting_of_ref": "indicator--b402eacd-8578-4b96-89f1-2e385c4aa550", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dacdebe7-8df3-4079-88f4-5c18862fd976", "sighting_of_ref": "indicator--b402eacd-8578-4b96-89f1-2e385c4aa550", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b63ea87-3556-4828-a44e-f353702e373f", "sighting_of_ref": "indicator--7a65aeed-07b3-4bfb-bb9b-47506aeb52a7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d192423-904c-4150-93f3-71abd345335a", "sighting_of_ref": "indicator--7a65aeed-07b3-4bfb-bb9b-47506aeb52a7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d158a9b-069f-444d-a5d6-cd19645ef058", "sighting_of_ref": "indicator--1d9b1759-705d-4994-89a8-b18239ee68fc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e3a193-04a2-468b-a488-6d6bca346e96", "sighting_of_ref": "indicator--a83801fd-5538-42ce-938c-6faaf3a1ea39", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36603a4-9fb9-422b-bc2b-bcc158db33ba", "sighting_of_ref": "indicator--a83801fd-5538-42ce-938c-6faaf3a1ea39", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a647d2b-03d3-4da3-8382-39e154b026a1", "sighting_of_ref": "indicator--8a02c7f7-dd20-4f1f-bd3a-251b8cd50d7a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ec7432-20aa-462e-bf37-b7884c0a9321", "sighting_of_ref": "indicator--cbd83173-b675-47bf-8903-f1392bc48176", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ca6ea5-a79c-4e5d-9c3f-604e4e34570f", "sighting_of_ref": "indicator--cbd83173-b675-47bf-8903-f1392bc48176", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611b506e-0483-4a3d-9aef-e508d55854f1", "sighting_of_ref": "indicator--e0b10e35-3f1c-491a-973b-81fc8a5d77fc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4411095-702a-450f-9f59-9e999bd88229", "sighting_of_ref": "indicator--40ee3418-99ad-4068-be75-7492bcef766c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49b90b1-2061-44eb-8b49-d3994ce0bbff", "sighting_of_ref": "indicator--165d35a2-1add-43af-9818-d4dffb0df1ef", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08eb2c66-4c75-42ee-b339-9170c2c5f11e", "sighting_of_ref": "indicator--15e2c33d-e732-4a15-ae9b-bfbdc25d6b02", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1817b96-343c-48a3-a895-bef0afe63f53", "sighting_of_ref": "indicator--67cb3455-7a78-470c-9b07-95c7f0381919", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c0fd6b-5c7f-43a8-84c1-2b4f1e6bf7ee", "sighting_of_ref": "indicator--163c431b-ff62-4b8c-be86-bfbd10220559", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d45e88-1146-49a7-8d0a-46e0b7dc6f23", "sighting_of_ref": "indicator--0ff86005-dbb8-4bde-ad2a-6d1b3ca7dc23", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0475c047-a9b4-487c-8ffe-08e9f94d4676", "sighting_of_ref": "indicator--329d91d7-3611-4f5d-94ca-026bbbe4d0fe", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1297ade-d807-43f6-bb1a-40da6066fde6", "sighting_of_ref": "indicator--235fd4ee-e35e-480b-b5ba-e02df66e7dfd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0772aa0a-8596-4da4-8c5e-6935a2d47031", "sighting_of_ref": "indicator--235fd4ee-e35e-480b-b5ba-e02df66e7dfd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9502d7c9-28dc-410c-bd87-97d0989d43a8", "sighting_of_ref": "indicator--235fd4ee-e35e-480b-b5ba-e02df66e7dfd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d0f268-26bb-4eab-9259-bc75e315452c", "sighting_of_ref": "indicator--ccaccb02-ab93-4aeb-a8c7-bf3f4c0cd501", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a928c4-f837-499c-8cd8-c94036781679", "sighting_of_ref": "indicator--ccaccb02-ab93-4aeb-a8c7-bf3f4c0cd501", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1fe0ee0-e88e-40f0-b978-ad49d0ec9b57", "sighting_of_ref": "indicator--104a803c-f3ae-4f99-904d-d70c64b4cbc1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5ab356-7089-4d70-b2dd-a566293b0d64", "sighting_of_ref": "indicator--28986db8-22cd-419a-8ad3-f3844783fd9d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d473babe-baa1-4141-a7c7-0d69090c565c", "sighting_of_ref": "indicator--28986db8-22cd-419a-8ad3-f3844783fd9d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbaf0f37-7e33-4cc5-87e2-4aa7ac079549", "sighting_of_ref": "indicator--138a0661-13c3-4e4f-baed-95e447644c76", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf5f1e3-9006-4fd0-af1d-0033b2cd471e", "sighting_of_ref": "indicator--549c9dba-1e83-4845-a55b-84b6f8a3ab31", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83476c85-5ab5-4e92-a80c-735722ef26a7", "sighting_of_ref": "indicator--549c9dba-1e83-4845-a55b-84b6f8a3ab31", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77424543-8348-4b8c-87de-c341eebe025b", "sighting_of_ref": "indicator--549c9dba-1e83-4845-a55b-84b6f8a3ab31", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c29e65c-3791-4a58-993a-237c5ed6ba70", "sighting_of_ref": "indicator--900062b8-dc72-4cb6-ad6a-526539cc2132", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93c35c0-6795-49a8-b408-72207667b9ce", "sighting_of_ref": "indicator--7cd093e9-14b1-4ec2-8d96-45900eac1eb3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11a1682-f0d8-4081-bd45-00bb21a9058c", "sighting_of_ref": "indicator--ce4a4f33-9593-4d79-b577-7e8a3ae83de5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0413ac2e-1c53-4d11-b128-c312201bb65a", "sighting_of_ref": "indicator--1a87861d-2024-4d8c-be52-036a148d3885", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4c9a72-6e4c-4199-9abc-40d6f6748d57", "sighting_of_ref": "indicator--1a87861d-2024-4d8c-be52-036a148d3885", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226c13b1-7baf-47ee-84d2-eb40511665df", "sighting_of_ref": "indicator--421fe66a-708c-48f3-bbbb-de3c4285f2f7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814a943e-0720-4c88-a418-84ffe198a8db", "sighting_of_ref": "indicator--421fe66a-708c-48f3-bbbb-de3c4285f2f7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466c67ef-628b-4b9e-972f-54184ed60db0", "sighting_of_ref": "indicator--1380ce71-5b95-4b92-bd02-efcb215fd046", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565a2a56-6519-4fa7-8767-d5a2a7640672", "sighting_of_ref": "indicator--71368af6-ca22-4e42-bb1d-95aa1b20cfba", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d8e3ca-3bd4-4be9-aa64-0e4c98f03a20", "sighting_of_ref": "indicator--71368af6-ca22-4e42-bb1d-95aa1b20cfba", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804d736f-6351-45c1-8a67-7403fb3039ed", "sighting_of_ref": "indicator--71368af6-ca22-4e42-bb1d-95aa1b20cfba", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2937f35e-caf9-44e3-bc03-afcd186e03ff", "sighting_of_ref": "indicator--ed6273c6-3ec8-442c-ac3c-8a3ff9815944", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639ec0a5-a59c-47b8-9e67-bfdd7821d24b", "sighting_of_ref": "indicator--ed6273c6-3ec8-442c-ac3c-8a3ff9815944", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2fc89ac-4173-4ac1-b0f2-40a8bbde8b03", "sighting_of_ref": "indicator--6ad22499-5014-42e9-b96b-93c7349c9fbd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429aac2f-8c79-4989-954e-d91f267604c5", "sighting_of_ref": "indicator--d3e5d1e4-2d55-427f-a24e-f112b5c5571b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6b211e-b2ed-4e8c-a5da-3900d4c0ff22", "sighting_of_ref": "indicator--fcc242ea-91ad-490e-8733-14c7813454a8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d721a25-e112-419e-8cc8-361def2fe267", "sighting_of_ref": "indicator--67961ce6-05e8-43e3-8c9d-74c19108ea88", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb8b571-077a-4228-a1d0-f7d5d5a92e48", "sighting_of_ref": "indicator--67961ce6-05e8-43e3-8c9d-74c19108ea88", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63651446-acd7-4017-9018-250160d6cac8", "sighting_of_ref": "indicator--67961ce6-05e8-43e3-8c9d-74c19108ea88", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd47575-f8d2-4474-aba2-8c46dee77ab1", "sighting_of_ref": "indicator--7c90a731-4c04-4ecf-bc82-d71f563bdd0a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281a9797-314e-40aa-bb73-912b5d69ef0d", "sighting_of_ref": "indicator--7c90a731-4c04-4ecf-bc82-d71f563bdd0a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8bd0ef-6cc2-470b-a3c8-dac0e07f85ee", "sighting_of_ref": "indicator--b7301da0-6ad7-46b4-93c1-0b9143b9d277", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034d756f-8003-4469-9152-34f4a7d58e94", "sighting_of_ref": "indicator--b7301da0-6ad7-46b4-93c1-0b9143b9d277", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9575ef6-c040-4c70-954d-17aeab311031", "sighting_of_ref": "indicator--fc31f2df-14cb-42b8-b586-c05ed80a387d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061cf378-4169-418d-9955-62fe82392eb5", "sighting_of_ref": "indicator--fc31f2df-14cb-42b8-b586-c05ed80a387d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a062aea-dd9e-4752-a87a-624add79e5cd", "sighting_of_ref": "indicator--58fbe0bb-2af6-4ed6-9110-ab40c35c42eb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d30696-13bd-4985-a93e-f5147099ded2", "sighting_of_ref": "indicator--58fbe0bb-2af6-4ed6-9110-ab40c35c42eb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b684d894-b916-4516-a829-c8959bd9e923", "sighting_of_ref": "indicator--46e468ff-c124-41a6-bc3e-8c97b3599d01", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1bd5905-4eb9-4cac-860a-d081c13329cb", "sighting_of_ref": "indicator--46e468ff-c124-41a6-bc3e-8c97b3599d01", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a52f5f6-4379-49eb-a977-d94a49d92fe9", "sighting_of_ref": "indicator--95d73050-2d64-4f8b-8822-ee658dad7160", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce65a2e3-cb9e-4481-b259-42eac420b27e", "sighting_of_ref": "indicator--95d73050-2d64-4f8b-8822-ee658dad7160", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ddd24e-9f1c-4d8d-92ae-b0a9bc567089", "sighting_of_ref": "indicator--aa379aa7-7bf7-4d82-82a7-00db2d25dc89", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f21fb99-177a-458d-8c9a-86ec6c661ce0", "sighting_of_ref": "indicator--e6bd3a93-a4fc-497b-8f44-071521c0564f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc06b955-beb5-4b0a-bc65-0f1b3d282472", "sighting_of_ref": "indicator--e6bd3a93-a4fc-497b-8f44-071521c0564f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac20eb0-c215-47b2-afe5-1e0cd7326ccf", "sighting_of_ref": "indicator--d48a2396-374d-47dc-9a0d-02f20aec114e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3643dd9f-1459-4d0e-81f5-5fc66d841cf0", "sighting_of_ref": "indicator--ac2fc62f-c287-433f-96a5-28b6d338bc64", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cfb8fc-be82-4cb4-ac58-159f4d2c6f9b", "sighting_of_ref": "indicator--c55a3a81-aa43-4730-a5b3-8756ce175b1d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790e083a-56ae-45dc-a197-ecee097dc3b9", "sighting_of_ref": "indicator--216a4c21-843a-4857-902d-847ae585aad1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d798350-590c-4b66-805f-f4726e233900", "sighting_of_ref": "indicator--216a4c21-843a-4857-902d-847ae585aad1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b63c77-7e61-434f-b395-00218413ed0c", "sighting_of_ref": "indicator--216a4c21-843a-4857-902d-847ae585aad1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955d306e-71a4-4f2f-94e5-3e9bfe6c1f51", "sighting_of_ref": "indicator--872d883e-d96f-417d-9171-31fa1a90d137", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154c41ac-aa3d-46c4-8d63-905338662b94", "sighting_of_ref": "indicator--e64093e8-6cba-402e-a09e-7f0beb2641a4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4cb40c-9e39-46c2-8ed0-a8f109a22150", "sighting_of_ref": "indicator--e64093e8-6cba-402e-a09e-7f0beb2641a4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993111c2-f185-4036-9d20-a1dae22d8c61", "sighting_of_ref": "indicator--5523fa02-481e-4eed-b96f-c42f85405d70", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7bcf1d4-28c5-4d2a-a786-098366c6db38", "sighting_of_ref": "indicator--5523fa02-481e-4eed-b96f-c42f85405d70", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bce368-102b-4d1e-9a82-a5fe6864c34c", "sighting_of_ref": "indicator--6b2be5ad-73be-455f-adee-ca6d5b2e5498", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fda1b0-01b2-4559-a721-2b19d2570800", "sighting_of_ref": "indicator--a19415b3-e156-4a60-9926-929b8bbda193", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626722a6-24cb-40f6-8ccd-f2fc8730dc8b", "sighting_of_ref": "indicator--8168229c-2d23-4d9a-90e7-8e7060c0fcf1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793d3234-663d-4bfa-b07a-6e46c4d4ca18", "sighting_of_ref": "indicator--a07b3b95-f013-4d1b-b0a0-434552cebcdf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab14f0d-5e08-46e6-9f6e-a00e034b8eca", "sighting_of_ref": "indicator--a07b3b95-f013-4d1b-b0a0-434552cebcdf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f05140-772c-449c-8e9f-c23c8d1b0da3", "sighting_of_ref": "indicator--147f16ef-9eb8-4569-80fa-7d045a6e83b6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7bc8d1d-f7c8-488a-837b-ccbdcd7de148", "sighting_of_ref": "indicator--147f16ef-9eb8-4569-80fa-7d045a6e83b6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b6a548-adeb-481a-82c2-92537383b22d", "sighting_of_ref": "indicator--4e53722d-8ccb-4022-b7a7-973e14f327a0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17d6303-6930-4c25-b966-ac76bf06cbdd", "sighting_of_ref": "indicator--b78f5533-2303-4eb4-ae54-55694b100d83", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce562ece-5885-4dc0-93e8-184cc108dd2b", "sighting_of_ref": "indicator--90655b55-d82a-4d19-9170-c30d42d7ac1c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4bc0d5-ab1c-4766-b198-2949051155b2", "sighting_of_ref": "indicator--90655b55-d82a-4d19-9170-c30d42d7ac1c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2578e854-fa6c-4436-89c2-978046bb9c80", "sighting_of_ref": "indicator--90655b55-d82a-4d19-9170-c30d42d7ac1c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d04bf8-65af-4865-a5dc-e877c92a62a9", "sighting_of_ref": "indicator--3741ea6a-8a50-4190-b425-702a1e5eb12d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91f82c3-f20e-456d-9216-3cd2d5316a13", "sighting_of_ref": "indicator--61a4c46f-1b72-4ede-9f87-8e17f6b81db3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5f0dd5-3b6c-4d89-aa1f-228e4c7281ee", "sighting_of_ref": "indicator--1e50162a-b85b-49c2-8ed9-17057153fd46", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--342a7b15-5dbc-4156-8c94-3ebca6678095", "sighting_of_ref": "indicator--1e50162a-b85b-49c2-8ed9-17057153fd46", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44265399-b367-4de5-8e45-8aadea5cf3e6", "sighting_of_ref": "indicator--69170383-5ea9-46ec-8602-1a6a664f294e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9031cd5-cfa7-4614-9955-3c57d1ff260b", "sighting_of_ref": "indicator--073b3c5b-ac4f-4f5c-934e-8be74be56cc7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0518686-9052-48d8-997a-cf9087db3ab1", "sighting_of_ref": "indicator--35a6cd27-d012-4da4-bc22-e91b5acfb3c6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28de56d5-eb5d-433f-9a21-3d1102c1d2f3", "sighting_of_ref": "indicator--4fca30be-c762-4afc-aac9-9a92a0d19199", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3e9e99-90e3-4f15-988d-d91a26b9c6e4", "sighting_of_ref": "indicator--483310cb-9d2b-4b35-afbd-c8f824c764f5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5a7636-c828-4ca8-bfde-955ef9f8e324", "sighting_of_ref": "indicator--26b705f9-e152-47fe-b89b-38323a0b2507", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a6f1ed-a1e3-4f69-8349-f5d4ce1edf24", "sighting_of_ref": "indicator--44ffb717-7882-4d1a-b4bd-a32621a13503", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b2c3ff-15bc-41ce-a867-d144db328a88", "sighting_of_ref": "indicator--24230c9f-471d-4c24-a5b1-9fe39cc64e66", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f246e4-d9da-4a22-a19c-d388ea49d20f", "sighting_of_ref": "indicator--24230c9f-471d-4c24-a5b1-9fe39cc64e66", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d558d2e3-a140-41df-9b0d-bb5f8b62957c", "sighting_of_ref": "indicator--a443a695-c507-41eb-b4e9-3c80ea838978", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf28f8b-34ee-468d-9f4a-a01e8cfa4c48", "sighting_of_ref": "indicator--a443a695-c507-41eb-b4e9-3c80ea838978", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44946e39-4f53-486a-a438-182061366df3", "sighting_of_ref": "indicator--a443a695-c507-41eb-b4e9-3c80ea838978", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9056ba9-55fb-4fda-87ea-72f0fd3a291b", "sighting_of_ref": "indicator--8915e2aa-741a-49ca-8750-f57d5de8192b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5169006-fcca-44d4-9883-80cbfb768d82", "sighting_of_ref": "indicator--24f3e9bd-d370-44cc-af91-3524505b9306", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb57b667-9224-40d5-b63c-e4a271713653", "sighting_of_ref": "indicator--57026a15-0aec-4ad9-a80d-ec30b8c095d0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97398a1-29d1-4287-b47b-db8b34488d77", "sighting_of_ref": "indicator--73e6d239-9c01-4973-b417-aeb99a39170c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e497166b-2d77-4997-8ae5-0d8bb0909959", "sighting_of_ref": "indicator--93bbde61-76ae-490b-bf9b-9201d502886f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ab5e6f-f21c-47e7-9306-9b16f7eda2bf", "sighting_of_ref": "indicator--93bbde61-76ae-490b-bf9b-9201d502886f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da34d956-8a21-4f4a-a79f-4aa0df671606", "sighting_of_ref": "indicator--93bbde61-76ae-490b-bf9b-9201d502886f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d6a431-f0d5-4b00-9104-6984ff81167d", "sighting_of_ref": "indicator--e154d9a7-6065-43cc-9ab0-1fef64ea8671", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d35bc98-e752-4665-a991-9fde51de4c90", "sighting_of_ref": "indicator--f8d4ae9c-ad8e-4d30-8371-09dad9d03e1e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36cf8e3-9430-43d0-9afd-7be16b4e1821", "sighting_of_ref": "indicator--01792a71-9831-4639-8519-abd26e921da2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72d0772-4396-4623-8478-517a02776bd1", "sighting_of_ref": "indicator--01792a71-9831-4639-8519-abd26e921da2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3914758f-6e86-4d26-a9ae-19d8d355bcd0", "sighting_of_ref": "indicator--00edc120-1b3d-4694-83b3-c1f327ca33fd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc57f891-b08e-48a4-b8fb-e96e4c72b58e", "sighting_of_ref": "indicator--79407f5d-a227-426f-8e60-189295d0cf85", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7239edbb-6c69-4f97-96db-30bd1a795227", "sighting_of_ref": "indicator--79407f5d-a227-426f-8e60-189295d0cf85", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd47101-926c-4166-a560-c1d1df9baa8f", "sighting_of_ref": "indicator--dd7b8ed7-f89e-49f9-a5bd-dc1c799253fd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02de0c0c-fde2-4a0d-b55d-276cf9ae5695", "sighting_of_ref": "indicator--a2c1f1a6-4b4d-4e90-87d7-66e1c683ddbf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c1bd67-cd8e-4bde-8e50-fd837cc4af71", "sighting_of_ref": "indicator--a2c1f1a6-4b4d-4e90-87d7-66e1c683ddbf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62852177-7449-4191-ae56-a886d61a6875", "sighting_of_ref": "indicator--a2c1f1a6-4b4d-4e90-87d7-66e1c683ddbf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb229b5-cb89-40ed-8f9c-7c8d3361dd28", "sighting_of_ref": "indicator--c7a3cdf6-2889-4665-9bdc-8a22e1cae73e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90da4022-d96c-4410-b144-a4080766a8f1", "sighting_of_ref": "indicator--c7a3cdf6-2889-4665-9bdc-8a22e1cae73e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41793543-92cc-4122-af91-319627428eec", "sighting_of_ref": "indicator--6f69d4bb-3721-4598-ae6e-ef54e4fef835", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f0fd8e-cd27-48dc-94f2-e54c6c49fc0a", "sighting_of_ref": "indicator--16e165d4-d531-4a32-8997-a354cfb4a908", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138cfd7e-3793-4ea2-8325-ba6b35c4385c", "sighting_of_ref": "indicator--16e165d4-d531-4a32-8997-a354cfb4a908", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ac1af3-7ba7-4c38-80fe-3145a940d1d4", "sighting_of_ref": "indicator--501864df-f757-467a-8aa4-7320aa6dce8c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec9f0a2-63ad-4056-8067-b33096ce71de", "sighting_of_ref": "indicator--501864df-f757-467a-8aa4-7320aa6dce8c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9357e3-17b7-463a-af45-64d6f9b52ec3", "sighting_of_ref": "indicator--88020cbd-7463-4c83-813a-71921caddd63", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a686d8-6dfc-48ad-8383-2fd2aedfe5fb", "sighting_of_ref": "indicator--dd94236e-4493-4e2f-96a6-1d6d29131ac4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e6f9c8-1520-496d-8aae-4f90ef2c8f40", "sighting_of_ref": "indicator--dd94236e-4493-4e2f-96a6-1d6d29131ac4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199b262f-ae78-42e1-90f5-62b131a6f24b", "sighting_of_ref": "indicator--da5cc89d-8d89-4c38-8ba1-abf41b55706f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b882ca8-f487-4afd-8ea9-f0908c058499", "sighting_of_ref": "indicator--9b72fb8d-1d1b-48d2-bf9f-2f86ea06904f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e72ef4d-06c3-4db7-95f6-79ba7ae0bd4d", "sighting_of_ref": "indicator--9b72fb8d-1d1b-48d2-bf9f-2f86ea06904f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00058813-5a42-4785-8c2b-5f0a78bfdf44", "sighting_of_ref": "indicator--c3306f3d-84d0-4007-973f-2dcee6719eb0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a586dea5-2d7a-4b16-beea-74c1447c392d", "sighting_of_ref": "indicator--c1da1fd5-b932-4270-b6c1-1d5e01ba48ae", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dce3392-dee0-4a5d-80f5-146d244962d1", "sighting_of_ref": "indicator--13a05e24-3bba-4fec-b080-9aeeb9e1ced1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78168b95-e27a-40e5-9b14-043b093b5405", "sighting_of_ref": "indicator--13a05e24-3bba-4fec-b080-9aeeb9e1ced1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2ec273-87c1-49dc-9f10-1bd7769e9da5", "sighting_of_ref": "indicator--3c36c44e-6af4-4722-80aa-5281328bc329", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760979d3-384f-4c58-8b85-cf5b9c9f381d", "sighting_of_ref": "indicator--7be5b710-7eb4-46d0-b217-ad5d0d514f8c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291a912d-01d2-4a08-8cf1-4e63ff037100", "sighting_of_ref": "indicator--7be5b710-7eb4-46d0-b217-ad5d0d514f8c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880b6af4-3d43-4894-9568-1d19865f443a", "sighting_of_ref": "indicator--7be5b710-7eb4-46d0-b217-ad5d0d514f8c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75d0ccf-b63b-4869-b3dc-b16af447c78c", "sighting_of_ref": "indicator--7fc13466-8b04-492e-bb77-425c1b0aa9ea", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538d57aa-5bcc-4c14-96c0-a7261149a6f2", "sighting_of_ref": "indicator--aa7f0220-e9ed-4465-9966-17e05cd7d012", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9272d3-43b5-49f6-81f9-c5e83eb09f56", "sighting_of_ref": "indicator--aa7f0220-e9ed-4465-9966-17e05cd7d012", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1574e27b-6c8b-48c4-a343-7f579bb4c3db", "sighting_of_ref": "indicator--d63a2a9f-bdcc-4a06-b73b-3bdb0f2e79f9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7e239d-a2e8-4166-a933-5ea73f02fe03", "sighting_of_ref": "indicator--3633ca29-66fa-47f3-89a9-6dd14234bd94", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3630f2-22ab-4ca6-8d4c-994321a8e6fd", "sighting_of_ref": "indicator--3633ca29-66fa-47f3-89a9-6dd14234bd94", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80754eb-36de-43a7-a202-3476cf68d0a8", "sighting_of_ref": "indicator--03c99844-a5ee-4a6c-8ac9-9505a29349f6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e60c5d-40fb-4c4a-974c-c1c28496ea91", "sighting_of_ref": "indicator--03c99844-a5ee-4a6c-8ac9-9505a29349f6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb63e12-e278-4c8a-bf22-7a1475f399dd", "sighting_of_ref": "indicator--03c99844-a5ee-4a6c-8ac9-9505a29349f6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f30bca-5146-4f52-83a5-4b8883cec846", "sighting_of_ref": "indicator--26700114-470b-45cc-ad99-357247b8fa72", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a617c443-0695-4fdf-90a8-2448bc9d28bc", "sighting_of_ref": "indicator--24b8159a-618e-4c95-a9ee-c53f5b995acb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f24f89d-923c-49ef-9c92-fc2ff65c5a0e", "sighting_of_ref": "indicator--b30a23aa-11c3-47f3-8ce2-fa452f840c31", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9f3d32-70ce-4e01-8e94-e7945656eebb", "sighting_of_ref": "indicator--b30a23aa-11c3-47f3-8ce2-fa452f840c31", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9857cd4-4a46-4ec7-8643-a1c83460e4e1", "sighting_of_ref": "indicator--afd89893-99de-45c6-9090-61f3de0d54b5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a50b9a6-7d9c-4b66-b9ba-9765ed3eb26b", "sighting_of_ref": "indicator--afd89893-99de-45c6-9090-61f3de0d54b5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28617ee-ae1c-4f7f-b6fe-d47c6ec4bfb9", "sighting_of_ref": "indicator--a5989ab7-0504-475b-bf5e-342937e0fac7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fa8c40-487d-4815-b9ba-53662e621550", "sighting_of_ref": "indicator--f28ded04-273d-4853-97ae-2cb4d6a6ed72", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e7abc6-125e-4bfe-85fd-2b1c73ef33e1", "sighting_of_ref": "indicator--f28ded04-273d-4853-97ae-2cb4d6a6ed72", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e3fc29-debc-4273-b107-a01e01f40a93", "sighting_of_ref": "indicator--6c3d2fef-d724-417e-b095-295f3977a9c7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b022e144-b535-46e0-b7e3-cccfd8ba7b4a", "sighting_of_ref": "indicator--6c3d2fef-d724-417e-b095-295f3977a9c7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e16c7e-ea13-4e3b-9127-0caf4f86911e", "sighting_of_ref": "indicator--6c3d2fef-d724-417e-b095-295f3977a9c7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e7d427-1edd-4727-b19b-d18be7f985fa", "sighting_of_ref": "indicator--c852517e-6d49-4d30-906f-3888dd794124", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70738890-c1ea-4fc0-8b2f-ede0ebe28d82", "sighting_of_ref": "indicator--c852517e-6d49-4d30-906f-3888dd794124", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b4cf52-ae4d-4b8c-ba4d-8b108a4c5613", "sighting_of_ref": "indicator--e65e1c98-8e0b-4a06-b8be-ac48f3d388f3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a35edc-df8b-4f3a-841d-3469537e631a", "sighting_of_ref": "indicator--1f80477c-1781-4bd6-bcc8-8a0c46b6546c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e50068-3ab3-4bf8-a6b3-b17aa69a693f", "sighting_of_ref": "indicator--c43e9019-6ae5-4060-b4a0-9d37cb4b1508", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5004bb-8b2b-47b7-b565-c2a1019fd5d4", "sighting_of_ref": "indicator--c43e9019-6ae5-4060-b4a0-9d37cb4b1508", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--defc3e85-5b42-49e7-96f5-eef6503e6320", "sighting_of_ref": "indicator--904847d9-a872-49ed-96af-b32ec55bae32", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed162ea4-263d-4583-bd3d-7a238783cb78", "sighting_of_ref": "indicator--c1716f98-40e9-4327-b529-a162680368ee", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a9bfc4-63bc-4921-8ed7-9643b67da403", "sighting_of_ref": "indicator--67b9ec6d-ac87-4ea7-88b3-6f0abdc86b84", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae18a7f-8e58-4dde-9c84-7427d85d6f0e", "sighting_of_ref": "indicator--67b9ec6d-ac87-4ea7-88b3-6f0abdc86b84", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a060ee31-93e1-437d-81f4-a3a6a6f6c3fd", "sighting_of_ref": "indicator--9da79cb3-2f16-44ea-8448-02096338c70c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795c3db7-9c7e-4196-bea1-5642a751e777", "sighting_of_ref": "indicator--5d83d0a4-8c64-4631-972a-4614296aa1ba", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fda1afd-3911-4dae-a89f-5111618ea5a3", "sighting_of_ref": "indicator--5d83d0a4-8c64-4631-972a-4614296aa1ba", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3974afa6-4725-44ad-8c46-dfa479aaad0a", "sighting_of_ref": "indicator--5d83d0a4-8c64-4631-972a-4614296aa1ba", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe59255-ba28-44cd-b430-edb207978a4f", "sighting_of_ref": "indicator--5551abaa-78f6-4317-b2aa-36be204dafc0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71065dcc-2a58-412f-82aa-dbe8bbc2b098", "sighting_of_ref": "indicator--760bc569-2773-4739-8d12-e70b7997b10f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c493c68e-304b-4b3f-8e68-694b3449644a", "sighting_of_ref": "indicator--85074240-4efa-4051-93cf-295145d62998", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9767ddfc-b9f9-44a8-ba1e-7ef4b77caea1", "sighting_of_ref": "indicator--85074240-4efa-4051-93cf-295145d62998", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8040b1c3-0a8e-473d-af3d-a84f94c45f6d", "sighting_of_ref": "indicator--85074240-4efa-4051-93cf-295145d62998", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431d3651-5ec2-4430-be29-d7515aa29513", "sighting_of_ref": "indicator--5cd2f15f-595e-4a17-9f94-f8deb977e84e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd1ef02-49a3-4c72-9644-7430cd16ffc3", "sighting_of_ref": "indicator--5cd2f15f-595e-4a17-9f94-f8deb977e84e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25511f1b-652e-4ef0-b260-2716b32e8a4a", "sighting_of_ref": "indicator--5cd2f15f-595e-4a17-9f94-f8deb977e84e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0cd453-489f-4da0-8b99-954f78f677a3", "sighting_of_ref": "indicator--9c0181cc-af76-40f1-ab45-a917dbae2f6d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5b997c-7ed6-4994-8b3a-621f68aec1a7", "sighting_of_ref": "indicator--9c0181cc-af76-40f1-ab45-a917dbae2f6d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e20018f-d090-4c47-9536-c273e5dcd9f1", "sighting_of_ref": "indicator--390ded55-3397-4654-9288-3804dde32af4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca317fc-0491-40f9-b2b5-0ea985bb21af", "sighting_of_ref": "indicator--32c65959-ab66-4ab0-87ce-5b52e79e5fc4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f75f4ab-58d1-40f6-8ca6-69faca8a8927", "sighting_of_ref": "indicator--1abdb59f-0444-4405-923d-451111f5238c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba0c4519-44f4-492f-b734-d0bfd5dbec7d", "sighting_of_ref": "indicator--6ef0bfcc-a64f-4d00-a9f8-fd22b06057b9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c64a46-2889-4615-a556-bfa4cf085d75", "sighting_of_ref": "indicator--6ef0bfcc-a64f-4d00-a9f8-fd22b06057b9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc0ec43-8af0-4b78-a3cd-c6ee5fd6bc7c", "sighting_of_ref": "indicator--6999c78c-580a-4365-927e-2a332d30b564", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb100bd7-3457-4116-a47d-66585a5225a4", "sighting_of_ref": "indicator--43ec5625-b277-44a4-b566-a0910edab2ba", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e788a71f-282d-4524-96f6-ba897cd35609", "sighting_of_ref": "indicator--446c7b49-b7b1-4563-b139-a651b20ea81b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4016ec76-82c4-4799-bb60-6df2472ebf7c", "sighting_of_ref": "indicator--2b13d575-2619-4ad3-8f9f-59fae5268a20", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed36ce7-f0a1-4d77-9af5-ae47bf7a6704", "sighting_of_ref": "indicator--0c12c978-78ab-4d32-a52a-5e7e29830aa4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46ca0d1-6b5a-44c6-9dce-c920c8c6cd4a", "sighting_of_ref": "indicator--b1f71d87-e4f4-4896-8d4c-b34ecb07bd4d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698ccaed-70f3-4ca8-a229-3a15d449dbcb", "sighting_of_ref": "indicator--e080f3f4-4d0a-4e6a-9154-29cfa7c31dcd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470cc4e0-2afc-4cf9-b07b-24e019bf22f3", "sighting_of_ref": "indicator--e080f3f4-4d0a-4e6a-9154-29cfa7c31dcd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba6c287-fe08-4c1d-b603-856a60750cfd", "sighting_of_ref": "indicator--2e5121a8-a95f-43f7-a282-031037a5e216", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7ebc87-ec43-46d0-b156-c04dd0515db2", "sighting_of_ref": "indicator--eb44b47b-a5de-4e08-addc-d0c7ab91c705", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758d743f-e0ae-4f77-9e44-b59aad211b7d", "sighting_of_ref": "indicator--9e0f97f6-85dd-442f-8b50-1eaf905d4310", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5e60ed-b5ec-4620-87b5-50e4c4ffb901", "sighting_of_ref": "indicator--f043cd9c-61b0-4f09-9b63-9139da8de34a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3538b9c7-ed7d-4cb2-a2ff-71b01cae1a26", "sighting_of_ref": "indicator--39093426-25ec-4601-be14-679846f20a76", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c889356e-5e64-4d78-8e69-d89b5a1d0def", "sighting_of_ref": "indicator--f4d605dd-e98f-42c7-ace5-aaeaad494fc9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2e8d84-421e-4736-829d-433bec818794", "sighting_of_ref": "indicator--8152d717-537d-4770-9852-7a0dc5ac3327", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143e4c9a-931f-4379-bfe2-e40ef952db76", "sighting_of_ref": "indicator--66eba924-d17e-4c72-bc25-b415ac0cddf6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e404340-6a91-4511-8550-01d46cfed904", "sighting_of_ref": "indicator--63e689fc-fc6c-48a1-b73f-a5d1ddb48c72", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e04970c-1dd4-4a23-8a63-46c5ca5de804", "sighting_of_ref": "indicator--1e799955-1cf7-4928-bf82-1b7c80bc5796", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1898f494-b1b2-4cf6-98cc-34da530a03a7", "sighting_of_ref": "indicator--85b695f9-2936-419d-b135-197574767791", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee38d17f-7011-4d05-aeb6-fef85c2cf621", "sighting_of_ref": "indicator--85b695f9-2936-419d-b135-197574767791", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45111e26-37f6-46e4-bc3b-e0ade8c0a846", "sighting_of_ref": "indicator--2be827a9-5c77-4169-93fa-7252b7abed29", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718113d7-8926-4c52-bd0c-0428589c37be", "sighting_of_ref": "indicator--e0b4bd62-c277-42c2-8cb7-325f22c1cbca", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1451310-4fe8-478a-8d03-8a7fe58fc822", "sighting_of_ref": "indicator--4f0aa789-3011-4c2b-ae40-17c88f840f54", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afa0cf0-15bf-4e3e-bee8-e280691ecc70", "sighting_of_ref": "indicator--926d7e7b-9493-4122-ac48-a60296215d2f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f597de-6ee7-4ecb-9502-afd0cd092390", "sighting_of_ref": "indicator--3bf3a897-0f10-4d08-aba2-fc19d783e571", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b21cb4-8812-4b7c-abb8-582bb6911e04", "sighting_of_ref": "indicator--3bf3a897-0f10-4d08-aba2-fc19d783e571", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092635f5-e044-410f-be4d-82f2563bdd5c", "sighting_of_ref": "indicator--a089b90c-b362-48c0-9c7e-90d2bb83d31b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba4f8aa-2ffc-4100-8742-a5b8a64f4d15", "sighting_of_ref": "indicator--c3b73106-a3bc-4451-b588-7ec3bc9efb2a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7db5f9-e8cf-41d5-a797-6b50f415d324", "sighting_of_ref": "indicator--9d3cb79f-ee5c-4e74-a2f8-95f2bf5310b1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66552dbe-0b6d-4b6e-a55c-30ecdfe70c34", "sighting_of_ref": "indicator--26642142-4c49-46b2-a992-36cc5914a18e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f294b4ed-65b5-49e0-9008-5e23be3906f6", "sighting_of_ref": "indicator--e235441a-17a2-4c15-94ed-0d902f3241bb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f66cc0d-c146-4051-b27d-8639e5d71d1f", "sighting_of_ref": "indicator--6ecfe7bf-69a8-4221-94ec-8925a90636a2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44d0f49-cbb0-470e-963a-cb0c5f96d453", "sighting_of_ref": "indicator--870220bf-43f0-4646-ae1a-7430b8c5f0fe", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4258061c-612c-484e-b35e-f0d7e73478b3", "sighting_of_ref": "indicator--a8a3d9ef-6bb6-47e3-90d1-ba185463fd04", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0569605f-96ab-4b7f-a960-dc5b51e24fa0", "sighting_of_ref": "indicator--77d414f4-c465-4b41-88c5-8859be550fa3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0477be-ab1c-4186-8903-3e1d70f013e6", "sighting_of_ref": "indicator--4c94b168-b0d3-41ae-8bf5-7a5413686840", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ee32c8-4827-4f3a-bc8f-4b1abd31022e", "sighting_of_ref": "indicator--dab18d21-8529-4a33-a34b-83719553bd32", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5221c5c3-b1ab-4ba5-91e9-6b35fc9fbfc6", "sighting_of_ref": "indicator--35ed53c1-2e56-45a0-a3f5-51a90e9e0a8b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeff62d1-c2ee-46bf-9e36-2542d918c34d", "sighting_of_ref": "indicator--d472ad64-d08f-4a40-a5e6-1b95678ed87a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7f841f-07cd-45b6-b158-e355b639e648", "sighting_of_ref": "indicator--16cb1081-d102-4e1d-be34-9646edb8e1cc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8276d93-dcc1-4dcf-b03d-7416b986bba9", "sighting_of_ref": "indicator--b05dd64b-3755-42d5-9364-ee20dfa7bb8c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0cdb80-f459-48aa-aa85-03d3128bf540", "sighting_of_ref": "indicator--6748adb6-d04a-42b4-a548-293847c96ed8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f7827a-675d-4c55-bf99-9f572f5d38d8", "sighting_of_ref": "indicator--b67e7315-7007-4197-8576-992ca9f9cbb5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4a65b8-38ba-48d3-80fa-b6813ebc0e22", "sighting_of_ref": "indicator--36d52106-cea0-4cf6-8adf-84ba7e5aebde", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd855853-b53b-4748-9601-b365769668d3", "sighting_of_ref": "indicator--35a50880-aff7-4318-b3b2-ccf1e89cd50e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4dab71d-9be4-4add-bc7b-93fe2b4d064e", "sighting_of_ref": "indicator--032db8b2-1557-4f41-a16b-2368c75c3416", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9296d91b-bcae-48cb-856d-686d5d08ea54", "sighting_of_ref": "indicator--eadbd32e-b205-48c7-89b8-65fa3e4523c1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19cf3f23-859e-4e12-b022-acb5e22a6879", "sighting_of_ref": "indicator--eadbd32e-b205-48c7-89b8-65fa3e4523c1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6dcd8aa-3ca3-4275-b8b9-699397cfc42c", "sighting_of_ref": "indicator--a2caf82d-0274-4ca3-9f2b-772fdaeca7b1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7677d7fb-793b-483c-a749-ff1b78757cfa", "sighting_of_ref": "indicator--693e6700-49a9-4154-b96d-b5baae6d2481", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22d4062-ee16-4ad8-81eb-05ce48fe8b6a", "sighting_of_ref": "indicator--d02730ff-0ed4-433b-83c0-c99e3a184e45", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775313a7-6aee-4bd1-a7e0-096abe999570", "sighting_of_ref": "indicator--50ba67dc-6f4c-4dee-aff9-8258bcc479ea", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9094ef-f034-404b-af33-30121211e7d4", "sighting_of_ref": "indicator--a2ce9943-bf50-459c-9253-5e1be78e97f2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03483f8f-5bd8-42c2-8a29-5d494b15faff", "sighting_of_ref": "indicator--a2ce9943-bf50-459c-9253-5e1be78e97f2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ef036b-06e0-4dad-b36c-1f7c03f152f8", "sighting_of_ref": "indicator--a2ce9943-bf50-459c-9253-5e1be78e97f2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34699af5-0f59-4756-ad47-593d94652e78", "sighting_of_ref": "indicator--5a655108-3e27-4b77-9189-f2ab376e41bf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f95de31-e380-42f1-b714-bfbe2b705b97", "sighting_of_ref": "indicator--2f538117-1127-4ff8-9b30-c402bfc6527a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd32dda-5a2f-4e0f-b5e6-2b2f4ed351d3", "sighting_of_ref": "indicator--34b177d9-b889-4995-80ab-4830ec6962f9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c80681-6583-49b6-98d3-99e28c7c4dc2", "sighting_of_ref": "indicator--34b177d9-b889-4995-80ab-4830ec6962f9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d354fe8-0027-48d3-b953-6e65ca6d49c4", "sighting_of_ref": "indicator--a4589c5e-508f-4f04-aebe-5121b376df59", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e679cd8-2cd6-4324-95e1-35bf28d83828", "sighting_of_ref": "indicator--9369ba35-0219-40f0-b009-9151eb26f60c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4083c6-1ee7-4cc7-8eea-cbf08755d3da", "sighting_of_ref": "indicator--15e07096-5ec3-42b5-9f07-789c5a7cee1f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62754c10-d024-4de9-9cb1-2056b2c57544", "sighting_of_ref": "indicator--9dcc111d-5f32-4935-a040-752309c312d6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9849c79-2ebf-4e73-9c56-63968d5b04a9", "sighting_of_ref": "indicator--6b0b0a67-07f9-4fc9-9a9e-0b0c470a90ec", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a63489b-d719-46f5-988f-23997a80ca2a", "sighting_of_ref": "indicator--d06e96a9-e2ae-4ccd-9fc4-625c28ded45b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73060467-096f-4eaf-8940-adeab0ff153d", "sighting_of_ref": "indicator--defc27a5-f07b-4ec0-b926-7f57150c16c4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d90134-905f-456d-acf3-272e74a75a76", "sighting_of_ref": "indicator--f3939791-f1e8-4ab7-b5d0-f213c40695d3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904e2e20-2af9-4304-9853-3277be42fefb", "sighting_of_ref": "indicator--8e0499fc-6e46-4a98-ab0e-f7624f9c4b6f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08fa812a-ea93-4a78-9ca8-a06cae65f9a2", "sighting_of_ref": "indicator--ae961198-2cd5-4676-8c28-da024c7b1a34", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6544c0cb-d1bc-42a1-ad31-4f6ed00dfacd", "sighting_of_ref": "indicator--ae961198-2cd5-4676-8c28-da024c7b1a34", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41cb2dd5-c714-4ad3-83aa-572618abb83a", "sighting_of_ref": "indicator--c084f7d3-337d-4993-9657-77166df016fb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806fc0c7-3877-48e6-9d37-65939b67d85a", "sighting_of_ref": "indicator--4641a956-a756-41e6-bc61-46bc054b53e2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0805605b-1ff3-4843-856e-6807d8bf2fe7", "sighting_of_ref": "indicator--39786928-02c6-4be7-ae86-152435bbb075", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356e1fbd-d883-4bb5-820d-1097cc4f2c07", "sighting_of_ref": "indicator--39786928-02c6-4be7-ae86-152435bbb075", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aff7d01-5853-4309-9629-adf2a44fee28", "sighting_of_ref": "indicator--982d6cbc-6b51-49e5-ba6a-407467b57d25", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43cc90a-e28e-4d2b-b01e-5eec31a07509", "sighting_of_ref": "indicator--357195d3-32ef-4edd-8a67-c7d03bdf2082", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06421f20-46b8-4075-b2da-18dcec16da09", "sighting_of_ref": "indicator--ce6924a1-fca7-4546-a406-6e6dd3dcab7f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f280404b-6289-4f82-baf3-774b58282cd1", "sighting_of_ref": "indicator--52c32d7d-d13c-440d-b318-e3e555b8c131", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a093a9-845e-4728-a130-5088271306c1", "sighting_of_ref": "indicator--21703ca5-9fa1-462e-83bd-978ce8c608e4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2279df10-37ac-4e9c-997b-cb8037c9117b", "sighting_of_ref": "indicator--cd96b690-6707-4e61-9e59-7fdbb6c5d170", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4805d26-518b-44db-be39-618d7b8a4a31", "sighting_of_ref": "indicator--cd96b690-6707-4e61-9e59-7fdbb6c5d170", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b701f8dc-e4b5-4436-b2d1-1dd5a5b3d45b", "sighting_of_ref": "indicator--ff396cc2-b004-4207-8d2d-30ae1c724f32", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc14fcb-a267-4deb-a1ce-a6f9218fdd78", "sighting_of_ref": "indicator--7bf6c719-5b85-4bde-bf64-5a63940dbc73", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b065cd1-c0f1-4528-bb7a-b27479c08d9b", "sighting_of_ref": "indicator--efc42b7a-fde2-45a5-945b-49fdfbd810e9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db85a13-4696-42a0-91ed-d9eebe48f70f", "sighting_of_ref": "indicator--1cd0fc38-3a5c-4b1e-a082-d2734d48482c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba34f4d9-764f-4e1c-aaa1-8eb6195a38d8", "sighting_of_ref": "indicator--4a961ebe-3677-491e-b2e9-1ae5be84772e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a97a9b-95f4-4a03-81ed-a6f374d8aae2", "sighting_of_ref": "indicator--66e02cad-88e2-4380-9127-d2b30ee6fd1d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf1f307-ff38-4bd7-88cd-03960d2c1bb2", "sighting_of_ref": "indicator--f0aa8f9f-b7e5-4659-a352-dc084158aeac", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c645636-ca8a-4fe1-ab80-431c059af2dd", "sighting_of_ref": "indicator--624e4dbb-cc70-420c-a0ca-8b7e177cab7f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c32cc1e-4491-4ed8-9dd0-99ab3cc4930a", "sighting_of_ref": "indicator--7f4259f4-1dd6-4632-ae8a-6693ed1fda3f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cc375f-d233-4527-908f-5ac094f5e2ca", "sighting_of_ref": "indicator--1ab79fe8-7a20-46ad-a32c-1e1a020a0665", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8e2d58-2f0b-447f-8f50-065606bd9384", "sighting_of_ref": "indicator--548a1be1-1ac5-472c-8f17-1220dde1543f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18aebc02-ada0-42f6-8dbf-8762a077af3f", "sighting_of_ref": "indicator--95d5aeb3-07c8-46a5-b1f4-cc43a15a1da8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352eb9bd-40af-46a3-b358-33e64dd50613", "sighting_of_ref": "indicator--ff7a491d-bf65-4c61-ada9-3452f8bf7c5d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e5d56b-2e5a-4ade-a8ac-a6a0856b4180", "sighting_of_ref": "indicator--52f77482-3832-47f4-bfa4-e5b4fd674076", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76987403-bbe6-4e93-9ccb-ada115644fbb", "sighting_of_ref": "indicator--52f77482-3832-47f4-bfa4-e5b4fd674076", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9b0f3b-cb02-4f62-a8bc-f206d0744079", "sighting_of_ref": "indicator--72cb9cd6-b176-42bb-8a47-800e804f9dc5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27bb7ca0-8ddd-46c9-ac60-50add31b7af6", "sighting_of_ref": "indicator--864c664b-f5b2-46db-bea1-582326311e22", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ccfcb8-b8e4-402a-9df9-d74935c058bc", "sighting_of_ref": "indicator--b281201b-350f-40cb-a058-7c96af92101a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afbc6be-be4f-455e-8e4d-ca026623d1fe", "sighting_of_ref": "indicator--b281201b-350f-40cb-a058-7c96af92101a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea57b32c-0d59-47d3-bda1-10f1f3f7a1ee", "sighting_of_ref": "indicator--25e53fe5-5d09-493e-ac42-03f003d93f20", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710b0d7b-6845-4bc4-b690-ba8542dd3920", "sighting_of_ref": "indicator--230425d0-47ac-401f-b2da-2b742846d5e4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52de4ca-e8f3-463a-81f7-bc3c8722bf9d", "sighting_of_ref": "indicator--230425d0-47ac-401f-b2da-2b742846d5e4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c7eedb-c5f3-4525-932c-69923d2ddc54", "sighting_of_ref": "indicator--69594b19-5f83-4aaf-bcae-56fc446e063b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c9e45d-f7e8-48f7-818b-2874990f6624", "sighting_of_ref": "indicator--3226faae-15b8-470d-8636-d22ef0e7627d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df1e987-0b68-4bb9-9012-c16dc3da4bf0", "sighting_of_ref": "indicator--e339b9e7-665c-4453-9401-3c5d21cb6d60", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24225398-da4f-4c19-8bc3-2a56c1288d59", "sighting_of_ref": "indicator--e339b9e7-665c-4453-9401-3c5d21cb6d60", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d5751c-c644-44c9-9ad9-c6f4ce17cb9e", "sighting_of_ref": "indicator--ad6d726e-3a93-45d9-98d7-19596536dcb1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1123d8eb-22a6-402b-914d-4fe560d3202d", "sighting_of_ref": "indicator--39836ac5-5f2e-4854-88af-b98cedc1bd18", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a857ee-3705-40df-b111-0d0bac7c20d1", "sighting_of_ref": "indicator--0d60778d-8534-4c60-98e5-a3c9ecc298f0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbd6e98-4ba0-4e1b-ba7f-b5413b1ac3c3", "sighting_of_ref": "indicator--a57316ad-b4c1-4397-83a1-e2075e21667f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a596171-00c1-454c-b9f8-6d3fec824d0f", "sighting_of_ref": "indicator--c16585f1-37e3-42dc-948f-622d504d8396", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7d3268-76f9-4d14-8e5a-82eb6afe78c3", "sighting_of_ref": "indicator--9f0e0031-57a3-4e83-8e84-00385d1e1d78", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32128ab-c944-4579-8057-d45223418599", "sighting_of_ref": "indicator--9f0e0031-57a3-4e83-8e84-00385d1e1d78", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2120f32-1e9b-4d64-ac93-7644ed5edfe1", "sighting_of_ref": "indicator--08f5ce22-5fba-4d98-8a93-6cd8c57fc8f6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bbf80ba-59ca-4077-8af8-d64f734e564c", "sighting_of_ref": "indicator--72499b74-dd03-4bd4-b48b-ef8fa1d673cd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be58ece5-cf7f-4dcb-869f-f830efdb891d", "sighting_of_ref": "indicator--480315dc-cfe6-4d17-9dd8-f824a3ff7204", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2091f6c-4713-48f7-9a7b-adb018c060f4", "sighting_of_ref": "indicator--852e463b-dfcf-4c46-9323-3bb0f7ea2655", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5549829f-905f-4605-a798-981d8de265fc", "sighting_of_ref": "indicator--24c80aad-411e-454c-9c3f-918aa7411a0c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66497143-2c69-4fb5-98ec-00a13b97dd93", "sighting_of_ref": "indicator--9e25b69e-2244-4d25-a462-1d7f4830796c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe6bd9c-0d18-4896-b81d-814e3b10dcec", "sighting_of_ref": "indicator--b66bcce0-9e5d-41c4-a1f5-27e31e52e399", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fdb5833-14b9-4c23-b36e-869711702569", "sighting_of_ref": "indicator--fb858e36-5318-4a00-a1a6-70d0262e856b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce5ea5f-41d9-4cde-b71f-4ed0b9a7343f", "sighting_of_ref": "indicator--36f10fdf-7472-478e-97be-568590be5407", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700cca84-49be-4268-a062-3b47fd88807f", "sighting_of_ref": "indicator--428e06ca-774e-4d0e-b723-fc8fdd2647fe", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651a62fb-747f-49c7-84ba-8c26166c7dd2", "sighting_of_ref": "indicator--e96e3522-ef1e-40f7-9412-897cac1e0251", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023e5a23-6a4d-46d0-8a00-ed518720bbad", "sighting_of_ref": "indicator--6a064a24-954f-4de9-971d-e6ccb5aac822", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428fb12b-c700-453d-8d48-450ae266af84", "sighting_of_ref": "indicator--c933f1f4-dd7b-4ba7-b50f-e74a42b4d6a2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7636dff6-f51b-4c28-9259-402ed1e13473", "sighting_of_ref": "indicator--c933f1f4-dd7b-4ba7-b50f-e74a42b4d6a2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436f5f93-b106-4a51-b372-9794561ec8f8", "sighting_of_ref": "indicator--f9c33835-9b90-4337-9b85-298c409cc691", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34726dd-f85a-4e36-b6be-7d37bc8b7061", "sighting_of_ref": "indicator--5cb6faeb-b57c-4b22-8812-414abfb4dc6f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24398617-c4b5-425f-afef-9a6ba43ac912", "sighting_of_ref": "indicator--5cb6faeb-b57c-4b22-8812-414abfb4dc6f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25ceeb5-b7d8-4838-b269-e59597915338", "sighting_of_ref": "indicator--0d6db7de-c44f-41af-9dff-ca81ce589795", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85fdf070-628f-4c2b-bd02-ded4d64ba6e4", "sighting_of_ref": "indicator--fb27108e-e997-447b-b33c-2fdaca99e10a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df99f5f2-e2c5-4843-a3fa-3f6d3be245a6", "sighting_of_ref": "indicator--c78c7f8c-e561-4004-935e-a7676686cb11", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3ce3a1-6605-4633-b606-d8571aa15ea8", "sighting_of_ref": "indicator--1cd5f4d5-5bb7-4697-ab6d-c5df1581996f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd822db3-e1fc-4fd8-9668-a75f121dd4b7", "sighting_of_ref": "indicator--1cd5f4d5-5bb7-4697-ab6d-c5df1581996f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--502d6ab3-f20e-4c38-8b3f-f2829a7bdd2c", "sighting_of_ref": "indicator--44979e0c-2f8b-424b-87e9-b8a66fa34e87", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1050d70b-5b14-4528-b0d3-e3f422793b5a", "sighting_of_ref": "indicator--709d687f-8b01-4d16-bf50-ac0c50dc4019", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b85928-f547-40f4-a8a4-78410df2e02e", "sighting_of_ref": "indicator--709d687f-8b01-4d16-bf50-ac0c50dc4019", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3875003-3b34-4718-b7e2-89e244328583", "sighting_of_ref": "indicator--b0fa7a04-300c-41bb-a19c-f7838d409943", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e99735-6a21-4ea3-b333-531ff64c84d7", "sighting_of_ref": "indicator--48642117-abba-4163-bdd4-6d1882087ab9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7ae58d-762e-4f64-a397-65fc290aeaa8", "sighting_of_ref": "indicator--48642117-abba-4163-bdd4-6d1882087ab9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578f4663-f5f9-4c96-9407-c1ab45aa1372", "sighting_of_ref": "indicator--48642117-abba-4163-bdd4-6d1882087ab9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782181d3-2243-49ed-af11-068cbf4e44f6", "sighting_of_ref": "indicator--6455b9da-1555-412f-be01-d6742fa6399a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17bd31a-d290-4ae7-9b7c-50746e20a87a", "sighting_of_ref": "indicator--d680cae7-1f32-4479-8763-163654a7dbb7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af12ee4-aa66-4f2c-92fa-82bc08cac07b", "sighting_of_ref": "indicator--d680cae7-1f32-4479-8763-163654a7dbb7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc374b90-4119-44ad-bc6e-30b59e044713", "sighting_of_ref": "indicator--d680cae7-1f32-4479-8763-163654a7dbb7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aade7f3-b897-4f9e-8190-3aaa8c752b28", "sighting_of_ref": "indicator--43105780-5d94-48ad-8684-36c853c9267e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb085e78-727c-486b-a1f6-b3b6fcb9ebd8", "sighting_of_ref": "indicator--5dae4482-c8d2-4c37-bf54-4919c59320bc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1df2577-b06c-411d-b350-086b07b8ed1d", "sighting_of_ref": "indicator--5dae4482-c8d2-4c37-bf54-4919c59320bc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ac9ded-993e-4c5e-b9ae-ce8f4a84d1ca", "sighting_of_ref": "indicator--6c29a094-4c70-418e-9ac1-5766594ac581", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99bff3e8-8098-434a-9373-3241d675c396", "sighting_of_ref": "indicator--6c29a094-4c70-418e-9ac1-5766594ac581", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5373de4-8a9f-471e-b824-25faf7ced87b", "sighting_of_ref": "indicator--494d0301-7bd6-4fb3-bc09-0b0c80a27fc0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6e9b41-1e22-47e0-81ae-e44cae534b26", "sighting_of_ref": "indicator--494d0301-7bd6-4fb3-bc09-0b0c80a27fc0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a36a41-88b0-4e8f-8d83-e4c66db49fb8", "sighting_of_ref": "indicator--494d0301-7bd6-4fb3-bc09-0b0c80a27fc0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7691e2-a31f-4e24-b4ea-8687fad91e9f", "sighting_of_ref": "indicator--9ee33f9b-28fb-4e68-97e6-a4e8becc68f5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d750863-5827-4daa-ab27-04566ea69c56", "sighting_of_ref": "indicator--9ee33f9b-28fb-4e68-97e6-a4e8becc68f5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d79996-a8f2-4f25-92bd-e6e9a3ee7fe0", "sighting_of_ref": "indicator--8b136404-536e-4b4f-b60d-5adcb147151b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca4d9c9-b3ea-4f9e-9da3-0762604d3348", "sighting_of_ref": "indicator--8b136404-536e-4b4f-b60d-5adcb147151b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b26342-28c2-4459-b52f-7736cdd32259", "sighting_of_ref": "indicator--1fd86adc-bf7c-420a-a418-7ae4d45b1d17", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d26d04-2af0-4fbe-bfe8-00ec25f0d7df", "sighting_of_ref": "indicator--1fd86adc-bf7c-420a-a418-7ae4d45b1d17", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e085f3-98ec-474c-8a9d-127a24a7d9af", "sighting_of_ref": "indicator--a0d8b2cf-dfe5-47c7-9d7f-50ce6d4397d9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea983d5-be1f-4058-ab79-9b87f023e3f1", "sighting_of_ref": "indicator--a0d8b2cf-dfe5-47c7-9d7f-50ce6d4397d9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279618b1-27bf-41c4-bb47-9f22299db759", "sighting_of_ref": "indicator--a0d8b2cf-dfe5-47c7-9d7f-50ce6d4397d9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6069c047-5d40-4650-9c23-287766be5ef7", "sighting_of_ref": "indicator--59fa344f-6527-4e2f-8b66-8271fe610f81", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7d52e8-1d41-4020-a2d8-a92227de069c", "sighting_of_ref": "indicator--e6e38a6f-deb0-439d-b214-a8ba99767327", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014271bc-4ef4-40b3-9e03-38a5eb986cf2", "sighting_of_ref": "indicator--63909057-738a-440c-a832-c236bcd6fca5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc05d8a-c74b-4e77-bb0a-11f2a90c5c06", "sighting_of_ref": "indicator--63909057-738a-440c-a832-c236bcd6fca5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9864d31-fdc6-431f-829f-a772d7ad0b35", "sighting_of_ref": "indicator--8000faab-36db-40cf-b903-2149f27a73f5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4b0f11-7b65-42af-8643-f0942311bb3d", "sighting_of_ref": "indicator--523ad133-e6bc-4142-9ad9-0490a6294431", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa50e830-825b-46ff-82a0-08481d9e6d16", "sighting_of_ref": "indicator--7982f5ec-3e5d-4d17-a180-f594070130d9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8257be-5cf3-4567-be56-41fbbfb42b52", "sighting_of_ref": "indicator--7982f5ec-3e5d-4d17-a180-f594070130d9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed14a1e9-81f9-4fbe-9ee6-9d912776e50f", "sighting_of_ref": "indicator--d2d57e83-8154-4b51-b1e2-cb613c7bb8cb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0866d9aa-4fb5-4a13-a018-6a6435404cd7", "sighting_of_ref": "indicator--d2d57e83-8154-4b51-b1e2-cb613c7bb8cb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1385f35-9a5a-467a-a444-799e0c873025", "sighting_of_ref": "indicator--90cc6793-1d77-4a3d-8eba-5b547d61b3f1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49293202-78d1-4450-9f5f-509ed06ddaa4", "sighting_of_ref": "indicator--ce9757b6-4480-47c7-a195-a3fc776bbfa5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c242c8c7-3b18-4eec-90f2-f48806e55185", "sighting_of_ref": "indicator--ce9757b6-4480-47c7-a195-a3fc776bbfa5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a9878e-80e3-4bbf-b2ca-7a564f894374", "sighting_of_ref": "indicator--ce9757b6-4480-47c7-a195-a3fc776bbfa5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4e70a2-bdb7-4dfc-9525-00e9dc6b9e8e", "sighting_of_ref": "indicator--cfd0fac8-a4fa-4a78-aa47-d12739155bde", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c6e173-9abd-4202-802b-c2464506c3ac", "sighting_of_ref": "indicator--cfd0fac8-a4fa-4a78-aa47-d12739155bde", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b7e9b9-7705-4b51-bdb8-ab802189dc9b", "sighting_of_ref": "indicator--cfd0fac8-a4fa-4a78-aa47-d12739155bde", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e45c99f-f811-484c-8f87-b8b7b688aff3", "sighting_of_ref": "indicator--ec667a43-89e6-46c9-ac67-283f1182781d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815e9f0d-5556-4d0d-bc0c-ab0175a82552", "sighting_of_ref": "indicator--d938f8d4-309f-4393-bcc7-477feda2d5e8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94e0f7d-1c94-4efa-8972-8b5c71fad652", "sighting_of_ref": "indicator--9945f9f0-78e4-4c16-8efd-f6312ea2926a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6322f7ec-d085-459e-94ae-8e5e99d5573d", "sighting_of_ref": "indicator--9945f9f0-78e4-4c16-8efd-f6312ea2926a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89badcf5-b1d7-4105-97a6-bfa0bd4e9bdb", "sighting_of_ref": "indicator--9945f9f0-78e4-4c16-8efd-f6312ea2926a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5b6c2a-63e2-4074-8ceb-b51e2395b7b7", "sighting_of_ref": "indicator--86339b39-defd-42d8-bb99-b50b9be96e55", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e469764-2f15-4795-a935-61e34717bcd2", "sighting_of_ref": "indicator--86339b39-defd-42d8-bb99-b50b9be96e55", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3a07ad-09f9-447d-9e60-9a304a98e3d6", "sighting_of_ref": "indicator--86339b39-defd-42d8-bb99-b50b9be96e55", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8069e83d-21d4-495c-83be-fe160c0e84bd", "sighting_of_ref": "indicator--02546986-22d1-47a6-a817-a4897f7116d4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194c213d-f0cf-4dc6-bfe3-6b9360a2ea93", "sighting_of_ref": "indicator--1628201a-c5d4-4662-a586-5ea18b4fc01b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7126b93-b293-4627-bb78-7afee88de439", "sighting_of_ref": "indicator--1628201a-c5d4-4662-a586-5ea18b4fc01b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538cf016-6371-4358-8694-d90cbf3d485d", "sighting_of_ref": "indicator--2bc5d6df-b9d1-4c4c-8187-bd81aa3d3a0c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e67b253-2e3b-4efb-9cb6-d25a92522931", "sighting_of_ref": "indicator--a587dac7-4aa8-4d35-aed0-cff8b9598056", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6acd5d6e-f98a-4b81-ad27-8991998c1f46", "sighting_of_ref": "indicator--ac51764f-beae-4c9e-bb96-719b248588b4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47d508c-bcc0-4b8d-9ad4-2dea279250ce", "sighting_of_ref": "indicator--449157ae-c6b9-4a47-bc65-072047026862", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e66855-2176-4092-ac3a-430e27c3dd0f", "sighting_of_ref": "indicator--42b5adf4-829b-4f74-9cb3-a7607e21d95a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0acdd9-b41c-472c-a994-cf945998c9cc", "sighting_of_ref": "indicator--82f1793d-1645-487b-8b65-bd668b2082c0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb36f56f-8aca-4408-aed4-f472077bdfb7", "sighting_of_ref": "indicator--d6d3d472-c694-43bf-95f3-9d43a310b2ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--347a1714-32a1-4b72-a6d4-fad49df009a2", "sighting_of_ref": "indicator--f59f5a1b-6c3f-458a-99ff-ddaefccffd8a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde06cb1-f22e-4174-9169-98b39066a251", "sighting_of_ref": "indicator--85126293-0fce-4915-bb7a-9b0de0bf6246", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409a9814-2308-494e-b47f-89a7ba1e1ff3", "sighting_of_ref": "indicator--9e2da16f-52ab-47a4-b257-e8c54d729275", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2755620a-6f0a-4ce4-84f8-2fbdf6986b20", "sighting_of_ref": "indicator--9e2da16f-52ab-47a4-b257-e8c54d729275", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f541412f-744e-429d-8b9b-84840aebfac6", "sighting_of_ref": "indicator--adf11a90-52af-4327-ad54-374f4d570ac7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313f8865-eb45-48cd-b7f7-db7f1ad1cd9d", "sighting_of_ref": "indicator--adf11a90-52af-4327-ad54-374f4d570ac7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9c6a85-32db-4358-b2b1-5f3c84c9bb9d", "sighting_of_ref": "indicator--4e541292-de2b-4af1-a94a-15ad99df0c2b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d16547-5bfd-47b7-9ddc-c1245d0deb21", "sighting_of_ref": "indicator--4e541292-de2b-4af1-a94a-15ad99df0c2b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c0ebac-c15b-425c-8ae9-a110e4b61815", "sighting_of_ref": "indicator--93ce46be-ec5c-402b-974e-990f7f78ce2e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5da04f-d153-4361-a94b-a85a02bbc2a4", "sighting_of_ref": "indicator--951036d5-b3ff-4510-86a0-a588fecd693c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8bbcc9-f7ff-4d26-ad15-3a043b873285", "sighting_of_ref": "indicator--951036d5-b3ff-4510-86a0-a588fecd693c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4df751-bbd3-45b4-b06f-82868e6b71ec", "sighting_of_ref": "indicator--951036d5-b3ff-4510-86a0-a588fecd693c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407403fe-def2-4d8c-b42f-c5d40a0c9c0d", "sighting_of_ref": "indicator--83cc80db-c757-4a61-8f0b-55e5a2dd095c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e00c8f-c3ce-4bfd-81df-5afb7c9cf9c1", "sighting_of_ref": "indicator--96e0916a-9916-4860-b4d0-2afd9988b97b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f41ba5-4f75-44c4-a5ea-0031ee34e7d8", "sighting_of_ref": "indicator--01c8a42c-4e90-4a72-a3ee-d00a8264a5b5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e87074-664a-4a7f-a169-5b40b73c3030", "sighting_of_ref": "indicator--55b8c91d-3e7c-4a41-958f-97605c8dd120", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76b0641-98bf-4477-9583-7d5d3887a6a1", "sighting_of_ref": "indicator--a7294265-8c69-482f-bd6e-e3a2859a6224", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd418f8-b727-4702-b10e-991bf87c6fe4", "sighting_of_ref": "indicator--9b685b85-2a2d-426d-b3ee-54b64fc725d6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73591e3a-363a-453d-9f54-f84d41175359", "sighting_of_ref": "indicator--9b685b85-2a2d-426d-b3ee-54b64fc725d6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef04dfb2-9768-4552-82b2-999ed3778614", "sighting_of_ref": "indicator--c9f6feb7-1e96-47e2-ade9-65c9d2fc4d13", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21cba97-8f02-4f4a-a2ef-cf26aa1ddf29", "sighting_of_ref": "indicator--c9f6feb7-1e96-47e2-ade9-65c9d2fc4d13", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db76bd8-05c8-4d3e-92fd-57473438dcc8", "sighting_of_ref": "indicator--41306b35-e184-4e5a-aad4-b0a5418d65f7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df79419-cda2-441c-aed2-f015e7300670", "sighting_of_ref": "indicator--e4a231e5-f810-4e02-aa2c-b1b40f3f32a4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d349b37-2283-4e74-bbad-2dc3eb296c1a", "sighting_of_ref": "indicator--dd2d9e2c-4314-47ff-b920-df8c4a24ac31", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1ecf14-1351-4683-a75f-c9d4a0025836", "sighting_of_ref": "indicator--dd2d9e2c-4314-47ff-b920-df8c4a24ac31", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4a4233-65f4-4258-90f6-f2391601f485", "sighting_of_ref": "indicator--e462e555-8394-4c1f-a6d3-e55c7ec4416b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c66ef4-b848-401d-b0e3-6872e9791165", "sighting_of_ref": "indicator--e462e555-8394-4c1f-a6d3-e55c7ec4416b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31f8c3c-45cc-47c9-a679-549335458f65", "sighting_of_ref": "indicator--e462e555-8394-4c1f-a6d3-e55c7ec4416b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0909fa14-de06-451b-b92c-714204908e77", "sighting_of_ref": "indicator--a4e9977d-91e2-47f8-ba28-033411ad9cbc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d0735b-91de-4e40-b361-cafa7caf8e25", "sighting_of_ref": "indicator--a4e9977d-91e2-47f8-ba28-033411ad9cbc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a026727a-e2d8-4173-b47f-06c683dc3854", "sighting_of_ref": "indicator--a4e9977d-91e2-47f8-ba28-033411ad9cbc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3812fe-a5eb-4a2b-a513-dd60447dc2c0", "sighting_of_ref": "indicator--b4519ffb-9b0c-46be-ba41-5f7b49521af2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8adace-37f6-4e46-a0d8-eda9d57e6415", "sighting_of_ref": "indicator--b4519ffb-9b0c-46be-ba41-5f7b49521af2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008bac22-1006-4eff-8985-78d20c4976fa", "sighting_of_ref": "indicator--7eba2685-1afc-4d1d-abaf-93bb80d6dd4d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb32673d-0ddf-40ce-8c2e-12595e2c62cf", "sighting_of_ref": "indicator--7eba2685-1afc-4d1d-abaf-93bb80d6dd4d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1f53ed-f61d-45ea-ac88-979f27125e6e", "sighting_of_ref": "indicator--7eba2685-1afc-4d1d-abaf-93bb80d6dd4d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff62c3a-fa71-42f5-9555-ab3ea38b9640", "sighting_of_ref": "indicator--dea98ebb-f263-4487-8174-2bc2260083eb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baea10d5-9374-4793-bf7e-de7d83ba29c9", "sighting_of_ref": "indicator--33229cf1-a733-4bd4-abc2-a95823c797d7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d4e81e-e334-4ebb-b0eb-8f32a120ca65", "sighting_of_ref": "indicator--7cee4cb9-3c75-4b3d-bae3-8a494b6f26c3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d15f8e-9b72-4fb1-9a27-b8293c9a1245", "sighting_of_ref": "indicator--a1575198-0cf5-4a1c-8258-b9abe6a71dac", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f6c30f-9dad-40b3-ae0d-ed4c6d663821", "sighting_of_ref": "indicator--a1575198-0cf5-4a1c-8258-b9abe6a71dac", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfa9271-44b6-433c-b6cb-47c5af5df59b", "sighting_of_ref": "indicator--a1575198-0cf5-4a1c-8258-b9abe6a71dac", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00be04b1-eee5-4511-8e2d-92eb612b572a", "sighting_of_ref": "indicator--566b0cb6-310a-4e65-bc37-e7244bd5293b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec944eb3-af14-4f73-aafb-d49ef0e3965c", "sighting_of_ref": "indicator--d24e1691-84b4-4148-ac81-ad8fcf0df737", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e980172-4c60-496f-b87b-d6d010a685f6", "sighting_of_ref": "indicator--8fbf9c99-a89e-4af5-90a0-5868ba416a31", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc182527-af44-489f-8f9d-df225c9f1f11", "sighting_of_ref": "indicator--8fbf9c99-a89e-4af5-90a0-5868ba416a31", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca3e2d5-5c5a-4ba0-b04d-6d9f86515243", "sighting_of_ref": "indicator--8fbf9c99-a89e-4af5-90a0-5868ba416a31", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6a3ccc-e050-409e-bc88-5aedd68c8546", "sighting_of_ref": "indicator--69aaa4ea-1095-4361-b20f-7272c3e628f0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055d476b-192b-48c7-b6ea-7e5d86cd0587", "sighting_of_ref": "indicator--a6b5f35b-64fc-4ae6-abbc-0ac50be11765", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de299612-400f-47ee-8fb9-9a44323f7695", "sighting_of_ref": "indicator--a6b5f35b-64fc-4ae6-abbc-0ac50be11765", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31b4a9c-4ac9-4793-b418-def9f30dce6c", "sighting_of_ref": "indicator--9212dfd9-db02-4b87-b250-9ebd5522b734", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee5a631-63a2-4cf0-8559-489483b21308", "sighting_of_ref": "indicator--9212dfd9-db02-4b87-b250-9ebd5522b734", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631d0eac-7ee0-4f62-9fbe-7b79f3169f77", "sighting_of_ref": "indicator--9212dfd9-db02-4b87-b250-9ebd5522b734", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e13319-3c02-4571-90d0-72c1ba39ffc2", "sighting_of_ref": "indicator--b4e9bb75-fea7-4a82-b22e-b3d3707b434d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1435a7c-dbbc-4cf1-8516-ed5662580979", "sighting_of_ref": "indicator--b4e9bb75-fea7-4a82-b22e-b3d3707b434d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab09ad9-15cf-4eed-8c04-51aef5e1446d", "sighting_of_ref": "indicator--80b25cfd-b476-4567-8388-d5c2c057bce9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0fa161-3d11-4cf2-9aee-f4f5d131a6a1", "sighting_of_ref": "indicator--80b25cfd-b476-4567-8388-d5c2c057bce9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a742b5b-70ed-49e0-be1b-2f7ac4db65be", "sighting_of_ref": "indicator--f6833730-acac-4e72-bcdb-f919b9bdf2ec", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b35897-e53b-48cc-be6a-a12eb1eda1a1", "sighting_of_ref": "indicator--ea72c25a-b748-4796-911d-d745ea4c55ba", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3faaae0-326d-493c-9667-924ba8d70ecb", "sighting_of_ref": "indicator--d97ae236-4e8f-47f6-a633-1d0d7bcdd88e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393d8237-0b68-447f-870a-a388d5b0bff1", "sighting_of_ref": "indicator--d97ae236-4e8f-47f6-a633-1d0d7bcdd88e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e403c68b-8f2e-4b22-b0bd-16de6bb5f4d2", "sighting_of_ref": "indicator--d97ae236-4e8f-47f6-a633-1d0d7bcdd88e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5bbbd8-83fb-498a-af15-2bfaf0321c21", "sighting_of_ref": "indicator--23385f0a-eaa5-428b-9b96-5ce0f141386f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38974bfe-51cd-4b1d-a1f2-1ee3725a8459", "sighting_of_ref": "indicator--23385f0a-eaa5-428b-9b96-5ce0f141386f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d125958b-6b2b-45f6-a558-ac91c5026bed", "sighting_of_ref": "indicator--23385f0a-eaa5-428b-9b96-5ce0f141386f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3caefe4b-f855-48be-870b-f16e07b0b196", "sighting_of_ref": "indicator--419cfa7b-2966-4cc0-96da-9f7743527d65", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d860437a-2a6e-4295-b9fd-e01004e2f009", "sighting_of_ref": "indicator--419cfa7b-2966-4cc0-96da-9f7743527d65", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a24ef10-e25c-45ed-ab23-1a6b0d7e22c5", "sighting_of_ref": "indicator--01291f8a-818f-470d-8b61-fdd88a563219", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fd77d0-e0cf-4b28-b2bf-d832ec65f718", "sighting_of_ref": "indicator--01291f8a-818f-470d-8b61-fdd88a563219", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf24139d-73a9-4d77-a33a-cf17bd006be6", "sighting_of_ref": "indicator--6a9bcc22-26b9-453a-9e4e-21c7f8fafaa5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac57170-8fae-40e6-ad37-63f381d3ed5c", "sighting_of_ref": "indicator--6a9bcc22-26b9-453a-9e4e-21c7f8fafaa5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d1f2f0-b3a0-4ba5-a047-53399281ab28", "sighting_of_ref": "indicator--6a9bcc22-26b9-453a-9e4e-21c7f8fafaa5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4544ef8c-f741-4c75-a86a-889214f05d98", "sighting_of_ref": "indicator--fdc35a85-3070-498b-8736-8de4cca5fbcc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0e6fd1-6dfd-4f8f-bc3c-d4feca82d6f8", "sighting_of_ref": "indicator--fdc35a85-3070-498b-8736-8de4cca5fbcc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f289b3-8a2b-465a-865b-8e321c3ad5c6", "sighting_of_ref": "indicator--fdc35a85-3070-498b-8736-8de4cca5fbcc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566ba1d2-5109-4761-81f3-140018a5b605", "sighting_of_ref": "indicator--a44ac7a4-2a82-4dc7-880b-d9e34860aa00", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36e52e6-ae2c-4b1f-a6ca-81987fd4f364", "sighting_of_ref": "indicator--a44ac7a4-2a82-4dc7-880b-d9e34860aa00", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3454814a-8cc8-438f-8090-c0a9e5dc28d8", "sighting_of_ref": "indicator--b952ffb1-413c-4833-965c-9583e0241f13", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532775af-ffb2-488e-b28b-6a48c99e88fd", "sighting_of_ref": "indicator--b952ffb1-413c-4833-965c-9583e0241f13", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838b338b-0f7e-41d5-8102-dae2206c7a02", "sighting_of_ref": "indicator--09083d53-d37d-48d7-b2c4-f8ca74cb2e15", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af5b493e-b73e-403d-918d-74fab4a6ac57", "sighting_of_ref": "indicator--113db4bb-3c92-443e-83c6-817ea9c84c1d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd64e4c-d4ac-46e0-ad72-ad19f4a7dc29", "sighting_of_ref": "indicator--113db4bb-3c92-443e-83c6-817ea9c84c1d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ac5d0a-5fc3-41e1-822c-3ac88e1ad103", "sighting_of_ref": "indicator--113db4bb-3c92-443e-83c6-817ea9c84c1d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8593d4b-3785-4b4f-8e95-03ee4698ffca", "sighting_of_ref": "indicator--5ee8eb20-9647-44cb-8bf8-7952ee5e36e6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b7199b-a78c-494e-a432-fe64bb24f4e1", "sighting_of_ref": "indicator--5ee8eb20-9647-44cb-8bf8-7952ee5e36e6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2b1bce-aea1-44a0-9009-3d770c922f03", "sighting_of_ref": "indicator--5ee8eb20-9647-44cb-8bf8-7952ee5e36e6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b510b566-edc8-46fa-b741-d60d4c77433f", "sighting_of_ref": "indicator--53bdfbf4-ce1a-4eb3-86a3-4e6dcc4efb24", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989231fe-41ce-4e42-877f-59002a444b7b", "sighting_of_ref": "indicator--e1e4e6ff-4e6a-4f46-9923-ac130559c7c5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdbd0746-bd4c-46f0-86e0-d44636d5e896", "sighting_of_ref": "indicator--c2561dee-32ae-4ee7-b7a8-25fc0e597237", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd5fe5d-48d3-49c0-8fe2-eeb58064da57", "sighting_of_ref": "indicator--c2561dee-32ae-4ee7-b7a8-25fc0e597237", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9667ac11-db9e-4980-8925-dfa93258e711", "sighting_of_ref": "indicator--c2561dee-32ae-4ee7-b7a8-25fc0e597237", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6659d652-6097-4506-bcff-8a1f971db6ef", "sighting_of_ref": "indicator--36e96c5d-fe93-4f6a-ae51-e5381efd43c5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb86fab-b7bb-4963-8125-2daa982cebb0", "sighting_of_ref": "indicator--36e96c5d-fe93-4f6a-ae51-e5381efd43c5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec9986c-ceef-42f6-a442-23874f7fc9b4", "sighting_of_ref": "indicator--1cea090c-a063-428e-a564-f8d8c87f1795", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20dfd205-be40-4b2c-adb0-98237597f21d", "sighting_of_ref": "indicator--1cea090c-a063-428e-a564-f8d8c87f1795", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c438bb69-41e5-4994-9507-12652a047567", "sighting_of_ref": "indicator--1cea090c-a063-428e-a564-f8d8c87f1795", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4701b4fb-f3a6-43a1-84e5-d0cbb9dd7279", "sighting_of_ref": "indicator--97dedf33-fd64-4e05-9788-63b163fccc88", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c1219b-a2dc-4f65-8126-85263c0ee71a", "sighting_of_ref": "indicator--b3d0db05-a271-4cfb-a770-ee8b4ea454e8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c9a871-5d60-46cb-8969-53d78faa191d", "sighting_of_ref": "indicator--ece7631e-30e2-4af9-a70e-69cb3702ea58", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b51a3c-1d01-427b-bccb-9fad719a465d", "sighting_of_ref": "indicator--ece7631e-30e2-4af9-a70e-69cb3702ea58", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e1a67e-8879-4720-a2a4-f256370a3af0", "sighting_of_ref": "indicator--ece7631e-30e2-4af9-a70e-69cb3702ea58", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca367776-7158-4e0c-8bda-231a2c102c7f", "sighting_of_ref": "indicator--ecf851bc-659f-4e5a-8aed-ee58facc05d1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbdc8b9-34e7-41c2-b3dc-b117f017992b", "sighting_of_ref": "indicator--ecf851bc-659f-4e5a-8aed-ee58facc05d1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9758eea2-451c-4f6d-a041-7fb7b0a2d97f", "sighting_of_ref": "indicator--a2e2fa98-36ed-49fc-b171-e3cba68d1884", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b9caab-0d20-43db-af9b-67c7dd62e894", "sighting_of_ref": "indicator--799b076e-8224-4efc-8825-3b78cd896056", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f32f87-f6ad-40d6-9534-c0d3aacb695e", "sighting_of_ref": "indicator--64f18c32-a034-494e-a358-1368e8e0fc50", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9657df8c-9a50-4331-bc06-1a5cdeffaf21", "sighting_of_ref": "indicator--64f18c32-a034-494e-a358-1368e8e0fc50", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767f6e86-4fa1-472e-9df8-07f682badb03", "sighting_of_ref": "indicator--83ee6e8e-abc8-407a-9615-65b050689662", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95076f7f-68d0-4811-9ba6-141eb1877627", "sighting_of_ref": "indicator--83ee6e8e-abc8-407a-9615-65b050689662", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb40c4c2-ff10-476d-bb34-241f882ba898", "sighting_of_ref": "indicator--0b60a16a-4c4b-4c25-b6ba-a48f5d8b7e92", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a887702a-11c1-41b1-b725-124c98e7c7e6", "sighting_of_ref": "indicator--0b60a16a-4c4b-4c25-b6ba-a48f5d8b7e92", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949a8402-eb00-4d4e-b2aa-e25dc83bb248", "sighting_of_ref": "indicator--0b60a16a-4c4b-4c25-b6ba-a48f5d8b7e92", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4990cf17-68ce-4bd8-afb5-a2c864209f2a", "sighting_of_ref": "indicator--bd412ee8-3874-471a-8451-3a7a4845e1e8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261bd917-fa8f-40a2-b502-2fba53b5d985", "sighting_of_ref": "indicator--bd412ee8-3874-471a-8451-3a7a4845e1e8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6917e5e-1664-4460-8c92-ecac99219f3e", "sighting_of_ref": "indicator--bd412ee8-3874-471a-8451-3a7a4845e1e8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d30502-ecba-438e-aa7b-080748a4e649", "sighting_of_ref": "indicator--09e61305-40cc-426c-b246-6f69e3d76cbc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23bd477f-c412-43ed-a244-09dcc9041e62", "sighting_of_ref": "indicator--09e61305-40cc-426c-b246-6f69e3d76cbc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9124345-19ea-4a7c-8528-fa222640d3eb", "sighting_of_ref": "indicator--09e61305-40cc-426c-b246-6f69e3d76cbc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5067e8cb-f16b-4f65-9e05-08668acf91c1", "sighting_of_ref": "indicator--571e468d-7c36-442f-8294-f28705e57623", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb759911-95ed-48e5-b29b-ce51ec0ba150", "sighting_of_ref": "indicator--571e468d-7c36-442f-8294-f28705e57623", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb3a82b-0f7c-475b-9f2b-a08cb7690236", "sighting_of_ref": "indicator--571e468d-7c36-442f-8294-f28705e57623", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff7cab9-2ed6-45e1-a478-28b372fef2f4", "sighting_of_ref": "indicator--6e70d940-d704-409e-aecc-5feaadc9ad85", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf99641d-56bf-41e9-924c-fe20c7d1da69", "sighting_of_ref": "indicator--d378e761-b95d-4c26-b2db-75e4af3a4b62", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c160b2f4-2cea-43f9-bf70-6ca5c43d1471", "sighting_of_ref": "indicator--68f99e53-ec3e-46fd-a0e1-1885f610d3a2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca36b80-b3a6-4276-be85-958e09bff527", "sighting_of_ref": "indicator--68f99e53-ec3e-46fd-a0e1-1885f610d3a2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eedca91-1852-49fc-82a0-b2f43f4f4c0c", "sighting_of_ref": "indicator--27f9b8b2-9e58-4a79-8c43-8f397aa61c09", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cfc19b0-09cf-491c-b3b8-6d9af8ec6e35", "sighting_of_ref": "indicator--d89c1c8c-6404-406e-aab4-5e5048906cf2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9478a7a3-fa38-4e1f-b322-55a7f31963ec", "sighting_of_ref": "indicator--e4fe0690-8e85-43b2-af5a-9d295343174c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75eab0c1-d993-407c-b532-43ec54b8d681", "sighting_of_ref": "indicator--e4fe0690-8e85-43b2-af5a-9d295343174c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece2df2e-48f6-4a13-ae6c-970b67aeb34a", "sighting_of_ref": "indicator--e4fe0690-8e85-43b2-af5a-9d295343174c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b9474c-2434-4191-b395-8a4f1aa80d5c", "sighting_of_ref": "indicator--c8d53a22-124c-43e1-8b12-b8fa6719e5c4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3572e1d8-2705-467d-8725-fd3be91ecd32", "sighting_of_ref": "indicator--63234ed3-597c-439b-a6b6-923f4f27a19d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b0a590-e877-42cd-91d5-91d3a2ddeb0d", "sighting_of_ref": "indicator--0394c024-86f0-46e0-9df6-a6b7659b84e1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550ce786-6de1-4187-ac79-90d8f2c2cddc", "sighting_of_ref": "indicator--0394c024-86f0-46e0-9df6-a6b7659b84e1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb8e7d8-6161-484f-8f33-40ae60cc2999", "sighting_of_ref": "indicator--0394c024-86f0-46e0-9df6-a6b7659b84e1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038e1bca-8768-49ef-a39a-3d66f1b4b7fe", "sighting_of_ref": "indicator--ac757956-a690-477f-9a96-79e2d4c5eb39", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a0f096-0ba0-4823-a394-3e86caef28ac", "sighting_of_ref": "indicator--ac757956-a690-477f-9a96-79e2d4c5eb39", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2020902e-aa03-4daa-bc8a-b09806323ab9", "sighting_of_ref": "indicator--ac757956-a690-477f-9a96-79e2d4c5eb39", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f398ea3-e646-4bba-b7e8-43d07cc09891", "sighting_of_ref": "indicator--af4222ee-2d35-4e95-b92b-6711043707a0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6782d06-226c-4180-a0ba-a7c055f55dbe", "sighting_of_ref": "indicator--af4222ee-2d35-4e95-b92b-6711043707a0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb8d660-51ae-4103-9ccb-080ec51fb1d8", "sighting_of_ref": "indicator--1cc102fd-5721-480f-8313-a47b54fb87fd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdea6d6-bfa9-4fdd-8595-6f35d10900ba", "sighting_of_ref": "indicator--1cc102fd-5721-480f-8313-a47b54fb87fd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8a4f24-0103-4e8e-9ca1-0a027b000547", "sighting_of_ref": "indicator--1cc102fd-5721-480f-8313-a47b54fb87fd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72482678-8379-42c3-bbee-47829f965396", "sighting_of_ref": "indicator--8712e8e2-0889-42a5-9b29-e79a406620ae", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ac6499-c4a1-4699-a6fc-81ce0fad896a", "sighting_of_ref": "indicator--8712e8e2-0889-42a5-9b29-e79a406620ae", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92c7835-6dc1-448c-8a57-d376a0299585", "sighting_of_ref": "indicator--40c8de2c-4355-467a-8fa0-23fce851a42b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ef391b-fb04-47e7-861e-66c9fbbf5fac", "sighting_of_ref": "indicator--0088b422-46e0-4766-8012-2c504428c080", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b782985b-5d7a-43f7-8797-1e5cffe3774b", "sighting_of_ref": "indicator--0088b422-46e0-4766-8012-2c504428c080", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23bb5386-e366-432a-b54d-a9d43837c7c8", "sighting_of_ref": "indicator--0088b422-46e0-4766-8012-2c504428c080", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0916436-10c3-470b-ab06-a6488d06fe44", "sighting_of_ref": "indicator--2cc396dd-582f-4daa-998e-3f2940e7db10", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd30bccc-575a-4eac-b428-210cf377eeff", "sighting_of_ref": "indicator--2cc396dd-582f-4daa-998e-3f2940e7db10", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37841cd-7b79-46de-bf6c-18cd6d22d579", "sighting_of_ref": "indicator--4cd8c129-aace-476c-a101-a3b31d8e37a6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5d6cee-6840-49ad-956d-54c129c135a8", "sighting_of_ref": "indicator--a05a0737-853a-4276-8e3a-a64cafa3388e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d13bd3-3652-4137-8b06-c6741e1c2f4f", "sighting_of_ref": "indicator--a05a0737-853a-4276-8e3a-a64cafa3388e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11df033-cf0d-438b-8094-5e2f22c521e5", "sighting_of_ref": "indicator--0310d8f5-59af-47ba-81a8-d3722e00b8c6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a8a489-4b7c-45b2-80b9-85fcfbc7f726", "sighting_of_ref": "indicator--c9cea61d-a51d-4dbf-95cb-0510dbc5b10b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2841787-cef4-4d4b-b761-c51cc7dc2163", "sighting_of_ref": "indicator--c9cea61d-a51d-4dbf-95cb-0510dbc5b10b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0bbbd9-a746-4b51-affc-8794889f5702", "sighting_of_ref": "indicator--c9cea61d-a51d-4dbf-95cb-0510dbc5b10b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1711d56-7da1-47b2-af38-9d32f73ece1d", "sighting_of_ref": "indicator--0deb69ee-99bd-4342-a858-d368d7a78f54", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08544b87-4494-43ad-8daa-83f495c8711b", "sighting_of_ref": "indicator--0deb69ee-99bd-4342-a858-d368d7a78f54", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1772c7-f28c-49dd-9a70-a230c4c3f3c1", "sighting_of_ref": "indicator--f6b1a143-5b5e-449c-b607-8e26668b24a1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94dcfd9-4201-4553-92ff-4f9dae1b066c", "sighting_of_ref": "indicator--f3ed92f4-a729-42d9-9678-ced9588ee3d0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7895ca2d-0ead-4ec1-bc0b-22d5d599b294", "sighting_of_ref": "indicator--bbaa72be-fc78-482a-b2b8-3a867da3e026", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6d3c74-614b-4e41-975c-3604debfd409", "sighting_of_ref": "indicator--bbaa72be-fc78-482a-b2b8-3a867da3e026", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15da5987-06bd-4c64-910d-b356f7541294", "sighting_of_ref": "indicator--23e2a92d-b33f-460b-b15a-ffa82c3c6e2b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f889cd5-9a9b-424e-83c2-8ce30fb36976", "sighting_of_ref": "indicator--a040120f-e90c-4dcd-bb77-535c3a147617", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cdd5673-9ce3-4308-acec-a3c5cfb450d8", "sighting_of_ref": "indicator--4b39ca0d-83aa-4d85-9461-e76beb885f93", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a07c5c-0a93-4502-b7ab-b29e56a61bf4", "sighting_of_ref": "indicator--defa1de0-d58d-4d29-8c5d-0aa2fd52c757", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a532b2-ebb7-4d07-a4a8-e03c9c31333a", "sighting_of_ref": "indicator--defa1de0-d58d-4d29-8c5d-0aa2fd52c757", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5757a91a-b1ac-4a12-aed5-7b4650fcbcf2", "sighting_of_ref": "indicator--1c7497db-2ddf-492a-9a14-1608964cc0d7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c26914-eca7-4b66-b917-bfda84191fbb", "sighting_of_ref": "indicator--98670cb5-d206-4027-8237-36f256e5256d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107be659-93f1-4ea6-93c2-047de5d3feb0", "sighting_of_ref": "indicator--98670cb5-d206-4027-8237-36f256e5256d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a67beb-0235-41b5-9def-19ccbdc2bd06", "sighting_of_ref": "indicator--98670cb5-d206-4027-8237-36f256e5256d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192abb06-074b-4dac-80c7-d01c079f3925", "sighting_of_ref": "indicator--2676acef-cf9d-4389-8075-b1ff038c5f2c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a4c73e-19d8-40e9-8130-89fe4c266a96", "sighting_of_ref": "indicator--f515e2b0-a319-408c-b9b2-f80caae52f49", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae54228-d07c-491d-b69c-eae60a246fd0", "sighting_of_ref": "indicator--4bae7b28-850e-4518-ac8a-08063314ee3b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdaf5052-49dc-4706-aebc-3e30d20d5eca", "sighting_of_ref": "indicator--11d51c77-a922-45ea-b78f-4434c3c03eb0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165481a2-8224-4a10-b1b4-01b1fedfcfb7", "sighting_of_ref": "indicator--040bcd82-93f0-4909-bf45-f2ad1572c2ee", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a897448-a883-41d5-bf01-c76f4aa3224b", "sighting_of_ref": "indicator--040bcd82-93f0-4909-bf45-f2ad1572c2ee", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595e96e7-4029-4a62-bd33-ed36a35f2b3c", "sighting_of_ref": "indicator--040bcd82-93f0-4909-bf45-f2ad1572c2ee", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37fbd36a-0bc6-4e94-b308-18b0e861c554", "sighting_of_ref": "indicator--1330f49c-3728-4b7e-bd60-7017786029d8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd0f73f-fd8e-47d8-9348-f84aaadbd460", "sighting_of_ref": "indicator--1330f49c-3728-4b7e-bd60-7017786029d8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37bc5f63-0c56-4303-afc4-c011af408cb8", "sighting_of_ref": "indicator--1330f49c-3728-4b7e-bd60-7017786029d8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f7d8d1-8c48-4d0a-9b38-c3c13190a675", "sighting_of_ref": "indicator--0b34e2f0-1957-45a7-bdbb-5d9fd08ad9d5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a11468-5389-4fc9-98d9-7a18401d3cae", "sighting_of_ref": "indicator--8fdbdc6b-1ee8-46d5-90df-6d08137bfd64", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eddc089a-94d1-43c7-86ea-3bfc998ba1fb", "sighting_of_ref": "indicator--8fdbdc6b-1ee8-46d5-90df-6d08137bfd64", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b449be3b-0822-4663-a269-bc17544cb0c7", "sighting_of_ref": "indicator--69945c04-3061-4f36-b0b9-5576d97d6ce6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3dde8de-bea2-4aa1-be1e-0a07d5e59996", "sighting_of_ref": "indicator--69945c04-3061-4f36-b0b9-5576d97d6ce6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6a0be9-8571-4138-b735-73d5cacfb780", "sighting_of_ref": "indicator--69945c04-3061-4f36-b0b9-5576d97d6ce6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7764531c-1a03-4efa-8d56-f97f9a5a7744", "sighting_of_ref": "indicator--752f8e6d-513c-45c0-9664-8250b4e53479", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de367fa-4ee8-4e1e-957d-7a9330b0dfd5", "sighting_of_ref": "indicator--752f8e6d-513c-45c0-9664-8250b4e53479", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b963d30-bbe5-4dc7-b8b1-eb545f54cde4", "sighting_of_ref": "indicator--752f8e6d-513c-45c0-9664-8250b4e53479", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc673e6-409c-4f26-9dba-8f9be3d6c73d", "sighting_of_ref": "indicator--11c9a6d0-bc93-4c40-91aa-4ad0a9043331", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ea491c-26f4-4fba-8410-06e55b6dca29", "sighting_of_ref": "indicator--11c9a6d0-bc93-4c40-91aa-4ad0a9043331", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d85263-f06a-4dbc-b135-c0ba4122d396", "sighting_of_ref": "indicator--11c9a6d0-bc93-4c40-91aa-4ad0a9043331", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60a7f5b-4b96-4457-a75a-b57fb204495e", "sighting_of_ref": "indicator--a275841f-8322-4334-8094-81667a2320e5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333c5e21-3110-4726-88a6-01e2793ac18d", "sighting_of_ref": "indicator--a275841f-8322-4334-8094-81667a2320e5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8aae363-5415-4d87-b668-e04abcce9d9f", "sighting_of_ref": "indicator--605b2939-eeb2-4d03-9926-38ad69294a7f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf4dc02-d2a0-4cb2-bbb6-dc4ceab389ad", "sighting_of_ref": "indicator--605b2939-eeb2-4d03-9926-38ad69294a7f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a54e699-1c65-4065-92b1-7f07b25bc4c7", "sighting_of_ref": "indicator--605b2939-eeb2-4d03-9926-38ad69294a7f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8810ac2-5aab-44e1-b00e-913840603ae0", "sighting_of_ref": "indicator--dee235f4-33fa-4925-9ff2-ceed09e2a536", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39c3536-bbdd-4b74-9150-e7f7c0c5bb1c", "sighting_of_ref": "indicator--dee235f4-33fa-4925-9ff2-ceed09e2a536", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3895c8b0-20a6-4881-93c3-66a998c26981", "sighting_of_ref": "indicator--dee235f4-33fa-4925-9ff2-ceed09e2a536", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0308cc2-e770-410e-b37c-3454f704153a", "sighting_of_ref": "indicator--8cc21d4b-24d0-4f0e-bf89-7978b11a75ea", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bca61c3-dc1a-4db3-9b1c-3124bfc2501d", "sighting_of_ref": "indicator--44cedd97-56fc-4707-b8b2-7befc82e0f15", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97901de-4a37-427e-9813-b51e339e6813", "sighting_of_ref": "indicator--44cedd97-56fc-4707-b8b2-7befc82e0f15", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8f575b-df2e-4f61-a460-a75a28890dfa", "sighting_of_ref": "indicator--44cedd97-56fc-4707-b8b2-7befc82e0f15", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99aa3c76-a458-4777-bb08-435427019134", "sighting_of_ref": "indicator--525a0673-756d-43e2-b3a2-54e05a438408", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09db5801-70c2-4f40-8135-55b7aac1c3ec", "sighting_of_ref": "indicator--031672d2-8381-4f4e-8654-a1f951bd313d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004b573d-81cb-44e5-b33a-69a1a03613d6", "sighting_of_ref": "indicator--031672d2-8381-4f4e-8654-a1f951bd313d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51fd715b-9a3b-42a1-98d2-ea5d573e077a", "sighting_of_ref": "indicator--04fd55bd-5864-4bb7-842d-b7b30ee03b58", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa36090b-2dbf-4983-8d5f-6a145573fff3", "sighting_of_ref": "indicator--04fd55bd-5864-4bb7-842d-b7b30ee03b58", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b70c5f7-6ab2-4ef2-9c53-ff1bab3e6d79", "sighting_of_ref": "indicator--04fd55bd-5864-4bb7-842d-b7b30ee03b58", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912fa5bc-ddc9-427c-85c7-6ef1cf19a71f", "sighting_of_ref": "indicator--bbb358c8-2d5d-436f-9fe4-4d189539e93a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f06d9c9-9496-4aaa-b02f-d05e35f2c249", "sighting_of_ref": "indicator--bbb358c8-2d5d-436f-9fe4-4d189539e93a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481b048b-b8b4-416e-8113-95921f67a2bf", "sighting_of_ref": "indicator--bbb358c8-2d5d-436f-9fe4-4d189539e93a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e2c2a0-a66a-4608-8389-594e755d76df", "sighting_of_ref": "indicator--2944891b-74c7-4d73-a10d-4e2cc6f5ae81", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e1f11a-5439-42b3-a338-a73426d9c97c", "sighting_of_ref": "indicator--45446d6a-b38b-4038-ab6e-77098b4768ff", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18439a4b-c3c7-4fcb-aa59-246af53cd257", "sighting_of_ref": "indicator--0432be77-c4ca-402d-9112-2a1b9cc363f3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750cc60d-5242-4927-bad1-fc2663df38f9", "sighting_of_ref": "indicator--1ea6abb1-1d85-4ced-8217-6c2b9e7703ff", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1916506-55b0-4bac-9936-e8af616546e4", "sighting_of_ref": "indicator--1ea6abb1-1d85-4ced-8217-6c2b9e7703ff", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e69979-3421-4e77-9022-1c9264138767", "sighting_of_ref": "indicator--9ef126c2-df1d-4c4b-a3ba-dcb55ca9c6b9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc1777f-0962-42de-a712-1725ab43bfc7", "sighting_of_ref": "indicator--52da66cc-62bc-4c66-b4a7-b5645d556b87", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20b2c60-8606-4c57-afe7-31f70a4f02b0", "sighting_of_ref": "indicator--52da66cc-62bc-4c66-b4a7-b5645d556b87", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e53901f-2206-42ae-ab32-43d6b9804c11", "sighting_of_ref": "indicator--580337dc-1ce6-4e1e-91ae-6d594bd1a0ff", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9546171-d02f-48d4-b6e7-2c5a38db05bd", "sighting_of_ref": "indicator--1d747cb7-b51b-47f1-85ca-345576183c5e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bdf147-c8f6-4894-ac05-6ef8acadf152", "sighting_of_ref": "indicator--a256a381-6412-4636-a070-484a3cef639b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6dfebc-c69a-4def-b43f-ebc6493cc3d6", "sighting_of_ref": "indicator--a256a381-6412-4636-a070-484a3cef639b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d857ad7-bbd1-4b17-b12f-da0ca5920e53", "sighting_of_ref": "indicator--a256a381-6412-4636-a070-484a3cef639b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6245bf3-0fb9-43dc-82f4-a1306abcc360", "sighting_of_ref": "indicator--0cc4e893-ac76-4b20-af94-a916b8a35309", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a2a0c70-faa6-4d96-b962-41b9b9a481ff", "sighting_of_ref": "indicator--0cc4e893-ac76-4b20-af94-a916b8a35309", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2d6251-9b2d-4ed5-8a71-ffe53b3656ae", "sighting_of_ref": "indicator--0cc4e893-ac76-4b20-af94-a916b8a35309", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce9b023-177e-4a7b-924e-48e001c266ab", "sighting_of_ref": "indicator--a3886b8f-61df-4014-a202-1dc8fbfe5cb6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73f6157-7a8b-41bd-b36a-c0e29e908b13", "sighting_of_ref": "indicator--a3886b8f-61df-4014-a202-1dc8fbfe5cb6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8ec138-e0c0-4b84-80ad-d499daa525d3", "sighting_of_ref": "indicator--254f472d-ca93-4b67-9308-a6ff55c939ae", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677eeed4-51cd-4215-8775-2f30552cb30c", "sighting_of_ref": "indicator--254f472d-ca93-4b67-9308-a6ff55c939ae", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e83c97-4f4d-44a6-9281-be5ec7f2a3b8", "sighting_of_ref": "indicator--254f472d-ca93-4b67-9308-a6ff55c939ae", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5148cc8d-f95d-4832-85d8-4d7b63bd2f5d", "sighting_of_ref": "indicator--2078f65b-6927-4fe4-9da1-cdd5b8318fdf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7494de89-031b-47d3-a17f-2fd562bc006b", "sighting_of_ref": "indicator--1c939289-52f9-4722-a91f-f2aa3ea7434c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41df11fc-7efd-4de3-9b13-e3156e9efc04", "sighting_of_ref": "indicator--cc553d5a-efa7-40cb-a7a7-aed835ffee04", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29780a1e-dea6-4956-91cf-bb5e48ed0f29", "sighting_of_ref": "indicator--cc553d5a-efa7-40cb-a7a7-aed835ffee04", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c2d0e9-1c92-4b9b-a1ed-52b934960afd", "sighting_of_ref": "indicator--00dd74a7-39e0-4a89-b3ef-78bd1ac8f9a7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aafcb10a-7508-401b-be43-32abb4f96bdd", "sighting_of_ref": "indicator--00dd74a7-39e0-4a89-b3ef-78bd1ac8f9a7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070997b7-0d54-48f7-9677-83cc277ec0d3", "sighting_of_ref": "indicator--aa2bbe7e-c660-4803-9515-3d5f5acca291", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40699b9-e11f-499c-838d-193dffc4e664", "sighting_of_ref": "indicator--aa2bbe7e-c660-4803-9515-3d5f5acca291", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af37f194-01d0-4008-8e08-305abb789c23", "sighting_of_ref": "indicator--d3d46dbc-8902-4275-8c98-53385cbaee36", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd2cb22-e53d-45af-a287-c56fad5fe28e", "sighting_of_ref": "indicator--d3d46dbc-8902-4275-8c98-53385cbaee36", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e043a5d-8c67-48a9-9835-ff7eea8ab3fd", "sighting_of_ref": "indicator--d936cab4-1755-47b1-98e9-08ee9ec0a6a5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b043d3fe-937f-44ad-bccf-d875fbbf4453", "sighting_of_ref": "indicator--a879b99c-7c3c-4b6c-a35b-b4b88f73a191", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8beb1196-9307-4dfe-81b3-d01c28ec428b", "sighting_of_ref": "indicator--a879b99c-7c3c-4b6c-a35b-b4b88f73a191", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3377599-4bc5-47bc-bfd6-9c47f30b195b", "sighting_of_ref": "indicator--a879b99c-7c3c-4b6c-a35b-b4b88f73a191", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc989fb-82a6-4f1b-91af-8543183dcd99", "sighting_of_ref": "indicator--1b4520cf-9d9c-4573-8619-df46f723fe2f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65efa91-92b4-4445-87c9-c2bd7a9ac9e6", "sighting_of_ref": "indicator--1b4520cf-9d9c-4573-8619-df46f723fe2f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60f0dfb-36fa-4b16-ae86-126acb976a2c", "sighting_of_ref": "indicator--1b4520cf-9d9c-4573-8619-df46f723fe2f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c00a9a-e4ff-4010-8318-f469c0952cfe", "sighting_of_ref": "indicator--e2faae3a-27c6-4035-85a6-d85f9fdd1fca", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6e92b5-6499-4acf-a6f7-eb790f653e68", "sighting_of_ref": "indicator--e2faae3a-27c6-4035-85a6-d85f9fdd1fca", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c41344d-4fa2-46e3-85ff-9a28a3ee518e", "sighting_of_ref": "indicator--dd9bd5dc-00c7-4814-8b7b-67a790eae12c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1e8d08-7093-4a24-a5b3-320ce9d38291", "sighting_of_ref": "indicator--6410ad3c-d934-4dec-915d-2095c0be91dc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6e34fb-afe5-4164-9453-367f3d093b2c", "sighting_of_ref": "indicator--c35cb97d-c6ba-4df0-9571-4a6418c85f32", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dedbfc75-c373-49cb-bf49-e7e3760ada73", "sighting_of_ref": "indicator--c35cb97d-c6ba-4df0-9571-4a6418c85f32", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad3eafe-4b4c-474a-9677-30cd06acda04", "sighting_of_ref": "indicator--53095d73-33c9-41c5-aad6-d7205871cbf2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab88e11f-0e88-4328-aa33-bde83f75a422", "sighting_of_ref": "indicator--53095d73-33c9-41c5-aad6-d7205871cbf2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f95418c-2871-4ddb-9d8b-918d10df4683", "sighting_of_ref": "indicator--53095d73-33c9-41c5-aad6-d7205871cbf2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d46a4c-12f8-4a95-a052-bb6439bf9016", "sighting_of_ref": "indicator--10c573c5-e780-4a89-8a2e-350aa8ccf696", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a96a966-8645-4520-b5d1-be82d64004a6", "sighting_of_ref": "indicator--10c573c5-e780-4a89-8a2e-350aa8ccf696", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8132a3-3530-4965-8c53-773d77490330", "sighting_of_ref": "indicator--10c573c5-e780-4a89-8a2e-350aa8ccf696", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1278962-5cd3-410b-a07a-e2c14ea0bd21", "sighting_of_ref": "indicator--32dd42fb-be52-47d3-9bb0-dbd758849475", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb57140f-51b6-419c-a804-22fb26676935", "sighting_of_ref": "indicator--3e890735-ed86-47ca-9d12-df2f3371b0e3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98fc7dca-0f03-4d9e-9b55-423e0d82607f", "sighting_of_ref": "indicator--b324a724-4102-4735-9b46-ea8766ab0845", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac182a27-1e06-4ce9-946b-e446f3a62ef3", "sighting_of_ref": "indicator--b324a724-4102-4735-9b46-ea8766ab0845", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0d90cc-a095-403e-9235-2f59956585b5", "sighting_of_ref": "indicator--b324a724-4102-4735-9b46-ea8766ab0845", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e6c700-ba0f-48c1-bb04-0856ec548580", "sighting_of_ref": "indicator--d8b1797e-d950-41dd-9691-a42929054c61", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec78daad-a469-4911-a581-c1278021a4be", "sighting_of_ref": "indicator--d8b1797e-d950-41dd-9691-a42929054c61", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eee23eb-50e5-4f50-931d-907c5408bb4f", "sighting_of_ref": "indicator--d8b1797e-d950-41dd-9691-a42929054c61", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb83101-0b58-4f30-88b1-31a6cf2ba436", "sighting_of_ref": "indicator--e249b26f-1400-4b90-a4a3-548ffc2827ad", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ee4c4c-98bd-4d12-b3a1-7090730a70fd", "sighting_of_ref": "indicator--73e36770-507e-4405-9240-6fc9d6802e42", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbf99f5-c23d-439b-bae0-ddcfc20de9c9", "sighting_of_ref": "indicator--73e36770-507e-4405-9240-6fc9d6802e42", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4421c1-143e-43b9-afc9-7475b324dad0", "sighting_of_ref": "indicator--d71cefe7-d493-4d37-a7c2-8441261ae436", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b126774-1f1f-4170-b7ba-acf8427c2f14", "sighting_of_ref": "indicator--d71cefe7-d493-4d37-a7c2-8441261ae436", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95cdcda1-ebba-42f9-8d54-dcab8919b9bd", "sighting_of_ref": "indicator--d71cefe7-d493-4d37-a7c2-8441261ae436", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc575fc7-b96b-4dc2-b779-71bf66a935a4", "sighting_of_ref": "indicator--ee0ed04b-4e3d-4ffa-b0b7-615728f77052", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e663ae89-81eb-4c56-b89d-5570e0dde050", "sighting_of_ref": "indicator--1297deef-df1a-4616-bf1e-943b04cd5184", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16be80aa-dd41-414d-84f5-37207ee27c43", "sighting_of_ref": "indicator--1297deef-df1a-4616-bf1e-943b04cd5184", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd021c00-f651-4974-8bc5-d788fcbc187b", "sighting_of_ref": "indicator--1297deef-df1a-4616-bf1e-943b04cd5184", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb658ee2-b448-47fd-a8f2-b198ed7f220d", "sighting_of_ref": "indicator--f13a1577-2933-4eba-8ea0-81c1f8873ffd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e134934-e79b-4f7c-b58f-3ac2db620973", "sighting_of_ref": "indicator--d906ab22-9cef-491f-a2c1-1d1c7ab26eea", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9007f6c-e78d-4caa-9ceb-d4e18fe456a1", "sighting_of_ref": "indicator--e22be858-463d-432c-afa0-0b76e67b57f6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bddd316-9e26-4f88-86fe-0e2169d7551e", "sighting_of_ref": "indicator--e22be858-463d-432c-afa0-0b76e67b57f6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18272423-7711-4a13-936d-6c10614ea621", "sighting_of_ref": "indicator--e22be858-463d-432c-afa0-0b76e67b57f6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17e424d-112c-409c-9314-80131f005cc2", "sighting_of_ref": "indicator--ea4082e7-1663-45fe-bbd8-3420c4382e44", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d5e393-5bfb-4658-851e-5390469ba8fd", "sighting_of_ref": "indicator--ea4082e7-1663-45fe-bbd8-3420c4382e44", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc0ab7c-b996-425b-82fe-4960d6212c0a", "sighting_of_ref": "indicator--cadf45e9-28bb-4f8d-a3c0-3e2fbb8867b8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0272ed-4894-42f7-a04a-7c19146a3a74", "sighting_of_ref": "indicator--cadf45e9-28bb-4f8d-a3c0-3e2fbb8867b8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bee13eb-c02b-4f41-a1c5-808ede3d26b2", "sighting_of_ref": "indicator--cadf45e9-28bb-4f8d-a3c0-3e2fbb8867b8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2481df2d-93cf-49a0-b102-a47e45ede662", "sighting_of_ref": "indicator--d378f223-aa0c-4e08-a472-e625bf0b96e5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cec7b49-cfc5-4ae0-aefa-b45668d35e6f", "sighting_of_ref": "indicator--d378f223-aa0c-4e08-a472-e625bf0b96e5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe54f284-f065-4a70-b2fb-f94b747b2904", "sighting_of_ref": "indicator--a41c9bc2-c117-427a-8ce3-81260af799bb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c0caa2-60ad-41d8-85cc-c73478c53703", "sighting_of_ref": "indicator--a41c9bc2-c117-427a-8ce3-81260af799bb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e0f0d7-6ac1-4e8e-b77b-9fb956171d07", "sighting_of_ref": "indicator--c58e552f-2793-48bc-bf76-0242a8748342", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa97768-460c-4b54-bfaa-54df67dcf7f8", "sighting_of_ref": "indicator--c58e552f-2793-48bc-bf76-0242a8748342", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba25f77-b346-4500-935a-907255ca9c80", "sighting_of_ref": "indicator--f63f3972-240e-49b5-80e9-a1bddb5c4020", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b1d515-3673-48b1-ac2a-7d4853211b8d", "sighting_of_ref": "indicator--f63f3972-240e-49b5-80e9-a1bddb5c4020", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e7ea4d-7fe6-4f99-b0d0-87793f89d2d3", "sighting_of_ref": "indicator--f63f3972-240e-49b5-80e9-a1bddb5c4020", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee91c257-3048-4648-a169-de799543f94f", "sighting_of_ref": "indicator--50039de7-40f9-47a8-ac38-7240065be66b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28649422-bcb6-46c4-94dd-d15dc0731465", "sighting_of_ref": "indicator--50039de7-40f9-47a8-ac38-7240065be66b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ecdb84-e50a-4280-92f7-9ef121f50825", "sighting_of_ref": "indicator--50039de7-40f9-47a8-ac38-7240065be66b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdb1651-3980-4681-ab1c-ee0497f044ec", "sighting_of_ref": "indicator--a9c781cb-dd57-4a7f-a706-709a5e18b1d2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2609d960-aa26-4014-852b-368dcce155da", "sighting_of_ref": "indicator--43aa2c3c-d2bd-439e-9db5-397142624c65", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d254de-24e7-4cae-b760-531ab749ef65", "sighting_of_ref": "indicator--87f2b272-e6a9-4a95-91d8-449deefb0162", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c44d289-e4d6-49a6-a06e-55c6c4ac50c2", "sighting_of_ref": "indicator--87f2b272-e6a9-4a95-91d8-449deefb0162", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d53fffa-fc22-4d4f-b437-676bc44606b0", "sighting_of_ref": "indicator--aa1355b8-fae4-4db9-83c2-ea366b6e1547", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64ab295-0916-460a-8969-b7970d591f29", "sighting_of_ref": "indicator--aa1355b8-fae4-4db9-83c2-ea366b6e1547", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07c50b4-6a5a-4be4-b602-5eff6b7f14f5", "sighting_of_ref": "indicator--bf17df52-0b0f-4b4e-8397-8c3be8b4283b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed2d148-f26d-4b13-848c-a2cd807c382b", "sighting_of_ref": "indicator--071a86b2-dbe2-4dcc-b89c-c806ebcdd204", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f308be84-daaf-4c91-9d66-520a949427dd", "sighting_of_ref": "indicator--38c9bb42-b470-4594-82b2-064f9eb4ef73", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1c0136-89a8-428f-a9ff-486ad7082695", "sighting_of_ref": "indicator--b71137ca-51c5-4498-af5e-ec5d3ea65b8f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13460b95-4432-4c0d-852f-8497ac65a1cc", "sighting_of_ref": "indicator--b71137ca-51c5-4498-af5e-ec5d3ea65b8f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af6bcd5-7cf1-4656-aa1c-7200386e2c48", "sighting_of_ref": "indicator--b71137ca-51c5-4498-af5e-ec5d3ea65b8f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8f9dff-0b99-447e-9292-ffada6cd8a54", "sighting_of_ref": "indicator--cd1d1336-5e2f-4ec6-a758-6a1a928b3fa6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e1525f-3d1b-4710-a653-28e48549c607", "sighting_of_ref": "indicator--cd1d1336-5e2f-4ec6-a758-6a1a928b3fa6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a980bd41-e544-4c0c-9c91-5bfd29ac5e23", "sighting_of_ref": "indicator--93bc0419-6944-4ea4-9980-4e4db4b775e6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a67436-b24a-4672-a4d7-3759733ef8d7", "sighting_of_ref": "indicator--93bc0419-6944-4ea4-9980-4e4db4b775e6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23bd6595-4027-49ab-9dca-72a6edd9c5b1", "sighting_of_ref": "indicator--93bc0419-6944-4ea4-9980-4e4db4b775e6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e22b7c-a7e6-4cc5-9a8c-7b6438c724bc", "sighting_of_ref": "indicator--1c3179fc-ab74-41a5-b12e-8765006d90be", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99661fcf-202e-4349-8152-68f0d98baff0", "sighting_of_ref": "indicator--1c3179fc-ab74-41a5-b12e-8765006d90be", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e564e52-289f-428b-b9f3-429c96ee0eeb", "sighting_of_ref": "indicator--1c3179fc-ab74-41a5-b12e-8765006d90be", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1a8818-c53c-49f6-97e0-fc77683a3e5e", "sighting_of_ref": "indicator--8a76e0c5-b60b-4d12-b818-afb48d4e55e2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c62196a-8bee-48c1-b832-83c3484d52a1", "sighting_of_ref": "indicator--5c5f1826-775c-4d1a-90d2-8a0feadfe395", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d4556a-b2e3-4862-a7e2-eafc49ee763f", "sighting_of_ref": "indicator--5c5f1826-775c-4d1a-90d2-8a0feadfe395", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b57e00-8cab-4514-b02b-8cd296972536", "sighting_of_ref": "indicator--5c5f1826-775c-4d1a-90d2-8a0feadfe395", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0335b339-c0f9-4211-bd49-4cc7b91db78d", "sighting_of_ref": "indicator--9b3211cd-b807-4d09-942c-ee24b57e0e8d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7f7b7d-58a2-4b35-9aa9-037287162005", "sighting_of_ref": "indicator--9b3211cd-b807-4d09-942c-ee24b57e0e8d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2590027e-bb19-443a-b887-a392b18dc267", "sighting_of_ref": "indicator--4f31d919-29fc-4f2f-bb50-a6a44aa27fb4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69568340-c308-4b6a-864a-b1641c1134be", "sighting_of_ref": "indicator--5cddeb27-c522-4a1c-be24-9aae5494a199", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514f0fe9-674a-48c0-8d0d-a2588f3d547e", "sighting_of_ref": "indicator--5cddeb27-c522-4a1c-be24-9aae5494a199", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03470b1-028b-4a5f-b2bc-a438ad74999f", "sighting_of_ref": "indicator--5cddeb27-c522-4a1c-be24-9aae5494a199", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fae2ae0-a276-4bcb-ad9c-9efcff7dc95e", "sighting_of_ref": "indicator--23904333-fc17-49ee-a238-c488dafa29dd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9fc0e2-e8d9-4fd4-bab4-2d109504e6a9", "sighting_of_ref": "indicator--23904333-fc17-49ee-a238-c488dafa29dd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b38817-14e2-4492-aab5-3601e2874519", "sighting_of_ref": "indicator--b6875a17-3781-47c8-9558-4834dcf9784f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c720ba-1def-4611-96dc-c2249c3480dd", "sighting_of_ref": "indicator--b6875a17-3781-47c8-9558-4834dcf9784f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c96c6b-b1b5-4d49-a368-d044f1987811", "sighting_of_ref": "indicator--0f7f56c5-8cd9-472b-b53a-8327da84fb2a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3625e10-a963-488b-9bb9-eb72a6cf174c", "sighting_of_ref": "indicator--0f7f56c5-8cd9-472b-b53a-8327da84fb2a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77205c0b-7d25-41d1-9d52-5c82179eaea1", "sighting_of_ref": "indicator--0f7f56c5-8cd9-472b-b53a-8327da84fb2a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907af5e3-4950-42ea-8802-eeb78f938930", "sighting_of_ref": "indicator--9f377706-3723-496f-85dc-2d57e266ccb8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90314bd4-e75c-4b09-a673-dcf48d13d020", "sighting_of_ref": "indicator--9f377706-3723-496f-85dc-2d57e266ccb8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7e2ab3-1bc5-443d-b55d-0f1996efb4f8", "sighting_of_ref": "indicator--f3fa0504-7fbf-47db-a531-b43d5ed09be0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1828a8c3-48b8-4684-922c-0fc8ec747dea", "sighting_of_ref": "indicator--f3fa0504-7fbf-47db-a531-b43d5ed09be0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbabe78-2b45-4144-b269-b814dda08ae4", "sighting_of_ref": "indicator--6785b978-373b-4671-84af-2a23689e442f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d8c382-506b-4aba-89cf-61d3af60f294", "sighting_of_ref": "indicator--2c960a98-c2c9-4cde-a773-f7a73115b0be", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e72f1dd-f8bc-410b-a513-6f6a518afc32", "sighting_of_ref": "indicator--97dfd402-723a-452a-b3fe-ee68e4adee4c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17dc460-2eb0-41b9-ac08-b092f3cf3086", "sighting_of_ref": "indicator--97dfd402-723a-452a-b3fe-ee68e4adee4c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--974f5317-63d9-4944-affc-3c61342a0dd5", "sighting_of_ref": "indicator--97dfd402-723a-452a-b3fe-ee68e4adee4c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea2a56a-7f96-46eb-b3e1-92ae11d12e43", "sighting_of_ref": "indicator--97a1bed6-d272-4970-bebc-73ab20bf4596", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5874b0d5-d1f0-4d4c-bbae-b023b8a8145b", "sighting_of_ref": "indicator--01938c06-759b-4ca2-b070-4340aad82337", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878fa23d-52d9-470e-b2d0-28bb6e3adcb5", "sighting_of_ref": "indicator--3d5f8b59-65d5-4375-849e-7a3a79ae9ace", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524fed3b-e35c-4c32-8d68-f1f2ce806acf", "sighting_of_ref": "indicator--3d5f8b59-65d5-4375-849e-7a3a79ae9ace", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8aa83af-13e5-435f-90d3-862e434b8b97", "sighting_of_ref": "indicator--3d5f8b59-65d5-4375-849e-7a3a79ae9ace", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171f5a86-6d0a-472b-b23a-9726e0c6b062", "sighting_of_ref": "indicator--9c5f85aa-06fc-4456-853a-1b4619e62e14", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e49e7f-1dea-4a2a-892b-7e71caafb609", "sighting_of_ref": "indicator--20c8c821-df9c-4867-b34a-5bf4e2074c58", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c1a05a-faf9-4db4-b891-f6439b6cac1b", "sighting_of_ref": "indicator--cf3ec817-df31-404c-9919-6c51b8de60e2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1bd289-1804-42d9-8d1f-3f60ee35a27b", "sighting_of_ref": "indicator--17c699c9-60ef-447e-be4b-4ee532855379", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--430d377b-3627-44db-8aee-eeefa5237e40", "sighting_of_ref": "indicator--17c699c9-60ef-447e-be4b-4ee532855379", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c88bf4-aa9e-4f9c-8dea-b9626945b95b", "sighting_of_ref": "indicator--17c699c9-60ef-447e-be4b-4ee532855379", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f634e596-0fab-4271-848c-855ebbd9af59", "sighting_of_ref": "indicator--d22128dd-5b15-40b9-940b-e55bcbe6a1c4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a9fc36-1284-4ad1-91c0-6eeb9ba7c409", "sighting_of_ref": "indicator--d22128dd-5b15-40b9-940b-e55bcbe6a1c4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c0069c-3d96-40d1-a12b-7d6d2312a4f2", "sighting_of_ref": "indicator--d22128dd-5b15-40b9-940b-e55bcbe6a1c4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eca52bc-20bf-49c8-a70a-a5721bb71564", "sighting_of_ref": "indicator--59535b6a-7673-4d01-852d-2824ae5e933b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e66bc8-1be5-44cb-ad64-a565f5d80366", "sighting_of_ref": "indicator--59535b6a-7673-4d01-852d-2824ae5e933b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4970ee7-da46-41a2-a557-69422eb835d6", "sighting_of_ref": "indicator--59535b6a-7673-4d01-852d-2824ae5e933b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43888a63-b47f-4a48-ad6e-18dab8a9e3c8", "sighting_of_ref": "indicator--5ac4431e-b814-42eb-9ae2-cbe98d73667a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e9a81c-3b75-4e9c-ad82-b7b8eb67afc1", "sighting_of_ref": "indicator--c4e70199-d583-4fba-be68-0429b08b9edd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34fe8fe8-138f-4391-8d6e-f60c95575dc3", "sighting_of_ref": "indicator--bf25348c-f51e-41d2-b75c-cfad4715b10b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a3a335-cf20-4cc7-9c1e-79af1d68c49c", "sighting_of_ref": "indicator--3226d1a3-d9d2-4931-89b3-6b9b3dc67ff7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b8bb52-861e-441b-b631-e56448155160", "sighting_of_ref": "indicator--9713b8f7-c201-455c-be1a-3e012a3cccaf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad3d771-36ca-48d3-b5d7-7048011884cd", "sighting_of_ref": "indicator--518fde57-14f0-4c72-8c07-e266abef1c00", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d5c713-4bee-4fc2-bd48-cd0bd6f676a1", "sighting_of_ref": "indicator--a4e2c546-8e6f-4ab1-aa96-d371f9367d47", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5830080-c66e-45f7-b338-6b9f374441b0", "sighting_of_ref": "indicator--a4e2c546-8e6f-4ab1-aa96-d371f9367d47", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eea3424-d95d-468b-9fc1-f5b9c51b1ed6", "sighting_of_ref": "indicator--a4e2c546-8e6f-4ab1-aa96-d371f9367d47", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb09c39-0790-4075-bc2f-0a72f1191d33", "sighting_of_ref": "indicator--46f45187-f6e3-4caa-9020-1529c36911a9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5954a23-bb83-4c5d-a793-17099e15cfd0", "sighting_of_ref": "indicator--46f45187-f6e3-4caa-9020-1529c36911a9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64bd34a9-27ec-448b-931e-e4539b532f81", "sighting_of_ref": "indicator--46f45187-f6e3-4caa-9020-1529c36911a9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4145c562-9102-41ef-acad-71b054bcbdb7", "sighting_of_ref": "indicator--d36e797e-7471-4b54-b1d8-bd64d7551dec", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6982220e-8d13-4a3a-9ef5-cef957bfa718", "sighting_of_ref": "indicator--7285b4e0-7e32-446a-adb7-ec46f2333eb1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a141fd3f-0971-4e91-a7e7-cb1eb1af1b2d", "sighting_of_ref": "indicator--7285b4e0-7e32-446a-adb7-ec46f2333eb1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43b5387-9e89-4f09-8b70-d8c53c83918b", "sighting_of_ref": "indicator--0ea22c65-7336-4ce8-b846-1ee66c9824c2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aca6639-2ebf-4db2-8923-eace4eea3b4b", "sighting_of_ref": "indicator--d1ef3d01-2354-434e-b098-2e623819d724", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be44aec2-ad7b-4f29-9f56-5a17582a0034", "sighting_of_ref": "indicator--d1ef3d01-2354-434e-b098-2e623819d724", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6d97eb-34dd-4e87-ae3b-89c9f5927d76", "sighting_of_ref": "indicator--defce204-55d6-472e-ac68-cf5777325e45", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0b8bc2-cc30-4b20-a496-f0d4f487ff65", "sighting_of_ref": "indicator--ae083d44-7168-4343-ace5-514f21466403", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588dc899-d832-4d3f-9ef1-770036b7c2f9", "sighting_of_ref": "indicator--f726005a-88b6-4a1b-aed5-4f82dd82c4d6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487c2cb4-01ff-44c2-a575-c1d015824ac8", "sighting_of_ref": "indicator--057f91da-06b4-45bd-bcde-c89315c8298f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cfd8b2-3b5d-44a3-9da4-08b85437ae1e", "sighting_of_ref": "indicator--441b28f3-7a32-4ad4-a29e-c58eab00e06b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2a3974-2bb6-4ce4-8be8-63f895e8c4be", "sighting_of_ref": "indicator--441b28f3-7a32-4ad4-a29e-c58eab00e06b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd87d368-92f1-4ba3-a066-18b0fff30dd0", "sighting_of_ref": "indicator--441b28f3-7a32-4ad4-a29e-c58eab00e06b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd070781-3902-419e-844b-21dcd609c5cc", "sighting_of_ref": "indicator--791a8e96-f976-4a16-946d-69851d29c0ec", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798782f3-6f49-4f66-9a51-e2b5cb7895da", "sighting_of_ref": "indicator--224ae714-d235-4316-8bc3-07baaabae950", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c095197-616c-4d0d-8bbd-2e04500d880d", "sighting_of_ref": "indicator--55a8b78f-c7a8-4e1d-b7a6-8eb6b709790f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d106678-f979-4bc3-85fe-b9fb5e656b16", "sighting_of_ref": "indicator--55a8b78f-c7a8-4e1d-b7a6-8eb6b709790f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d16992-632b-40c3-be94-ecb2338fcb34", "sighting_of_ref": "indicator--8009ea78-b656-4626-8008-21cb2c4e1155", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a66bcfa-8db6-4b61-a1c1-9df5a422471a", "sighting_of_ref": "indicator--7fe1736d-a4cd-4902-a4e3-7dc2452e1cb3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba3aea6-14aa-4b3f-82e3-d5056b5cd06e", "sighting_of_ref": "indicator--dd76aab1-cfbb-47b0-9a14-181b84538666", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f76a5c-435b-49c6-ab71-44883c3c04a1", "sighting_of_ref": "indicator--9c52ea8a-502f-4b2c-b737-9f6e31c7aaab", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ffba7c2-846a-4629-b55e-3a6bea24f1a3", "sighting_of_ref": "indicator--9c52ea8a-502f-4b2c-b737-9f6e31c7aaab", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7eba3a-8d1e-41d3-9d2a-fe32338a8bf8", "sighting_of_ref": "indicator--78a33a09-1ccb-471f-8746-29d16e6daf70", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e538e9fc-70ce-49f5-bde8-2b707b41c1b2", "sighting_of_ref": "indicator--c545030e-760b-43e3-a79a-be46fa8ea24d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--115b994e-1152-4cfe-aea6-d73681f6c247", "sighting_of_ref": "indicator--16f062b3-5927-43a0-8c26-6ec211e8388a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71038c1e-3be8-4a82-bd87-ee4f7ecff79a", "sighting_of_ref": "indicator--16f062b3-5927-43a0-8c26-6ec211e8388a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0765ec61-161d-417f-8b96-f99c84f5fe8f", "sighting_of_ref": "indicator--aa9f0129-a4ec-4156-8a12-7ecf9d0885f0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654e633c-71b7-4771-9713-38751dd9a9ec", "sighting_of_ref": "indicator--db4034c8-f0d2-4c92-9e1f-7782a0f2dab9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65caeb75-3cee-4fed-a745-1cd8a7479bc8", "sighting_of_ref": "indicator--081842af-e143-409c-9c2e-5419a53480a4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4ea2ad-f724-4fa7-ad63-ded1a07c1d70", "sighting_of_ref": "indicator--d79f0c94-341a-4abc-90ef-566e9017f094", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c259b4c-f8cd-4e1c-aeea-d00f13f7b381", "sighting_of_ref": "indicator--aba9a999-b45a-4fec-a5ea-63485c50add6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81189ba1-e074-4a66-aeb0-1bc016ef529b", "sighting_of_ref": "indicator--15ab11bb-09ff-4de1-9995-29978c37d061", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec25cd1c-d056-4196-84c2-1653bae1ee74", "sighting_of_ref": "indicator--8521e359-926d-4e8d-9f69-4a9148e0a245", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd44ee0f-99bd-4127-80f4-f1edf9ecfdca", "sighting_of_ref": "indicator--9d4b6c5a-6ed5-4002-8882-013f78d2e014", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475a8629-7f6d-4be1-af73-350ae6f19764", "sighting_of_ref": "indicator--7db7a88b-64f8-4675-84ea-7fd8f81ef4aa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e350d03-97e3-43d2-916b-6d95dded6baa", "sighting_of_ref": "indicator--1543a2f3-6061-4e78-b95a-d8b53f6728b7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df500f36-17bf-4f73-a258-6ad9f6072beb", "sighting_of_ref": "indicator--71d79690-f910-41d2-afc9-986691421c86", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08978cb-b32f-46fc-86e2-ef11b551015f", "sighting_of_ref": "indicator--71d79690-f910-41d2-afc9-986691421c86", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db5e363-e5aa-47e3-847a-c04625047bbf", "sighting_of_ref": "indicator--71d79690-f910-41d2-afc9-986691421c86", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04bd544-d975-49d3-983d-999e459c5649", "sighting_of_ref": "indicator--d9889171-d237-4a51-8891-5c8de1879b88", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd7c136-7aa6-4189-8910-15efba6fcd10", "sighting_of_ref": "indicator--d9889171-d237-4a51-8891-5c8de1879b88", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a241f9-1642-4d38-9f79-dfbe5cd62b53", "sighting_of_ref": "indicator--d9889171-d237-4a51-8891-5c8de1879b88", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ace1380-b5c2-4896-ba54-3a4d92134048", "sighting_of_ref": "indicator--4cac2d9a-0ea4-4a8e-8116-93aa8d0659d8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc91ced5-9747-4892-ba5d-a7c21bc07061", "sighting_of_ref": "indicator--e8dc6882-e3d5-408f-a3b8-37e74b82e90c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b3b929-2224-4fca-aaf8-444d2234a131", "sighting_of_ref": "indicator--7dc7c194-c2b4-42c7-aff5-e6de9fc1e1f2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0d899e-54e9-47c5-b71a-9a69ade6a27a", "sighting_of_ref": "indicator--83b7b0e2-95fd-4368-86a9-b48733593d60", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6ca395-fce7-4520-8066-d39f6b1f376c", "sighting_of_ref": "indicator--323bd059-f21c-4e65-b3d6-995b437c657e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae99b901-79f9-4b10-9dec-851ea2451e75", "sighting_of_ref": "indicator--cd0ca38e-92cc-45b4-9994-1c493f9e4db6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93bb610-9cdf-47c5-9ad6-b51b41abdf85", "sighting_of_ref": "indicator--ec3ba30a-17c5-4217-afd0-fa15254e95d5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79dac81a-bb39-40b4-922a-577bbe0a1c82", "sighting_of_ref": "indicator--c62c3cfb-d478-4960-a2f2-3bc228850f77", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b90ee7-b9e0-4ea6-b55a-544e1fb24d28", "sighting_of_ref": "indicator--8e8c3f36-33c4-41b3-a9bd-076129f8dd3d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e4bd82-68bb-4fae-b3ad-97dc78ea13ab", "sighting_of_ref": "indicator--b95232b9-357f-4f1c-bf09-a092aacc132a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcdd605-0c43-423e-bfec-d8fa8407145b", "sighting_of_ref": "indicator--c36adcf8-00a5-40f9-b011-db8468381903", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf50e1f6-82fb-4864-88c7-1db6138b2dc3", "sighting_of_ref": "indicator--e21e2d99-afe8-499f-b490-19a39e999e3d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d6366f-d3a9-4ea1-aead-fc9d93103aa7", "sighting_of_ref": "indicator--e21e2d99-afe8-499f-b490-19a39e999e3d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059711bf-a395-4d16-8988-75742ec9be03", "sighting_of_ref": "indicator--c896063e-231c-46aa-b169-8bc1e43cb534", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31819d1b-1c04-4f5d-9e63-b0a498a1c600", "sighting_of_ref": "indicator--247a373b-d727-4b48-80d0-6ff90a700e87", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff6e4d4-2c42-469d-8857-5b9dd4237f52", "sighting_of_ref": "indicator--8a354f06-0c24-49b4-84b2-79a87e06a911", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c3c0ee-7449-4917-b457-c620a39a7d24", "sighting_of_ref": "indicator--40553dec-013d-4f3a-863e-92a50e1ea1aa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73053733-0e4d-4131-a0d7-1281bb4ca10e", "sighting_of_ref": "indicator--ba18bee5-3e31-4527-9f64-a5f9c5e88a9d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdd05fe-7110-4793-822c-927b6bbf6300", "sighting_of_ref": "indicator--2a8888fb-5178-4156-aa4c-28766f976476", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6bb8fd-a20a-4e72-847e-a12193f8d49c", "sighting_of_ref": "indicator--e4c6ebf2-bbe2-4fe1-95e5-30847891c7b0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c256e2-acdf-49e1-aa6b-94fc4a1779e2", "sighting_of_ref": "indicator--a5d5dc85-dc5f-4e1a-8637-265acf86d8b6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2da720-6793-40a5-a590-ee6c28c0d224", "sighting_of_ref": "indicator--259b938d-53f0-41bb-8902-d292ffd83451", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8441e6-9479-4f4c-8a4f-a09dabb147b5", "sighting_of_ref": "indicator--6146eff0-6a88-40b5-80d6-9ef69de66cd1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd71694-0820-4ac4-99de-6e838292d1ba", "sighting_of_ref": "indicator--ab817dad-599e-4458-b273-49d25d0d70a2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5277df-5b3a-44e5-9b70-65e225a45851", "sighting_of_ref": "indicator--557040ff-2f27-4b10-88a0-44c9ca46125c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1b5d72-a466-460a-bbc0-c8b35c1dcedb", "sighting_of_ref": "indicator--8f5deb90-c868-415c-93db-bca9c620c48d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002d5965-ca25-4ed6-82b9-bcdfd28b5623", "sighting_of_ref": "indicator--7b5f230e-e8f3-4cd9-84c4-cd1e55077a8b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4d479c-c758-4c20-8c7e-681fde3a8af5", "sighting_of_ref": "indicator--d4d3beb5-9cea-4629-b299-6868da44c80d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebbf5ccc-7a42-4da3-a592-93b9320cd99c", "sighting_of_ref": "indicator--61ae6232-170d-48cd-a869-92f6987e2194", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c8f94d-84db-47bf-95e3-cdcd4c65ae72", "sighting_of_ref": "indicator--8f8b33c6-a505-4d72-8cde-51a425f40d9e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4caff477-71e6-4bb4-b16a-0bbaa7699c93", "sighting_of_ref": "indicator--8f8b33c6-a505-4d72-8cde-51a425f40d9e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2fe1b3f-d63e-4779-8fdd-2b9adfee1b12", "sighting_of_ref": "indicator--f4c8da9a-71a9-4f0c-b4ec-aae087b6597f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401255d2-4638-4122-a355-181e6c90a724", "sighting_of_ref": "indicator--f4c8da9a-71a9-4f0c-b4ec-aae087b6597f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7105b0-e568-40fe-9b3e-98df9a3bfb4d", "sighting_of_ref": "indicator--12f1e80c-a3da-4990-a9a5-da17f79b12b5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fafde43-f2fc-4247-9d13-936eb3b48772", "sighting_of_ref": "indicator--bffe68b3-886b-4b1d-bc43-dd248c462e5e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9897de34-998c-4977-a971-d44cda434413", "sighting_of_ref": "indicator--bffe68b3-886b-4b1d-bc43-dd248c462e5e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358ce21a-4a3c-4651-83ea-55bb9e13b174", "sighting_of_ref": "indicator--bffe68b3-886b-4b1d-bc43-dd248c462e5e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a271900d-5a3d-4085-b61d-2a5888d2988b", "sighting_of_ref": "indicator--db5f70b9-3488-420d-8a21-5f6ecd68bfa1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8c2ce7-6420-43b0-9a87-7d65d71fc35d", "sighting_of_ref": "indicator--572152b1-d058-404b-9a80-1d36f16cdf65", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683935b9-61c1-4ddc-8fb3-d4a9a53ddfb0", "sighting_of_ref": "indicator--4263a95a-d804-4c90-b3d4-78d5c522be5b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0e8d24-e50e-4d99-94f6-622b53bc522d", "sighting_of_ref": "indicator--a0b4cd53-bb5f-48ee-bba2-a230f202f474", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36109284-b284-4316-bcdf-c9bbaa5a47be", "sighting_of_ref": "indicator--6fc98b1f-95b8-406b-b912-fa9469d9497f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d083b14e-62e4-44e5-857a-3b168b1d0c6e", "sighting_of_ref": "indicator--8bf0c4ba-644f-45d2-93b3-c0282a3a347b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75a5169-2979-42ae-83b7-ea85dce1d555", "sighting_of_ref": "indicator--c6816dc5-2b46-4700-aa5a-50cd83f06616", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f2f7eb-f766-49c4-90f4-7f82bd9a0278", "sighting_of_ref": "indicator--14f373d4-2e04-45ed-91db-2f93bdb955ef", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5430ab45-8285-4860-a6a6-8e678d210f2a", "sighting_of_ref": "indicator--14f373d4-2e04-45ed-91db-2f93bdb955ef", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a3c084-dd6f-4f5b-84ff-9eb43591fa8e", "sighting_of_ref": "indicator--14f373d4-2e04-45ed-91db-2f93bdb955ef", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3792e71f-fe4c-4e85-a022-17b719bf4f21", "sighting_of_ref": "indicator--51d2997f-4de9-4a66-9859-47f40b4f1fd7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f224bbc4-bff5-4665-bdb8-ec1ab0962d55", "sighting_of_ref": "indicator--12cc35d6-74f6-4e34-be5b-1f8ee3fd3c0c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616c351b-aba7-41cc-89be-b06bad7f452c", "sighting_of_ref": "indicator--dc783ac1-2be4-4d6b-963b-43414df7be8c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92b46bd-b2ec-49f6-a391-4345c77b6b1a", "sighting_of_ref": "indicator--76f8602d-dfff-4f46-9a42-2701971ed78c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930dec24-9bf6-436e-9357-a20638423116", "sighting_of_ref": "indicator--76f8602d-dfff-4f46-9a42-2701971ed78c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67bb957f-adaf-4773-b42a-169d72aad3b6", "sighting_of_ref": "indicator--bd3e77d3-22db-4c41-8333-4732b33d1f31", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7976d281-e3e4-49f3-b19b-7fb03f88041a", "sighting_of_ref": "indicator--bd3e77d3-22db-4c41-8333-4732b33d1f31", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14a0a37-b318-41fe-99a5-732c9fdfe359", "sighting_of_ref": "indicator--5523cea2-05de-4284-8e34-ded6927d1a9c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd2dad7-10e4-46df-884d-d7b7d23551c0", "sighting_of_ref": "indicator--db2a03af-c473-4352-bbda-07b8bad8bc2e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e36017-3f5a-4ac0-a217-2443a32bc3ec", "sighting_of_ref": "indicator--56726b17-7220-49f3-86e3-7e944ef408cd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fe4849-5c59-4ab2-a28d-584b15bc4a66", "sighting_of_ref": "indicator--3fe0307a-ffad-41b1-a2bb-48ad0b549430", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feea007f-dec4-4f96-98a4-2ca3c11026fe", "sighting_of_ref": "indicator--b87cea0d-8f38-49e3-9652-2e72cef9affe", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae6ab41-ad9c-45d2-8ecf-f524c8ec1dc6", "sighting_of_ref": "indicator--c8336355-f9df-46e5-b323-9a8d35555041", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--892809c8-ea56-4a29-bf01-8cea7a8810aa", "sighting_of_ref": "indicator--85572437-08d0-4931-9b05-f3080df6fa12", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a64dfb4-5526-4747-bd71-2fc8c4348b7b", "sighting_of_ref": "indicator--783232b3-327c-4de3-bcc7-e4e936d5acc8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fca5f1-d365-4fcf-8d1d-e64f91c2be27", "sighting_of_ref": "indicator--c26db41b-99b9-418d-98d3-9a476335424c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5257a6df-d584-4010-8889-14c1edc580ce", "sighting_of_ref": "indicator--4c3420ea-9916-41d4-b07f-4f5e880a19b8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7302cb9d-c53f-43d3-a64d-cf4d007e6658", "sighting_of_ref": "indicator--c65ea4f5-d326-44d5-ace7-c0bf96dac6f9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ef9bdc-e24f-412d-b07a-756b955f6dea", "sighting_of_ref": "indicator--c65ea4f5-d326-44d5-ace7-c0bf96dac6f9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0325cc5a-1458-4dbc-8b75-1dc8d2cc69ba", "sighting_of_ref": "indicator--faa3d0c9-47a1-4d7a-924c-61a201afd714", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5630a43b-eaec-49c9-ab62-0d6ec325abfc", "sighting_of_ref": "indicator--faa3d0c9-47a1-4d7a-924c-61a201afd714", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246fc2ef-89c1-4db6-a825-864bcef1eca4", "sighting_of_ref": "indicator--680c57db-56a2-4f50-9259-edb6dbe1e10b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469aca79-7735-4e6f-a618-70fe08c2f554", "sighting_of_ref": "indicator--680c57db-56a2-4f50-9259-edb6dbe1e10b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8e1c59-7f9d-4048-ba8d-89762117995d", "sighting_of_ref": "indicator--7c8cfef0-7a67-4133-97cd-0152f43c2784", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7bbcbb-3b7b-477c-9bd5-d2bb50d90250", "sighting_of_ref": "indicator--2f693a63-1615-4f4c-9ace-ea5140a0f172", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea76e377-f8cb-4f35-a992-6e157a7faa3d", "sighting_of_ref": "indicator--2f693a63-1615-4f4c-9ace-ea5140a0f172", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f484ea-40ec-4591-ad0c-6ad4e1f0722b", "sighting_of_ref": "indicator--2f693a63-1615-4f4c-9ace-ea5140a0f172", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe35ea8-5680-43c9-bf8e-e4ce447e0a2f", "sighting_of_ref": "indicator--21a25f9b-c2d0-4206-aac5-cea5ebac6e94", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1a36e8-26b0-432f-9e25-8ada96c66afc", "sighting_of_ref": "indicator--1bb58795-f44f-47a5-8e02-e5f12db1ee13", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6e97f8-2365-47a1-b17e-29ae236e34b6", "sighting_of_ref": "indicator--1bb58795-f44f-47a5-8e02-e5f12db1ee13", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09ddc29-fe08-4d11-ae4f-714a26467ea2", "sighting_of_ref": "indicator--1bb58795-f44f-47a5-8e02-e5f12db1ee13", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2825be57-3ce9-407a-b48e-b5f7089632a0", "sighting_of_ref": "indicator--0f520216-2386-494e-8a55-a5eaaedd7d47", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4ebf84-35e5-43aa-b4f9-a42b993cbf66", "sighting_of_ref": "indicator--0f520216-2386-494e-8a55-a5eaaedd7d47", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e929cfca-5020-4142-b741-641015e41952", "sighting_of_ref": "indicator--0f520216-2386-494e-8a55-a5eaaedd7d47", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a42d66-14fd-4304-aa4f-ccd2de0655e2", "sighting_of_ref": "indicator--9b1f9caa-4993-4e19-931e-7098baca504e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f61658-e128-429a-a669-05ad90b21d46", "sighting_of_ref": "indicator--f9a24d32-562e-4240-9615-b38f8fd0eb60", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05dd010b-8151-4042-aa28-0dbad1630681", "sighting_of_ref": "indicator--d685163f-db1a-47cd-b844-f3b565faff1d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ea6e61-a2ff-4964-83f2-06d0812927e6", "sighting_of_ref": "indicator--ca3ab99d-0801-4492-83fb-ad6be6f3f592", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5c2dde-1dc5-40c6-a964-dc3a110e5c9a", "sighting_of_ref": "indicator--9d49d16f-13f7-4cf8-8990-9d6df067d601", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78bd1fe-f363-4633-848d-f38ddcaddd6f", "sighting_of_ref": "indicator--9d49d16f-13f7-4cf8-8990-9d6df067d601", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2173b462-f619-4340-9930-09647fd67f61", "sighting_of_ref": "indicator--e0a342a2-4f19-43fb-8de8-6fbd7189c62f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18841b7-e0ac-4bc1-87ea-c1f89a702f8e", "sighting_of_ref": "indicator--83a9544d-5078-43f5-bf68-26f1911e348d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a5497d-b36d-4917-a75b-999bf0165682", "sighting_of_ref": "indicator--57f790d7-02a5-4ec4-a42a-cedc143e3348", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe463841-74cc-45cc-86ff-2e76a3f3e532", "sighting_of_ref": "indicator--25648aeb-b6ed-4eed-9de6-839c32283ed8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3bc2ae-b62c-4355-8526-a696b4cbf3c3", "sighting_of_ref": "indicator--0d8aed6e-5cdd-44e2-8b1b-27f969b7009e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ce976f-d441-4320-8881-38a8e7666c09", "sighting_of_ref": "indicator--d7d6bdb6-1b50-4df0-8541-749efb4cba6e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbd0fc8-4298-4ad4-92b2-14e300c625dd", "sighting_of_ref": "indicator--d7d6bdb6-1b50-4df0-8541-749efb4cba6e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89026958-d0d4-4e62-835a-f3d7e82c8f92", "sighting_of_ref": "indicator--3e135a5a-966e-497e-8994-b05f591a1663", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd9d2a6-eae5-4134-8a69-dca7923731a5", "sighting_of_ref": "indicator--3e135a5a-966e-497e-8994-b05f591a1663", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43616bc5-3bf0-4a21-970a-313f6f65a3b9", "sighting_of_ref": "indicator--b395e55d-7dc5-42fd-9250-995822e8e3db", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1600c5-ebd9-4fb1-a905-1399cb2de73d", "sighting_of_ref": "indicator--f3d83715-e58a-455f-bd2c-a4b2a6de809d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e9f407-1791-4f13-bc2c-8dd2eb6aaadd", "sighting_of_ref": "indicator--f6181c01-2625-445a-aade-2fe5eedd4662", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64494485-c4b5-419e-b459-2b837ef221a8", "sighting_of_ref": "indicator--3b1d411c-703c-4d0b-aaca-e5ae284a3dd9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfbcc79-9722-4781-8ac9-07752d4803ea", "sighting_of_ref": "indicator--8822f200-eab8-4ac6-9e87-df0184033a4d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603f91b0-87a7-4690-905d-04e3ef505055", "sighting_of_ref": "indicator--bf8d98b8-6c75-4bf0-83fe-95e687b3a18c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3d2ba5-fe27-450b-9a87-fa425936f2d7", "sighting_of_ref": "indicator--1e9c6e60-dfbe-49f7-8ff9-8b2c6830828a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d208613-5089-4ee3-a613-db123256f1c7", "sighting_of_ref": "indicator--275ac3fe-799f-46cd-9099-708f6e37249f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392aff9e-3252-4385-8f4e-6f0be7e46868", "sighting_of_ref": "indicator--4491bb71-d0e8-4016-b9c6-05d9ff9eb3bd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df832f5f-86c2-489b-bc37-b7c09586bd6a", "sighting_of_ref": "indicator--4491bb71-d0e8-4016-b9c6-05d9ff9eb3bd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2821bca7-332c-46d9-996d-96e1684156aa", "sighting_of_ref": "indicator--14a7e7fe-d982-488d-9164-02f849d7e33f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f75dd18-1dc3-4b00-a42e-30c106a58f66", "sighting_of_ref": "indicator--bb1acd01-9419-4303-ae91-18043145af98", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744702c4-18cc-4ac5-a16e-0514191984d8", "sighting_of_ref": "indicator--bb1acd01-9419-4303-ae91-18043145af98", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ec98bf-9ff5-424a-b327-2690bdc4a14b", "sighting_of_ref": "indicator--551bcd5a-7cf9-4d44-9948-787cca104d48", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e1de85-27ca-4e60-a18b-aa1913d0b20a", "sighting_of_ref": "indicator--93f6877e-528b-4954-866d-9d3924886d5f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50da030-746e-4573-ac14-1ebd09f6c696", "sighting_of_ref": "indicator--37c12b13-10b0-4c09-9e24-7eb74d20c73d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20df4a40-6074-4696-8706-64dc90e1a12f", "sighting_of_ref": "indicator--89dc2ca2-5f36-46fc-b8bf-224bb20d8400", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52907601-0477-4b24-a644-a90ecb13b602", "sighting_of_ref": "indicator--89dc2ca2-5f36-46fc-b8bf-224bb20d8400", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb19498-fec5-4c01-88c5-2ab71259179e", "sighting_of_ref": "indicator--89dc2ca2-5f36-46fc-b8bf-224bb20d8400", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0597ac85-c0bc-42b0-ac82-052da93ac5f7", "sighting_of_ref": "indicator--64acfd52-fb86-4916-a916-d2249e80ba23", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6b49a5-667a-4675-af16-1256d49d62a0", "sighting_of_ref": "indicator--f20e4f3f-4708-4625-a2db-5e6914202d69", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60c105c-53d8-4a17-b3a1-45a44f92d1f1", "sighting_of_ref": "indicator--551882fe-f6bd-4325-ac3d-c9ded43e3649", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112dc472-9662-4fd7-bc4f-f696d5aa3252", "sighting_of_ref": "indicator--278ab4da-9641-4dca-bdf8-275ad49cfe74", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b9b2a0-ce66-494e-8986-b54b3df05a2d", "sighting_of_ref": "indicator--c800d9f9-a4ed-4aaa-b068-fd5190ff02c8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1b80e1-b899-49ce-834b-11cd030542bd", "sighting_of_ref": "indicator--1b5bebf6-68e1-4a88-b0ad-31f4961793b9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be8c37a-6883-4fba-a9f2-5841e57116f2", "sighting_of_ref": "indicator--1b5bebf6-68e1-4a88-b0ad-31f4961793b9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6d5eba-9464-45cd-af05-71c6c027d24a", "sighting_of_ref": "indicator--75ce66e9-f096-4fbc-b0ca-085e5bbb5961", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6b5770-e5db-42ab-9790-2e9a6ebffaa2", "sighting_of_ref": "indicator--b9eca165-72e8-45a7-aab6-89eadecb9d86", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307451d7-33bd-454c-b99b-3008e88f581d", "sighting_of_ref": "indicator--cd1d2ebf-8913-4781-a289-97b68e131c87", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa572a81-0919-478e-b037-3d3437578f6e", "sighting_of_ref": "indicator--8f0d19c6-f2df-4cb9-8786-9ba7e1781ba0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7ef6af-4c75-4824-bf2d-61d0d32cd010", "sighting_of_ref": "indicator--05c88326-11e2-473d-b98d-2dc683b7e21e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d410030-338c-4721-8c21-8a7b41a64fd8", "sighting_of_ref": "indicator--177de9b3-aa9a-4c2f-9d6f-41b5838a4e2c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda0f4a5-96d6-471c-9980-35655dd68238", "sighting_of_ref": "indicator--9301b9e1-c4d8-4f44-ac72-6ad371d75ddc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aefdfe15-faa0-48dd-96e4-ab88df03342b", "sighting_of_ref": "indicator--5d94be07-8e69-41db-ab96-cd506037efd4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e566bca-f243-40a3-95f2-ff831a4d8c5a", "sighting_of_ref": "indicator--c2b80790-c4b6-4f20-914d-26c06768ade6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05774fe9-bf13-4299-8ee4-99fb4140facc", "sighting_of_ref": "indicator--0b573b6b-23df-44fe-9897-95fa5fc3b796", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c231ce04-b361-49b1-98c9-29f82b32fadb", "sighting_of_ref": "indicator--1a9a864f-9d98-4477-a709-fd480b99d715", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968a55fa-b240-43c7-ba66-2ac9577a8a4a", "sighting_of_ref": "indicator--9c1e7722-8021-484e-a936-03307794ccf2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5195781a-ad8f-4faa-9bf9-66d06693f6ef", "sighting_of_ref": "indicator--e67e9039-21b0-40a3-83c5-fac290469906", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3b4733-101d-4359-ae62-455978f60238", "sighting_of_ref": "indicator--1723ea02-991e-4150-bfd1-04b59a528afd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e22dec-02d2-449d-9cbb-461fb40c1dee", "sighting_of_ref": "indicator--1723ea02-991e-4150-bfd1-04b59a528afd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffdd9736-c141-4e43-ab97-e84600e7e858", "sighting_of_ref": "indicator--8d829267-5455-472c-9428-b1e84d8b050e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f980887-6862-40e0-9ad7-7bbb4eb04e62", "sighting_of_ref": "indicator--9a3fb8b2-5457-42ca-b226-b7db53df607c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddbc6208-d42c-4476-b334-1da3ec9a6359", "sighting_of_ref": "indicator--c8736bd7-7040-447a-82b3-332e01669b2a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93f540b-8ada-408b-827b-710ff78287d3", "sighting_of_ref": "indicator--a18d6501-d4a3-4c69-89a0-f3c8366d9dec", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701f0e40-e282-4639-a861-75496e8fe990", "sighting_of_ref": "indicator--9cf9aa1d-8b83-4f5c-ac1d-2573407ce793", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31075c2-288f-4d68-8763-4237a6dbc15b", "sighting_of_ref": "indicator--4c8b7d48-712c-4c0f-9119-de3b4679a996", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346e9c36-ac0c-4c69-85f8-bdc1fbdb67e9", "sighting_of_ref": "indicator--779fc2f6-bb0a-415c-9214-f0a968f664d2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc3484b-bcd7-4a32-b32c-3c244a268914", "sighting_of_ref": "indicator--779fc2f6-bb0a-415c-9214-f0a968f664d2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014be72d-3eed-4ae7-b45f-8a40d1e26c99", "sighting_of_ref": "indicator--05d4eb24-0bfb-4aec-9f9c-9392745758e0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffd0dea-6e23-4734-9948-da90994bcc7a", "sighting_of_ref": "indicator--f1bef7d1-117b-4775-8d85-2495f7c3b363", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c002fb-c96a-4ee6-9605-a6bfa6571e5e", "sighting_of_ref": "indicator--f1bef7d1-117b-4775-8d85-2495f7c3b363", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68798af-00b9-4aa8-bcbb-1d8dd009d810", "sighting_of_ref": "indicator--64fa12c0-48c9-43a8-825b-6bccef0abc0b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c33c4e-64bc-414d-84f2-ea7f11c23319", "sighting_of_ref": "indicator--17492a7d-d1f9-408b-afab-db6bdb980570", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f245e143-9e24-45e6-b011-15b87742cbb0", "sighting_of_ref": "indicator--17492a7d-d1f9-408b-afab-db6bdb980570", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f3542b-c009-433c-98bb-18f0959e0dbd", "sighting_of_ref": "indicator--d6680176-1b4c-4552-9e57-e033fbefa3be", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e74822-47b3-45b5-9629-bc39f33680d9", "sighting_of_ref": "indicator--98ecb986-5d3b-4964-86fd-7a3aee449676", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc256d5-8fe6-4390-8480-17777d96b84b", "sighting_of_ref": "indicator--502029d4-43e4-4479-9124-23b85d678315", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ae50cb-f84d-4d3a-ace4-447d7917797c", "sighting_of_ref": "indicator--491ba0e7-4e1e-44a5-b054-29d5f682195b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb13d247-65cc-42fa-8f5b-a242d5b9d142", "sighting_of_ref": "indicator--812c5bc5-397d-45ce-a9d0-d15fa69f5149", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583cc48f-0274-4d0d-87f5-fce041e048c6", "sighting_of_ref": "indicator--3f771857-a4f2-4c14-baa0-804ec95fb142", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63133921-10ca-4d1d-bd13-cc34b032b6eb", "sighting_of_ref": "indicator--e2271fda-3f49-45f1-812e-cc2bb40d0a4a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17a5c5c-4fb3-4722-b334-ed398f093e9c", "sighting_of_ref": "indicator--1c9d3b3f-ce82-4faf-a4aa-92e515a5d7f3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd43877-bc25-4b2f-bfc6-dd1121403098", "sighting_of_ref": "indicator--20e9b8a7-2b2c-46a9-8fe6-70fed9b5bff1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a8806f-014f-45f1-a14a-c746478c5335", "sighting_of_ref": "indicator--72706a19-346d-46d7-afb5-23fa2ac11744", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cb66f1-8114-4276-9202-a93b0094637e", "sighting_of_ref": "indicator--72706a19-346d-46d7-afb5-23fa2ac11744", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09441c7b-b44a-45f8-add5-f3b4a28f39eb", "sighting_of_ref": "indicator--a31c5d4f-a84f-4324-98ed-e9a07db730d0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9e4aa6-884a-4787-95dd-dbc2358df178", "sighting_of_ref": "indicator--7ebeadd0-a7df-4a22-9e61-2aed93c13963", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5a3348-fd8b-456c-a6d4-d0638c4e3b7a", "sighting_of_ref": "indicator--f8581438-62cb-4d93-ab92-5b80757a72f7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee2d144-bbb6-4821-98b0-31dc622064f3", "sighting_of_ref": "indicator--8b6a024b-7032-401c-a4a0-0bcd8ad69ddf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24b0527-6f47-4fd0-a9b0-ab3a2338c91b", "sighting_of_ref": "indicator--a0462e59-892a-41b8-94b8-fdc0b8a304fa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750b2e6f-3d2b-4c11-bd23-a26566b3a5b9", "sighting_of_ref": "indicator--88b25457-6f89-4495-98a5-06319a7668e4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b440a4-c529-420f-ae73-9d83a177d2f1", "sighting_of_ref": "indicator--88b25457-6f89-4495-98a5-06319a7668e4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f63ac04-0c17-40dd-893f-16bca754dc9d", "sighting_of_ref": "indicator--8cce35ed-93df-4ade-a664-9d92257c0574", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129b5f15-1bf0-4ee5-ad8e-f337a7141d04", "sighting_of_ref": "indicator--edf67fb4-2a3e-4eb5-9db5-7cb5fefb35b6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1e5eee-39c9-4695-b720-f5fb60789910", "sighting_of_ref": "indicator--94332526-19d7-4ea0-8745-bbdad971b50a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--971f1355-26e3-4912-8eac-388b25052193", "sighting_of_ref": "indicator--94332526-19d7-4ea0-8745-bbdad971b50a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5aac36c-cc9b-40ca-b106-a55fc8f66425", "sighting_of_ref": "indicator--5a2889f8-f99f-4c9d-b338-34f78599fec3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f8ecba-c2dc-4caf-9c4a-b7b29e394cbf", "sighting_of_ref": "indicator--303428b2-b731-478e-86ff-a8cf00fbfe79", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a427944-87e5-4b89-b113-4af2610b5e0b", "sighting_of_ref": "indicator--11b84adc-4564-4925-ae15-ba6fadb6af12", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0639c922-a78b-44ff-98ec-defcf82a470a", "sighting_of_ref": "indicator--11b84adc-4564-4925-ae15-ba6fadb6af12", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36e881c-ce53-4ecc-8751-ac4889936b2a", "sighting_of_ref": "indicator--6cdcc509-6d4e-4598-9327-97ffa5c7fbfc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a715b9b3-30c5-47eb-aff1-83fd49755d4c", "sighting_of_ref": "indicator--f13114d3-14e5-4738-b8de-14ddaff34f09", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59b6f21-f973-4d09-bb6f-7360c4b24aee", "sighting_of_ref": "indicator--62c046f0-a8cf-4a66-a265-2efaf8abbb03", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ffa990-f8ee-47c0-9095-c2b489467cbb", "sighting_of_ref": "indicator--62c046f0-a8cf-4a66-a265-2efaf8abbb03", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b048211d-ea92-4ac6-988b-068ba45ba518", "sighting_of_ref": "indicator--0aa787a6-bb87-4396-a970-06e1b3542425", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a34cf20-8718-4496-9e18-4bd57c389ba5", "sighting_of_ref": "indicator--5e8179ba-eada-47fa-9833-05cea9d11f57", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eafc9c6f-414c-4169-81ec-0a96a8554945", "sighting_of_ref": "indicator--5e8179ba-eada-47fa-9833-05cea9d11f57", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c20695-e204-439c-a848-84bdef3dac6a", "sighting_of_ref": "indicator--72239df7-90e8-4c1e-9b5d-fc5aaaecd015", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6827ee-e566-40c6-92a0-f012c7535041", "sighting_of_ref": "indicator--0e7d18f3-67a3-4528-85dc-ded559dcefea", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae41770-fda9-4dc5-9095-b6cd3a31dc16", "sighting_of_ref": "indicator--ed1bb469-1e04-4512-9e8a-2d1722c8a04c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d7af64-9da5-41d7-b4d7-8833e9400094", "sighting_of_ref": "indicator--233d1c58-04ad-4f58-b64b-cd559f8d6be2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b24d44-eb24-4b86-bc00-8cb2d8faaa3a", "sighting_of_ref": "indicator--220692c2-4816-407a-8a57-847a05670e83", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35369efe-1b9d-4ba6-9445-c147e68e2d03", "sighting_of_ref": "indicator--d67f4c28-6735-43fe-96d5-17935a3edbfd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6f4e11-3b68-4151-8380-5f023d3dae61", "sighting_of_ref": "indicator--c0daf68f-1f79-47be-b2df-21f1fb0d63bd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6f8d64-2fc3-432e-97bd-05f6fc8f3e88", "sighting_of_ref": "indicator--bbfd91d2-62a3-4795-be84-11eb180708e1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d6dfe8-179a-40ec-83ef-5f61fa99f9a9", "sighting_of_ref": "indicator--69edcb14-9a0c-45c5-a7d3-e00e048b1239", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8aed1e-b09b-4f7a-a327-96037f3fc973", "sighting_of_ref": "indicator--fe486eee-b2db-47ad-a462-e6963cf5f4fe", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52eff07c-d5dc-4573-9a53-1e7ba501cca5", "sighting_of_ref": "indicator--c8dfff92-8add-4e0e-8a9d-1141a382cdbd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3c531a-65e6-4151-8953-546da41a7b49", "sighting_of_ref": "indicator--48e4686a-5d96-4d8f-838d-2103dd59006e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c54738f-fb94-4666-8677-7c2816519292", "sighting_of_ref": "indicator--9e00e04b-69bc-43ad-a517-ddbda4e5f381", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8444c9-895e-4dbb-80f6-2629ea828e22", "sighting_of_ref": "indicator--75f5550b-fb49-4980-a294-9a8899ce4ffb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e9b577-46af-4d35-80ee-b018e9fcd291", "sighting_of_ref": "indicator--30403dac-1e62-454f-858e-05f6c9b2ece8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ae7a6b-a456-4d42-b9a7-8a84696c34cf", "sighting_of_ref": "indicator--30403dac-1e62-454f-858e-05f6c9b2ece8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8595b5-592a-44e0-8e21-1068a731a8d0", "sighting_of_ref": "indicator--33a95e0b-a434-4548-ad3a-1234f989fd20", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a624dde-d7a4-44a4-90a2-be7ae30443e3", "sighting_of_ref": "indicator--33a95e0b-a434-4548-ad3a-1234f989fd20", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e830b2a-64e1-4fde-b667-d28bd3b0e72e", "sighting_of_ref": "indicator--cc479bb3-2014-426f-b200-070b2b802fcf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b211c7ed-fbae-49b1-bedd-cc1a70524482", "sighting_of_ref": "indicator--cc479bb3-2014-426f-b200-070b2b802fcf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cf1636-78da-4ab7-981d-4443a1cbfcb1", "sighting_of_ref": "indicator--646b34df-0f83-4b86-8acf-624dba333977", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96bff42-7ee7-4a22-a8d7-2591e662dc28", "sighting_of_ref": "indicator--0d4f2468-46dc-4c95-9ed6-0c973e714151", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2fc52f7-f385-4cb2-9e1a-a29d14776355", "sighting_of_ref": "indicator--4e8d9ad9-2e52-4d95-86e2-88dbfd81036b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7c1992-2c06-409c-b22d-f66fd70b50f3", "sighting_of_ref": "indicator--6cb9cc06-e49c-44c3-904d-d0254589bcde", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7ae6fa-4706-424c-b4fb-84f9ed0e04a9", "sighting_of_ref": "indicator--6cb9cc06-e49c-44c3-904d-d0254589bcde", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bcf7711-6cec-4ccc-9d02-8539e6f460cf", "sighting_of_ref": "indicator--c51fd8a1-4423-4f3f-833c-df0fb329557d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b6752d-bf2b-4462-b2c5-414eb0a72243", "sighting_of_ref": "indicator--ff84cf6d-7845-4ef2-8865-fa3312e0e219", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6bc4df-0062-4e1d-87c0-5e60fd7b2924", "sighting_of_ref": "indicator--4b4d1856-dc8a-4344-9245-73cc871d8114", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a340d465-1b06-4064-84ab-110c01168f8b", "sighting_of_ref": "indicator--4b4d1856-dc8a-4344-9245-73cc871d8114", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16eb39d-8a06-4550-a4ff-36b6af464975", "sighting_of_ref": "indicator--e86915ab-c7ec-4685-92be-fa966bddf4c6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb5406b-893a-49e0-98e9-ee01b7f1946f", "sighting_of_ref": "indicator--dea7430b-a7b3-4312-99ac-f8fa200f51c1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e02d4580-6720-4656-93e3-4531cd42166e", "sighting_of_ref": "indicator--dea7430b-a7b3-4312-99ac-f8fa200f51c1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419f2892-4a5c-4d4d-ad7e-77237daeba19", "sighting_of_ref": "indicator--cb60cdcd-945f-4b0f-9d54-43b4c1aff3ca", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96fec31-0b56-454d-9ff1-0fbd332419f9", "sighting_of_ref": "indicator--1d623cd6-1e99-4814-ae37-597ad98d8808", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4662baaf-9088-46ac-a855-c5130ad97b40", "sighting_of_ref": "indicator--f1e2fc48-a8f7-49c6-bc96-de1943e3bb49", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533b3f4f-273a-472b-b5df-908d58c41ebc", "sighting_of_ref": "indicator--406f01e1-9558-44dc-907f-d3c5ba67d664", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c685cdc9-746c-4499-98c1-9a1bcc552519", "sighting_of_ref": "indicator--b39896e0-583c-4098-b8bb-9af468e010ba", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b66db2-3554-47c8-9664-577884012255", "sighting_of_ref": "indicator--b4158b1a-fa1f-49ba-a9b6-d5b628198505", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a3cf1e-4091-4f2f-b686-4fea2bf1bc12", "sighting_of_ref": "indicator--98bb3793-88b0-4f5f-ba1e-ae2ae3b0e36d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed12efd-0597-46cd-b2b6-28193f96b6f0", "sighting_of_ref": "indicator--22d2b699-0905-4261-8b65-d97cd44b8888", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03197a0b-4dac-4bee-b9ba-214e3d5c60af", "sighting_of_ref": "indicator--d42ac6a3-3055-4f90-8202-a7c542f3c5ed", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6d08ed-370b-492a-95d0-04e7e980cc37", "sighting_of_ref": "indicator--09c7b6bd-6e10-44cf-93fd-015164a113ac", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38573250-c046-47ed-94de-681a5270ee9b", "sighting_of_ref": "indicator--0332612e-ba3a-48c7-a34f-8bb54bdd2e62", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57b499d-f0d1-444c-9e6b-fcdaabc771c7", "sighting_of_ref": "indicator--b3720fd9-084d-4856-b47f-66491462b7ba", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119284d0-bb0e-4d3c-9352-574266c68b7c", "sighting_of_ref": "indicator--19fe7156-cdca-42b9-8215-055380812741", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f25166-a822-40c1-a363-fa02feb8362b", "sighting_of_ref": "indicator--a0350ac3-9ef3-45a1-9e98-30c07b69dace", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b56ec4-4070-4424-9c68-90546e65d8d6", "sighting_of_ref": "indicator--45f2523c-4b13-416a-a7e8-37bd8acc6929", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b4390c-15a5-4968-b430-d43a688aa4d7", "sighting_of_ref": "indicator--7fd5f9b5-06c2-492a-aee3-ad830625f042", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aed9580-273f-4ce2-b7fb-eac7fbfb46a9", "sighting_of_ref": "indicator--f6517000-edb8-4c75-8661-bafeff7e8959", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3aa4c8-80a6-4bdb-bb68-da3bf5e8cab9", "sighting_of_ref": "indicator--a5ef42d0-a78a-48c7-81a5-61bae1c3937b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27c7e2b-1593-459a-b9fc-85658df22dcb", "sighting_of_ref": "indicator--855032a2-edb1-4fd2-a2ec-0f4dfac93ab9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f55a739-fa87-458b-be4c-12d19dba8844", "sighting_of_ref": "indicator--1ae7523a-2d89-4a77-b874-dd7936a51309", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158a8755-9f2a-4f8f-b050-1e8a814acee8", "sighting_of_ref": "indicator--edc891ad-fecc-4782-994d-588d49077c36", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5818a677-8526-44c0-ba07-c20d3327861a", "sighting_of_ref": "indicator--e7ab410f-dbff-4cb7-99cd-4b086c0fc937", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e92e2d6-1062-4339-a747-52997ea11846", "sighting_of_ref": "indicator--1bafd745-6b41-4c7d-a815-700ee8ca520d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369f63e4-7fde-49c7-be94-a2335d98ba09", "sighting_of_ref": "indicator--22a60f3f-f5a6-43e8-8088-e969b62f9561", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb2bbc4-3f51-499d-8fbd-749ce3317306", "sighting_of_ref": "indicator--7ecb0e39-8ec0-414e-b5b4-ae4f7c554977", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b5b0c2-81bc-4440-93dc-1eca54619d38", "sighting_of_ref": "indicator--7ecb0e39-8ec0-414e-b5b4-ae4f7c554977", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c490e5b6-a030-49ea-a95e-415a15233ad7", "sighting_of_ref": "indicator--9c801a92-a666-4316-890a-4662bc77add9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7187c64-b2de-41d3-aa8d-eefc63e5d243", "sighting_of_ref": "indicator--8e88a2fb-a5c1-48cf-83f1-69c1ee2a5377", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739827d9-7fb2-4ae3-9523-c96e15ac5525", "sighting_of_ref": "indicator--449406ee-2d79-46de-8fd6-fb8068f9d70d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a9a31c-4551-43e2-9881-be5a5b8a4f8a", "sighting_of_ref": "indicator--3eac5683-58fd-42d0-99db-ac30f00469cb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7dff6d7-48b9-429e-b0b0-340478c969ef", "sighting_of_ref": "indicator--6f419bb4-f769-4d22-9e6c-116cb9c2e320", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ec819c-8408-4761-b8ce-735fb033d522", "sighting_of_ref": "indicator--667ad21d-9b5b-4e23-a238-757361d85a72", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef26182-4803-4950-8aa8-2f39fb86ccdc", "sighting_of_ref": "indicator--5a2a7d7b-1103-4349-afe2-9b9441443833", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced87d14-2581-4a97-ad44-f3c503a35e62", "sighting_of_ref": "indicator--3988d653-b546-43ec-9163-6a5b899b5fcf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a157c3bd-c368-4ce0-a85d-e867b4e9e37d", "sighting_of_ref": "indicator--3988d653-b546-43ec-9163-6a5b899b5fcf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb7c27c-39c5-464e-b649-fba898f142d2", "sighting_of_ref": "indicator--3988d653-b546-43ec-9163-6a5b899b5fcf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae51cfe-c9b3-44ce-a222-a7b5e843c202", "sighting_of_ref": "indicator--53100137-d64d-46c1-a3ab-98073ed0a3fa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f2772b-36b3-419b-8ddf-89dc6453704f", "sighting_of_ref": "indicator--de01e39b-3af0-4fc5-8daa-a416d477df6a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e98d54b-388d-4564-b292-52c13c538a43", "sighting_of_ref": "indicator--a7133da3-9f64-4876-932f-0f5906b913db", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720d5fe5-042c-4395-b1b3-14c029945b86", "sighting_of_ref": "indicator--c99c4298-ffce-43d9-9746-d460653291ca", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8b59c6-b9bc-43f0-81eb-10fd2c30eb60", "sighting_of_ref": "indicator--2bcd7bb8-a267-48c9-9b4f-ec56ddaf606b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78adca07-d37d-4008-b2e0-ac43eb802c2a", "sighting_of_ref": "indicator--71be7a9a-042f-4324-8875-dd63ae69bfcf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1253a677-70f8-40f2-bec7-e622bdbc65ec", "sighting_of_ref": "indicator--6a004911-22b8-4d8a-afde-28441a67c24a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c367538-78da-475c-8a7b-c1741350eea0", "sighting_of_ref": "indicator--525ca8c7-d6a9-4ed2-a299-05d1e81369e5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656e7b41-be1b-419a-80f7-c7c06f7fe637", "sighting_of_ref": "indicator--f7127cb0-60ae-438d-a70e-3acfe4720484", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2b3414-7528-4947-9fc0-4e7d7a9bc9b2", "sighting_of_ref": "indicator--f7127cb0-60ae-438d-a70e-3acfe4720484", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958930b7-acf2-4604-b360-4b1903cc7a9e", "sighting_of_ref": "indicator--d649f439-d831-4ab5-985d-3a36cc16e5ad", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a81e23-d856-47f6-b0be-bdf253054fdc", "sighting_of_ref": "indicator--da212151-befe-4e24-aa74-42c8359d0557", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f19e73-e412-4972-af84-a26311950c75", "sighting_of_ref": "indicator--b17d58c2-c81c-46d5-a09e-77a6b1a9bd36", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a64d7b-59a6-45da-8e93-1921f4ae5a3d", "sighting_of_ref": "indicator--c2d4473c-fa13-495e-a28a-fe83fe5476eb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fabb128-b6d2-4bac-9427-563940494883", "sighting_of_ref": "indicator--76c87903-f174-4f15-9c24-62617bc3ce0d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f778e0f0-da57-4c38-8a25-47202e1132de", "sighting_of_ref": "indicator--76c87903-f174-4f15-9c24-62617bc3ce0d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf2d6ff-9fa3-4785-9979-cecc418d5786", "sighting_of_ref": "indicator--c3bde301-f27d-4984-a8cc-b69576fe4015", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20f8444-9696-4386-8805-3a8afe305de2", "sighting_of_ref": "indicator--b296a258-ac56-4c0c-a240-6c857957fafd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb77e43-81e7-407a-9cce-e15282998ca6", "sighting_of_ref": "indicator--fb259a7b-b6e2-476d-bfc9-a8b541e0975a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ee991c-45f8-403e-aca9-5ea64ccef193", "sighting_of_ref": "indicator--4863790c-2229-48a5-98c8-e1b7d663144c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262d89b6-6448-4226-9ae9-1896f47083b4", "sighting_of_ref": "indicator--de938429-9bd5-44dd-aa5f-b8387e399d06", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143278bf-cdd7-4c08-8a53-73d4c73a3a68", "sighting_of_ref": "indicator--95735bce-9731-4425-b306-d8261387dc50", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7a6193-fb4d-4d0a-b3d1-8a9b403f66dd", "sighting_of_ref": "indicator--5f9cf6a5-9fed-42c6-9573-444731e76652", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb4dbee-ef9d-4a0a-a496-2bd357224f9f", "sighting_of_ref": "indicator--d9b35483-2858-45dd-b8d8-ffba0cd0fa60", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb482db-51c7-44d0-b701-0ffcc2eecf67", "sighting_of_ref": "indicator--e7299f51-5dad-4b46-97b2-834cf109863e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a4317a-9721-47ae-b284-dc51b6014ac6", "sighting_of_ref": "indicator--e7299f51-5dad-4b46-97b2-834cf109863e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262e8daf-2c5f-47be-b0c9-6ee4917f4064", "sighting_of_ref": "indicator--cbbb9e23-a59e-479a-ada4-9027c16c12ae", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10227831-6d14-4f35-98bd-6e47bb4e0e35", "sighting_of_ref": "indicator--61853865-4e64-46ed-9341-3f769d4c2641", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43cfba0-cae0-4754-9034-5d85d6afaf19", "sighting_of_ref": "indicator--b5f1a9f1-3c86-4a7d-a32e-b7182c345eb3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a541b9d2-fc6c-44b7-b797-694c21a0c398", "sighting_of_ref": "indicator--50a23c1b-e748-4e68-8b3d-ddc6758ffdc5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca504469-5e6d-4628-81bf-6969c576e08f", "sighting_of_ref": "indicator--4314556b-dfc6-447b-a276-caab70ccc137", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d441d950-184e-4134-8e3a-67f82299a3c9", "sighting_of_ref": "indicator--68f790c5-b7ea-44ee-b593-8d4b867f619d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35fa7f2-82c0-4620-9ec5-98b109f403fb", "sighting_of_ref": "indicator--44114774-b564-42fa-b32a-0d6bd21c9234", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd08277-f5f7-49ec-a5af-8b87960d13b3", "sighting_of_ref": "indicator--44114774-b564-42fa-b32a-0d6bd21c9234", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c0bca7-180e-40c1-afd5-a2f98a0899c0", "sighting_of_ref": "indicator--42209b40-b6e2-4a55-bfe6-7e0e32d4160d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc567a1-1b4e-453b-8e81-b26d8cca6303", "sighting_of_ref": "indicator--4361722e-295e-4dca-8924-eaa5355ee405", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29aaaf18-8059-42a8-9c0d-c317912840d5", "sighting_of_ref": "indicator--4361722e-295e-4dca-8924-eaa5355ee405", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3511782f-abf1-47f6-b0fd-d8d03d29f173", "sighting_of_ref": "indicator--65d2ddad-66f2-4dbe-9bd4-f6ee1940b0e6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2f31a8-277d-4e1a-87d1-81215347b4c1", "sighting_of_ref": "indicator--16a93523-2614-4778-a72f-b702f18ffd69", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbca6a92-87ab-43b5-8788-49e827b433f4", "sighting_of_ref": "indicator--7b8c188c-9749-4079-b91b-235b735e1f4b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88567155-c17c-4e8d-afba-9221d0b3ace2", "sighting_of_ref": "indicator--cd00896c-4360-4bb8-aa1f-9700a5cee924", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d486def-43f8-44ff-a7ef-de57532bd883", "sighting_of_ref": "indicator--c99b3077-41a9-462a-ade1-4fc908140231", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f98d3a-a6f2-48dc-9156-20255de1dcca", "sighting_of_ref": "indicator--96e498c1-0bc6-400c-bd67-86ec5572a18b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78b87ea-e7cc-4037-9a96-2ee43cf982ea", "sighting_of_ref": "indicator--60b24646-7d07-44ec-a9d6-23c5fd790697", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a007f772-e068-4a46-b8af-affe9aeb6c5d", "sighting_of_ref": "indicator--6f148433-594f-4488-9625-611ba098baa6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556460da-3f71-428e-a55b-83967d140484", "sighting_of_ref": "indicator--07706f69-3f42-4bed-a0d5-dfd410a7dd3e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bec8d21-020d-47bf-bfc8-3b42fad7b841", "sighting_of_ref": "indicator--e98f211f-4dd5-433e-9653-fda7ea07d9ca", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da063140-9e72-41b7-92c4-c62efe358203", "sighting_of_ref": "indicator--93e38332-573b-465f-8524-5e12cc3eb399", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1794aa-cbff-4920-b46e-0aeacdc4ff70", "sighting_of_ref": "indicator--93e38332-573b-465f-8524-5e12cc3eb399", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e835b7ae-1a5a-4211-8e7f-a479f06affe3", "sighting_of_ref": "indicator--93e38332-573b-465f-8524-5e12cc3eb399", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18be51e-eada-4a61-9cc6-6c9cf550a9a1", "sighting_of_ref": "indicator--2214b6dc-d5f9-49a5-bda3-ac7e937c1cf3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128cfe56-0140-490a-8baa-0bb86f88b903", "sighting_of_ref": "indicator--17c22244-0881-4d0b-9b37-ac8e5bdfa23c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4eabd8-1285-43f1-a46a-37f79823bb79", "sighting_of_ref": "indicator--c762a07d-29fc-4325-81f7-c438c77cdd37", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75777660-701e-43b6-a914-612fa696da90", "sighting_of_ref": "indicator--a7777482-6f03-404a-bbbf-66132f4047bb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53baaca0-e306-4f03-840c-ba57a2ba54a9", "sighting_of_ref": "indicator--2264fcb2-bb1a-4c7a-a103-88b9064e1497", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a7fcbd-641d-4472-a7e9-65ca0f855595", "sighting_of_ref": "indicator--eed826df-b7fc-4649-b8ba-2d049cb738be", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a8b68d-5eab-4df2-97ec-c503062077f9", "sighting_of_ref": "indicator--68b34442-e27a-4c8b-ae1c-949106ef3268", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2f9977-f123-4796-8c28-8b21120ab025", "sighting_of_ref": "indicator--b434a1e5-4133-465e-836d-2fe1a5d26446", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16751cf-503f-4bb5-ae7e-5fe3cb5de0d4", "sighting_of_ref": "indicator--9ae98403-0e27-49f8-bd0e-a51c9d943d95", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71c654b-30af-4795-8bf9-7bfa321d9c1c", "sighting_of_ref": "indicator--9ae98403-0e27-49f8-bd0e-a51c9d943d95", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7d036b-2e43-423d-913d-404726854d8c", "sighting_of_ref": "indicator--d1acf958-0744-46c1-8cc6-2c8e4e5f8afb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa0b6b3-b4af-45f9-b3ea-d2df33e409df", "sighting_of_ref": "indicator--85707d3c-19e4-4803-8cf4-00e85872842c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586ad1cf-bf8d-45d8-91fd-227844bd75b0", "sighting_of_ref": "indicator--85d8305b-b844-48ff-812c-4aa3f5a066ca", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4d7e7e-d119-476e-a794-9419ae71ebc7", "sighting_of_ref": "indicator--85d8305b-b844-48ff-812c-4aa3f5a066ca", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a425e2-2834-4a78-83a7-d63856a9a236", "sighting_of_ref": "indicator--a8575ffb-5c48-4278-bf3b-b2d5f931d0a5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7445790-f8ba-44fc-b269-062920a1f6ce", "sighting_of_ref": "indicator--d00e0dc7-3a6c-4704-a9bc-1d4539f8e452", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf7f97c-dc79-4556-b33d-ad8066344176", "sighting_of_ref": "indicator--fbc3c6ba-dd26-4a40-aa53-e504462f3747", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d09d0d8-3fbf-4fd5-9960-60c9e4984902", "sighting_of_ref": "indicator--ae03450a-a7ce-48d4-8f49-30dc6b5d501d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca033468-1f70-457c-934d-a0e2aa6560e4", "sighting_of_ref": "indicator--161a05c0-88c8-4d1f-9277-b02905285e3e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f941223a-802e-4895-a03c-f4bf69dc6727", "sighting_of_ref": "indicator--282bc125-c338-41be-b9af-b38271dfaf89", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf51c417-39d0-4218-a0bb-fda2bb761fc5", "sighting_of_ref": "indicator--9eb9aaeb-d458-42e5-ab2f-7b7045a717e1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47898244-82af-4f09-b73b-446c37cb32dd", "sighting_of_ref": "indicator--dbe733d0-37cf-4be1-8ad5-9dd65b45da05", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0bd5b98-f91c-4680-b874-51fa565d114b", "sighting_of_ref": "indicator--f029b3ef-665d-4d1a-819a-0ab5790c4d9d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8566bdec-ec5a-4b66-8a02-15f96ba7939b", "sighting_of_ref": "indicator--c0dcac04-acfd-404d-ae9e-8369673331a1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7fe346-7ed9-406c-9527-355e04ba5b59", "sighting_of_ref": "indicator--b07a8ecf-68bf-4236-883a-211a66430537", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e5b317-e933-4c89-8c41-6394298ac447", "sighting_of_ref": "indicator--ec50ee72-617b-4821-813b-51c93dbb312c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6f92af-c489-487f-b5e2-e4ebeffdc116", "sighting_of_ref": "indicator--fdca1615-f7c2-48f2-b13e-ef5cb46b33dd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef78458-62d4-42c9-925d-6c8b122cce18", "sighting_of_ref": "indicator--82c4032e-2358-4c7f-8398-5b4ff5935214", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac2ae58-4a45-4650-b146-3384444bcd2d", "sighting_of_ref": "indicator--4aea065d-5708-4356-bc17-c94a81d10ebc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c718a40-1ae8-4138-9d8e-fd3e6bb7c760", "sighting_of_ref": "indicator--4aea065d-5708-4356-bc17-c94a81d10ebc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9947bd4-c0f9-49ba-a233-2e355e6694bd", "sighting_of_ref": "indicator--85abec62-82fe-4a1f-8acf-bc26486b9c32", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b43a78-2917-49a1-9156-12dfb68c01ff", "sighting_of_ref": "indicator--f667149b-7bb1-49e7-99b5-a9b3d81e78ac", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6491be-8532-4783-8500-8e9663fb9359", "sighting_of_ref": "indicator--f667149b-7bb1-49e7-99b5-a9b3d81e78ac", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2342aa7b-311f-49b6-926c-767c24530cbc", "sighting_of_ref": "indicator--08afd64d-338c-48a5-bc9d-9bac6d91321f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed04c59a-2e34-4487-845a-2e211e6bf415", "sighting_of_ref": "indicator--36586a41-6b7e-4f86-9295-ccf264c257c1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feaedac3-313b-4345-a904-39b3020c4fec", "sighting_of_ref": "indicator--cd12ac9d-c94e-4d16-91ed-7bc2b6d6147e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1413af7a-d6a3-4cf0-a90b-68e6f6d9500a", "sighting_of_ref": "indicator--0c650ac5-aba6-4aad-887e-091856d64e28", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af457e7e-42ce-4158-9644-852a503ee74e", "sighting_of_ref": "indicator--e0d6cc58-1237-4331-ab34-9e3b312cedb2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7b06ec-7afa-4df7-818d-803650bbc89b", "sighting_of_ref": "indicator--9effff95-b1f1-4cd3-a44e-988ef364afbe", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6630599b-e6e7-4b85-bb31-a68c946087d1", "sighting_of_ref": "indicator--5b641aef-f4cd-478a-8d7d-dc0c7ab220c8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ce9920-0603-4952-9182-f8523a01063c", "sighting_of_ref": "indicator--39d999b0-bb1e-417b-bfe9-e055182295ae", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8b49ef-97b3-443b-9861-4a0965272a6d", "sighting_of_ref": "indicator--1836240e-f2da-475b-b900-c041bbbc8187", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dfdf834-aaf1-4c3f-a753-f5e7ea2859ad", "sighting_of_ref": "indicator--21e7afcd-6251-4565-ae8a-b96ede6c8af4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80a47f7-4fb5-4d35-89a4-07a948fd244f", "sighting_of_ref": "indicator--ba8dd112-f34b-444f-a4ac-8aa4e43b5f72", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a820898c-b940-43c6-a486-affdd0eb6606", "sighting_of_ref": "indicator--ba8dd112-f34b-444f-a4ac-8aa4e43b5f72", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55891202-7607-46ce-93d9-37bbfe66577b", "sighting_of_ref": "indicator--6e6385ab-ca57-4505-af6d-bf8c2873a06b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5b267a-3434-4f99-9a98-990de92a0d79", "sighting_of_ref": "indicator--38bbf9ea-bd59-4045-a534-bf59574c15c1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1bfc0c3-0c68-4844-98c4-aec1dde8473f", "sighting_of_ref": "indicator--2122436a-e633-4c4d-b57c-2446727dd980", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a196248-5c92-4ea7-981e-80f85024cb99", "sighting_of_ref": "indicator--2122436a-e633-4c4d-b57c-2446727dd980", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b2d398-3bf9-466b-9a19-67b5fb724427", "sighting_of_ref": "indicator--6936bf72-2888-4390-8bc3-e0a96e0eef95", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a29f497-77a9-4f3d-aff5-31bdb83e1869", "sighting_of_ref": "indicator--a9f2deee-9c92-4bee-a2b6-8208853ab3d6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290df6ac-24d1-4a0b-9014-2527f1d537b8", "sighting_of_ref": "indicator--2d33cae8-5d36-46fe-8303-f57fc9822183", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b0c8af-4321-464b-82f1-65d3fef6eefa", "sighting_of_ref": "indicator--ce8ba7b6-89a8-4cb0-8a19-f3c6b0c06ff2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39bea87-4655-4352-b47b-a78fdcbfc735", "sighting_of_ref": "indicator--77f9634c-2319-4fa8-8a37-1c8d7dd0a04b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6d032d-dd04-4098-856c-a225edff33ca", "sighting_of_ref": "indicator--eb2664de-c995-4c97-9f98-24846eb51257", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d161efdf-5c00-4cbf-adce-95ae2c90ad42", "sighting_of_ref": "indicator--a0207375-bb03-43c5-8adb-f8da5d8526ac", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e768fa6b-dbe0-48b1-8d85-b08f9c25c361", "sighting_of_ref": "indicator--2b8281ab-0747-490b-a8a9-c163ef5c3d1b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879f9fd2-1f72-46bc-9ad5-2a6749fe2feb", "sighting_of_ref": "indicator--1be87375-7c31-4150-a6f4-12d8cd46ca1f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33361437-19ff-4d31-90d1-8dcbe135fbb7", "sighting_of_ref": "indicator--92d94538-266f-49e3-ac75-a53b7f724af3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9df6d10-7ca5-4cd2-bb45-8cde078cd654", "sighting_of_ref": "indicator--65ab2617-711c-48df-84d2-dfe0eea63827", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1fb6f73-853f-46ed-b7f7-05d1fa1cf37e", "sighting_of_ref": "indicator--4b9cebf2-d616-4be8-989f-88bc8b25cac5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed029993-1413-450b-90b1-68ea815475a8", "sighting_of_ref": "indicator--c1d88535-aa2f-47b0-89e8-f3c2397df12e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47ebc4e-617d-49c6-aacf-6e9f2fe3f0bc", "sighting_of_ref": "indicator--08dac6fc-9584-4f3c-836b-ffe4295a08ac", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd24ceb6-8119-43ce-8323-85c2e1d742ef", "sighting_of_ref": "indicator--98903ec4-d265-4013-9069-2af0c6dc52f8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--630d2c84-18d1-467b-ad17-46ded0dfd6ab", "sighting_of_ref": "indicator--98903ec4-d265-4013-9069-2af0c6dc52f8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d750fc8-d261-4290-9c11-4073c414cbc2", "sighting_of_ref": "indicator--98903ec4-d265-4013-9069-2af0c6dc52f8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8e9c02-819a-4e4a-8651-293dfff144ff", "sighting_of_ref": "indicator--e719fc58-1d06-4ade-be88-01014de2e9f1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c65262-719e-438c-9b18-2583801c00d2", "sighting_of_ref": "indicator--cdaddff4-a7d7-4480-acab-2192afff593e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b4a53a-19f9-471f-9c54-001705bdfebd", "sighting_of_ref": "indicator--ab323833-40d2-4486-accb-f9bbabcd7f4d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52aae7c1-1072-4f3e-bbb4-69fb3c9a419a", "sighting_of_ref": "indicator--27725d62-1517-44fb-8c66-b5dbb286d137", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35409d39-dc0b-46ad-837c-dd2c216889ba", "sighting_of_ref": "indicator--fd595abc-a4d9-4bcc-a0a4-f36280446b7b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afac205-cea2-4211-b4f6-131f5f074459", "sighting_of_ref": "indicator--d74be56b-b583-4d59-8d1c-27166caf3c5e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b135f9-12f6-441f-a35a-27532517c767", "sighting_of_ref": "indicator--b96d80d0-f156-45ff-96c9-5ed257d3c398", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02dd9335-4c83-4367-aa47-60b24cd791db", "sighting_of_ref": "indicator--bfe3f8a7-bab2-4d8b-b714-d48798929c41", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1818ad89-3762-445a-afd7-40b34a56ff33", "sighting_of_ref": "indicator--a320cd86-a899-4026-ae01-0d5f303dd259", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab84eb9e-e9d5-4a69-9708-ef1accb35a7c", "sighting_of_ref": "indicator--a320cd86-a899-4026-ae01-0d5f303dd259", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ef00e3-6ba3-488c-8cdb-d197ed6ccadf", "sighting_of_ref": "indicator--fec9d862-2b4e-4f12-bbc6-e44fa55e2185", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b940f6bf-0deb-4acd-a56c-cf09039c9915", "sighting_of_ref": "indicator--3cb98cd7-07e5-45a6-82f8-7f9b21a10201", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd18086-80d9-4262-905b-ae91d7a4c6df", "sighting_of_ref": "indicator--977ec967-b266-4d70-bf34-676a78a70695", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2369a11f-81af-4c78-b683-7cfb5c35eaa4", "sighting_of_ref": "indicator--f2148988-b42b-4974-b276-5e424701936c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9000ecc9-8832-4d98-b69b-9dbc6fccd7ed", "sighting_of_ref": "indicator--3bdaab98-1fa3-4618-9f94-57a75a270e45", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01327bbe-ddb3-457a-bbee-439462c0bbae", "sighting_of_ref": "indicator--3bdaab98-1fa3-4618-9f94-57a75a270e45", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbfd5107-bab4-4f15-a022-3353a029db56", "sighting_of_ref": "indicator--3bdaab98-1fa3-4618-9f94-57a75a270e45", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27b0315-bd13-4eff-8c10-cfc6655c9310", "sighting_of_ref": "indicator--6f5732ab-d61f-4097-947e-cc44db622513", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c86bee-2c28-41a0-86db-30fb4f12d527", "sighting_of_ref": "indicator--6f5732ab-d61f-4097-947e-cc44db622513", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d25d70-6b28-4e3b-bdba-9c0e067c60ba", "sighting_of_ref": "indicator--6f5732ab-d61f-4097-947e-cc44db622513", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a036c437-e3d4-497d-a8e3-93ea27a69566", "sighting_of_ref": "indicator--21cc41e0-7acf-4a42-b8e9-6aaadf6d878e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aae92ca-2462-4276-8972-f3c894f866b4", "sighting_of_ref": "indicator--9c1e67d0-4983-44fb-bbc5-acd83183a09a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00d6e37-e4f7-4ac1-83be-bbcac4124d0e", "sighting_of_ref": "indicator--9c1e67d0-4983-44fb-bbc5-acd83183a09a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bfae59f-90cb-4064-b827-7ff7cc921fb8", "sighting_of_ref": "indicator--bddf08b1-2a8f-4520-a12a-c04934031b69", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ec6c3e-f5d2-4cf2-8bbd-721f7ded0241", "sighting_of_ref": "indicator--2835340f-4b1d-4a88-8375-529dc2829ab5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9fdeb40-9cf5-49b4-949d-509aafcb5168", "sighting_of_ref": "indicator--1f7fced4-b646-43af-a67e-a3eb65d9f833", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cfff69-0f72-446e-a58c-7738ac4f6d71", "sighting_of_ref": "indicator--22c83dde-6f3e-45c4-a10d-08dc2418cf5d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53cd7621-84a1-4ca6-ac2c-033916543811", "sighting_of_ref": "indicator--79aa60b2-5893-4308-adf8-aa74e4bc7f06", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3659a34c-8a0b-4e35-b055-53cd62964de4", "sighting_of_ref": "indicator--6a2052c2-d2e6-4ab6-b512-4ec3667eaaa7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fd3e53-97cd-4b46-9036-8971b13237b9", "sighting_of_ref": "indicator--6e936163-ac8e-43cf-b6b7-120417c894d8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e524c98-827c-4e16-a140-d22aa440d02d", "sighting_of_ref": "indicator--4fde5243-45c4-462f-8097-77bd531bd088", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec95805-0198-4ee5-9087-e147c6237e3f", "sighting_of_ref": "indicator--4fde5243-45c4-462f-8097-77bd531bd088", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8496fe58-2309-4330-8da2-28f26890b681", "sighting_of_ref": "indicator--4fde5243-45c4-462f-8097-77bd531bd088", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458d74f3-f5ae-4701-b542-0b7fe60ee236", "sighting_of_ref": "indicator--9e75fa7e-d9bf-450d-974f-c75f7d01976b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b04ccc-6987-43a7-b812-ed6eb5fe8c68", "sighting_of_ref": "indicator--8c8a32ac-596b-4c65-9f52-bc37282217bf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2803f2-536b-47cf-a6e1-a49c4779d8f5", "sighting_of_ref": "indicator--e64c12a1-30ed-487b-bf61-8b597a6172f8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ee7b42-2a27-43cf-94c4-2d816dc39b7e", "sighting_of_ref": "indicator--730b16d1-faa1-47f8-8968-dc5f147ce752", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d43007c-ed99-4ec1-9806-4fe0585b2009", "sighting_of_ref": "indicator--730b16d1-faa1-47f8-8968-dc5f147ce752", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8752e15-94c9-4b73-be55-0e17e52d6d55", "sighting_of_ref": "indicator--d45a3243-c63d-4141-b81e-b25213f8f789", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e14c3f-91ee-417f-bd74-abefd20ec890", "sighting_of_ref": "indicator--d45a3243-c63d-4141-b81e-b25213f8f789", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee41b89c-1172-43c7-a4f2-d36666e2d89f", "sighting_of_ref": "indicator--1f90ed83-3781-4515-b474-c3b8aabd19c9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f8964f-4878-4001-ab76-09192e8535a0", "sighting_of_ref": "indicator--4ecd449b-cd6b-4ff9-9bef-2ffd965dbe13", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c851a7-e24e-4074-81c6-0d3137c3a589", "sighting_of_ref": "indicator--69d00a47-69a4-4a03-9886-9f741936c472", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fca5586-db02-47b2-9d3d-ae38520751be", "sighting_of_ref": "indicator--f3a1a6e4-c216-496c-96e5-136067bfbece", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c504222d-f785-478f-8bf8-abd541b7060d", "sighting_of_ref": "indicator--de5e19ed-3849-437f-af9b-754bbcfa1d71", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0609807-c0f2-40d6-8060-7a50f9915f25", "sighting_of_ref": "indicator--ca5a8be8-031b-4ba4-995d-aed657cde0d3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e066d9b-1754-4d3b-a511-ec7ae4423a07", "sighting_of_ref": "indicator--bc913dc7-0fec-4599-872b-29e8168c87ab", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d96491f-ef2f-4e4b-aa4b-bc2f447dc835", "sighting_of_ref": "indicator--83574bb7-a469-4b64-8ffb-07499dcd9cd0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ee4115-6030-4a3e-9c54-5f5ba9031463", "sighting_of_ref": "indicator--1e1acf96-a9ea-4530-9cb3-5785b3721dbb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b612c64-39fb-43d7-bd72-2112218955f0", "sighting_of_ref": "indicator--fde26fe5-35b7-44cd-a6ec-03f909444842", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb08cb28-36bc-48b4-a605-e0fb992098b3", "sighting_of_ref": "indicator--fde26fe5-35b7-44cd-a6ec-03f909444842", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b741b2ef-9c27-42a9-ac33-baecf647d0a0", "sighting_of_ref": "indicator--9661a2b7-71f5-4956-b5a1-99e2f6690029", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5548294c-615d-4591-b4f3-486ee1684f0f", "sighting_of_ref": "indicator--9661a2b7-71f5-4956-b5a1-99e2f6690029", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499c0592-10ea-474e-a5a2-4af5b10f1368", "sighting_of_ref": "indicator--9661a2b7-71f5-4956-b5a1-99e2f6690029", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d2c5cc-ba47-4c11-8374-477279de1935", "sighting_of_ref": "indicator--2721de1f-0c7b-4521-a157-afbb98259c12", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bff9458-67b0-4783-9efb-fc491fa9205c", "sighting_of_ref": "indicator--2721de1f-0c7b-4521-a157-afbb98259c12", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060e609c-f4ba-447e-8ef8-a55ecb4f2272", "sighting_of_ref": "indicator--2721de1f-0c7b-4521-a157-afbb98259c12", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7205af1f-dec5-4812-8047-3d89bf6cff15", "sighting_of_ref": "indicator--ee7afa89-fa1e-4b52-a6d9-4d6848566316", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46035ac0-429c-4ff8-a08a-917cdab1cd7f", "sighting_of_ref": "indicator--ee7afa89-fa1e-4b52-a6d9-4d6848566316", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a242a1-f2d7-4993-8c00-7dd3eadaa04b", "sighting_of_ref": "indicator--ee7afa89-fa1e-4b52-a6d9-4d6848566316", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6893cc-a3c9-4347-a74b-2d9c8eccd73b", "sighting_of_ref": "indicator--908ed7a8-298f-44de-a9e8-f42c77f1f23b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89f1802-bc07-4dc0-b086-aa71ee66a905", "sighting_of_ref": "indicator--908ed7a8-298f-44de-a9e8-f42c77f1f23b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f63504-ea7b-4bcc-a847-c29ca6faee8a", "sighting_of_ref": "indicator--508c9187-d25c-456c-84c9-ed7e070c8a7b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6cc867-29aa-4b68-9733-d0678969c4b7", "sighting_of_ref": "indicator--508c9187-d25c-456c-84c9-ed7e070c8a7b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2b60a7-a55b-4c7a-a030-95c5a1c39892", "sighting_of_ref": "indicator--508c9187-d25c-456c-84c9-ed7e070c8a7b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c437f075-a806-4f34-81dd-c61a37000ce8", "sighting_of_ref": "indicator--ef58bbc2-963b-43ff-963b-cd1f49ca8083", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aed81d0-7c87-4e31-a733-ea2e18120943", "sighting_of_ref": "indicator--ef58bbc2-963b-43ff-963b-cd1f49ca8083", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc71f82f-45e6-4c69-92a0-d0e188b1be41", "sighting_of_ref": "indicator--30d6206f-079e-4e37-8fb5-ed48cf8d21c6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6eaff47-042a-41b5-bf39-6f69b5e51c9c", "sighting_of_ref": "indicator--850b6249-62bd-4083-b370-088ad033c1a9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb7771b-e150-4476-b65f-2c7975bd7ce1", "sighting_of_ref": "indicator--11f22735-7d06-4b05-b809-bbfc7c26151f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80da58e6-6ed0-4599-95ad-5b4d67f68d98", "sighting_of_ref": "indicator--7e836ee3-ae2c-491a-a585-3104b73d1495", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ed1001-bace-4c2c-8140-3949018c0e26", "sighting_of_ref": "indicator--7e836ee3-ae2c-491a-a585-3104b73d1495", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb561b9a-686f-4c2e-8be2-a4de5f5182f8", "sighting_of_ref": "indicator--7e836ee3-ae2c-491a-a585-3104b73d1495", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2ccdbd-0ea3-4751-8f1a-86de192789ed", "sighting_of_ref": "indicator--410b4502-3ec9-4a4d-8ba9-0f818557b263", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12c31a6-dc9b-443a-9ac6-f3057635cdbd", "sighting_of_ref": "indicator--410b4502-3ec9-4a4d-8ba9-0f818557b263", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4068070c-c118-45a1-b673-6f922fba1e77", "sighting_of_ref": "indicator--7b732d96-dbb9-4fc3-b446-b269ee7a98b0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a448cf3-cb7e-494b-8351-98e028718d27", "sighting_of_ref": "indicator--7b732d96-dbb9-4fc3-b446-b269ee7a98b0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2202efda-2174-4679-ba27-91fa8aba8a14", "sighting_of_ref": "indicator--7b732d96-dbb9-4fc3-b446-b269ee7a98b0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b48e1b-57b9-4787-b04a-fb6814be6cc4", "sighting_of_ref": "indicator--a0c8ae30-39f7-4834-a242-8a7d51fcf489", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c727ecb-b1b7-474f-9472-762410268c6b", "sighting_of_ref": "indicator--7faa6624-1e48-439d-9f81-c2ac063eeff2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3496767-2e80-4de1-85d7-0e80cb375c8c", "sighting_of_ref": "indicator--7faa6624-1e48-439d-9f81-c2ac063eeff2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa4a0b3-1962-440b-91fa-004a33cb27fb", "sighting_of_ref": "indicator--7faa6624-1e48-439d-9f81-c2ac063eeff2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6435e98b-bf4e-452f-9208-e149295a5f49", "sighting_of_ref": "indicator--8027cb7f-159b-494d-b8a0-26c543fca944", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a421e4-4ddc-4a2d-9667-1b5e8fd021dc", "sighting_of_ref": "indicator--8027cb7f-159b-494d-b8a0-26c543fca944", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffdbbf4f-cbc9-43e7-bc37-454093ffb093", "sighting_of_ref": "indicator--8027cb7f-159b-494d-b8a0-26c543fca944", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c34cfa-bd8a-4d4e-a3ab-6d31f3630811", "sighting_of_ref": "indicator--eeaa17ae-a096-4c30-8846-7f11ec1fedc0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8834ea1-4bd4-4745-bb0f-fb110dd72220", "sighting_of_ref": "indicator--0aafce40-4e37-4b96-b144-7f262655ad24", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b353681-6007-48bc-9476-bcee3cf483d4", "sighting_of_ref": "indicator--0aafce40-4e37-4b96-b144-7f262655ad24", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f44b236-3a40-477c-a286-9c627180eb43", "sighting_of_ref": "indicator--a3284919-b34f-47eb-9312-b465d8fdd4e2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9367b384-c961-42bf-a416-d717ea3f9d5a", "sighting_of_ref": "indicator--22997468-8121-4a02-a20b-e4f1eb9dbd69", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39ca5fe-b553-4726-bfbd-fc1513633320", "sighting_of_ref": "indicator--22997468-8121-4a02-a20b-e4f1eb9dbd69", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e18dd2-9012-4915-ac4f-d9eb32f7e95f", "sighting_of_ref": "indicator--22997468-8121-4a02-a20b-e4f1eb9dbd69", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4638689-a662-4d04-bae7-bd95ab01058f", "sighting_of_ref": "indicator--aefb69e1-753d-40b6-9398-578615ccbcf9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9b80f8-7dd5-4d34-8752-02057e5a990f", "sighting_of_ref": "indicator--aefb69e1-753d-40b6-9398-578615ccbcf9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1258c298-5bb1-4d7f-b297-d2aed4989a52", "sighting_of_ref": "indicator--aefb69e1-753d-40b6-9398-578615ccbcf9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef43138-11a3-4532-bc4b-4f1ab74056c6", "sighting_of_ref": "indicator--ddaa8546-bc41-44a8-881c-ae4ccff36184", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eab49a5-1321-4e28-8d8a-fab6be7f9189", "sighting_of_ref": "indicator--ddaa8546-bc41-44a8-881c-ae4ccff36184", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6ec4fd-bd85-4047-a1f0-cf3b897448a8", "sighting_of_ref": "indicator--42380e9e-9682-4ffa-97b2-3175d13dbaca", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ac41ad-ce50-4544-8b9e-ced8ed2f85f8", "sighting_of_ref": "indicator--d16067d5-5691-4776-9033-a5e3662315a3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d6e8ddf-b685-41c1-b2f5-a0bf63f3c183", "sighting_of_ref": "indicator--f7245dfd-a81c-42f5-af5e-352257ed5696", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c379ab2e-e035-43fb-b52e-6f9a8df51a0b", "sighting_of_ref": "indicator--f04c7a8b-6b11-4845-b2ea-4de0ac11ead4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413ec4b6-4e0e-48d4-8e9b-122b0320501d", "sighting_of_ref": "indicator--2ed29c3a-105a-460e-b69d-e94f8972ad03", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0fde36-ff50-40fd-a9b2-f1967d084034", "sighting_of_ref": "indicator--f4c87fbf-2572-4866-8a2b-cebd7093a7ea", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f10e28c-515e-4127-bd17-6d6d822dc4ef", "sighting_of_ref": "indicator--7869ab5a-8527-4f43-84ee-406683d2ca2f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7791d0d-d0b8-44ca-bbbe-bcb5cb333b36", "sighting_of_ref": "indicator--12258a86-5d8c-4761-ba62-ee30c17d9895", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eef5900-92cc-4e6a-81db-f8393368792f", "sighting_of_ref": "indicator--feaa613d-1aaf-4783-bffe-3c08cf16c583", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a12b2d6-33fd-4f80-b20c-9378ac727279", "sighting_of_ref": "indicator--8237b182-01f8-41e1-8881-5e27748c5a43", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48060142-8d1c-4179-bcf1-fae048ff806f", "sighting_of_ref": "indicator--186d7a40-100f-4680-be27-be53f578751b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9544b680-173d-4bd8-a580-0f5b7e3943d2", "sighting_of_ref": "indicator--56845c38-ee8e-4968-9d2b-f4ac47c7c56c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4049d381-da03-41e4-b802-ec0e333e7bc1", "sighting_of_ref": "indicator--56845c38-ee8e-4968-9d2b-f4ac47c7c56c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c79813-dd33-43f0-a38b-0b8a4c7efa50", "sighting_of_ref": "indicator--f095cdd7-9686-470d-91dc-c2cb0d44d24f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437526d2-79e8-4639-a698-30852ec2f1dc", "sighting_of_ref": "indicator--f095cdd7-9686-470d-91dc-c2cb0d44d24f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e339db5-ba8f-43c1-84c3-5a275e1bc042", "sighting_of_ref": "indicator--f095cdd7-9686-470d-91dc-c2cb0d44d24f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01ab349-5f36-4b30-b2d7-8828f67a6675", "sighting_of_ref": "indicator--a314de00-e79e-4265-bd08-e371fab63ac9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e51a166-3b1a-44b0-a830-0bc1a0eb4d5c", "sighting_of_ref": "indicator--31983f9a-39a4-42db-a18b-67c34fda60bf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3ae3db-1b89-4c91-85e8-652dad76146a", "sighting_of_ref": "indicator--31983f9a-39a4-42db-a18b-67c34fda60bf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a9980d-1fd5-49f6-b322-3dcc1b008d2a", "sighting_of_ref": "indicator--5ded987b-2a3d-4822-a6e2-d7dea46f0455", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71819096-f030-4d01-9b16-369e70fe362c", "sighting_of_ref": "indicator--5ded987b-2a3d-4822-a6e2-d7dea46f0455", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b8cb53-b632-416f-997d-27a46b7594eb", "sighting_of_ref": "indicator--2bfe1b37-8047-4e6b-9095-085352255548", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6826529-f6c2-4c7a-a660-b0d4f7a32fbc", "sighting_of_ref": "indicator--b036a555-508a-4294-9911-46a79f24ed6c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543b90d7-9547-46c7-ad28-6860e112f910", "sighting_of_ref": "indicator--0d4eaee5-50b9-4445-9a36-235eb44524bf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d61cb35-7bef-442b-8703-0ed5943813b9", "sighting_of_ref": "indicator--85054ba1-85a2-47b2-8b95-03411700943e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f8093b-c028-4b2e-b4c0-a8237b515d36", "sighting_of_ref": "indicator--85054ba1-85a2-47b2-8b95-03411700943e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a084a1-32ac-402b-999f-1ceec870a0b4", "sighting_of_ref": "indicator--85054ba1-85a2-47b2-8b95-03411700943e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ddedeb-c4a0-4caf-9225-825a20cf8b08", "sighting_of_ref": "indicator--4c61db85-860b-4b43-866d-c10ec1389186", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0ffef0-6e5d-45f7-998a-c025769deaba", "sighting_of_ref": "indicator--c8121791-6dd6-413d-811e-bf81e8dd9895", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef751898-6eac-4e02-a946-814a2adc8387", "sighting_of_ref": "indicator--c8121791-6dd6-413d-811e-bf81e8dd9895", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9e6c12-7d0c-457b-8a88-5feb9424b0d3", "sighting_of_ref": "indicator--c8121791-6dd6-413d-811e-bf81e8dd9895", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f8b8f9-da6b-4ff6-9c30-78178ba82258", "sighting_of_ref": "indicator--09715e2a-92f7-45f2-9c51-75193e6ea07a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3561575-41a9-493e-92b1-f49cdb3d6d2b", "sighting_of_ref": "indicator--e147bc01-645b-4171-a2e8-7d1665471fe9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed3ac73-ce70-4a18-a6e7-2f86538b3f76", "sighting_of_ref": "indicator--e147bc01-645b-4171-a2e8-7d1665471fe9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fda2c8-3d10-404b-9933-a251013aa0da", "sighting_of_ref": "indicator--3b7c758a-1560-4d9f-a3d3-677990ab68ec", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb44d17c-19c5-468a-9c84-4e4f067b0437", "sighting_of_ref": "indicator--3b7c758a-1560-4d9f-a3d3-677990ab68ec", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df08d83f-e15c-43f6-ad6c-78aa9f08a7a1", "sighting_of_ref": "indicator--eeffda03-4301-4ee2-a8fc-77bc9999e4e3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd784fbe-9a43-48f3-ab4c-dee71bc9662c", "sighting_of_ref": "indicator--969dde35-9a83-4aed-be00-81e0a0783e7c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98159588-d8e7-43c3-8749-8d6f149fc5b2", "sighting_of_ref": "indicator--969dde35-9a83-4aed-be00-81e0a0783e7c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765c8f7c-e60f-40f3-b5f0-d26814c391a9", "sighting_of_ref": "indicator--969dde35-9a83-4aed-be00-81e0a0783e7c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f776e485-f6c4-4280-b835-4ec9ecf57546", "sighting_of_ref": "indicator--a83be446-e076-4119-99eb-e60b2f6d9421", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1227a694-4c98-499b-8f18-6f39e506f091", "sighting_of_ref": "indicator--a83be446-e076-4119-99eb-e60b2f6d9421", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff405c0-c717-40f5-bc11-cee695984965", "sighting_of_ref": "indicator--a83be446-e076-4119-99eb-e60b2f6d9421", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3606498f-6350-402f-bcfe-0fbb4c5056fc", "sighting_of_ref": "indicator--9c4dd9b0-7f12-47cf-b1f7-2fc7fe4da1f1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b82e41-9f65-443b-9395-6f351480eb29", "sighting_of_ref": "indicator--d4c20a3a-ff65-436a-a2de-8044155dbd2a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3caa54-ec89-4cec-a7ed-95539b994f6f", "sighting_of_ref": "indicator--c70f8132-98e5-4597-baba-43ecb4293419", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a19da4-4984-474a-9389-376c4215e7fa", "sighting_of_ref": "indicator--c70f8132-98e5-4597-baba-43ecb4293419", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f187f5-c628-4fca-ae89-edac1ccece6c", "sighting_of_ref": "indicator--c70f8132-98e5-4597-baba-43ecb4293419", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b24c470-3b3e-4ffd-8b5b-80b7ae1208c3", "sighting_of_ref": "indicator--1f768cbe-f0d6-4173-b725-ee99ddacda82", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640a9ba2-ba65-43a4-aa4b-1a126ef695bf", "sighting_of_ref": "indicator--1f768cbe-f0d6-4173-b725-ee99ddacda82", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807990ab-76b1-43e8-875c-6023f5cd2b83", "sighting_of_ref": "indicator--1f768cbe-f0d6-4173-b725-ee99ddacda82", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f13da86-5a8e-4059-87cc-4e6248fae26e", "sighting_of_ref": "indicator--b06ec856-8e77-4388-9985-5addf44dd98f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21dbb78e-7432-4bd6-bde7-e694983632e1", "sighting_of_ref": "indicator--a91ef9f9-611a-4db5-935c-c918c6dbd73e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9bf56f5-ca9f-49ee-b0ae-2f3ca4f8b1ef", "sighting_of_ref": "indicator--77354ab1-df23-450a-8739-78b903b7c433", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62356e9-b687-46b0-b2f4-8004c4e27ebd", "sighting_of_ref": "indicator--77354ab1-df23-450a-8739-78b903b7c433", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab2d623-ba5e-40a2-976a-6dc767692d68", "sighting_of_ref": "indicator--77354ab1-df23-450a-8739-78b903b7c433", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f537ba3-f47d-453d-b743-03a30ee36567", "sighting_of_ref": "indicator--1b266ef4-8f62-4ff4-9321-3a60e526682c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6396a6-5e8f-441d-a167-9fb8c6afe559", "sighting_of_ref": "indicator--1b266ef4-8f62-4ff4-9321-3a60e526682c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e38e3b2-159c-4868-aeaf-58c42b78b2ad", "sighting_of_ref": "indicator--1b266ef4-8f62-4ff4-9321-3a60e526682c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1999d3d8-8227-49b3-9b0a-b23491b99be4", "sighting_of_ref": "indicator--072e6758-fc8b-4780-8d25-3a4a3d0f31b3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a55c37f-47d8-4cb5-868f-6c3db810b384", "sighting_of_ref": "indicator--5af5e98a-a643-4e5b-b5cc-5b241f2568b8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e952be-7917-4f1c-9815-72092d971539", "sighting_of_ref": "indicator--5af5e98a-a643-4e5b-b5cc-5b241f2568b8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827bbd4d-6402-42ef-94c9-f904c306cc84", "sighting_of_ref": "indicator--5af5e98a-a643-4e5b-b5cc-5b241f2568b8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aca0d94-52ee-4418-8d39-20359b93a9fa", "sighting_of_ref": "indicator--f58d8710-0eb9-41da-93fb-2a5bf82c21d6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c53c25-add8-4ab2-ad7f-0f46fb66a76a", "sighting_of_ref": "indicator--f58d8710-0eb9-41da-93fb-2a5bf82c21d6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d8a9ca-2a23-4c00-806f-4cd683574061", "sighting_of_ref": "indicator--33f608ab-b7d5-4a12-a9b7-d8d4217cb95f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c2fdaa-e23c-4894-b966-a9aa652acaab", "sighting_of_ref": "indicator--33f608ab-b7d5-4a12-a9b7-d8d4217cb95f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55712477-5aa7-4de7-881f-469ed4014b6f", "sighting_of_ref": "indicator--9879cc4c-b35e-4bec-b393-9a690beca38b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0caf4584-7cd7-446c-857d-47d3ed749812", "sighting_of_ref": "indicator--9879cc4c-b35e-4bec-b393-9a690beca38b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51efb293-a5c5-40c5-ae78-b6fe58a2437b", "sighting_of_ref": "indicator--c8cc01af-2ef2-43f9-bd77-6c22b3101d2c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a61003c-1f49-4175-9bad-df53a86a291a", "sighting_of_ref": "indicator--c8cc01af-2ef2-43f9-bd77-6c22b3101d2c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3b6eed-3a80-4fcc-a0a9-a2d079a28772", "sighting_of_ref": "indicator--e0c982d3-f094-4966-86ea-19e4615d584b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e81978f-acd1-4df5-8ea0-ab02e2e716f2", "sighting_of_ref": "indicator--fb30737a-ec24-42fa-ab9a-7d4da3cfa9b9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db964d6-86c3-4e29-aa78-860673169c51", "sighting_of_ref": "indicator--fffb8620-68ed-4ae0-aaf3-0a6c77a102e3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46c352a-91ab-4c47-9b65-e2675e51fcb0", "sighting_of_ref": "indicator--fffb8620-68ed-4ae0-aaf3-0a6c77a102e3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcf99be-9933-487a-bdb3-b7066370b111", "sighting_of_ref": "indicator--fffb8620-68ed-4ae0-aaf3-0a6c77a102e3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21e705e-369c-4d67-b9e6-6efb9ef98f09", "sighting_of_ref": "indicator--a4eecb58-b172-408f-aa8f-d22bfa489dde", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70049c69-7e75-4d88-ab4d-9ea8677ca2ef", "sighting_of_ref": "indicator--a4eecb58-b172-408f-aa8f-d22bfa489dde", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3675bf-7621-4f6a-b2f0-6f024ab8a371", "sighting_of_ref": "indicator--8c6963e2-6f7b-4451-9142-6cc1948d9d36", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ad4bb3-4e28-49c1-9949-0ea3a2bec218", "sighting_of_ref": "indicator--8c6963e2-6f7b-4451-9142-6cc1948d9d36", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5e94a6-9942-4f7a-8cc6-9b37053e3936", "sighting_of_ref": "indicator--ba7953bd-4398-42fc-a19e-258a09add0e0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b041d1-e8ae-4454-a55e-74b2caa986f3", "sighting_of_ref": "indicator--2d7dd16f-ec40-4277-80ab-f1c82a8fb99c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef5b2af-95c1-4f29-9b2a-bc1e981c825f", "sighting_of_ref": "indicator--6e675390-3dda-47da-9de1-d04f4cf20c60", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ca058d-5712-4289-9188-a2923f123903", "sighting_of_ref": "indicator--6e675390-3dda-47da-9de1-d04f4cf20c60", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192b2aae-8cce-4a2f-b422-781d4ad2548a", "sighting_of_ref": "indicator--33e739ac-4924-4ccd-982b-38c1b8c8b655", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1428c6af-4e81-41e9-ab1e-7905e479127a", "sighting_of_ref": "indicator--32056b08-6cc0-4f1f-8309-e0fa8a1908b8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17cb9dab-bfd5-4450-8949-f2138cf556bd", "sighting_of_ref": "indicator--aaead50a-aa1c-4e55-b697-0fe0f5305959", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfae8f93-5721-48d9-ae00-cd9dcbc4a4b1", "sighting_of_ref": "indicator--bda5e2ed-f12e-41d1-a9f6-dfd0d21be814", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c3acad-9428-401e-8965-253d39eea82e", "sighting_of_ref": "indicator--bda5e2ed-f12e-41d1-a9f6-dfd0d21be814", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a54494-9e5b-4d06-8b7a-ba5500267211", "sighting_of_ref": "indicator--bda5e2ed-f12e-41d1-a9f6-dfd0d21be814", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece1c49f-3534-4411-a1a1-ab0bcc713d97", "sighting_of_ref": "indicator--c8c6b02b-9e37-43fb-a43c-69154a93a30e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efbf5074-87f4-4451-ad02-55176c14d754", "sighting_of_ref": "indicator--c8c6b02b-9e37-43fb-a43c-69154a93a30e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4d4361-c906-4a2b-b604-89cd8554f016", "sighting_of_ref": "indicator--ad71ef05-ebec-4884-b627-4dde9c99f3e6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7886b0-03b6-4aa0-bd2c-45b91dabda6a", "sighting_of_ref": "indicator--ad71ef05-ebec-4884-b627-4dde9c99f3e6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9f3bea-9af9-433b-ac86-87ec49db0346", "sighting_of_ref": "indicator--ad71ef05-ebec-4884-b627-4dde9c99f3e6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21e9c8d-ea93-43da-8e57-2a1420d47630", "sighting_of_ref": "indicator--65239dda-80aa-4b0c-a437-96d48400bba8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8765d4ff-02da-45e4-998b-508d67744bf4", "sighting_of_ref": "indicator--65239dda-80aa-4b0c-a437-96d48400bba8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f432b5c3-2fd1-4d56-8283-1c65e1c222c8", "sighting_of_ref": "indicator--58fdc65c-a79b-4260-ab1a-c44c615c0f81", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6592eb39-a443-4d40-a818-9c3ac4715fb7", "sighting_of_ref": "indicator--58fdc65c-a79b-4260-ab1a-c44c615c0f81", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f916894-2db7-4241-86ec-ee1e08d4b326", "sighting_of_ref": "indicator--7bdaba2a-7bfe-4ec9-86bd-3a5bb3e5122d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a4095e-7f94-485a-9c16-b6495199e53e", "sighting_of_ref": "indicator--22e002bc-aef4-4868-a906-da69039de3aa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d1a5be-3460-4fbd-896b-d85143c153d9", "sighting_of_ref": "indicator--22e002bc-aef4-4868-a906-da69039de3aa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3d1db0-8a4a-4c65-b9c1-b4194e5e9bf1", "sighting_of_ref": "indicator--22e002bc-aef4-4868-a906-da69039de3aa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080db6fe-442e-4a78-bfe6-14d2b2a0214c", "sighting_of_ref": "indicator--847b8bda-dbd5-41fc-b164-7abe3f11ec6e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac47b32c-3e14-4d96-b1d5-49f61135927b", "sighting_of_ref": "indicator--847b8bda-dbd5-41fc-b164-7abe3f11ec6e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dee0d57-fcae-495e-b9a7-f1e7a46f67ae", "sighting_of_ref": "indicator--62f2de97-09ae-4c9e-b1eb-869be21a694a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de9f17e-f209-4958-ab07-5ff3927438c9", "sighting_of_ref": "indicator--e9796232-2bb6-4fb9-b5bf-7e6710a00bba", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956a8da6-a4a9-47ba-9f7c-330e0ae31a41", "sighting_of_ref": "indicator--228af6e8-f232-44af-9b0c-ee9215fd845f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5ed39c-f0db-4949-98aa-f87a4284ff58", "sighting_of_ref": "indicator--385e40e5-6d84-45ed-8a71-ba9aa2dde6c0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b94df0a-f131-4352-9a82-49c33711a5aa", "sighting_of_ref": "indicator--385e40e5-6d84-45ed-8a71-ba9aa2dde6c0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc16c51-dd75-425d-b1f0-b61b066f8e27", "sighting_of_ref": "indicator--385e40e5-6d84-45ed-8a71-ba9aa2dde6c0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b948649a-ab0c-4c18-b7d1-d70f2a97dbb3", "sighting_of_ref": "indicator--51ab4dfd-8663-4bba-9784-b8f16f20cc66", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b60a05-e318-4f6e-bf33-aaa56503cb86", "sighting_of_ref": "indicator--51ab4dfd-8663-4bba-9784-b8f16f20cc66", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be64e088-df47-4e50-8fd5-f85d17133d3f", "sighting_of_ref": "indicator--bff6c103-be4f-4323-b3f8-5c05ad3db6c7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a247ec4-2d17-4d93-878d-ac91e8ce3153", "sighting_of_ref": "indicator--bff6c103-be4f-4323-b3f8-5c05ad3db6c7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8fbad3-a01b-4770-88a9-36d1ad621721", "sighting_of_ref": "indicator--bff6c103-be4f-4323-b3f8-5c05ad3db6c7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5baca5-0508-4176-8448-45c75ddd8a21", "sighting_of_ref": "indicator--19ffaf01-9a42-4366-8858-95ac76db5f1a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddfb1594-a484-46cc-b748-70766dfbc235", "sighting_of_ref": "indicator--626df0b7-3bdd-48b2-8e3d-a7f654433435", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e68256-b683-41f8-b92b-1c00f886b1ae", "sighting_of_ref": "indicator--c2feea2c-1a1e-4c66-a75c-af86154e7bb8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9b917d-289b-4832-b23f-4754b1cbd1f3", "sighting_of_ref": "indicator--c2feea2c-1a1e-4c66-a75c-af86154e7bb8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fd8e85-5368-4285-83ea-991452feaa39", "sighting_of_ref": "indicator--056e4f0c-833d-4ab0-9ccd-5e5dfbb69972", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4324a500-b900-48c3-a4f6-f6bf4394d7e9", "sighting_of_ref": "indicator--056e4f0c-833d-4ab0-9ccd-5e5dfbb69972", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd730c87-fe96-42d9-8a9b-68a89d9e99ea", "sighting_of_ref": "indicator--49c0bb78-2aa3-46b5-82a8-cb62e2ab972e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c6bb51-8b67-41ff-9e64-23bc1c9a62cd", "sighting_of_ref": "indicator--9b7064f2-1783-4a84-89c3-37d009cb318d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47885da4-74c9-4e19-8235-14635b08175c", "sighting_of_ref": "indicator--9b7064f2-1783-4a84-89c3-37d009cb318d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6de43e0-b3cc-4b0a-b7ce-1576dc8112ca", "sighting_of_ref": "indicator--093d8987-e7bf-4073-8254-230b86a23d35", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f7c268-75b5-4954-9f78-d980f2a4274a", "sighting_of_ref": "indicator--093d8987-e7bf-4073-8254-230b86a23d35", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7730de29-ec0f-43ef-b3de-72945b9d2d24", "sighting_of_ref": "indicator--093d8987-e7bf-4073-8254-230b86a23d35", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ece771-388d-43bd-bde4-4027b8ef091d", "sighting_of_ref": "indicator--a7cec84b-2f55-412c-8c57-cb4d2a6ab14c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ebf0788-45e8-4e22-a221-21fcb185b3f7", "sighting_of_ref": "indicator--a4a7f764-7c96-4b37-8176-a52a85c74144", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5fdd18-4a64-41dc-a75b-4a971641d0b2", "sighting_of_ref": "indicator--a4a7f764-7c96-4b37-8176-a52a85c74144", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bcd65fa-0f3b-40e2-a222-8abf35ff7a41", "sighting_of_ref": "indicator--a4a7f764-7c96-4b37-8176-a52a85c74144", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65ff45b-1e49-4acd-a17b-074ae99c0c5e", "sighting_of_ref": "indicator--156d9657-a04d-4045-a29e-e7bb3c6b351c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38c6962-3986-4310-b8d3-94837d0c698f", "sighting_of_ref": "indicator--156d9657-a04d-4045-a29e-e7bb3c6b351c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305ed447-a0ba-4490-bcef-b4d2198f41df", "sighting_of_ref": "indicator--156d9657-a04d-4045-a29e-e7bb3c6b351c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16119648-05dc-4b8c-9124-a6a958cc9426", "sighting_of_ref": "indicator--004ed26a-3130-40cb-bb88-223c8571847e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d2c23a-555a-47eb-b98d-4155758b4171", "sighting_of_ref": "indicator--e47bf8a2-87e1-4ddf-b739-202d80e7d0ac", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd897956-903a-4984-bab6-cda674fea6fd", "sighting_of_ref": "indicator--e47bf8a2-87e1-4ddf-b739-202d80e7d0ac", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272b510f-31ef-4b00-bb74-076a87d6ac75", "sighting_of_ref": "indicator--e47bf8a2-87e1-4ddf-b739-202d80e7d0ac", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d44c5a5-d4be-4c17-a218-5e68d4587021", "sighting_of_ref": "indicator--ed534794-ef05-410d-918b-a61b418af560", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82bf9718-bee4-400f-aac7-3f9e5ed1583d", "sighting_of_ref": "indicator--ed534794-ef05-410d-918b-a61b418af560", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163de957-b9ca-4a9c-8e91-ed6875d1aa67", "sighting_of_ref": "indicator--3c361649-0829-4649-87ba-71551ffbadff", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c4626e-210a-4046-b490-de96b049fd88", "sighting_of_ref": "indicator--98003cf3-34fd-46e9-bb5c-b2d2a972ed2e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1c3870-8fc6-4304-a81f-6a21efcb6ea2", "sighting_of_ref": "indicator--e5752d95-3c35-4cc7-9f1d-7d4346dac7bc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fb6452-0a89-47a9-9cc1-1582c4d9cc36", "sighting_of_ref": "indicator--e5752d95-3c35-4cc7-9f1d-7d4346dac7bc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab45b1c7-de23-4364-8df3-d608e2e77066", "sighting_of_ref": "indicator--e5752d95-3c35-4cc7-9f1d-7d4346dac7bc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7819da-7af6-44ea-9b03-b4c08d6edad9", "sighting_of_ref": "indicator--189f84c9-b2bd-4f62-b196-5dfa2f4c6828", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e3adfe-c5d6-4ebf-b424-dcc882fe38ca", "sighting_of_ref": "indicator--9243d4c7-34e1-49ce-b742-b8fd55fbca33", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04eb2ceb-8f9e-4fd7-9bc6-95d826e35601", "sighting_of_ref": "indicator--a5bc9b77-573e-4e17-8e19-9849a3a26280", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c491cda2-91d7-4a68-84cc-5dba60b77e03", "sighting_of_ref": "indicator--920417f7-069e-4eca-9c4b-5544862304c1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68798836-b6fa-4de2-94d9-4b2cc8a49bb2", "sighting_of_ref": "indicator--dfd81e2b-265a-453b-a663-3d00d2df1294", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e352e9e9-596f-47f2-9060-d2d0bfdb184d", "sighting_of_ref": "indicator--dfd81e2b-265a-453b-a663-3d00d2df1294", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93622633-d6b2-45a3-95a1-e20bb26fb1a2", "sighting_of_ref": "indicator--e6418a90-59c9-448c-a91f-7269aee0bcf9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea1973f-d0b1-4891-9f38-1cfbc130f19b", "sighting_of_ref": "indicator--e6418a90-59c9-448c-a91f-7269aee0bcf9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d676b2-af10-45c7-83b7-63219d3f3af2", "sighting_of_ref": "indicator--1aeee78b-210f-4632-b5cf-8850cb6c0777", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66060a72-e48e-41d1-a335-d9bd62d8896e", "sighting_of_ref": "indicator--1aeee78b-210f-4632-b5cf-8850cb6c0777", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5335c0be-7d9e-4219-8e1c-06f1c43148ba", "sighting_of_ref": "indicator--fe1c0fab-2adf-48e1-972a-900b6f37ac26", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225ae47c-cc09-4546-a4fe-eeca0d988ed0", "sighting_of_ref": "indicator--fe1c0fab-2adf-48e1-972a-900b6f37ac26", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87881f35-2759-405b-80ff-79d7a3a459ca", "sighting_of_ref": "indicator--fe1c0fab-2adf-48e1-972a-900b6f37ac26", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3c66cc-1731-4520-9f99-77b1ac57c5d6", "sighting_of_ref": "indicator--5d3f2073-0bce-4539-bb67-6cbb91c7a2d4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0a61eb-0112-4def-8f20-25bcef3530ab", "sighting_of_ref": "indicator--5d3f2073-0bce-4539-bb67-6cbb91c7a2d4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce27a8a-3b9b-4e0f-a019-7a361fd3cf4d", "sighting_of_ref": "indicator--ab9985df-b1de-4e85-a607-08b7f4806ec1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ddbb84-354b-47b6-baf3-f17d80ed4167", "sighting_of_ref": "indicator--c29f095d-c7fc-49c9-8cda-79957efbccf9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ba1786-4278-4fa4-901d-59fe7b062246", "sighting_of_ref": "indicator--c29f095d-c7fc-49c9-8cda-79957efbccf9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d619b8b4-4b12-462d-a7cc-f8b34ccc7906", "sighting_of_ref": "indicator--84c46493-06fd-4bd1-acc5-453f7af3f56d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8675617a-b16d-4235-bac0-9c57823f7370", "sighting_of_ref": "indicator--84c46493-06fd-4bd1-acc5-453f7af3f56d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38fc4709-3205-482a-9019-91c8189de203", "sighting_of_ref": "indicator--7c294cd6-a682-408a-8713-ffc3ba3a8b8f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536ba3c9-08d0-4d6c-81e0-638d889d9f25", "sighting_of_ref": "indicator--7c294cd6-a682-408a-8713-ffc3ba3a8b8f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b565821-7aab-4ade-80d2-f8b0abcb3117", "sighting_of_ref": "indicator--7c294cd6-a682-408a-8713-ffc3ba3a8b8f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840577d8-d8f1-4de0-80cc-14e235d01289", "sighting_of_ref": "indicator--06f1577f-1ba1-47b2-a8ac-529c42c8b604", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ada4fdf-82a4-434f-af9a-945ab35d4c6e", "sighting_of_ref": "indicator--06f1577f-1ba1-47b2-a8ac-529c42c8b604", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c0b3b0-4053-425d-a000-3ecd1bbeac7a", "sighting_of_ref": "indicator--4e6f4371-2572-48a4-9027-88f0bff6efc2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a9b94d-6d53-4305-a48e-43ce7194b21b", "sighting_of_ref": "indicator--58ce9817-a61f-4299-8a20-968a58ecb4f6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653f7c8e-78a0-466c-8264-0a0b27d6b743", "sighting_of_ref": "indicator--58ce9817-a61f-4299-8a20-968a58ecb4f6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13181b58-4c31-4f49-9c0e-7a98e52e502b", "sighting_of_ref": "indicator--58ce9817-a61f-4299-8a20-968a58ecb4f6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5207ec2c-e307-4753-b373-2ee3c6071785", "sighting_of_ref": "indicator--4ba8c232-80b5-4b42-96cd-57cc0229d9e5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--febff3ad-ec0d-4822-b23a-4012586b1265", "sighting_of_ref": "indicator--59b5c74f-e51a-4c0f-a37d-f4ae0ce916bd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a12bb37-2d7b-4de4-ae22-73c5b4338402", "sighting_of_ref": "indicator--003332bb-c3d0-4bd4-b488-5adc4699e6a4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7ccf50-b950-4d5e-bd33-c96b0d089e97", "sighting_of_ref": "indicator--003332bb-c3d0-4bd4-b488-5adc4699e6a4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ac588d-9c15-4d4d-af81-59ef47dd75e0", "sighting_of_ref": "indicator--003332bb-c3d0-4bd4-b488-5adc4699e6a4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba017d9-3695-4729-bfce-ab43d959adfb", "sighting_of_ref": "indicator--8cf26815-9787-4a1a-9d7e-65e1cd7dc6fd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd22be2a-4ae7-433c-b8dc-bcbe4acf480f", "sighting_of_ref": "indicator--8cf26815-9787-4a1a-9d7e-65e1cd7dc6fd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc45514-82b0-4eaf-96ba-b01d31885232", "sighting_of_ref": "indicator--8e8ff81e-a62a-4634-819a-17b49b7371f1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1384db-bfc8-496d-83ff-6ffa775a6827", "sighting_of_ref": "indicator--6be9432c-0fcf-47db-acc8-302e97e37dd6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed72624b-382f-4847-a306-8a159085b761", "sighting_of_ref": "indicator--68662152-e3f2-4687-99b6-aa295421306a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a979378f-6764-44c6-ba8c-ed2f2dc36cb4", "sighting_of_ref": "indicator--68662152-e3f2-4687-99b6-aa295421306a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d229ca0e-8855-4e58-83f9-c935e2eaa7fb", "sighting_of_ref": "indicator--68662152-e3f2-4687-99b6-aa295421306a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5234783-e286-4baf-b223-8a3f226f34b6", "sighting_of_ref": "indicator--c19baf1a-d39e-4d6a-9a9c-c91fd79e50a4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece61d5b-1a92-47e1-94aa-d7710171b0b1", "sighting_of_ref": "indicator--075f8dca-c559-4fd1-962d-b20569223989", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22d4fa0-fd7d-4559-902f-d535783eddc2", "sighting_of_ref": "indicator--075f8dca-c559-4fd1-962d-b20569223989", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f0fd7b-d822-4484-8113-d58bc5025892", "sighting_of_ref": "indicator--174a0b36-51be-4d8a-ac98-e66ac1b9c0dc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29af001-98d3-4d59-ad71-22436255ddf8", "sighting_of_ref": "indicator--7494b550-68dd-4c0c-9560-993325d052c8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d6266f-d74b-49fa-a272-4eccefbd7df8", "sighting_of_ref": "indicator--5295378f-5225-44ca-97a4-e2ca753720de", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76182e14-b846-457a-ae3a-5f7768930dcf", "sighting_of_ref": "indicator--5295378f-5225-44ca-97a4-e2ca753720de", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb78b4f-3600-4ef8-b3ad-791a16a480a2", "sighting_of_ref": "indicator--6a31f19a-ec8d-47a0-9ee2-19bcb6ac7efd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16cad044-acac-4e11-996c-ca20d37ef9df", "sighting_of_ref": "indicator--6d04970f-77d9-4873-ad87-08e878db2a3b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c268a10e-4be9-467b-85a3-78de06dca951", "sighting_of_ref": "indicator--9b830d98-dbc9-478c-94f2-1d2f8258a24d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9bf2ce-c961-438c-a559-827c26f1cf8d", "sighting_of_ref": "indicator--b0adf57f-d0cd-44e6-a16e-0538964c2a86", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df5aaef-3ea1-418f-b4c1-7212ae1cae62", "sighting_of_ref": "indicator--b0adf57f-d0cd-44e6-a16e-0538964c2a86", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8631d1-aed5-492e-9a5a-47d063c93c98", "sighting_of_ref": "indicator--ec31b61c-0bf0-41f4-8edf-d16106e529fc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c67348-41c1-4147-b5a8-70fb549b8a02", "sighting_of_ref": "indicator--b4e6f473-f4c2-40b0-9a7a-ffee4eba9223", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde6a912-c7e1-4772-8366-4d7a8d712c48", "sighting_of_ref": "indicator--70e0bbaa-e6e9-4338-b5d8-a0ffe947ce31", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8b27dd-2c4d-4287-8547-d332d3ca6d74", "sighting_of_ref": "indicator--b75b1091-f707-41e6-b49f-f0f653b06a48", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7fe4ca-01d5-4e48-a0ae-284bb9f13d70", "sighting_of_ref": "indicator--47b0d3c3-41b6-411a-b667-3fa98aca1b5e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e00b51f-68e0-430c-91f6-ea7ccc1f267c", "sighting_of_ref": "indicator--36c52b7e-fc4c-49a8-98eb-12ed2c8029de", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7348219-55df-4213-8b5a-18cd1015fb85", "sighting_of_ref": "indicator--36c52b7e-fc4c-49a8-98eb-12ed2c8029de", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74bbb354-f72e-49b3-b83d-b18cc26f6fe9", "sighting_of_ref": "indicator--b23766e6-c0c7-4b4c-bdb7-3f1ab7726539", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1da30ef-2a40-4aa2-9e76-20f88d32d208", "sighting_of_ref": "indicator--da612b6c-76fa-4d9b-b93d-2cf31eb71498", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae83fc6-6c1e-40dd-ac90-2fb1cce10ed6", "sighting_of_ref": "indicator--8ae15941-6eb9-4217-b466-de28bd228fd4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131b5c0c-f510-4c7c-8c0d-fd6aa6cd90c0", "sighting_of_ref": "indicator--919b7789-b788-4501-8834-dbcf0f324e05", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a7e043-adc5-4f3b-bd8a-4a25c19e6c3e", "sighting_of_ref": "indicator--919b7789-b788-4501-8834-dbcf0f324e05", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec9938f-600f-407e-8a60-bc8c1b9a150f", "sighting_of_ref": "indicator--c941f7a4-8cd4-465d-b6ca-2091fc0feb45", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39604ffb-e63b-407a-b841-48bb018dc490", "sighting_of_ref": "indicator--63fb8b03-99fd-47a5-abf4-bd726629d3a9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507ec6d9-823d-4405-8866-ce836220a9c0", "sighting_of_ref": "indicator--a677bb06-ea25-4386-b1df-8e237824b60c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e46c53-a675-43e8-a968-5d6a791b1272", "sighting_of_ref": "indicator--1081a0e0-b49d-45da-b88d-861ecc94e4f7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71340ee9-4e01-40d3-8911-756014e2b2b1", "sighting_of_ref": "indicator--1081a0e0-b49d-45da-b88d-861ecc94e4f7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2101f6c3-44f1-40e6-a67a-644f5d0a6044", "sighting_of_ref": "indicator--d2708ea4-075c-4dee-918f-0a6b51034f0d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff7fb36-36b0-482d-9adf-6cb4832f5879", "sighting_of_ref": "indicator--0f4d7d1d-02a0-451a-90eb-78314bc903b8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c48a738-f301-4b18-87e7-ddfb5d9bdd6d", "sighting_of_ref": "indicator--c0b68a09-ab52-4862-83cd-ef37a84a335c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4823b3e-db61-402f-8a34-3b072a924dee", "sighting_of_ref": "indicator--83ab3639-721b-48d3-8ba0-b977e4c4f56d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7782222a-726b-42da-bedc-55bb6a735b6a", "sighting_of_ref": "indicator--83ab3639-721b-48d3-8ba0-b977e4c4f56d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2055950d-59e9-45de-9e25-45b5766ecd19", "sighting_of_ref": "indicator--0f4fd8ce-01df-43d0-b42e-0b56aea802d7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df43cab-f4af-455d-b337-0c1afebfa713", "sighting_of_ref": "indicator--92e9a07c-826d-4126-b0c8-3e847bde83f6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741fb017-0dc7-4906-a8c9-38e9478e57d7", "sighting_of_ref": "indicator--58aba24a-291d-4eef-826d-db44d544820f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1c25f3-1a0b-4e2b-a81c-4e2448655f6d", "sighting_of_ref": "indicator--6047bcbc-60f5-4e2a-a755-75fc9f0ff288", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba417854-7145-4cb9-aa38-1e21110f6ece", "sighting_of_ref": "indicator--14694ea9-9170-4d75-bb33-3efa5709af89", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5b85d8-82fa-4622-8139-5135ed4c23ca", "sighting_of_ref": "indicator--fc8c1fd0-bf34-4a17-a52e-1bb13db1c2ba", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f302d3a-92d1-4a02-b29f-9c07ac3327d4", "sighting_of_ref": "indicator--a720945a-5b9b-40e1-86d5-78848eca1cdb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0ddb48-8b8b-477b-a4de-4bd049ef0214", "sighting_of_ref": "indicator--630c14eb-66a9-46d5-876a-aefe2f11d9f7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e16f97-c956-4318-bec5-18482d5a38b6", "sighting_of_ref": "indicator--938f8041-5771-4de0-b503-68f46a6135e6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc053566-955d-4708-9ef7-d8690a26727c", "sighting_of_ref": "indicator--22289c46-5a10-4553-97be-7c2c0cf4d715", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7b4673-fa48-4ae0-8736-fb9c07d4f4ad", "sighting_of_ref": "indicator--a849d6e2-dc98-4627-a110-7323811c4cf4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61158ae-4372-4dd3-9999-6db39c13aad3", "sighting_of_ref": "indicator--9df00c53-9003-4d05-8526-60f8fa52709e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9deee1-087f-4f92-adbe-5efb4934fa38", "sighting_of_ref": "indicator--ccb5e780-5e16-4435-a1b0-b5261dab4588", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f254e1f0-dd12-4dc1-8ca8-49d21b3f67e9", "sighting_of_ref": "indicator--87346e08-b25b-451a-8628-53a950031118", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95966728-6de4-428b-9e7f-51ed55275758", "sighting_of_ref": "indicator--87346e08-b25b-451a-8628-53a950031118", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa4ca64-4814-42ea-9086-755b26b2a656", "sighting_of_ref": "indicator--b2b19d2f-1a60-4099-bbe5-6ab4915c3ce5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58117f57-0a71-4b09-81a9-194c1fe0c751", "sighting_of_ref": "indicator--b6f16e4d-8c52-4e01-8e58-c332be2bda1c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb126cf-1cc6-4d1f-8afb-0b374f17acc9", "sighting_of_ref": "indicator--b6f16e4d-8c52-4e01-8e58-c332be2bda1c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b18472-a772-49e8-a031-311c02dde347", "sighting_of_ref": "indicator--b6f16e4d-8c52-4e01-8e58-c332be2bda1c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2518e21-df89-4564-9724-71a5e1410f1a", "sighting_of_ref": "indicator--a015a836-01bc-4300-9615-19c6d0261ac9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e63393-2a5b-41f0-8775-ecf738f64505", "sighting_of_ref": "indicator--f6483f76-0234-4fc3-8893-8bc10feb7cb9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44cf96e2-b3f5-4cc8-ab66-9b5edc46ce6a", "sighting_of_ref": "indicator--69a2b939-1daa-458c-bd2c-377943bc7978", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd034e72-82d6-4fd8-a352-ef5fd98358f5", "sighting_of_ref": "indicator--02f8eb18-f648-404b-ac78-34e640223cd1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb31a4c4-1e58-4a3f-ae25-9b90052031ab", "sighting_of_ref": "indicator--ace97601-d3fd-45c0-8ef7-3089ab32d135", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a083d24-80d3-466c-a5e9-2094c190ae47", "sighting_of_ref": "indicator--ace97601-d3fd-45c0-8ef7-3089ab32d135", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41053e8a-c174-468b-93a2-1acba5b1eebd", "sighting_of_ref": "indicator--ace97601-d3fd-45c0-8ef7-3089ab32d135", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd94231-c706-4a4f-9c9e-00f2c1826275", "sighting_of_ref": "indicator--16470d25-c9ed-47f2-8214-4c3be32677b5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72329d9-0fd6-43bd-bf88-3b28fbb9c3ab", "sighting_of_ref": "indicator--16470d25-c9ed-47f2-8214-4c3be32677b5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1e5183-d1f4-4eb3-b130-202400460ec5", "sighting_of_ref": "indicator--16470d25-c9ed-47f2-8214-4c3be32677b5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9022a6b-36be-481b-91aa-a8aa3fc0c19b", "sighting_of_ref": "indicator--fb228d16-8cdf-4ac9-b4eb-0c258fea89a5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41b718b-f8e6-484f-9458-0817bf00197c", "sighting_of_ref": "indicator--fb228d16-8cdf-4ac9-b4eb-0c258fea89a5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c9b343-d80c-4b46-9015-e17b59faa1d3", "sighting_of_ref": "indicator--fb228d16-8cdf-4ac9-b4eb-0c258fea89a5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1d824d-c6f2-46c5-ae4d-13994cff935b", "sighting_of_ref": "indicator--5b1674fd-a15c-414e-8868-3bf4ce3d3509", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ef5776-0102-4320-b491-05980605a817", "sighting_of_ref": "indicator--5b1674fd-a15c-414e-8868-3bf4ce3d3509", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dd54f8-ac0d-49c8-9f95-dfc06bf9fc5f", "sighting_of_ref": "indicator--5b1674fd-a15c-414e-8868-3bf4ce3d3509", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946bc7a3-ce1d-45a3-b11b-7240a52322d4", "sighting_of_ref": "indicator--ce43f48f-b702-40f9-bc92-bf535feb0b96", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47d880c-342f-487b-b175-5f2440a9d509", "sighting_of_ref": "indicator--ce43f48f-b702-40f9-bc92-bf535feb0b96", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eecfa15-c94f-401e-b68d-ba03357b8478", "sighting_of_ref": "indicator--ce43f48f-b702-40f9-bc92-bf535feb0b96", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b840616-980b-4206-805d-cbea97f057c8", "sighting_of_ref": "indicator--bd0b768d-7292-4cff-9516-afc3d54dae83", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d481c97-47bd-4752-b4df-42ba4c4dfcda", "sighting_of_ref": "indicator--bd0b768d-7292-4cff-9516-afc3d54dae83", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd705c44-75e8-4c1c-8d1e-86361ae74c39", "sighting_of_ref": "indicator--bd0b768d-7292-4cff-9516-afc3d54dae83", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd422d4-d9b0-46a5-b182-d4b31d4b7d06", "sighting_of_ref": "indicator--0d70afd9-a5dd-4dad-8377-4b162027783f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d70bbd-eaa6-4560-8293-cb27ce9fab79", "sighting_of_ref": "indicator--0d70afd9-a5dd-4dad-8377-4b162027783f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb4ed89-a43d-4c76-94b7-6659b8eabd2b", "sighting_of_ref": "indicator--0d70afd9-a5dd-4dad-8377-4b162027783f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466db478-f6b3-4cce-975a-57d506f744b8", "sighting_of_ref": "indicator--eada5b39-2a37-44c1-b103-6a45ef865837", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1adace81-deb4-46e0-9f1f-ef738fb5829b", "sighting_of_ref": "indicator--eada5b39-2a37-44c1-b103-6a45ef865837", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9befaba-0cdb-4b44-9310-af26242aa260", "sighting_of_ref": "indicator--eada5b39-2a37-44c1-b103-6a45ef865837", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228c34cf-6aa1-4b04-9d0a-b69d610ca5bb", "sighting_of_ref": "indicator--63f3d1d8-4a53-4cf5-a3c4-c892c13fba43", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3141bc-8a48-4d2a-9c68-4901a5527bc5", "sighting_of_ref": "indicator--63f3d1d8-4a53-4cf5-a3c4-c892c13fba43", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fff12c8-70b5-4286-ab1b-c571c5db8b24", "sighting_of_ref": "indicator--63f3d1d8-4a53-4cf5-a3c4-c892c13fba43", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e43f8b-baea-408a-9b79-1ba00d8fc87b", "sighting_of_ref": "indicator--bf829a23-61c8-48c9-8ea2-b45e9e3810c4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd394bdd-e035-4c50-a4ba-b83eca2b4620", "sighting_of_ref": "indicator--bf829a23-61c8-48c9-8ea2-b45e9e3810c4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ff8a99-475c-4890-9aae-2c2bd2fd77e2", "sighting_of_ref": "indicator--585bb613-8e48-40fd-b2ca-695f746253df", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8811c39-0144-42fe-ad2d-dc5be154c369", "sighting_of_ref": "indicator--585bb613-8e48-40fd-b2ca-695f746253df", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9918e1c7-d173-4b30-bbca-b3bafce3d70c", "sighting_of_ref": "indicator--585bb613-8e48-40fd-b2ca-695f746253df", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07dbbc1e-d0cf-42a2-be37-d1324768200e", "sighting_of_ref": "indicator--676e3d81-4c4a-4754-8698-5d1f0eec3736", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c71ed77-2f50-41f9-adcc-e1400011c52f", "sighting_of_ref": "indicator--676e3d81-4c4a-4754-8698-5d1f0eec3736", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a7929d-6eb0-461f-a96d-c9d7bedac988", "sighting_of_ref": "indicator--676e3d81-4c4a-4754-8698-5d1f0eec3736", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b318b58-e000-4e39-9157-b77b464123f3", "sighting_of_ref": "indicator--0e2c305a-4afc-462f-838a-5be9fcede80f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d19dd13-9064-4bd2-8517-626d918874ae", "sighting_of_ref": "indicator--0e2c305a-4afc-462f-838a-5be9fcede80f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54717763-2f74-419c-bdbc-a5fc02854a68", "sighting_of_ref": "indicator--95f3bad2-ef3b-423f-9d57-eca96d772660", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69eecce8-6af3-4e17-adf7-ee77cfdd3734", "sighting_of_ref": "indicator--95f3bad2-ef3b-423f-9d57-eca96d772660", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f91cfd7-7f74-4da2-bfcd-35372bd68ed7", "sighting_of_ref": "indicator--95f3bad2-ef3b-423f-9d57-eca96d772660", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c264258-14bc-44e9-82d5-3bfaae84da84", "sighting_of_ref": "indicator--843444e8-f1ef-439f-af5d-64a9a9caef30", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e9ba7d-a724-4c50-9ed0-92ef6dbcc613", "sighting_of_ref": "indicator--843444e8-f1ef-439f-af5d-64a9a9caef30", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ccd8d9-4e80-4b94-b6dc-da5e39e26e37", "sighting_of_ref": "indicator--6fa89a27-2015-4f10-a6dd-a6772d4712b3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0676064b-35bf-4d89-ab99-48816ac110c1", "sighting_of_ref": "indicator--6fa89a27-2015-4f10-a6dd-a6772d4712b3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ee166c-298e-4a9b-bb5c-03c7a03640aa", "sighting_of_ref": "indicator--6fa89a27-2015-4f10-a6dd-a6772d4712b3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9a481b-0a65-4e5a-8de8-5fdb345c3a77", "sighting_of_ref": "indicator--cacdd216-ac58-4bcb-87cf-574b3cf70d35", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d0e6cb-f769-4196-b491-02683e910e16", "sighting_of_ref": "indicator--4a77180d-2577-4fc3-bc43-85868f770808", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07192543-a46e-40e4-9044-e3399f01a716", "sighting_of_ref": "indicator--53288cd9-c68e-41fd-9452-07758a34813a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7758bb-d685-4c40-ac43-6495d481266c", "sighting_of_ref": "indicator--0f4fb308-6db2-4600-8d1d-834723b392cb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126645d4-7bbd-4df0-8d9e-e38915c2865f", "sighting_of_ref": "indicator--4a83a176-2846-4eef-b08c-aa0a079d3ec0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81210784-c0ad-4edf-9bd7-07e05e1a1ca4", "sighting_of_ref": "indicator--1aa47f97-4b7e-4ad7-8034-d1b95f943821", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08019cc-2ff0-4de6-b046-4b3306babb11", "sighting_of_ref": "indicator--30a8c184-9972-48e7-884e-3f677d822367", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92337271-eeb5-47c1-baa7-f8809317410f", "sighting_of_ref": "indicator--ca47020c-c0fb-47b5-baa2-c7592bc7ef1b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5919e7fb-38de-4b14-9675-43f44240b142", "sighting_of_ref": "indicator--16cbf619-135d-48f0-a2df-b5a011de7e58", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e4e80e-bb48-4f78-9e63-ccd3d5df7963", "sighting_of_ref": "indicator--c33cadc0-2371-4d24-9e69-bb11d39982f0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d96a4ef-03d7-4a49-8117-6b39441e39c9", "sighting_of_ref": "indicator--d2177f2d-fae2-4cce-acab-c3d651327b80", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76465b27-8533-45e7-9049-b3740dcee564", "sighting_of_ref": "indicator--1aa000b3-aebe-41a6-abb6-92e3758ec3da", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ace9b6-4fa6-4021-a911-bc1087e12a0e", "sighting_of_ref": "indicator--8b421015-4f2f-4aaa-b4f6-40235ad58a80", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c444a1-da56-4b6b-9533-2699d763c54b", "sighting_of_ref": "indicator--b1aeb1e9-7f36-48c0-8be6-b62a3e67d5e0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270b0fc8-4917-4798-b64b-2c86330114cf", "sighting_of_ref": "indicator--c1d6c418-db74-46e2-a440-b188611c43d6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e6bc80-6487-4fc4-ac0e-898dd8da19e0", "sighting_of_ref": "indicator--0de7863b-1aee-4b5c-9bb7-4d88a7753aef", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf1877e-4518-47ae-a6ad-97ec0232b7b9", "sighting_of_ref": "indicator--54ce06d1-befb-4004-82c8-61d3bc490ee9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b637aa3a-2ef5-4b36-abfb-980cc63b763d", "sighting_of_ref": "indicator--b156a57a-33cb-47ab-a70c-f2c14b2e3167", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2caa7f27-79d5-4a84-acca-f9c946c043ac", "sighting_of_ref": "indicator--0888756e-328f-441a-a76b-57bb7e76b2b0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9b520a-d3d2-4702-a99c-938957f7b836", "sighting_of_ref": "indicator--0888756e-328f-441a-a76b-57bb7e76b2b0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b5205d-5b64-4207-af72-ad8e4d182455", "sighting_of_ref": "indicator--164a16c7-82f6-4e97-b002-3a6c7ed04d7f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9cbd2f-99ac-437d-9b04-6355eb7a5463", "sighting_of_ref": "indicator--164a16c7-82f6-4e97-b002-3a6c7ed04d7f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c80b0c-fd36-43a6-89fa-cc2ed3957206", "sighting_of_ref": "indicator--52d82763-871a-4a86-9af3-23f1b811f6de", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b8c961-2447-44df-a2bd-c10b90844bd2", "sighting_of_ref": "indicator--dbbe780a-ce39-4bdf-9ac9-2770db35f04f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23e196b-6558-40e7-83c0-d33bd2c021d4", "sighting_of_ref": "indicator--0041c5b2-3f41-4683-8b65-e46785dfcd34", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809ed70d-45bc-49fa-97fe-5112df9eaa5c", "sighting_of_ref": "indicator--f0fbabd3-a692-43d2-bd86-cce40cf82ae7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70c2515-16c8-4cc3-98a2-49c00bd012ff", "sighting_of_ref": "indicator--f0fbabd3-a692-43d2-bd86-cce40cf82ae7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2394517d-a68d-479b-80d6-a76947771059", "sighting_of_ref": "indicator--d1cefff4-d376-41f9-a6ba-18a3d6f3af4b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d736326-e823-471c-8356-04979cee999c", "sighting_of_ref": "indicator--989e404c-9aec-47ad-ab41-26236de208dc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60774fe5-1295-416a-afef-7fa37456d91c", "sighting_of_ref": "indicator--6daa8995-1dce-46be-9eaf-1d7e12b5a109", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd372b78-cafc-4432-ad90-d48f880cc314", "sighting_of_ref": "indicator--6daa8995-1dce-46be-9eaf-1d7e12b5a109", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d556a4-6204-4f64-8c1e-4440377be479", "sighting_of_ref": "indicator--4eed1c80-26a5-4cb5-9def-0d0b4b849f79", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7863daa5-b5e2-4ce5-8fd7-3149b27fa10b", "sighting_of_ref": "indicator--24cea613-bc6b-4ff4-8f50-51411945957c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2391b8af-8a01-44c1-a651-60f0b2eb2bc8", "sighting_of_ref": "indicator--24cea613-bc6b-4ff4-8f50-51411945957c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc5e032-1e14-47f7-bc9a-5a6ddf87855f", "sighting_of_ref": "indicator--15d6d6f6-4eed-4782-a3f6-e6e786a5e079", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10df524-9f44-4c16-9181-f73150bd3bf6", "sighting_of_ref": "indicator--15d6d6f6-4eed-4782-a3f6-e6e786a5e079", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e08cc2-7788-4444-a8e0-1a6d98a883c9", "sighting_of_ref": "indicator--a992d8f5-29f1-4cad-8c7d-1aeeb5b7a434", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88f9123-678a-40c4-8acf-09543cf7c50c", "sighting_of_ref": "indicator--a992d8f5-29f1-4cad-8c7d-1aeeb5b7a434", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa397c07-d8b7-490f-818d-3ddcebd5ee83", "sighting_of_ref": "indicator--88d7fa2c-4f39-46b0-9dbe-5f99dcd55d30", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b318326-7ef5-4ff7-b780-7f5283d5fba5", "sighting_of_ref": "indicator--9f03dc70-e269-447f-86ac-a22c2c1459d5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d81ecb-9f02-47d3-9483-b717bd7855bf", "sighting_of_ref": "indicator--9f03dc70-e269-447f-86ac-a22c2c1459d5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206fb87d-f18c-49a1-8248-069aa395d985", "sighting_of_ref": "indicator--9f03dc70-e269-447f-86ac-a22c2c1459d5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8acca433-21a9-40a3-a970-1608fffc0242", "sighting_of_ref": "indicator--92c00b87-10eb-4c41-b75e-457de869730c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdbfa19-d1bf-4186-89b5-542df5df192f", "sighting_of_ref": "indicator--55c8cae9-782c-4cf9-9bb1-feac988e7a3a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bddb0daa-3d7f-4f27-a6b8-f00c02ccc9f4", "sighting_of_ref": "indicator--125472e4-6740-4992-81a6-edb0823d1571", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16fea457-f462-40e8-93f8-b2171583c30a", "sighting_of_ref": "indicator--125472e4-6740-4992-81a6-edb0823d1571", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49fadad2-6925-43c2-85f2-2cb881504b0f", "sighting_of_ref": "indicator--125472e4-6740-4992-81a6-edb0823d1571", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdc6a68-dc5a-48ed-bc34-4f4e47ff5993", "sighting_of_ref": "indicator--3ac26d67-4e16-42e0-ba55-5dd79d8ee0e8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c19c33c-6b75-4a2d-8d33-ba763e4e9713", "sighting_of_ref": "indicator--3ac26d67-4e16-42e0-ba55-5dd79d8ee0e8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71fb733c-68c8-4349-920e-1d1f6a91a6a9", "sighting_of_ref": "indicator--c527e863-5384-4dc0-93c3-12594f9791a1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec0f3f3-98d5-42e3-ab22-a05bfc77141b", "sighting_of_ref": "indicator--c527e863-5384-4dc0-93c3-12594f9791a1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bee03c-6d46-409a-a704-5a1dcf1d4789", "sighting_of_ref": "indicator--c527e863-5384-4dc0-93c3-12594f9791a1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb1621c-0eb2-4a32-8c79-8f2adf50260c", "sighting_of_ref": "indicator--85344c88-d703-445c-9ac5-82a4f288260c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce45c74-e6f0-42a7-b253-67a6ce3cd239", "sighting_of_ref": "indicator--85344c88-d703-445c-9ac5-82a4f288260c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600f1dcd-275e-451c-955a-ecefab9b7fe9", "sighting_of_ref": "indicator--10b292a1-ad0b-4bc7-ba27-e8e9f5835f8b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc43b6b-075d-40ee-91fa-83e985e301e5", "sighting_of_ref": "indicator--a3343141-e45c-40b2-82d8-f78d77594c83", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ed9c22-9fe2-4ac8-8d67-42218133d52c", "sighting_of_ref": "indicator--a3343141-e45c-40b2-82d8-f78d77594c83", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf6d575-8fea-4834-a519-0d958f0f3d1a", "sighting_of_ref": "indicator--a3343141-e45c-40b2-82d8-f78d77594c83", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df812490-e99e-45c8-b007-d9682a7866ec", "sighting_of_ref": "indicator--dca4ed3e-24ff-42c4-96a7-f310bf83cc9a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e55e2e-5d22-4af1-8174-2b86e8f986a2", "sighting_of_ref": "indicator--63150732-6bb5-4782-9c85-2050ca93efee", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80ea8f3-b2f5-486e-8ad2-a8210aff0436", "sighting_of_ref": "indicator--f82a30d8-5a17-4273-8f40-4d29cd354daa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3bd01a-03f7-4349-afd5-ee5690e803b1", "sighting_of_ref": "indicator--35120881-16c1-4afd-951a-69b5e920ab74", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e8a94f-8f45-4e19-968c-d7a64219aa32", "sighting_of_ref": "indicator--30dd4feb-c454-43ea-8bbc-4286bf98c620", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7fa80e0-7de4-4705-81af-2f94e9b2e64e", "sighting_of_ref": "indicator--8ed1a8a4-a7c6-407c-8f15-65daf12ae63d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b554abe-e834-40be-a716-e65e24accc23", "sighting_of_ref": "indicator--d89d9a83-3177-43f5-b96f-209dee33cc7a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88666416-d09b-4dbc-93bb-788bec22b0d2", "sighting_of_ref": "indicator--9968c074-704c-42b8-b052-446fe3a24811", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49b15d1-4427-44e0-97ae-dad36f8d5301", "sighting_of_ref": "indicator--c2412c70-e95a-4c96-8233-6775155a2f7b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5047ba9a-542f-4882-9087-baae031362c8", "sighting_of_ref": "indicator--c2412c70-e95a-4c96-8233-6775155a2f7b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1950bce8-7c22-4249-a2cb-fea4c09c31fa", "sighting_of_ref": "indicator--c2412c70-e95a-4c96-8233-6775155a2f7b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad36734-9239-4c65-8df4-5fe06ef41b35", "sighting_of_ref": "indicator--1a6c1a86-c119-4f93-af66-95da75e95cf0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c39416-2bf2-40fe-91f4-11176a0e8adb", "sighting_of_ref": "indicator--1a6c1a86-c119-4f93-af66-95da75e95cf0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180a5954-286f-40fd-a8c5-10c8e76ebcd3", "sighting_of_ref": "indicator--969ad348-49d4-4c69-8d47-5b6c1ddea868", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31342804-5f1b-46bd-a2d3-f7ff6c9e75a7", "sighting_of_ref": "indicator--6030f7a9-25e0-4dc5-9e03-cf05011c31f4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc29e11-87bb-4594-a054-bae4ec348497", "sighting_of_ref": "indicator--98980b0a-1717-4e5c-9df4-494ded887bf8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd28520-3e98-42f1-b71f-1d4b5a7b4138", "sighting_of_ref": "indicator--991a6002-d938-4f24-b119-f821bb1d4e37", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56b9d93-2e2f-46c2-9d01-070200fa5ccf", "sighting_of_ref": "indicator--991a6002-d938-4f24-b119-f821bb1d4e37", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7a8288-05f3-4acd-a38a-baebb0cecbe5", "sighting_of_ref": "indicator--c1f4cc5b-132b-4d0a-9779-384aaa7f83c3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1262538-3aec-4de8-9e56-117c1aeb52b4", "sighting_of_ref": "indicator--c1f4cc5b-132b-4d0a-9779-384aaa7f83c3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d393e559-c748-40b9-9c64-6e09556c2ce6", "sighting_of_ref": "indicator--f0a33ad9-bfe5-4c92-91a4-96b50a531f5d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5d0cd2-94cf-4586-b4db-13acc29a010b", "sighting_of_ref": "indicator--f0a33ad9-bfe5-4c92-91a4-96b50a531f5d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589a91d8-70bf-4867-bc54-1f7548c997e4", "sighting_of_ref": "indicator--69aa3b68-1130-4c5d-836b-6387f3bf3cbe", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee45981-dbe2-4781-bcd4-e42aa5068341", "sighting_of_ref": "indicator--a5ef8191-533e-48cc-b95b-dbf42e9fbb98", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d5aa24-9389-4f26-8fce-0382e2e54652", "sighting_of_ref": "indicator--853bf6c7-e1cc-42bb-9ce8-f334992cf9d0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6960b02-4e26-48b1-8164-4fd9bd3fe8c4", "sighting_of_ref": "indicator--853bf6c7-e1cc-42bb-9ce8-f334992cf9d0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a713f2-59f2-418c-b4f0-d557270f3458", "sighting_of_ref": "indicator--5ec5f8c1-56ac-4cd9-8a82-585d3b7d5262", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753b35c7-7f7b-456b-96ed-bbcd63a64b61", "sighting_of_ref": "indicator--f138b6b5-0cfa-4bab-b8d0-9ff51b5245ae", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2040089-88c6-4822-8262-1eb6b72c35f6", "sighting_of_ref": "indicator--75991a0f-e75a-4115-9e1d-94f5166d23f0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49bdc76e-9513-4804-af30-451cb7b0ecab", "sighting_of_ref": "indicator--c10cd1e5-5dff-4242-a7d4-ec5153ac4cff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f5e0215-5dad-4598-9ca0-e94bb354f360", "sighting_of_ref": "indicator--fdb59cb3-567c-4d57-be91-b5132ac17734", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2407659-46b4-456d-b2e8-5dff64dc51b1", "sighting_of_ref": "indicator--ab27a101-3d75-4cc5-b80d-ca2e020647bb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5cb270-ec20-4f01-9bf5-68da124cb2f0", "sighting_of_ref": "indicator--1fafca82-9d44-4986-b44d-c3ffe08e2000", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42be85e2-ac03-435c-9c2f-448bdbb70e0f", "sighting_of_ref": "indicator--1fafca82-9d44-4986-b44d-c3ffe08e2000", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a6fa32-3533-4435-89ad-b651ac3f6d05", "sighting_of_ref": "indicator--1fafca82-9d44-4986-b44d-c3ffe08e2000", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac3c092-0af6-4a91-93ff-a081398287b1", "sighting_of_ref": "indicator--98cdb470-3bce-4fe9-acc9-1a6bf22d1686", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfbb2d46-fb10-49b5-a804-bb5b3a2c198b", "sighting_of_ref": "indicator--98cdb470-3bce-4fe9-acc9-1a6bf22d1686", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a571b9-a948-4f8d-9ab8-41e40d777caf", "sighting_of_ref": "indicator--98cdb470-3bce-4fe9-acc9-1a6bf22d1686", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4318ef3c-0846-4843-98fd-5ff5518c48e4", "sighting_of_ref": "indicator--ff3bacb1-99c5-47d9-b401-82a0b439031d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b908cbe-eb27-45e4-8df8-c86460fcbb5d", "sighting_of_ref": "indicator--ff3bacb1-99c5-47d9-b401-82a0b439031d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66570013-a519-48f5-9ebf-078ad68caa6d", "sighting_of_ref": "indicator--ff3bacb1-99c5-47d9-b401-82a0b439031d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dab77b2-7568-4134-b9c9-1cf645524786", "sighting_of_ref": "indicator--93cdcf2f-b83f-44a6-8f9d-0485887e74aa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca8b3fa-1f13-453a-b3a3-c3a6e6885a8b", "sighting_of_ref": "indicator--93cdcf2f-b83f-44a6-8f9d-0485887e74aa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b388aaf1-68d0-467c-af20-492a4a75a250", "sighting_of_ref": "indicator--93cdcf2f-b83f-44a6-8f9d-0485887e74aa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673d4f43-dfd0-4cb7-bc58-c41ed3e4a5b5", "sighting_of_ref": "indicator--3cb80027-3265-4e40-8a06-5fbb7c02e6a6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d6a04b-1d47-4482-bb9c-6f64d6e58981", "sighting_of_ref": "indicator--3cb80027-3265-4e40-8a06-5fbb7c02e6a6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e669e4d-8fc0-45c5-8301-504dfb2b17f6", "sighting_of_ref": "indicator--3cb80027-3265-4e40-8a06-5fbb7c02e6a6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac811f0-b92b-432f-b435-39a0d433ec0a", "sighting_of_ref": "indicator--ac9c3b11-bac8-4f51-91f4-007b922fd617", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dde32e9-3e47-49fc-bdbf-b731a8d07663", "sighting_of_ref": "indicator--ac9c3b11-bac8-4f51-91f4-007b922fd617", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--146e09a7-8f29-4bf2-960e-b60e341fd1a6", "sighting_of_ref": "indicator--ac9c3b11-bac8-4f51-91f4-007b922fd617", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd15ed7b-1697-4c14-a9d4-cba5639062df", "sighting_of_ref": "indicator--8028c0d8-297b-4f64-b39e-15c5daaabadb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe44b59-9ea9-46b0-97aa-b1bcaf585009", "sighting_of_ref": "indicator--8028c0d8-297b-4f64-b39e-15c5daaabadb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd899b6-e6af-48a9-be0c-93711f7731f5", "sighting_of_ref": "indicator--8028c0d8-297b-4f64-b39e-15c5daaabadb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807a8d96-8b4d-4102-9958-f7d145eec19a", "sighting_of_ref": "indicator--2a8958c9-ec71-4924-9719-0b8c7da636c5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91232954-db7b-412d-8c09-8b827593df05", "sighting_of_ref": "indicator--2a8958c9-ec71-4924-9719-0b8c7da636c5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479cf92f-fb94-4b45-9fdc-84f86a396fda", "sighting_of_ref": "indicator--2a8958c9-ec71-4924-9719-0b8c7da636c5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bf38d8-76ce-4964-b636-eb10934ce8b5", "sighting_of_ref": "indicator--60dcab83-31d1-48c4-94c4-64afeef202d7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278e3c9a-8ad6-477c-a702-704a0f028f31", "sighting_of_ref": "indicator--9708e74b-8a39-42db-bd63-12f5f5a21b4d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f4740c-a98c-4da7-85b9-47341028e96b", "sighting_of_ref": "indicator--e71aaf5c-78f5-4991-9f75-5c5ef19954d1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3902db-4294-479c-944e-103199fac3f1", "sighting_of_ref": "indicator--e71aaf5c-78f5-4991-9f75-5c5ef19954d1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0beaf8c-5fde-4fc3-a2a1-06da5d4cb478", "sighting_of_ref": "indicator--e730f230-2246-42d0-bcae-fc057a6e093a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00431eb9-e089-4390-8715-313a42e129f1", "sighting_of_ref": "indicator--5051f8e6-ba3a-4d74-80ad-40742a8482fa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5f6d17-2bfc-4559-9177-df2469455d88", "sighting_of_ref": "indicator--c403c969-10cb-4a86-95c5-e158d9b3746a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46c07ac-9e2b-49de-b5d4-d5c22dda2e42", "sighting_of_ref": "indicator--1646fb07-ab04-4641-a2c5-1df0ab972423", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25517519-f637-4acb-8901-d26303467bdb", "sighting_of_ref": "indicator--4c42bae3-b707-44f3-9b0c-a4b0e3e283f5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37957fde-afef-4ede-890a-39a7f4c58329", "sighting_of_ref": "indicator--a6bb2476-c6f4-41d7-ba8d-fc9a716b16e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7485bb36-56b7-4c73-80d7-ab51ef944217", "sighting_of_ref": "indicator--3680cb19-160e-40db-b6f0-fd968b7236ad", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f221462-6f65-40e5-ad12-6a0e68c4bf5c", "sighting_of_ref": "indicator--3680cb19-160e-40db-b6f0-fd968b7236ad", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c401947d-5464-4d45-b0a1-86ddd40db79d", "sighting_of_ref": "indicator--db2c8b69-e8fb-4438-8f83-f2e27a7e6003", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99571a9e-4ed8-4fbe-9b30-546e895f72d4", "sighting_of_ref": "indicator--3d0c0593-6b7f-4053-8b0a-cf75c04cd40c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d41f90-dc1a-4bb4-8e43-da61cc709989", "sighting_of_ref": "indicator--7703183d-5b21-46d3-958d-857fda8a09f9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b441ed-fed5-4d2c-afc1-d2b7ecc69df7", "sighting_of_ref": "indicator--45a8ab10-6b49-4f5b-9a43-14159fb4038f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e28044-5fd7-4b36-8f14-a44478b5502c", "sighting_of_ref": "indicator--994ebbac-5b3b-43d0-b380-ebbb8b7c8c69", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a49411b-94f5-439c-841c-a7ed32db0b27", "sighting_of_ref": "indicator--6ab44fa3-1f36-4750-b194-f31150b68295", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1b38c4-5b8a-45d5-804d-ba4652803bae", "sighting_of_ref": "indicator--0046ade2-e318-4cc5-b00f-ac01a2acf810", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6b55e3-2572-4c16-b823-c700576e1d02", "sighting_of_ref": "indicator--32593067-cae8-4f44-9ade-1bcb3b442374", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b650eb-8377-4190-84a9-2a1b6fab7992", "sighting_of_ref": "indicator--dfc45f74-78c8-400e-b678-1ea023a392eb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1446caa5-3d1e-4399-9573-ceaf2e1a533d", "sighting_of_ref": "indicator--dfc45f74-78c8-400e-b678-1ea023a392eb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e167679-c168-4a64-a8c0-f8e4b6afef9d", "sighting_of_ref": "indicator--9c6143bc-56eb-42fc-ac82-3db8219939b3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d4069b-f8f7-4e1d-8bbd-76dbf521aa95", "sighting_of_ref": "indicator--9c6143bc-56eb-42fc-ac82-3db8219939b3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555153f5-2cad-4096-8829-c5c636e0c689", "sighting_of_ref": "indicator--5b72a048-0a97-45eb-913a-efde24b25c24", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f20ae5-0274-4dd8-9841-d129fba69c70", "sighting_of_ref": "indicator--b076e17e-a1c9-4bef-aa05-ab0718f9f0c0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf1c838-16f9-454f-968b-c5dd075131b4", "sighting_of_ref": "indicator--b076e17e-a1c9-4bef-aa05-ab0718f9f0c0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7037ba49-8aa8-4892-ba83-729bf02f6c5c", "sighting_of_ref": "indicator--b076e17e-a1c9-4bef-aa05-ab0718f9f0c0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b08ff4-75d0-4f00-9ccd-93801072e83b", "sighting_of_ref": "indicator--5873591b-b051-4c39-8203-16d8d880a5b4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ce687f-1c89-40a0-9b8f-1ddccdd3c6db", "sighting_of_ref": "indicator--31487d4a-8987-41f4-ab19-099a42201e73", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685615ab-29cf-4f8e-a4eb-18f8c277d5a4", "sighting_of_ref": "indicator--31487d4a-8987-41f4-ab19-099a42201e73", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df660c7a-5f3a-4a96-a52f-69f19f432060", "sighting_of_ref": "indicator--00886a58-cf99-4b73-906a-c0dd676e7cc2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b2e182-b685-46a5-bbfd-8c138660644d", "sighting_of_ref": "indicator--0c0becc3-598d-4e26-bdbf-0088fc3f0471", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8053a209-fa69-4a7a-b66d-644da000c974", "sighting_of_ref": "indicator--739e20d1-cff1-4c5f-99e2-bbd6d8d5a200", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd672582-38b1-4b40-ab68-4ddbe6aff4ab", "sighting_of_ref": "indicator--a6cff24b-1af3-4ac6-8ba1-9208a02b7e22", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29504d2-2a39-4e90-84cf-ad2c8deea05e", "sighting_of_ref": "indicator--e945fc45-5134-44be-bff4-677d0bd8c3ad", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0224b09-4164-4c2f-80f5-d17f2adf2a5b", "sighting_of_ref": "indicator--d6855ec8-3a5b-42a9-ae2c-9f3b74bc7b9d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceaa206b-b1d2-4d6d-8e16-054e57f9a696", "sighting_of_ref": "indicator--a3d8281a-5167-418f-9010-6739e82c3851", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deac40fd-47b7-42e1-b4dc-2e127c3bffa3", "sighting_of_ref": "indicator--8d3d4e5a-36be-4d25-b598-93d03306a576", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c7e8d5-dd36-442f-b7d2-6f475cee48ed", "sighting_of_ref": "indicator--0e8c1443-f9d9-4c89-a8a1-28802947d32b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e790d1-1559-4621-aeb7-71d3a7306ae0", "sighting_of_ref": "indicator--0e8c1443-f9d9-4c89-a8a1-28802947d32b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8fa11cc-5a27-40c1-9f00-e1dc2ccb26d5", "sighting_of_ref": "indicator--e96e7ac1-670a-4cd9-99c2-9d0f1123154c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35cc4d7e-44d1-41b1-a424-c7ff3575bf6c", "sighting_of_ref": "indicator--d6fe2be7-3ff7-4947-b65a-57d3412fa9a0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0935a8-c8f5-4b5b-98b8-06b2a2327cb3", "sighting_of_ref": "indicator--d6fe2be7-3ff7-4947-b65a-57d3412fa9a0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b8ff78-1756-4e60-904c-ac0248308cbd", "sighting_of_ref": "indicator--d6fe2be7-3ff7-4947-b65a-57d3412fa9a0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471db684-8484-4a5b-a265-3ebaf6d4eedb", "sighting_of_ref": "indicator--a0365f54-87df-4238-9cf6-5c49d8ac4a64", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b550d7bb-d15d-48c8-8bd8-66e1ba1d1bf0", "sighting_of_ref": "indicator--a0365f54-87df-4238-9cf6-5c49d8ac4a64", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58c0ce2-aa14-4491-ba18-b93d1a8b4eb1", "sighting_of_ref": "indicator--ee5e58cc-8a52-4821-9b16-7bd1993b8440", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c88627b-6688-42e2-9cdd-6edf88368dfa", "sighting_of_ref": "indicator--ee5e58cc-8a52-4821-9b16-7bd1993b8440", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99deb1a-d635-4723-938c-4ddcef7126bd", "sighting_of_ref": "indicator--ee5e58cc-8a52-4821-9b16-7bd1993b8440", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e73cfd6-3a09-43cf-a805-ca04cd236ee1", "sighting_of_ref": "indicator--9aa59de6-fcce-444d-b95d-f9ed55820b56", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13883a9-73d4-43cd-a5fb-23908ce8e508", "sighting_of_ref": "indicator--b5330245-e067-4b1f-a252-268291bba155", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a70bb4-69c7-4388-9a8c-dbc3d862856a", "sighting_of_ref": "indicator--b5330245-e067-4b1f-a252-268291bba155", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efaaf83-b6f0-443e-aa57-9cbf1f42d26e", "sighting_of_ref": "indicator--c2a2c231-716c-407c-8899-3e3b83721972", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82bf0111-e372-44ac-8198-c47afdb9d78d", "sighting_of_ref": "indicator--5eb8a1c7-2fc2-493e-ba01-a4e0ab9ac41a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dcf62b3-62b2-4bda-9a8a-564bce56dc15", "sighting_of_ref": "indicator--7eb8e1a1-f331-4083-b1f4-ea8458a09a2a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10da812c-f65d-44be-b130-916823e645d5", "sighting_of_ref": "indicator--d7310b7e-8633-4750-bf43-1e5c6b481bd2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4de840-329c-414d-b3b2-cbd0a73983b5", "sighting_of_ref": "indicator--f7c1f169-b30c-416f-81a9-6b6c5b0c5b1a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b86c7f9-7e7b-499c-9f1d-ca49d61a89ab", "sighting_of_ref": "indicator--f7c1f169-b30c-416f-81a9-6b6c5b0c5b1a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bacac91-534e-4878-b8ba-f86d6e717b92", "sighting_of_ref": "indicator--16ed6248-4eb4-41d4-b385-9b26fafc4e2c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f3c9ef-4ead-42d9-9881-5b952084bc5d", "sighting_of_ref": "indicator--53b7ca34-df82-45b2-9fe4-4675c69154e7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c4c106-663f-49b3-931a-8d4d97e2ed29", "sighting_of_ref": "indicator--ac3ba371-0e95-4273-99e2-ef5e5f7c71ad", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ceeb120-99de-4c23-bc6b-e24b3b532be1", "sighting_of_ref": "indicator--e5eb262c-7ebf-4362-93d2-406246d57b7e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58cf03c-33f7-4b13-97c8-23cd7349db7f", "sighting_of_ref": "indicator--ef615ba1-cfa6-41ee-a9d2-fb5ca15df1e0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9ca355-0a43-4eca-a102-d223e60fa13f", "sighting_of_ref": "indicator--c143053c-0cac-4e41-bc7c-c3a5708f35b1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dabcfe6c-9fc8-439a-8d07-96c6b76ab656", "sighting_of_ref": "indicator--db8002fa-4a99-4838-bc96-474761c0b270", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c72b6b-9877-49af-b30d-ae703dc0227f", "sighting_of_ref": "indicator--01f2e801-d13d-49ae-890f-26d3ea8d39ed", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dcc4760-0e84-445d-986b-580d21578bb8", "sighting_of_ref": "indicator--06e00ac7-3e4c-4da5-92b7-342f0ffb301a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1453a61-49e4-439b-8b28-c360c784d1bf", "sighting_of_ref": "indicator--b1c4c870-2584-4361-839e-e25784d2612b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39244d2e-1f2e-47db-b473-c07c49543c5b", "sighting_of_ref": "indicator--acadad16-797a-4b8b-9d2c-80686bf70d5e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294b2a68-5499-40b2-b527-e7d6f92d85db", "sighting_of_ref": "indicator--246886ab-21a3-4fb3-9627-1e191058f059", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ca4c5e-e1d6-43e0-8d3e-b9f5851d81b5", "sighting_of_ref": "indicator--c5fbce3e-94d3-4a4b-b0fd-69154dc83541", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3ca857-6362-4414-aebe-fe81b6879dbc", "sighting_of_ref": "indicator--6818e2e4-e598-4ec3-be55-2c54f91f5279", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c12961-bc65-4908-ba8e-1af72d96c80b", "sighting_of_ref": "indicator--6818e2e4-e598-4ec3-be55-2c54f91f5279", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ade8f6-1444-440e-8f3f-9e25bd91801f", "sighting_of_ref": "indicator--963d4a7b-6978-4c6b-b62a-1131538cec25", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25439639-505b-4502-8569-09e800609818", "sighting_of_ref": "indicator--a31f29f9-da56-4906-8b83-6040fb3d10cf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7294f8-87c7-427e-aaee-b6ac3f2ec3ae", "sighting_of_ref": "indicator--7893ca48-a80c-49da-98a0-293faab7d038", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5f7755-9053-4408-ba5b-e6e696a8efbc", "sighting_of_ref": "indicator--421d65c7-632d-4ed2-8067-ebb11c119c83", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17f2663-ae0b-4563-9126-31b0ef59cce2", "sighting_of_ref": "indicator--98e02959-1360-4015-a0fa-33a709326a4a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ed821b-b6df-4866-b01a-9332564aff65", "sighting_of_ref": "indicator--081f5ce0-a86c-4657-9bc3-dda834a5f6af", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5122bc-c7c7-4479-823f-781939c7713b", "sighting_of_ref": "indicator--aaed927e-3555-4b35-a471-e25f0c6bf605", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88475d1-b03d-4d22-99a2-9577bcdde2a4", "sighting_of_ref": "indicator--1ec63bde-c681-441b-ab6d-f19e9855a56f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e42a0dc-9a95-4340-9689-6d8aea926828", "sighting_of_ref": "indicator--107a07e2-09a6-4155-8f7a-74343abb5d35", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e143ea4a-ebe5-48f7-8ec8-be3b1ce471a7", "sighting_of_ref": "indicator--727563c1-f208-4219-8ef1-e8ad5dc2a6b6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9738d6-1308-4b50-a982-7026fb0936af", "sighting_of_ref": "indicator--0b64b01b-601b-48de-87b2-d985b208b8be", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0187b98-5104-4bcb-940e-f2255d515d48", "sighting_of_ref": "indicator--1f69c5ef-cb36-4f88-99c2-f1b79ebc0eb4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f96757-a9fb-436b-a1db-a2978203125c", "sighting_of_ref": "indicator--6e12676a-f452-408f-868f-f4a4d38b536d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9bcd8d-f770-459c-a48d-173ed081a39a", "sighting_of_ref": "indicator--6dcb9174-b702-44b8-8fb5-1aae0c3dcf92", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0544d3-68a1-41b7-9e62-613643fdbcba", "sighting_of_ref": "indicator--8789c49e-69bc-4ba0-943f-7adf860a8111", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f683b411-3c55-4474-b9cb-a2a585c687ce", "sighting_of_ref": "indicator--fd951674-76b1-481f-8f39-5eec542ee777", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21cd8a7-61fc-4c3f-895c-ea7fbd98426b", "sighting_of_ref": "indicator--d7055553-7bd3-4144-be81-1a90b230d3d2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de65fc09-df7d-485f-969a-cf55f0f3147a", "sighting_of_ref": "indicator--f957cc3b-1233-44e6-908b-45da458f5a73", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2978b7ba-4811-4b7e-8401-31a83ee1cdb8", "sighting_of_ref": "indicator--c7ae53c4-4bb0-4375-9793-9959d48f3053", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6be736b-2626-4247-bb99-dfe598deb63e", "sighting_of_ref": "indicator--0679dac9-436b-4b8e-8465-5a177ea807fd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9698d96-80e2-4eb9-8aa2-cc2cee9c2ec3", "sighting_of_ref": "indicator--68c69c73-4ca5-4c0a-8fb7-fea3def01fde", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c7615e-8007-4752-b0c6-c0a4a00a20e6", "sighting_of_ref": "indicator--47917c05-802e-427e-807a-1a655bf3d148", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db86ef62-9bf1-443d-89f3-7081fcb268f8", "sighting_of_ref": "indicator--e0011903-6a8d-490e-b6fd-3c29390d6207", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725ca0e8-218d-4a2b-8f30-76dad994c93a", "sighting_of_ref": "indicator--0320533a-f556-40a5-a6fd-500d129cc666", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607e9450-7d7e-4b12-96ec-711d81921469", "sighting_of_ref": "indicator--0320533a-f556-40a5-a6fd-500d129cc666", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450b0b6c-a673-4162-b438-26fcfe5ca540", "sighting_of_ref": "indicator--33b9c6d5-5d8c-4a35-aaab-aec953914fcf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5079bb6-3772-4b49-b687-6ce96da8d396", "sighting_of_ref": "indicator--fe070574-479e-4cfb-91bb-2604623e2ae8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977aae66-06e9-42a6-9525-f9220673ac3d", "sighting_of_ref": "indicator--41397b40-0379-43fa-9a91-2666bea82a6c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c234541-414f-43eb-b58e-5bd3ec91e6f1", "sighting_of_ref": "indicator--ce6585f4-5a82-4655-b82d-3805268cd15b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4ca6a0-48ef-4f4c-9c9f-b31cf859e328", "sighting_of_ref": "indicator--8ea78a55-04f4-411a-b219-fb1346f3b148", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25158167-a40b-4c42-a6c6-583c250b6fa8", "sighting_of_ref": "indicator--86e10029-de8a-4590-a5d4-60206dc08a59", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fc8179-b2c3-4753-af05-fef9571c98cd", "sighting_of_ref": "indicator--8d752a91-37e3-4d12-b153-864d1e08a23b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96348d8a-0207-4165-8b74-b716f8ca7e10", "sighting_of_ref": "indicator--8d752a91-37e3-4d12-b153-864d1e08a23b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273081db-de4a-4a23-9a46-0401d7bff527", "sighting_of_ref": "indicator--b8ee444a-348b-4c4e-aa34-347a3b9454e3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793e410c-0e5b-48b5-94e5-c6c28d1a02df", "sighting_of_ref": "indicator--b8ee444a-348b-4c4e-aa34-347a3b9454e3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42cb4564-66e3-4ad7-adee-5a593ac5d6d7", "sighting_of_ref": "indicator--b8ee444a-348b-4c4e-aa34-347a3b9454e3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295d0640-2b0a-435f-ba1e-40a8134f58d3", "sighting_of_ref": "indicator--aabeca83-8352-49bf-b720-ecd1cbb1af03", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba5cff8-aa10-4394-8989-c75e2c336488", "sighting_of_ref": "indicator--aabeca83-8352-49bf-b720-ecd1cbb1af03", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87689f4e-592d-4aa0-8b6f-58c5b31e57f3", "sighting_of_ref": "indicator--aabeca83-8352-49bf-b720-ecd1cbb1af03", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8a85ba-7557-4d0d-bbf3-b8d9de01f7ce", "sighting_of_ref": "indicator--5a1cb324-7c40-4bdd-8c19-76a2470e6bd5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64675da-f343-4a62-b71c-6278862d507b", "sighting_of_ref": "indicator--5a1cb324-7c40-4bdd-8c19-76a2470e6bd5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc173ecc-9a7e-4817-8a65-530f8117b534", "sighting_of_ref": "indicator--5a1cb324-7c40-4bdd-8c19-76a2470e6bd5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c96843-0aad-4c7c-a4de-1f7c6ef38b25", "sighting_of_ref": "indicator--095b2797-9c62-4287-946b-dcb5cadda4d4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7883d167-6ab5-4475-8053-e0d9f005de9d", "sighting_of_ref": "indicator--095b2797-9c62-4287-946b-dcb5cadda4d4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586002c8-a67a-45b1-9fed-a6171e7669f4", "sighting_of_ref": "indicator--095b2797-9c62-4287-946b-dcb5cadda4d4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013b9c2c-2abb-419e-855b-280ae2b31466", "sighting_of_ref": "indicator--0ed36a80-9180-44c7-9853-806be661f547", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520817da-9a62-40df-b644-3d699c7d81f8", "sighting_of_ref": "indicator--0ed36a80-9180-44c7-9853-806be661f547", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f80175-94df-4658-95e4-e8db77c06b47", "sighting_of_ref": "indicator--0ed36a80-9180-44c7-9853-806be661f547", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ae34a4-1305-42f9-9906-a6ca3dadf70b", "sighting_of_ref": "indicator--2ec99863-033e-47a9-9877-b25f9016ed22", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1a4aef-db17-45cc-905a-7777cfbd6ea4", "sighting_of_ref": "indicator--2ec99863-033e-47a9-9877-b25f9016ed22", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50024815-dcc0-4e99-ac18-2b4a02b46a83", "sighting_of_ref": "indicator--2ec99863-033e-47a9-9877-b25f9016ed22", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5b8804-c14e-453f-ae31-6998e0b4d699", "sighting_of_ref": "indicator--55404a43-baab-4cd0-b40f-41f14bd9515f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a84593-927c-4a87-9236-9dcc8f2014ab", "sighting_of_ref": "indicator--55404a43-baab-4cd0-b40f-41f14bd9515f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d383051f-3788-4796-a446-965c5f11736f", "sighting_of_ref": "indicator--55404a43-baab-4cd0-b40f-41f14bd9515f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7b9eb6-8d4e-48e8-a640-156dd02f0558", "sighting_of_ref": "indicator--6f43122b-4f23-4887-9815-97b6a99e60d5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe46904-6519-451d-9d11-992e2e3483b7", "sighting_of_ref": "indicator--6f43122b-4f23-4887-9815-97b6a99e60d5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1db2a1-7650-43ed-9979-40d1ce21912a", "sighting_of_ref": "indicator--6f43122b-4f23-4887-9815-97b6a99e60d5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3b1dc5-a1bb-482c-86f4-3968ae6477dc", "sighting_of_ref": "indicator--2b65fe89-0a6a-4f1f-acba-019e1d93b221", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf768107-c5a4-4af2-8c3f-f4d204fed952", "sighting_of_ref": "indicator--2b65fe89-0a6a-4f1f-acba-019e1d93b221", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d18d429-0bae-46ab-b8a9-a762bdba82b4", "sighting_of_ref": "indicator--2b65fe89-0a6a-4f1f-acba-019e1d93b221", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f576c218-28a5-47ef-ad97-16d51a04e40f", "sighting_of_ref": "indicator--fff595d9-3af8-4023-8f5f-6982366355a9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af78dd83-79c1-4850-a7c6-5ee019a6468c", "sighting_of_ref": "indicator--fff595d9-3af8-4023-8f5f-6982366355a9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a99501-99f2-483d-aa9d-e487146471ed", "sighting_of_ref": "indicator--fff595d9-3af8-4023-8f5f-6982366355a9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b87e91a-d6a4-4b7f-91ae-42b4451eef8c", "sighting_of_ref": "indicator--205d4cd3-ca52-4772-a12a-2bc3687b1054", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--971f03df-6ed3-4be5-b730-d6ec4b2555f6", "sighting_of_ref": "indicator--205d4cd3-ca52-4772-a12a-2bc3687b1054", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d6c741-b8eb-43bc-adfc-ad0176857b71", "sighting_of_ref": "indicator--205d4cd3-ca52-4772-a12a-2bc3687b1054", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c157ee3-814f-4875-8187-043fd8996b4e", "sighting_of_ref": "indicator--8f8c1e9d-402c-4fa7-89ea-0ad2e180d520", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19448ddf-e093-4140-bb14-b62660a662b9", "sighting_of_ref": "indicator--8f8c1e9d-402c-4fa7-89ea-0ad2e180d520", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7a9328-4c55-4256-843d-cca234bc3ae1", "sighting_of_ref": "indicator--8f8c1e9d-402c-4fa7-89ea-0ad2e180d520", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c8fed8-a859-43a0-863f-cbd2bea9f03b", "sighting_of_ref": "indicator--61eb4786-2a95-4b62-8ca5-3140a17c5ff6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8b8d0f-363e-44bd-9ecd-e0d404a58d3b", "sighting_of_ref": "indicator--61eb4786-2a95-4b62-8ca5-3140a17c5ff6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f516f2-8400-4a3a-ae10-14209ba225d0", "sighting_of_ref": "indicator--61eb4786-2a95-4b62-8ca5-3140a17c5ff6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf881bf-eb54-4d73-bee7-7388a1ff418f", "sighting_of_ref": "indicator--9bba4cbe-1b3e-4dcc-9d19-47f40028cecf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac02befa-ea63-4735-906e-8ee877cf8f75", "sighting_of_ref": "indicator--1436e96e-9fb4-4686-aada-853ba0d87698", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd008f90-96e5-4d81-961b-6d38e43fdec6", "sighting_of_ref": "indicator--1436e96e-9fb4-4686-aada-853ba0d87698", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66a89af-a677-439b-9b31-6d8e4eb6189e", "sighting_of_ref": "indicator--1436e96e-9fb4-4686-aada-853ba0d87698", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf7fe6b-a4ed-4fba-80b7-b2eb12730fe9", "sighting_of_ref": "indicator--46566ceb-dc14-4aaa-8ee6-1af6fa8e9022", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1852ca-5629-4d3b-acbd-cbe7899a0146", "sighting_of_ref": "indicator--46566ceb-dc14-4aaa-8ee6-1af6fa8e9022", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2470ac88-c736-4755-9ac5-0b58519a8869", "sighting_of_ref": "indicator--46566ceb-dc14-4aaa-8ee6-1af6fa8e9022", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1dea685-a09d-48de-9efb-266a4072d022", "sighting_of_ref": "indicator--64d2cf68-17f0-46fd-81d7-0cada9d3ec01", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0753c633-8798-448f-950a-f6487565034a", "sighting_of_ref": "indicator--64d2cf68-17f0-46fd-81d7-0cada9d3ec01", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fec067-1dee-4024-9f9c-ea7f0513c01f", "sighting_of_ref": "indicator--64d2cf68-17f0-46fd-81d7-0cada9d3ec01", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9c1bb2-8ce6-4d63-a159-dba255df0e01", "sighting_of_ref": "indicator--7249208f-f018-46a4-87a4-e2c3175a4159", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e41e633-84ff-486e-8a4d-f9680cab2740", "sighting_of_ref": "indicator--7249208f-f018-46a4-87a4-e2c3175a4159", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c0a499-7be0-453d-ab8a-fbdff6874e91", "sighting_of_ref": "indicator--7249208f-f018-46a4-87a4-e2c3175a4159", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2957382-e2a1-4a5e-8e54-79759f539891", "sighting_of_ref": "indicator--534f2db3-018a-4c7a-8a2b-54824af48fc1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560c748b-dae8-4865-82cf-4578ceb1e4b3", "sighting_of_ref": "indicator--534f2db3-018a-4c7a-8a2b-54824af48fc1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd8cc8d-b92d-4d27-b5ff-0fe9af449941", "sighting_of_ref": "indicator--534f2db3-018a-4c7a-8a2b-54824af48fc1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f839b4-ace1-4c23-9dcd-6c170fec2928", "sighting_of_ref": "indicator--f075b9b2-ac93-4353-aceb-430d7f4fb585", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed44e71-dae4-4acf-91ee-56e5be1efd22", "sighting_of_ref": "indicator--f075b9b2-ac93-4353-aceb-430d7f4fb585", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27adbf8c-67b2-4cb4-9d60-5e447e34ec65", "sighting_of_ref": "indicator--f075b9b2-ac93-4353-aceb-430d7f4fb585", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af31beb-473e-4be6-9d40-7b8f5f444cc7", "sighting_of_ref": "indicator--c07722c0-b4dc-405e-9514-53fa721fa5ec", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9251ce1e-64f5-479d-93e4-5fa4f9574057", "sighting_of_ref": "indicator--c07722c0-b4dc-405e-9514-53fa721fa5ec", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed89b39-dc5b-4074-b872-fe219dbba8eb", "sighting_of_ref": "indicator--c07722c0-b4dc-405e-9514-53fa721fa5ec", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2363f279-ba09-4861-a13f-781ae5189c8f", "sighting_of_ref": "indicator--169fc92b-6981-46c7-b85a-6b24d0792cd2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218450b9-1aaa-4360-aa2a-8cbb210f777f", "sighting_of_ref": "indicator--169fc92b-6981-46c7-b85a-6b24d0792cd2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02704c8f-c2c7-4591-b3a2-7c493ea4ad5f", "sighting_of_ref": "indicator--169fc92b-6981-46c7-b85a-6b24d0792cd2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa4c07c-9cab-4a20-b0e2-c10c3347e3a6", "sighting_of_ref": "indicator--bde9c2ca-61a4-4eac-85e3-686874542f14", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60de5b9d-6fe1-4b0e-a1d4-bdaa4020226c", "sighting_of_ref": "indicator--bde9c2ca-61a4-4eac-85e3-686874542f14", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27239c8-4d90-4a73-811b-eeb4a1796a0a", "sighting_of_ref": "indicator--bde9c2ca-61a4-4eac-85e3-686874542f14", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80abce0-8f7f-46dc-91bc-39ee86cb361b", "sighting_of_ref": "indicator--bc1e5d4d-ca2d-4cbd-b4d1-3e39e1e52b1c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cae981a-ae20-4e07-bde8-d39817bc9792", "sighting_of_ref": "indicator--bc1e5d4d-ca2d-4cbd-b4d1-3e39e1e52b1c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee6ce74-283c-40b1-a44c-96fc817c7be4", "sighting_of_ref": "indicator--bc1e5d4d-ca2d-4cbd-b4d1-3e39e1e52b1c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736758c5-fe9c-4f89-b1d8-2e1c6e4e5f66", "sighting_of_ref": "indicator--c96ca7f7-4455-4ab8-9ece-91f82960267a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ece490-f6af-4b53-8c67-321b3866378c", "sighting_of_ref": "indicator--0d5a6888-e013-4143-bfd0-485feb43abbd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d96ddf-b7fc-4a15-a32f-4023573ca5f8", "sighting_of_ref": "indicator--0d5a6888-e013-4143-bfd0-485feb43abbd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0f8b22-6920-4def-a84a-d3f46a49c5b7", "sighting_of_ref": "indicator--0d5a6888-e013-4143-bfd0-485feb43abbd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d0c55c-a54d-42fe-a816-fd8a7a39b1d8", "sighting_of_ref": "indicator--02fd8f6d-e7a0-43bb-9c78-94709372a1db", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0558f84f-adf8-4ae4-9496-bdc0caac59f5", "sighting_of_ref": "indicator--02fd8f6d-e7a0-43bb-9c78-94709372a1db", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4bee41-bd05-4eb1-a5a5-a11592ce07e8", "sighting_of_ref": "indicator--02fd8f6d-e7a0-43bb-9c78-94709372a1db", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c85fbc-654b-4bda-a58c-e6f04320dc8d", "sighting_of_ref": "indicator--7ea57b10-5dbe-4e8f-b0a1-f111ecc2e7ae", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6f373c-0982-4179-af39-108c1161205e", "sighting_of_ref": "indicator--7ea57b10-5dbe-4e8f-b0a1-f111ecc2e7ae", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eed6626-fd65-4e2e-ba6d-44cbe678d114", "sighting_of_ref": "indicator--7ea57b10-5dbe-4e8f-b0a1-f111ecc2e7ae", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30fb6868-8aa0-42a5-954d-33614795cf40", "sighting_of_ref": "indicator--40f53d00-f50a-4557-a753-f1e1ef9b00de", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32074a4-68e2-48fa-b35c-2594b8643d7e", "sighting_of_ref": "indicator--40f53d00-f50a-4557-a753-f1e1ef9b00de", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fb6247-6044-44ca-a0b4-86a104ced2ed", "sighting_of_ref": "indicator--40f53d00-f50a-4557-a753-f1e1ef9b00de", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a665eb9a-8a66-4fac-87a6-2f63d6d2e1e8", "sighting_of_ref": "indicator--f6c9f818-763e-426e-b680-61ae08e4ba4f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e83dd8e-99ab-445c-a03b-efbfdbaa104e", "sighting_of_ref": "indicator--f6c9f818-763e-426e-b680-61ae08e4ba4f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28df050a-9a91-4631-b218-998f1d2fcad9", "sighting_of_ref": "indicator--f6c9f818-763e-426e-b680-61ae08e4ba4f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9574fc-e9d0-4e4a-950e-84ed196f3869", "sighting_of_ref": "indicator--944fc9fa-f3b3-4bd1-9459-5c102622fb6e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeaf274c-3b62-4292-8272-d20f271b8e8a", "sighting_of_ref": "indicator--944fc9fa-f3b3-4bd1-9459-5c102622fb6e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff96fadc-153f-433a-82d2-fa3558f70976", "sighting_of_ref": "indicator--944fc9fa-f3b3-4bd1-9459-5c102622fb6e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1eb09ee-1674-453e-90c0-08611fa239dd", "sighting_of_ref": "indicator--7f9d8e25-1aa9-487e-aee1-35054068928e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c71a633-81ac-4772-aebd-328484c27a6e", "sighting_of_ref": "indicator--7f9d8e25-1aa9-487e-aee1-35054068928e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e08b8a-fb57-4a12-bd34-7446dddf8322", "sighting_of_ref": "indicator--7f9d8e25-1aa9-487e-aee1-35054068928e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b239fd-d96c-40c8-9fc8-a4cf37b0b61c", "sighting_of_ref": "indicator--4781610a-1c5d-4f0a-addc-d38389b9ff9d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1039fc4-a73c-405e-886d-b5cb5533b089", "sighting_of_ref": "indicator--4781610a-1c5d-4f0a-addc-d38389b9ff9d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be323ff-74e3-4688-a4f8-2f8829ccc179", "sighting_of_ref": "indicator--8fb89085-ef7b-4458-9cdd-5d1e0bdd4684", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef88fec4-bcb6-412d-b368-1cc75b5ae197", "sighting_of_ref": "indicator--8fb89085-ef7b-4458-9cdd-5d1e0bdd4684", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df064e2-15c9-43a2-a401-0c92e8a79462", "sighting_of_ref": "indicator--067edda2-3697-4f15-9a09-dcc889b54bad", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e2600a-0e37-46d6-9e23-d682cc726caa", "sighting_of_ref": "indicator--3fdc221f-5479-4656-a0b2-b400b8cefad5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6258af69-7299-496b-ad00-cd59ac9e631a", "sighting_of_ref": "indicator--a8baf61d-d281-4bf7-a896-af298313fb1d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8f2e41-52a5-43f5-b0c2-9f5d3ff0effc", "sighting_of_ref": "indicator--066a4602-91b4-4b47-85b7-c70f211e2df7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd81ab4c-ba06-40f0-b1de-d18f1d98c8d1", "sighting_of_ref": "indicator--7303d4d2-959a-4c3e-88ea-d335c72bbdab", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d729518b-22d2-4076-acc5-ef8b961b9b37", "sighting_of_ref": "indicator--fc6ef43c-6321-4a9c-9a7c-834871bba912", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baabe035-ec59-41f3-945c-91f9a1c1e65f", "sighting_of_ref": "indicator--fc6ef43c-6321-4a9c-9a7c-834871bba912", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd99477-d879-44b7-a81a-232fa2b3bedc", "sighting_of_ref": "indicator--fc6ef43c-6321-4a9c-9a7c-834871bba912", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a9397c-cdc4-4f74-ae55-4f32aeb49283", "sighting_of_ref": "indicator--5001f128-a43a-4e3b-82d2-add773b23aeb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b359c44b-6277-451e-931b-148dd84ebc05", "sighting_of_ref": "indicator--5001f128-a43a-4e3b-82d2-add773b23aeb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19aee138-b426-4f37-a63e-f6bd54bc8cb0", "sighting_of_ref": "indicator--5001f128-a43a-4e3b-82d2-add773b23aeb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce336289-0d02-446b-8076-aaf4d7f1481b", "sighting_of_ref": "indicator--9a63a504-983f-4d8e-a61e-e0064c6c08e7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0ed1d5-f4b5-4e64-8035-f0ea590eeda5", "sighting_of_ref": "indicator--9a63a504-983f-4d8e-a61e-e0064c6c08e7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b069efa-ec3f-49e6-9236-8552b8c6016f", "sighting_of_ref": "indicator--9a63a504-983f-4d8e-a61e-e0064c6c08e7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4979214f-e6ca-4942-9f78-382a6896fb35", "sighting_of_ref": "indicator--860af9d9-5818-475a-894a-14e1a3537e30", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23fbd882-49ab-4f69-bc3e-4c031b21ed74", "sighting_of_ref": "indicator--860af9d9-5818-475a-894a-14e1a3537e30", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7c4e2f-14e3-4a31-b24e-d202798f41a1", "sighting_of_ref": "indicator--860af9d9-5818-475a-894a-14e1a3537e30", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f1b863-a168-40fa-bc86-bf50ce063ab0", "sighting_of_ref": "indicator--823098d9-370e-4d42-8fb5-9982f2298ae0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859bb533-4b1a-4de1-8d73-6076b17a16c2", "sighting_of_ref": "indicator--823098d9-370e-4d42-8fb5-9982f2298ae0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2c0150-307b-4b21-ac02-d38a6d703e4e", "sighting_of_ref": "indicator--823098d9-370e-4d42-8fb5-9982f2298ae0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abdceece-9b6c-473c-bccf-71169b4b57de", "sighting_of_ref": "indicator--99640dfd-082e-47b3-8652-973cc1721fdb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63faa77c-75ce-4f33-830f-1fb762822974", "sighting_of_ref": "indicator--99640dfd-082e-47b3-8652-973cc1721fdb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6eecc7d-0a25-41c5-bb33-91a10b462701", "sighting_of_ref": "indicator--99640dfd-082e-47b3-8652-973cc1721fdb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b087b3-343d-4ae0-b068-96c9c52c6031", "sighting_of_ref": "indicator--924ae673-4fed-4558-94bf-c854ca363bd3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16dabfd-e2df-4a9b-b1e1-5435e45ac17a", "sighting_of_ref": "indicator--924ae673-4fed-4558-94bf-c854ca363bd3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a483078a-8291-4b13-8e98-b0c47ee8ad5e", "sighting_of_ref": "indicator--924ae673-4fed-4558-94bf-c854ca363bd3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db21c97c-f4ee-437e-8f45-e57b52cab4b7", "sighting_of_ref": "indicator--3dc12185-c7d4-4713-8aca-ce71eb0b2e71", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb45b860-2fb9-4664-89cd-2d15dd2b1fe6", "sighting_of_ref": "indicator--3dc12185-c7d4-4713-8aca-ce71eb0b2e71", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258c09c2-c56f-4cdd-b8ae-d66d568008ef", "sighting_of_ref": "indicator--3dc12185-c7d4-4713-8aca-ce71eb0b2e71", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7bc809e-a657-4555-8d64-bbf0d0d662ef", "sighting_of_ref": "indicator--e16cee12-6d8f-4e30-bf45-63029a8327b1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83102772-6007-49f0-9f23-f1c524a37824", "sighting_of_ref": "indicator--e16cee12-6d8f-4e30-bf45-63029a8327b1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15313dd1-d129-4c65-8d99-e5359d79bff8", "sighting_of_ref": "indicator--e16cee12-6d8f-4e30-bf45-63029a8327b1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dacd0aaa-4711-4337-bd0c-08d9369c1054", "sighting_of_ref": "indicator--1b464550-7eba-4521-9c1c-c3927c7f031b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04e3c3c-ecb9-4c17-a1a4-80be47c0dc61", "sighting_of_ref": "indicator--1b464550-7eba-4521-9c1c-c3927c7f031b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b227d08a-1790-407f-a387-23dbf51fd1f7", "sighting_of_ref": "indicator--1b464550-7eba-4521-9c1c-c3927c7f031b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a76438a-e8c8-4ab9-8e70-1b054084d270", "sighting_of_ref": "indicator--1f5a4d63-105d-405d-b232-ef9c0b824cf8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0998f2c8-ac7d-4739-9202-6fa5b2c1ff62", "sighting_of_ref": "indicator--0793a068-e419-4e5f-8e84-a22f77a9ee8d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a811740-f5c7-4187-9ead-f5df7efd5c19", "sighting_of_ref": "indicator--0793a068-e419-4e5f-8e84-a22f77a9ee8d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d65175-1d39-44b9-a273-fa2ad0046164", "sighting_of_ref": "indicator--0793a068-e419-4e5f-8e84-a22f77a9ee8d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e432cf06-846a-44a5-9df5-6379ee172113", "sighting_of_ref": "indicator--da965897-1992-4819-a804-824705d49198", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3f3f7e-266d-443a-a3c7-d18c57d58304", "sighting_of_ref": "indicator--da965897-1992-4819-a804-824705d49198", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374cd456-923b-40b5-99ae-0966d5edff35", "sighting_of_ref": "indicator--aaea4b0b-7f0d-41f3-a4b3-2d69b45bf28c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81715fb6-5b7f-415c-950d-c393b38669cb", "sighting_of_ref": "indicator--aaea4b0b-7f0d-41f3-a4b3-2d69b45bf28c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10982dca-f265-4fff-808b-e84d5df359ab", "sighting_of_ref": "indicator--aaea4b0b-7f0d-41f3-a4b3-2d69b45bf28c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1bd093-163b-4c86-aaca-13d718363244", "sighting_of_ref": "indicator--c7b2cbd9-011b-41a4-b048-dd4ad96b8d36", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92cf2ef-2539-4ce5-af10-ce64c77ee9c5", "sighting_of_ref": "indicator--261e42d2-d30a-4bf1-ac05-75d370c404b8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599a37c0-7578-489d-beda-2a87f6896d07", "sighting_of_ref": "indicator--261e42d2-d30a-4bf1-ac05-75d370c404b8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef24bf0d-5309-4977-b559-d2ad416eb7b7", "sighting_of_ref": "indicator--261e42d2-d30a-4bf1-ac05-75d370c404b8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebff5022-ee97-4b4c-8fef-b8cc2e1a0dda", "sighting_of_ref": "indicator--ef04ed6e-d1ef-4e52-9f32-f1f180e9d37f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb62e0e-6a3b-48d7-ac4e-d76223307972", "sighting_of_ref": "indicator--ef04ed6e-d1ef-4e52-9f32-f1f180e9d37f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ffc2f4-d83f-4a39-a3f2-a6fa0678ce33", "sighting_of_ref": "indicator--ef04ed6e-d1ef-4e52-9f32-f1f180e9d37f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211ba11c-f1d8-48e0-b1cd-f429cb42ee66", "sighting_of_ref": "indicator--14f27e59-f818-405d-a340-4ea60cd17e2e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309f1bce-530e-4c1c-bcf5-fb5700d56a47", "sighting_of_ref": "indicator--14f27e59-f818-405d-a340-4ea60cd17e2e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81fc3df0-0cfb-4768-9161-47c02c720d2f", "sighting_of_ref": "indicator--14f27e59-f818-405d-a340-4ea60cd17e2e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451edcd3-5c56-4bc8-930a-e9497aa430f1", "sighting_of_ref": "indicator--81199ba7-9755-4236-984a-a4aed734d1fa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8627ae42-5373-4147-ac60-1c817d93da03", "sighting_of_ref": "indicator--eb24fc63-b761-4f61-8473-0dbd709f5a04", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46765b0a-897d-4993-a7ed-70c01c654778", "sighting_of_ref": "indicator--d84e54f4-7ce6-4030-8374-0065db5d353d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ca665d-5dc2-4388-ac4d-72b874459a80", "sighting_of_ref": "indicator--d84e54f4-7ce6-4030-8374-0065db5d353d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40f3b55-dcfb-4527-850e-0af623de7060", "sighting_of_ref": "indicator--d84e54f4-7ce6-4030-8374-0065db5d353d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086bb44b-0490-4c2c-b25b-240eadce13b5", "sighting_of_ref": "indicator--429248e1-c994-488b-a7f9-3817dc08b1c6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5081d0c-9029-4fcc-b32d-0bfd0afb0106", "sighting_of_ref": "indicator--5d698516-3b59-443b-a49d-9ed66c24c056", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a592373-c7ef-45ed-9225-ce10638674fa", "sighting_of_ref": "indicator--f16526c3-48f0-46d7-9739-92a9dcaf8270", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13e2dd4-25a5-47cb-8989-e782c528e1a6", "sighting_of_ref": "indicator--81ccca78-28cc-4a35-8c97-32cece874165", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6ec4ac-9a78-4c26-a7f2-c11961525eff", "sighting_of_ref": "indicator--5f937ff7-e6d6-4518-9fa9-e9f4cfc51966", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748b2f85-5c01-4b10-8956-87f7a1074079", "sighting_of_ref": "indicator--28c05041-d332-4397-84a5-3152aa400d70", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd0000e-961d-40a4-ba63-34654dd5c77c", "sighting_of_ref": "indicator--dcd764d2-122e-43fd-b47f-a375ce3c3ef0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bba128c-f8bc-47a9-a606-5f1e5f22156e", "sighting_of_ref": "indicator--9184a92f-28c3-47bc-a73a-a076b94cc7ba", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ae637e-e07e-425d-9f15-fc972a370ae7", "sighting_of_ref": "indicator--8045e617-8f07-4c5c-a2b1-b8ac510fed61", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd8da90-8aa1-418c-aed4-1d0dadea1416", "sighting_of_ref": "indicator--21e654d4-6bfb-4a4b-bf9d-ffc51a5fb55f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c553b7-e597-4910-a8e4-598bec4d00ee", "sighting_of_ref": "indicator--6548c7b8-5f6a-4330-b19d-6d0136cdbec1", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbaa96d2-bd03-49f1-9386-4f455de652fc", "sighting_of_ref": "indicator--88f9d7dc-0126-40d4-ae53-b75721c9acf1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6246d374-ae85-43b2-8b49-3c71b452d080", "sighting_of_ref": "indicator--88f9d7dc-0126-40d4-ae53-b75721c9acf1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487ac63c-de18-4335-a397-4795ba4c8f26", "sighting_of_ref": "indicator--88f9d7dc-0126-40d4-ae53-b75721c9acf1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c30719-aa5c-4653-8ee9-66caa4ee6406", "sighting_of_ref": "indicator--d918de0c-7d46-4f7e-bcee-20de8fd27311", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94ad617-1a7b-4fde-adc9-fe58e0c55eec", "sighting_of_ref": "indicator--b962e7ab-f2df-4296-bf25-b7e045249ed2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7485f227-f60d-4da6-8aac-eb182a5583b1", "sighting_of_ref": "indicator--b962e7ab-f2df-4296-bf25-b7e045249ed2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e96ae5-07c0-47d0-baf2-9b788baeefc6", "sighting_of_ref": "indicator--b962e7ab-f2df-4296-bf25-b7e045249ed2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685dcb29-c19d-41f4-aa27-5840cc153a25", "sighting_of_ref": "indicator--0973ca83-9e48-4ddc-ab95-9352dbb1ed82", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f19052b-9cc2-4c95-a58b-b8ca04eb9a89", "sighting_of_ref": "indicator--992d1b0c-b2f9-46ec-827c-2296924d35b4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae5b669-6649-46b3-8091-4a55bf2560bb", "sighting_of_ref": "indicator--91776a79-22de-4347-9e10-7fd4cf4a490a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0725e81c-9af6-443b-be63-8163fbb5b272", "sighting_of_ref": "indicator--1d538a5f-5564-44bd-ac54-2886f363aa68", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b6de40-fce3-467b-b674-ad80963e730f", "sighting_of_ref": "indicator--e94442da-06b3-475b-9f95-32c07f81a1db", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0452018b-16e5-4940-913f-13ea75161339", "sighting_of_ref": "indicator--2f3bc211-e882-4f8a-ad3c-6773d5cd44f6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ed304f-df11-419e-ab85-500caa83e5cd", "sighting_of_ref": "indicator--7ceba199-8cfc-427d-a099-0305824f24b5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18041ff5-38eb-4086-90d6-eb7ad758e7df", "sighting_of_ref": "indicator--66280f5e-5b78-4da9-9c43-d6d607ca775f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c0ddb0-857b-48dc-992d-52d76638a305", "sighting_of_ref": "indicator--66280f5e-5b78-4da9-9c43-d6d607ca775f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caba70f6-d5fb-4867-b119-c7b553d1021e", "sighting_of_ref": "indicator--66280f5e-5b78-4da9-9c43-d6d607ca775f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f4b01a-2761-4d4a-b34d-df829eaff731", "sighting_of_ref": "indicator--7b7e09b7-977c-4365-a034-4eb3e11b2ea1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41d4527-761d-4efc-a2be-f4cf1d904f76", "sighting_of_ref": "indicator--5a6c6627-f854-4758-907e-a61717cb1299", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6754a3-1673-46f5-990f-2a6e33d5c47f", "sighting_of_ref": "indicator--e7503fcd-73ca-45df-b1b8-8802b8d84f5b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174b508f-0f69-403c-81b2-afca565a40c4", "sighting_of_ref": "indicator--7cd30a94-3497-49d5-b312-17396918a512", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a085ec3f-ad5a-4792-8cfe-d7420e4b0755", "sighting_of_ref": "indicator--7cd30a94-3497-49d5-b312-17396918a512", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419c7095-5d14-4da0-97f6-9ff22b6bd630", "sighting_of_ref": "indicator--8c6038ef-c6bf-46ad-97de-46d804b8846f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c586b8ab-bac8-43b4-9d23-8c6802832892", "sighting_of_ref": "indicator--8c6038ef-c6bf-46ad-97de-46d804b8846f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6390e115-7de2-4d56-8371-21863cafd057", "sighting_of_ref": "indicator--e803e4af-1429-47cd-a605-9d019a42c28b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97dd05a9-88b7-4b1b-8040-1a1117f769ad", "sighting_of_ref": "indicator--e803e4af-1429-47cd-a605-9d019a42c28b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc212c2-8af5-43ac-b314-72dab2fdc106", "sighting_of_ref": "indicator--e803e4af-1429-47cd-a605-9d019a42c28b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db00064-0869-4cc9-9e09-a8de889a50e5", "sighting_of_ref": "indicator--7ba0c4bb-131b-4dbf-9483-6e509134caa7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--383075e8-6ea0-48a3-80e5-73cb9e96a18e", "sighting_of_ref": "indicator--7ba0c4bb-131b-4dbf-9483-6e509134caa7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5a21d9-cfc4-44a6-b63b-9ec5747aad4a", "sighting_of_ref": "indicator--7ba0c4bb-131b-4dbf-9483-6e509134caa7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2fca399-134e-43f0-a4bb-a9244a286b68", "sighting_of_ref": "indicator--b6d1c7d4-393f-4a0d-82b5-aebf3a1e051f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a00ab9-0b7e-4a60-a017-2f627d34fc87", "sighting_of_ref": "indicator--b6d1c7d4-393f-4a0d-82b5-aebf3a1e051f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2165df6-1353-4cec-9a96-00385d72ac53", "sighting_of_ref": "indicator--b6d1c7d4-393f-4a0d-82b5-aebf3a1e051f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c73d8fc-6594-4fc7-84cc-2868a9fc190b", "sighting_of_ref": "indicator--5c534c43-e13b-4f53-b9e4-a620a93f9ff9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da68944c-6c24-47c0-b8a4-bd04cf09cdf8", "sighting_of_ref": "indicator--5c534c43-e13b-4f53-b9e4-a620a93f9ff9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98b5f6a-2351-470d-acd3-08e92d6c01fe", "sighting_of_ref": "indicator--5c534c43-e13b-4f53-b9e4-a620a93f9ff9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3a1a3e-d3fb-4b49-9ed4-dc2dce24afb9", "sighting_of_ref": "indicator--1785742e-b51d-4da5-831a-70a8928b1891", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f08aebe-63ff-4059-b0c6-3226f4ab87fb", "sighting_of_ref": "indicator--1785742e-b51d-4da5-831a-70a8928b1891", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b6120a-d624-42d7-8399-0f0e6d8fc221", "sighting_of_ref": "indicator--1785742e-b51d-4da5-831a-70a8928b1891", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e35f4bc-243b-4f23-9503-52113b4dd730", "sighting_of_ref": "indicator--91f74b61-eada-41fe-a237-4934ef666794", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7833a8-bc49-4efb-b61b-b7fb35260e70", "sighting_of_ref": "indicator--91f74b61-eada-41fe-a237-4934ef666794", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be671027-1857-4c59-a94f-4b2395168edc", "sighting_of_ref": "indicator--91f74b61-eada-41fe-a237-4934ef666794", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31ad931-5056-469a-8229-db6e89378876", "sighting_of_ref": "indicator--5302448c-c9b0-4afe-87a9-a88f2c91cc5f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876db1a2-8e3e-4bad-a8f0-1e205fc0b838", "sighting_of_ref": "indicator--5302448c-c9b0-4afe-87a9-a88f2c91cc5f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8329dd53-1bcc-4436-8301-a16f41c238e1", "sighting_of_ref": "indicator--5302448c-c9b0-4afe-87a9-a88f2c91cc5f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5eae13-c00b-4bd6-b88b-ebe21d3740d7", "sighting_of_ref": "indicator--4bb28aa8-82df-4c76-a636-e68e3f198668", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bacce256-9fc1-4617-8551-fd9181dd7f80", "sighting_of_ref": "indicator--4bb28aa8-82df-4c76-a636-e68e3f198668", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4d5339-34d1-4c18-9655-85c74a94f130", "sighting_of_ref": "indicator--4bb28aa8-82df-4c76-a636-e68e3f198668", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c69d41a-cb86-42f6-865a-3450fdd96f04", "sighting_of_ref": "indicator--59eb9729-e2de-478f-a67f-0350ea88267d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7adc4c-3e53-4b27-ab50-7b84217f7240", "sighting_of_ref": "indicator--59eb9729-e2de-478f-a67f-0350ea88267d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0e7600-da28-4095-9313-5614f06c8fd1", "sighting_of_ref": "indicator--59eb9729-e2de-478f-a67f-0350ea88267d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19773cc9-19b7-4278-bd12-844c18bd74a1", "sighting_of_ref": "indicator--ae398ac5-4dca-4281-94a3-8ab7a64af8b7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40e4312-5d11-49b5-9cde-8e2c067529d1", "sighting_of_ref": "indicator--ae398ac5-4dca-4281-94a3-8ab7a64af8b7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f1e218-e063-4b08-9e2e-eafac626303f", "sighting_of_ref": "indicator--ae398ac5-4dca-4281-94a3-8ab7a64af8b7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4155ed51-11c4-42ab-af3d-a0b6a2dfb062", "sighting_of_ref": "indicator--561f1e91-f55c-481e-ac8d-fde14cd2f4cb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853fb9ae-a2b1-47ea-a412-62a92523a0c5", "sighting_of_ref": "indicator--561f1e91-f55c-481e-ac8d-fde14cd2f4cb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1826bd-2ea9-4877-8966-aa5d23820516", "sighting_of_ref": "indicator--561f1e91-f55c-481e-ac8d-fde14cd2f4cb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9042084-72ae-498c-8831-4e5607065641", "sighting_of_ref": "indicator--a5476f68-3312-467b-af10-462bd5f1676f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267f42d8-d647-4bf4-bc19-4a1b22272bbb", "sighting_of_ref": "indicator--a5476f68-3312-467b-af10-462bd5f1676f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b6eb05-e320-43bb-8161-d8a9149b5fb4", "sighting_of_ref": "indicator--a5476f68-3312-467b-af10-462bd5f1676f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6b2fdd-ce53-4bbd-adf6-d7ee8349d309", "sighting_of_ref": "indicator--e47cf2aa-7711-4039-858c-9435fb276fe2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164abc3c-8628-40cf-b8e1-35be6cd8e4c1", "sighting_of_ref": "indicator--e47cf2aa-7711-4039-858c-9435fb276fe2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e863d25b-8f77-4ed3-822a-8a10896379c8", "sighting_of_ref": "indicator--ab907196-8ed4-4a6c-8ee2-5ed60ff7d58f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab81e8bd-2558-4331-b0d9-30e09c6db895", "sighting_of_ref": "indicator--69a41204-8cf0-4ee2-8d93-d97f3fda8f61", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f740ceb4-957e-4629-ac87-c727c2d2e33f", "sighting_of_ref": "indicator--5af28ae5-83cc-4139-8771-73db64c343e9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d8f12a-2f87-4646-8c02-55e5b1946473", "sighting_of_ref": "indicator--82361d46-6eda-47a4-ae6c-078388d3bf31", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9bee2b-538a-4568-82be-3ff74d9312b0", "sighting_of_ref": "indicator--7047dcfb-d449-49e3-b409-60378a9190f5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0486910-14a4-43e3-b545-fbe623b34a41", "sighting_of_ref": "indicator--7047dcfb-d449-49e3-b409-60378a9190f5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb96d36-9ebe-4694-b358-d4000ec3e2ae", "sighting_of_ref": "indicator--55091e69-393f-4fb8-8a64-9f79d7cb8514", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa82ef0b-3655-4bba-9fe6-2ae91c099a4e", "sighting_of_ref": "indicator--55091e69-393f-4fb8-8a64-9f79d7cb8514", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d535d9-40b0-4170-9553-6e3fb7467f81", "sighting_of_ref": "indicator--55091e69-393f-4fb8-8a64-9f79d7cb8514", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa39408-8d41-4e0d-b941-0db355457968", "sighting_of_ref": "indicator--e505ebec-3690-4966-836a-ce8fc42cbdd1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a4ca24-d5fc-405c-b102-fd38e221879f", "sighting_of_ref": "indicator--e505ebec-3690-4966-836a-ce8fc42cbdd1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a2baee-f25a-4c38-9681-51a5f09f381e", "sighting_of_ref": "indicator--e505ebec-3690-4966-836a-ce8fc42cbdd1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f717ca-c689-4edb-ab6e-cd8541f3627b", "sighting_of_ref": "indicator--59b5958f-1e3b-4afd-b189-e1dc20a5de82", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9293fde8-8e6a-49bc-a5b7-7b0677c88c00", "sighting_of_ref": "indicator--637f402f-4a6b-4309-a143-de07f46d43be", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b355e73-5b43-4e07-a34d-502f6a96f1bb", "sighting_of_ref": "indicator--b619e39a-9ae3-4f48-b5ec-832d26027395", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25af606a-8f20-49d8-af2c-0c5d5384211b", "sighting_of_ref": "indicator--71bddfc2-c9dd-445d-9257-46f60a27e936", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0eaa1c8-c3f1-4f56-9f7b-aff4f333f197", "sighting_of_ref": "indicator--b446c868-2196-47d2-9e21-cd3cc06362a8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f71be54-5b17-4ab9-bef7-3b47432015b6", "sighting_of_ref": "indicator--b446c868-2196-47d2-9e21-cd3cc06362a8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dec9f50-7c30-4fc9-b162-75bb71d582af", "sighting_of_ref": "indicator--b446c868-2196-47d2-9e21-cd3cc06362a8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39780b16-912b-4fe7-aaec-efef50500691", "sighting_of_ref": "indicator--78300984-1c71-4656-abc6-560f3495e640", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4a28d2-293b-4b17-9ebc-a4877dfc3372", "sighting_of_ref": "indicator--78300984-1c71-4656-abc6-560f3495e640", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2d695b-caf6-4464-96a3-bb4f0fcc7f9b", "sighting_of_ref": "indicator--d00ebb7b-76b1-4041-8ab9-236a5568505b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4732a877-469b-4b82-a52d-3c4d4accc62e", "sighting_of_ref": "indicator--951bbed1-4a93-43b5-b5c4-36ad6cba2e2b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0167ce-1716-42ec-a8db-9989bcac556b", "sighting_of_ref": "indicator--f3ffbcea-9be7-49c0-8d1d-a87bffed5ed1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40503c9-72d9-4c67-bc7a-9ad4cba4184f", "sighting_of_ref": "indicator--726550f5-7eed-4e07-a60c-fbecf57eb3bb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00beb44a-d891-4b50-9565-c3e713f6aaab", "sighting_of_ref": "indicator--72442be6-1510-42c6-95ff-8d63450c6e39", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3506a01e-90be-40e7-9f37-7107346fa379", "sighting_of_ref": "indicator--a9295fe1-e0d5-448f-96ab-c53133a69dbd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94a5c9d-690f-4be1-9ca1-86e18fa0829b", "sighting_of_ref": "indicator--bd1ad5c2-4877-45d8-bd12-632b3340e2b2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35fcaf23-9d5a-415b-a670-ce0fa4b21ba7", "sighting_of_ref": "indicator--60fdbfab-a727-403a-a3c2-349a6379184e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d06bc49-3718-43da-9dd1-19b77f2a8c5d", "sighting_of_ref": "indicator--ed7a8a2c-9a89-4e2c-9b80-b28619abb79f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c89a73a-1f91-4d06-9a09-844ff99239c1", "sighting_of_ref": "indicator--ed7a8a2c-9a89-4e2c-9b80-b28619abb79f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9972295f-f0f0-4a5c-ac11-05ecc1ae425a", "sighting_of_ref": "indicator--ed7a8a2c-9a89-4e2c-9b80-b28619abb79f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f957ed4-ed53-4275-a008-ce173775fc5f", "sighting_of_ref": "indicator--88072694-849a-46ce-8856-8ceef20c21be", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9349d56-22d3-41d6-9a9e-3f79c487d7cf", "sighting_of_ref": "indicator--88072694-849a-46ce-8856-8ceef20c21be", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fb7ae9-147f-4e48-9e47-4e04ee0e69e4", "sighting_of_ref": "indicator--c37ba335-d9eb-4002-ab39-ee687b287846", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1cd840-b4ed-4f96-886d-c0f939dd9c56", "sighting_of_ref": "indicator--c37ba335-d9eb-4002-ab39-ee687b287846", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def70241-5b55-46bb-81ea-64a462c6e3a4", "sighting_of_ref": "indicator--00838aa5-f6bf-48fa-a33f-4a188ca66d63", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e90a2b-aee6-4630-8f64-7e287d62938c", "sighting_of_ref": "indicator--00838aa5-f6bf-48fa-a33f-4a188ca66d63", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959f909b-7c5c-44a9-8fb9-7a2c29ad977d", "sighting_of_ref": "indicator--ca6f0c9a-f764-4352-963b-4381d1315192", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374c5e63-a2e6-4a2b-89ee-add06411e4c8", "sighting_of_ref": "indicator--999ede37-e26e-47aa-9861-c3d7abf20af5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6eb625-d5ce-421b-8487-b59124b4b1e9", "sighting_of_ref": "indicator--5642a9bc-c042-41e2-92fa-a61d142e2b64", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e25d0a3-63f1-4566-aa0d-9b97caefee25", "sighting_of_ref": "indicator--5642a9bc-c042-41e2-92fa-a61d142e2b64", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc199358-8196-4db5-85db-ebb5ecaef450", "sighting_of_ref": "indicator--5642a9bc-c042-41e2-92fa-a61d142e2b64", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffbccc75-7df4-4818-8215-fc490cf72928", "sighting_of_ref": "indicator--bb0969cf-1325-4b9b-ac95-fe3bb8e70c12", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f5d5d3-a392-4ad1-b289-09bb43947106", "sighting_of_ref": "indicator--456a7c6d-8b9e-491d-98bd-164ca5348c2a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f98a68f-919e-419a-bf22-f6b6e7a339ce", "sighting_of_ref": "indicator--f7ac9d66-7b69-4285-bc6b-b2dec08c5ca4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00701f26-ad97-4d9d-a8f6-feff52fb934a", "sighting_of_ref": "indicator--6ee98e72-fa31-40bf-8e22-b6d485810908", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf62848-cdc1-4729-ade1-6e81a2d724f7", "sighting_of_ref": "indicator--0322e852-33dd-4faa-a55b-cb37d944a1f4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0e3a83-0640-46b4-8112-1dfcdd59b237", "sighting_of_ref": "indicator--cfe4745a-6517-493e-92e6-846dcd1d3562", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7882479-c4b9-4987-829c-32aa76914bab", "sighting_of_ref": "indicator--ac2eb2ec-1b17-4d84-a874-0ab5aff8fd92", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73464f8a-c14b-4338-8e3e-dbc2107667df", "sighting_of_ref": "indicator--ac2eb2ec-1b17-4d84-a874-0ab5aff8fd92", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed8efd2-8f2e-4576-bf94-15bde6840b5d", "sighting_of_ref": "indicator--8e6c61ff-7bb4-48ad-be66-73c255d43b62", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375350f7-a3a3-425e-8baa-d0e7f8617a0f", "sighting_of_ref": "indicator--12ded326-0cae-4139-a77f-33cda0e34680", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c918d5-1f32-496d-a294-9e68556f3588", "sighting_of_ref": "indicator--9cb8ca71-6c38-4f07-900c-d1e306c5e012", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ef48c7-501c-46e6-9923-0a5c6f756d8c", "sighting_of_ref": "indicator--9cb8ca71-6c38-4f07-900c-d1e306c5e012", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c82da4c-a21a-4fbe-a94b-1e88143e0bd5", "sighting_of_ref": "indicator--9cb8ca71-6c38-4f07-900c-d1e306c5e012", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e981de22-282b-44f9-98e6-8feeb311b680", "sighting_of_ref": "indicator--3872b8ae-5241-4320-bc69-7d1b399ae1d6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b0acb7-a554-4a09-b7d6-672692a721d5", "sighting_of_ref": "indicator--3872b8ae-5241-4320-bc69-7d1b399ae1d6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea524bd-a442-4180-9f8c-de924282fda8", "sighting_of_ref": "indicator--3872b8ae-5241-4320-bc69-7d1b399ae1d6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265fc58a-dbe4-476a-a3f4-c877f275fced", "sighting_of_ref": "indicator--bb61fd9d-33b0-4b88-9c2d-0e74bfb22c14", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af619d30-1305-45a9-be05-259529bbf7e9", "sighting_of_ref": "indicator--7a234015-5ee4-4c35-a7aa-64d80f555c60", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a72d8bd-0f17-4423-b6ed-e19800946e36", "sighting_of_ref": "indicator--306b9147-8f6e-459a-9cbd-7f6130f20bd9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ad7a96-47e8-4162-9e62-a1bc5a90c89b", "sighting_of_ref": "indicator--306b9147-8f6e-459a-9cbd-7f6130f20bd9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b5ae46-8bb2-4441-b6a7-0d0c899d3c72", "sighting_of_ref": "indicator--306b9147-8f6e-459a-9cbd-7f6130f20bd9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c5eed5-6cb6-43a2-a88f-ffa3bc6b1787", "sighting_of_ref": "indicator--fdfa7e1d-9f1c-4b31-a304-95cd8a2c6f27", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799ed89e-1c77-44d6-ab01-37a4a81da57a", "sighting_of_ref": "indicator--2c1d35e2-9bde-4884-94af-561767e61478", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e955b1c3-abb3-403e-820a-84ce6bdcb77c", "sighting_of_ref": "indicator--2c1d35e2-9bde-4884-94af-561767e61478", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd416781-f60e-40b2-8917-5df3aa69965b", "sighting_of_ref": "indicator--2c1d35e2-9bde-4884-94af-561767e61478", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d75112d-d95e-429d-a21a-2c751ffd86bb", "sighting_of_ref": "indicator--96a75495-d1d4-493a-b06d-c131c6230ee4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bebbecf-7b0e-4de1-8f9b-54e62b3d31bc", "sighting_of_ref": "indicator--96a75495-d1d4-493a-b06d-c131c6230ee4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31604dbc-b6d4-4ee6-b213-e8f532c6757d", "sighting_of_ref": "indicator--056a4d8b-c57b-4ca9-9b6f-96b2941d1689", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f93f6d8-6e52-4499-8251-fbe233d5ef04", "sighting_of_ref": "indicator--056a4d8b-c57b-4ca9-9b6f-96b2941d1689", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75dc003a-ffc7-4e13-a078-ba03c47744ad", "sighting_of_ref": "indicator--056a4d8b-c57b-4ca9-9b6f-96b2941d1689", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42e3011-d93d-4bfe-aa0d-9c5309883af2", "sighting_of_ref": "indicator--e5732d42-5d72-45c9-91a5-a17f67c6910b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef89e9d-3f58-40d2-a32b-5e7a372f6324", "sighting_of_ref": "indicator--e5732d42-5d72-45c9-91a5-a17f67c6910b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f1a39d-ecdb-4b0f-aef4-628e23e8d8cc", "sighting_of_ref": "indicator--77636618-03cf-412a-9c5a-3f805f63e0cf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e9e4ed-740a-4e68-a3ad-22090a56c5dd", "sighting_of_ref": "indicator--77636618-03cf-412a-9c5a-3f805f63e0cf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23bbefb8-e376-4a46-87b9-1b3205dfacbd", "sighting_of_ref": "indicator--77636618-03cf-412a-9c5a-3f805f63e0cf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613413fc-a1a6-4311-9dba-c33e9af93c2b", "sighting_of_ref": "indicator--5bff0be2-abd4-408c-8762-8ab65daac36d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0856147b-79b7-40bf-8bb0-1c5d7ddc9d1a", "sighting_of_ref": "indicator--5bff0be2-abd4-408c-8762-8ab65daac36d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b86334-cea3-4039-adca-da780d1e57c2", "sighting_of_ref": "indicator--5bff0be2-abd4-408c-8762-8ab65daac36d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976f456f-96fb-4db1-b307-b504babcbcea", "sighting_of_ref": "indicator--0cfc732c-44e6-4766-b484-5f5b14b6c396", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b62b97-dc98-4785-9493-685289aa323d", "sighting_of_ref": "indicator--0cfc732c-44e6-4766-b484-5f5b14b6c396", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b2d7f4-e2b0-41db-bb59-9ecada379ba0", "sighting_of_ref": "indicator--0cfc732c-44e6-4766-b484-5f5b14b6c396", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0218e6b1-2ef1-4c58-ae34-218f3ebebe49", "sighting_of_ref": "indicator--84378a62-9014-4f4c-aa47-844f984d6425", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55100d9c-a125-4de2-88d5-0b2f5ddc5e95", "sighting_of_ref": "indicator--aed0e9da-eab7-4786-b557-7e2d0fae8fe6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6829197a-2ceb-46e5-8c30-231be04c4265", "sighting_of_ref": "indicator--aed0e9da-eab7-4786-b557-7e2d0fae8fe6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f7a2fc-d30a-4602-8f00-56fc3c03704d", "sighting_of_ref": "indicator--aed0e9da-eab7-4786-b557-7e2d0fae8fe6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1f03c7-9b1b-4fd4-823b-1e3cf3cef756", "sighting_of_ref": "indicator--a647277b-cb80-4772-adc1-f6eb67ee07c5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13106317-8f91-4dcc-8297-3f2d8b3417b9", "sighting_of_ref": "indicator--a647277b-cb80-4772-adc1-f6eb67ee07c5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e16e6c5-695c-41be-8fb6-e75f80fa175f", "sighting_of_ref": "indicator--a647277b-cb80-4772-adc1-f6eb67ee07c5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b474953c-287a-4d76-8232-aa5c5486195c", "sighting_of_ref": "indicator--cc5e9726-05e2-4f1f-915f-1eeb61507e34", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ebf3f93-aef4-4d3a-8b21-0a8fdad1fa7f", "sighting_of_ref": "indicator--db2818a9-c957-4292-bb71-8e28de6a5208", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9544e6-233f-4c3e-a502-89c8e2d8d257", "sighting_of_ref": "indicator--db2818a9-c957-4292-bb71-8e28de6a5208", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2b03e6-9ec3-42a9-9a4d-141bdc382936", "sighting_of_ref": "indicator--890b9f26-dc35-4fda-a4e5-6e6d4d6e608d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf247470-501e-4ea9-acb4-2c612460b265", "sighting_of_ref": "indicator--a4822a29-8511-40b1-ae08-481a82b38069", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3efd85fc-19a5-4137-9999-31897a3bea6a", "sighting_of_ref": "indicator--a4822a29-8511-40b1-ae08-481a82b38069", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357a8340-3d52-4790-ab16-2e68308d9b20", "sighting_of_ref": "indicator--a4822a29-8511-40b1-ae08-481a82b38069", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ec0bb8-0784-4adb-af23-a0ca2e223555", "sighting_of_ref": "indicator--1d5987f4-25dc-4984-999c-27174f622e26", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6814792-1cf4-45f1-bc08-479d6e221db8", "sighting_of_ref": "indicator--86192d6f-5a60-4b03-8aeb-b54f9992e205", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b9ce28-ace3-4551-a033-0637f1a942ae", "sighting_of_ref": "indicator--86192d6f-5a60-4b03-8aeb-b54f9992e205", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26afcafd-d537-4460-a05a-00984877b30d", "sighting_of_ref": "indicator--86192d6f-5a60-4b03-8aeb-b54f9992e205", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbb2246-d5c1-43c0-941b-ff5e350bb01a", "sighting_of_ref": "indicator--364df79d-00bb-45d4-95a8-767f515936b2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca609c23-168a-4f78-957b-34f074309290", "sighting_of_ref": "indicator--364df79d-00bb-45d4-95a8-767f515936b2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c59b29-5978-4cc3-8310-83057e1858aa", "sighting_of_ref": "indicator--364df79d-00bb-45d4-95a8-767f515936b2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feffc74e-a7f3-43c0-a23e-34d2e66e9573", "sighting_of_ref": "indicator--f8cf1bda-2216-4838-acc7-61fdd3811d16", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204fb21e-779f-4817-bea7-66bfca90c2f7", "sighting_of_ref": "indicator--f8cf1bda-2216-4838-acc7-61fdd3811d16", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507f151a-6f9a-4659-9975-29e746a8cdac", "sighting_of_ref": "indicator--f8cf1bda-2216-4838-acc7-61fdd3811d16", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0db42e-f3f5-45ae-90e8-ae0226ac1965", "sighting_of_ref": "indicator--949239a1-75cf-4bf5-b4d7-fd5da76b710f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ed9301-701e-4549-ade1-d735aba2a6e5", "sighting_of_ref": "indicator--949239a1-75cf-4bf5-b4d7-fd5da76b710f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204ab2a1-1a39-4291-8688-8726faadb2e6", "sighting_of_ref": "indicator--949239a1-75cf-4bf5-b4d7-fd5da76b710f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99bf5e9a-e072-427a-941a-d97b17bfb2e9", "sighting_of_ref": "indicator--6e72f57d-5512-447a-beef-173bc85463d0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eea0c6c-aac8-4461-b463-5382c972e1e4", "sighting_of_ref": "indicator--281aa0c1-24c4-4729-9bca-3676ea85f915", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c9fd40-c4db-4686-8848-93af8dd92b71", "sighting_of_ref": "indicator--281aa0c1-24c4-4729-9bca-3676ea85f915", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d0359a-2002-4966-acc3-1c06518c3c87", "sighting_of_ref": "indicator--281aa0c1-24c4-4729-9bca-3676ea85f915", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e05ddd-fab1-446f-ad6b-5824ed7566a2", "sighting_of_ref": "indicator--d478791e-e316-4fde-af0e-142d66097e6f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0094db6-ee8c-49f5-bcf3-ac136ddaf2e4", "sighting_of_ref": "indicator--d478791e-e316-4fde-af0e-142d66097e6f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf7d679-b328-4396-ba90-9d1f5a401c42", "sighting_of_ref": "indicator--d478791e-e316-4fde-af0e-142d66097e6f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b4d181-ce91-4593-a191-0217d509a103", "sighting_of_ref": "indicator--9b9df846-429f-4b41-ba9e-080a1116793e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc5be70-fb01-4ba4-978c-aab608906867", "sighting_of_ref": "indicator--9b9df846-429f-4b41-ba9e-080a1116793e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598648e1-4dd5-4985-9346-4b8b7019717f", "sighting_of_ref": "indicator--9b9df846-429f-4b41-ba9e-080a1116793e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d6e663-6ea9-4d25-89cb-2dffd27dbea5", "sighting_of_ref": "indicator--433d9cdc-f841-4ff1-a5f5-4ef35cf3dd6e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff469a0-bcc2-4855-8edf-91fe4b8cd8f1", "sighting_of_ref": "indicator--433d9cdc-f841-4ff1-a5f5-4ef35cf3dd6e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--101c8308-7ab2-4233-b605-a09efcbd1ce9", "sighting_of_ref": "indicator--433d9cdc-f841-4ff1-a5f5-4ef35cf3dd6e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7569c1bf-fe78-4bc5-8c37-d95982e04a01", "sighting_of_ref": "indicator--91f33dfc-8a63-4453-b59e-887037e3143a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0096b3-f761-412a-bb07-2b3a56813f84", "sighting_of_ref": "indicator--91f33dfc-8a63-4453-b59e-887037e3143a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8319c9e-f07f-465d-8d72-852dd903a8f6", "sighting_of_ref": "indicator--91f33dfc-8a63-4453-b59e-887037e3143a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2438be1c-970a-4715-9a92-e0c13ec0730b", "sighting_of_ref": "indicator--41568da4-e192-406e-8c1c-15ef98bc18cc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f1c48b-7fe1-4d25-b6bc-9c78dcd5cb4b", "sighting_of_ref": "indicator--41568da4-e192-406e-8c1c-15ef98bc18cc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c952dda7-b79f-4df7-a59d-c28d9de1629c", "sighting_of_ref": "indicator--41568da4-e192-406e-8c1c-15ef98bc18cc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7375fa97-57cd-40e1-b6d6-de0afcbb718e", "sighting_of_ref": "indicator--6a5b427a-2ae0-4f4e-ae13-09cdf2665443", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c076b3fe-ce0e-402e-830a-6e38f4c1c493", "sighting_of_ref": "indicator--6a5b427a-2ae0-4f4e-ae13-09cdf2665443", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02c9a0d-bbc8-4bf1-93d3-c77bbaa7c416", "sighting_of_ref": "indicator--6a5b427a-2ae0-4f4e-ae13-09cdf2665443", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ecb0e8-9083-458e-aeff-863ded7f593d", "sighting_of_ref": "indicator--b4fecb3f-9fdb-49af-8c5b-a88427ba89e9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ad74e4-872b-4854-8a70-56f5436e6e38", "sighting_of_ref": "indicator--b4fecb3f-9fdb-49af-8c5b-a88427ba89e9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692165da-8234-47a0-ba38-49087d7710f7", "sighting_of_ref": "indicator--b4fecb3f-9fdb-49af-8c5b-a88427ba89e9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3cd8784-b338-4cdf-8f88-7b682ad8d745", "sighting_of_ref": "indicator--9d2628a0-2a15-452b-947d-df370c95abdf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336b5dda-5d8e-4ad3-86a2-fe65b7229b9e", "sighting_of_ref": "indicator--cd42cc45-f545-4dd1-91d8-4aa9d30594dd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06bcf882-1928-4799-ab99-688514fc0e05", "sighting_of_ref": "indicator--cd42cc45-f545-4dd1-91d8-4aa9d30594dd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb5379e-3150-44f9-978a-63bb640afb10", "sighting_of_ref": "indicator--cd42cc45-f545-4dd1-91d8-4aa9d30594dd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5189fc-80c2-47a0-b6e9-4c4cff4e2627", "sighting_of_ref": "indicator--0a992a3c-d378-409e-be48-fceb95fa2b01", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cca8bbc-7f00-401f-9817-cf5af64b931f", "sighting_of_ref": "indicator--be16cf52-cd9c-4aa1-8e21-2421a0ffde2f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb0525a-67a9-45bb-aec9-4b3144d741ad", "sighting_of_ref": "indicator--be16cf52-cd9c-4aa1-8e21-2421a0ffde2f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839be63e-0548-47f5-a0cc-2a55f58bfe2a", "sighting_of_ref": "indicator--be16cf52-cd9c-4aa1-8e21-2421a0ffde2f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba963ec-fd82-4cd3-a5c4-55818bffd40a", "sighting_of_ref": "indicator--686a466a-5e1e-41ee-9c11-7f0e8cd57037", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0d940a-c779-4588-a097-b26cf164344c", "sighting_of_ref": "indicator--686a466a-5e1e-41ee-9c11-7f0e8cd57037", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8846c10-e91d-4669-93e7-ed988be09453", "sighting_of_ref": "indicator--686a466a-5e1e-41ee-9c11-7f0e8cd57037", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f090623d-30d4-412a-8dd8-0962f01f3194", "sighting_of_ref": "indicator--e5ab1ac1-62e7-4ad6-8718-3138368c800f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0877e1d-5aee-4930-91b9-c6fd3d8f5827", "sighting_of_ref": "indicator--e5ab1ac1-62e7-4ad6-8718-3138368c800f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7619767-5848-413a-bdd8-fc5da4b30edc", "sighting_of_ref": "indicator--e5ab1ac1-62e7-4ad6-8718-3138368c800f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949a8a86-94aa-49f4-9895-a26fd43ea9bc", "sighting_of_ref": "indicator--9a30efae-0ee4-4d4a-a6fa-f5712a1b53b2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aecac088-6827-4515-b4f1-d400ce473a06", "sighting_of_ref": "indicator--43851c4e-afcc-4fcd-ab02-7ff9f5adbedc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36acf758-c000-4d54-a3c6-c5f3703919e7", "sighting_of_ref": "indicator--43851c4e-afcc-4fcd-ab02-7ff9f5adbedc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3fed1e9-d7dd-48e9-87ae-bb77e84d82c6", "sighting_of_ref": "indicator--2f11a14f-cdb8-4936-b799-37e487fcc618", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab886988-aa3e-4dd9-9f0f-fb280a66e621", "sighting_of_ref": "indicator--db122bf5-5c7f-4435-a546-61e3914da496", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326ce122-7029-4f39-a851-6fd43407f770", "sighting_of_ref": "indicator--a82ad73c-ba16-4bac-a006-128ef7bea18d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5ac9a5-423c-4a31-a727-f6fa8b7780e2", "sighting_of_ref": "indicator--fe52e31c-a059-4124-b3dd-3e15ab19895a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6b9a3e-dc19-4a16-bfa3-ec74029e294c", "sighting_of_ref": "indicator--1c2eea6c-d7f3-49a9-8a13-26ff20b74a45", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16bb8916-eeae-46eb-9dcd-d3e3b0ce178b", "sighting_of_ref": "indicator--6445cf0d-d81f-4aeb-b146-195375e289a7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91508be-c2a6-4532-b9a1-5e1247ff030b", "sighting_of_ref": "indicator--fcc15bf9-2c69-43d0-81c7-ff82dcd52771", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45fc987c-539a-4cc6-ac33-d8f10e0a9ec1", "sighting_of_ref": "indicator--fcc15bf9-2c69-43d0-81c7-ff82dcd52771", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e92475b-e6dc-494a-aee2-33272a0a1bf6", "sighting_of_ref": "indicator--fcc15bf9-2c69-43d0-81c7-ff82dcd52771", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb489e8d-82f1-4b93-9bb1-60f3de6d5668", "sighting_of_ref": "indicator--72d6377f-9ce0-4cec-878c-0b25185fa3b4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35916dc5-8ca4-4a60-8887-d605d17073ad", "sighting_of_ref": "indicator--cfb3935c-b895-4d83-b82b-9fb09b231c65", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294d2517-6d05-4201-8b2c-10489e92bd74", "sighting_of_ref": "indicator--cfb3935c-b895-4d83-b82b-9fb09b231c65", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a009b4-731d-4d97-bc37-dca8af01b1c2", "sighting_of_ref": "indicator--55702f97-0556-4a7e-aac4-f97d5d48d402", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf7b98d-b1b2-46db-9465-3291187a5f20", "sighting_of_ref": "indicator--2aad4b76-3aa7-4918-ae4d-2d1fdc59ba4c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1283480-a1da-40ea-af05-f6cca789df1f", "sighting_of_ref": "indicator--86dd9b21-9733-41c5-9423-69f516c81569", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7f913d-59b5-4769-9c6b-ea173400a323", "sighting_of_ref": "indicator--4876b97b-76c2-412f-8010-2566338c7036", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1592999e-d647-466c-9ffa-4827c78261bd", "sighting_of_ref": "indicator--553e0166-26e4-40be-b26d-238fc31bcd66", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89515685-1e22-4cad-98f8-206742b1d61f", "sighting_of_ref": "indicator--553e0166-26e4-40be-b26d-238fc31bcd66", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ffd4c90-f2be-4cc4-9ffe-c729294d3d4f", "sighting_of_ref": "indicator--553e0166-26e4-40be-b26d-238fc31bcd66", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fede040b-1a12-4e6c-850d-cb2bd15c5108", "sighting_of_ref": "indicator--6f9fa62b-bc31-4242-8320-8460f16219f0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2316622e-b71a-408e-8ea7-202fd44de514", "sighting_of_ref": "indicator--d58d3291-3e69-4654-806f-017fd3125c0b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae48482f-0fd5-4c50-8e2e-b38ee78fba21", "sighting_of_ref": "indicator--d58d3291-3e69-4654-806f-017fd3125c0b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cdae99d-6143-431c-afe5-93dfc07311c6", "sighting_of_ref": "indicator--9699a92d-0882-4090-8cf9-a71b4d02dda5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9848959a-40b2-4bbf-a42e-98e47f2f089e", "sighting_of_ref": "indicator--9699a92d-0882-4090-8cf9-a71b4d02dda5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2ffdbe-0769-4b8f-b7bc-d23c0dd5b37d", "sighting_of_ref": "indicator--03c0b5a0-0680-4b47-8275-48eaad23c156", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93d7f54-f298-4962-9be8-929d00545f4f", "sighting_of_ref": "indicator--19b579a6-a75d-4d06-b6ad-4ce778645231", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5d282a-e81b-4a5a-92cc-4bb80d9b7542", "sighting_of_ref": "indicator--19b579a6-a75d-4d06-b6ad-4ce778645231", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5afdf798-0c4c-4190-8f8a-a577a71cfdbb", "sighting_of_ref": "indicator--3f81e3df-d2e1-43e0-ad4d-c61487d78661", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09ec2d7-362d-4d7c-8334-88192d469ef4", "sighting_of_ref": "indicator--3f81e3df-d2e1-43e0-ad4d-c61487d78661", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abcbd2ad-f161-45f0-a4f4-458b6ee651df", "sighting_of_ref": "indicator--3f81e3df-d2e1-43e0-ad4d-c61487d78661", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3387c3c-f646-403f-b7db-6118b6254cb7", "sighting_of_ref": "indicator--f3dfa8ff-d84e-45ca-ac45-0748170f7bcd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad063d79-03d4-4e4d-92c7-7c487131223f", "sighting_of_ref": "indicator--f3dfa8ff-d84e-45ca-ac45-0748170f7bcd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30d8d4c-11ab-489e-b0f3-a2e1792a351d", "sighting_of_ref": "indicator--55cec6b7-e6d9-42d6-bb71-981485bbd9b0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d659f4d-b340-4434-b640-e4f4facc39cb", "sighting_of_ref": "indicator--08ae53f5-85ec-49fe-937d-26d01eb50bda", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77790c5-ef7f-4d0e-99bb-c43f3c26d396", "sighting_of_ref": "indicator--90d3085e-d618-4b29-b380-2d29ff6a8228", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec3ca58-decc-47bf-91e9-d96d6159d755", "sighting_of_ref": "indicator--ba0c3ebc-517a-45ba-82dd-8d69bf99fab8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7524f579-d1cb-4801-ba5a-706e7a7a3634", "sighting_of_ref": "indicator--2d755dd2-917f-4f69-b3b9-e9bb24771309", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e83189b-ed6a-4d52-92d4-e351bfe66a68", "sighting_of_ref": "indicator--2d755dd2-917f-4f69-b3b9-e9bb24771309", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c122ab-0fe2-413d-a880-5b200a906845", "sighting_of_ref": "indicator--2d755dd2-917f-4f69-b3b9-e9bb24771309", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7286c1-2851-48c6-afff-6a32cfd524ff", "sighting_of_ref": "indicator--8a2febad-593f-441b-9ab4-bc91a2cd19d5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b2d0de-62c8-4909-9bab-c066e3318163", "sighting_of_ref": "indicator--8a2febad-593f-441b-9ab4-bc91a2cd19d5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d835f92-44b2-4f8b-a827-a2f4e63211c0", "sighting_of_ref": "indicator--8a2febad-593f-441b-9ab4-bc91a2cd19d5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b17854a-70f6-4f67-814c-2e3b41d77292", "sighting_of_ref": "indicator--c958a2df-f1ca-46e3-bb7c-9fee35f1eaf7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13447047-a423-42cf-9b64-f47ad6558b23", "sighting_of_ref": "indicator--c958a2df-f1ca-46e3-bb7c-9fee35f1eaf7", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3028b33-ff7c-47c7-a06f-3a84a9c6361d", "sighting_of_ref": "indicator--ee911363-549a-4625-a87a-22851f0c7821", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b861a20-de31-4bcb-afab-9cd2bd31e446", "sighting_of_ref": "indicator--319a26a4-32d3-4330-a11f-63a38f8975f8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7208f132-af5e-44ad-a381-91c818779cce", "sighting_of_ref": "indicator--6254a700-315d-4242-9462-746007fb3727", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6963756e-d171-4434-bfb2-8c7a6d78366a", "sighting_of_ref": "indicator--7da21084-4ab1-473b-bfc6-090f3dffc181", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7286e7de-e51d-4eab-b321-6e2c50b39e7f", "sighting_of_ref": "indicator--a616c9c9-a797-43a4-8a35-4989179aeae9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d481ca78-cc01-45a7-912c-26ff21a00b77", "sighting_of_ref": "indicator--a616c9c9-a797-43a4-8a35-4989179aeae9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dffcaa60-e8e2-4a9a-ab6a-6e0e21bfcf0f", "sighting_of_ref": "indicator--4eb7036c-ab20-4955-abce-ef6eb43797db", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b9ccdf-3574-4549-87ce-81d95ed1bc10", "sighting_of_ref": "indicator--78a00cb8-8930-4674-a570-603c14e93fb1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad29feb-728b-4d9f-902f-b16a3a709a2e", "sighting_of_ref": "indicator--1786de4c-96d8-49c3-be71-27759057a3f7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a7a145-3ea1-42a7-8b5a-dc9cf61e5704", "sighting_of_ref": "indicator--1786de4c-96d8-49c3-be71-27759057a3f7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69dd9bc-381e-4c1d-ac16-3dc70da4505b", "sighting_of_ref": "indicator--1786de4c-96d8-49c3-be71-27759057a3f7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42585f2-02b9-4c72-b9ed-652983253fcb", "sighting_of_ref": "indicator--1623e194-30da-403b-84e1-18decd99e220", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a16862-3ef4-4b31-8651-07bbb22900d5", "sighting_of_ref": "indicator--0073f749-dd50-479e-929b-0a805b99a022", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbca9234-049a-46a3-85b9-ad5c9b6e926d", "sighting_of_ref": "indicator--940ea44e-6f09-45e6-a434-060a68996499", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab54ef30-56f0-4b44-b137-1590909bf8a2", "sighting_of_ref": "indicator--4f194e97-4c7b-45e1-94a4-04001ab7710e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bcdf1b-ae7f-441c-9cda-180d084d3c27", "sighting_of_ref": "indicator--4f194e97-4c7b-45e1-94a4-04001ab7710e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8624fe54-c69f-4330-93be-34e1fabdb900", "sighting_of_ref": "indicator--a44e5e2e-ef81-46aa-92e1-d5dec520818d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4451e0be-3775-47fb-b184-bd6f131add52", "sighting_of_ref": "indicator--a44e5e2e-ef81-46aa-92e1-d5dec520818d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6be1a92-a82c-4163-a96e-10435d142b10", "sighting_of_ref": "indicator--a44e5e2e-ef81-46aa-92e1-d5dec520818d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b29d67d-0d2e-44cb-880b-14bad631de78", "sighting_of_ref": "indicator--1ae7bab6-dd44-40ab-89ce-f2946cb7cd0a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d70ada-84b8-4e37-adb3-8375c6c09149", "sighting_of_ref": "indicator--1ae7bab6-dd44-40ab-89ce-f2946cb7cd0a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb546580-14dc-4b82-93ff-518dc18f0eb7", "sighting_of_ref": "indicator--58d2bc2f-e474-43b7-b023-ca551122f2a7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dfd1039-f6a4-4a77-932a-2b84b40d0821", "sighting_of_ref": "indicator--58d2bc2f-e474-43b7-b023-ca551122f2a7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa9b4d3e-25c9-447c-84e0-fbc576dfbd3d", "sighting_of_ref": "indicator--58d2bc2f-e474-43b7-b023-ca551122f2a7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647c78b9-e51e-4128-9a43-013710524d63", "sighting_of_ref": "indicator--7feebf85-8903-4477-ad53-39c03239750f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a82dd44-fe0a-4fd3-be1a-21d58085eb63", "sighting_of_ref": "indicator--946fb465-fda7-4466-be09-c9dad8e149c1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2621e73-94ee-40ab-ac1f-87c784659b6b", "sighting_of_ref": "indicator--3cf46e0f-eeac-47ba-8e73-88564dc8db0f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12073eba-b69d-415c-be37-b2106afd1e1f", "sighting_of_ref": "indicator--3cf46e0f-eeac-47ba-8e73-88564dc8db0f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d408bd65-4624-4858-8172-b50c08c36af3", "sighting_of_ref": "indicator--3cf46e0f-eeac-47ba-8e73-88564dc8db0f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10648aff-5c13-4d4c-8793-0cef6e050da2", "sighting_of_ref": "indicator--a76d5ba9-9fe4-48e4-8665-5ee49fc00654", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ceb950-4ae8-420f-81c6-3a3769d9f20f", "sighting_of_ref": "indicator--a76d5ba9-9fe4-48e4-8665-5ee49fc00654", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba7be0b-70c4-4533-b2d4-80419f2d046f", "sighting_of_ref": "indicator--a76d5ba9-9fe4-48e4-8665-5ee49fc00654", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0c0625-0891-4ef4-8307-7bce8ba88a1a", "sighting_of_ref": "indicator--79461c38-448c-4664-937b-7943cd01fded", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5adde8aa-c791-4211-aba2-96841aa52466", "sighting_of_ref": "indicator--e7ccbbc6-581b-4cc1-8354-0666dc549c61", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e75901-003c-494a-9734-8669411e105c", "sighting_of_ref": "indicator--e7ccbbc6-581b-4cc1-8354-0666dc549c61", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad2facb-90d2-4789-b5de-5a04414f4608", "sighting_of_ref": "indicator--e7ccbbc6-581b-4cc1-8354-0666dc549c61", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898fef12-3257-4b18-bb88-dbf2cc395ba1", "sighting_of_ref": "indicator--b018e83e-1315-4716-b33b-a81b18e4ba75", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e32750-66f6-4bdb-82bb-e05bc251dac1", "sighting_of_ref": "indicator--b018e83e-1315-4716-b33b-a81b18e4ba75", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--850e582f-6318-4e0f-bee6-3abbb03dac18", "sighting_of_ref": "indicator--b018e83e-1315-4716-b33b-a81b18e4ba75", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25cb03df-18c8-4916-8108-0d046ba3f8f1", "sighting_of_ref": "indicator--cc06f87d-8823-4073-b628-8ad8a21c7dc3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8488291f-6944-4a3d-b790-c2890f82d40a", "sighting_of_ref": "indicator--cc06f87d-8823-4073-b628-8ad8a21c7dc3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ffb8ad8-4edc-418e-a88b-1de0b738d13d", "sighting_of_ref": "indicator--cc06f87d-8823-4073-b628-8ad8a21c7dc3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabe7d24-37f7-47bb-a9ef-0419d1dbda12", "sighting_of_ref": "indicator--6a937d57-176c-49fa-9d45-1978fc94da0f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba342d74-c00c-4b0a-9050-5be0efd85f20", "sighting_of_ref": "indicator--6a937d57-176c-49fa-9d45-1978fc94da0f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11771034-efb4-41df-be14-e0e66579b0ea", "sighting_of_ref": "indicator--19e98308-cd63-49be-9c7a-3beedae6cdf5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb9cb37-c9a2-4d32-88c1-c7ccb74e0a6b", "sighting_of_ref": "indicator--6329dfaa-edab-49e3-9b18-c20abbe8d268", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b190021-ce97-4d8b-a398-fda13b2597ba", "sighting_of_ref": "indicator--667f4075-ddeb-45f1-966d-97273f90cc22", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6744aa5-886d-419d-b5be-34f16b206251", "sighting_of_ref": "indicator--96fc5507-19e4-484d-824f-350e0022cece", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd165aad-a173-44a4-a2ea-c081df2f908c", "sighting_of_ref": "indicator--7953d7e0-6216-4cec-b9d0-ac6206967327", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc7336b-8a30-4940-bd94-4bb28bb12410", "sighting_of_ref": "indicator--53c68ee6-4b79-408c-860f-71713fef0d55", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62328697-8f86-4fe6-944c-d93a081ec744", "sighting_of_ref": "indicator--7a556665-71ff-4ece-81c4-d14490432ade", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3fe17b-e6b5-4522-8d6f-12e86abf1736", "sighting_of_ref": "indicator--7a556665-71ff-4ece-81c4-d14490432ade", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89880e1-e4e0-438a-a1e4-09ebe35d61b0", "sighting_of_ref": "indicator--7a556665-71ff-4ece-81c4-d14490432ade", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fc0198-e2b6-46d7-a4a4-8d6da3f8cbf5", "sighting_of_ref": "indicator--a448f368-cab1-4c6a-8228-df49e1b2dfd5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad8485d-5b1b-4629-8d51-eeeac49b36f3", "sighting_of_ref": "indicator--a448f368-cab1-4c6a-8228-df49e1b2dfd5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00838e6f-c337-45c1-ba9d-a8ce6eb2dcc9", "sighting_of_ref": "indicator--a448f368-cab1-4c6a-8228-df49e1b2dfd5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26452f6-d411-4f94-9d85-dc2c90df6524", "sighting_of_ref": "indicator--2a86e2e0-c86d-475f-889e-d7d07d66e0ca", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52362f1f-beb3-4aaa-b83b-6b1ff8f04ef0", "sighting_of_ref": "indicator--2a86e2e0-c86d-475f-889e-d7d07d66e0ca", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515a96b6-1ea3-4950-97cd-d6bf49d07b8a", "sighting_of_ref": "indicator--9a2d44a3-5a0e-4ed4-9454-e6e693bf82de", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bed8bc3-c9f4-4e51-a2f0-2630908a7c61", "sighting_of_ref": "indicator--01dc1823-27e0-4d83-9ccb-abfa9e84a928", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48671fd-86c2-4af5-ba97-64e23b32d246", "sighting_of_ref": "indicator--66ac608f-4e4e-40f6-bdfe-ba003d53e80e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e460750-ed67-49f3-b978-930a4112f558", "sighting_of_ref": "indicator--77bb286e-4f5c-4db5-840e-2a4a1a367d70", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f5b2a4-05b8-4668-8e7d-4dcf0ce6f784", "sighting_of_ref": "indicator--9a473ff3-4924-491d-9094-cc29f72e9e78", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266a25a7-c587-41d5-9e0d-247e04fcf376", "sighting_of_ref": "indicator--b1d28a63-f0ef-4b9e-936a-f01e662ee884", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--443f6c82-1a16-4959-ac54-5bd4e47df5fb", "sighting_of_ref": "indicator--5c2fc951-d76b-4f68-8191-aef051c18e74", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dab27cc-8204-4809-a2a5-e8f3554d0f07", "sighting_of_ref": "indicator--eb7e3231-c14d-4864-bd02-f64d7bffda65", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff15e8b-5e06-46ce-bc31-efcb3ba95f25", "sighting_of_ref": "indicator--6192bd6c-61f7-48cb-8bcc-7aefd7e22f0e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4c44f0-0378-4823-ad51-b1ef5f39be70", "sighting_of_ref": "indicator--d31d68b1-0826-4900-b4b1-676646dd1b4c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8931ec77-eedc-41ae-a8c4-3c0e35737ccd", "sighting_of_ref": "indicator--5bd3332c-703c-486b-805a-91a7a659d426", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45317333-db37-4746-b8e0-8d1ac5e65802", "sighting_of_ref": "indicator--8ce9692b-8a69-4666-876f-5e68988e70ab", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff6e441-9f40-449a-a9f9-9e5356026565", "sighting_of_ref": "indicator--9adf3548-d872-43f9-bfbe-11b49e862dc4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d31bd6-fe79-4e6e-9b16-15178dfbd2e1", "sighting_of_ref": "indicator--3d9386d0-7bce-4ee5-8ae4-2eeaef03b35e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412ef759-aaab-4298-9659-c4c65ab3874c", "sighting_of_ref": "indicator--08b293b9-3fff-4bd4-badb-359697a314d5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b845ac-518d-4217-9ad5-0a8f0df19fe8", "sighting_of_ref": "indicator--01f516f0-3013-462c-8520-2dfb9b1b918c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa139e76-489e-4718-bf7a-b7c8ecb43cd8", "sighting_of_ref": "indicator--4d84aff9-b8bd-4de8-89e3-db581d373782", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e530c945-4b23-4905-bd96-037c92b6edb8", "sighting_of_ref": "indicator--0da0d2c7-c485-4f42-a777-abfd899b8615", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5aca70-101b-4d37-9af4-75dd86d208b1", "sighting_of_ref": "indicator--77b32487-0df1-4ea7-96ab-fb3b24d21c3c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07eef61c-8825-495e-91fe-9d93b3f7b6a8", "sighting_of_ref": "indicator--11ed6c24-fb0a-402b-8790-e9cf3d9cf8a6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03e62ab-9259-4d07-b240-6121959d55c8", "sighting_of_ref": "indicator--73d291a7-9f2d-44d7-94dd-5b395aa11ece", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b71771-2d21-41ae-ba6f-e5f030ff255b", "sighting_of_ref": "indicator--4224c7fe-e3a4-41d2-aa93-e43b83730d48", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae055de-0b2f-4382-856c-4c99cadde508", "sighting_of_ref": "indicator--0f4e962b-b219-4688-bfda-b6085076efbf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092f85e0-1579-45ec-a7ec-b141eaa7b9da", "sighting_of_ref": "indicator--998f874c-5130-4984-ae55-9b3a39b9a308", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39185ec-c120-474e-a1ee-5787d90fb1d2", "sighting_of_ref": "indicator--b85e0d25-2a68-4f79-99e1-c4cfe81b3bed", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce5c13c-b9f0-46f1-a6e2-ff6467a7dadf", "sighting_of_ref": "indicator--c0cfcb2c-13a4-494b-847a-06badc558c34", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc75302-a06e-49f0-a61f-50c69ebaee10", "sighting_of_ref": "indicator--21647dc4-861d-4c45-9947-4d96419ba706", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d75b801-ec21-4686-bb45-57c0ed96ebbd", "sighting_of_ref": "indicator--10e7d1fb-62b7-42a1-a864-271257260444", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a515a75-6352-4f30-8081-cdd7789d3de3", "sighting_of_ref": "indicator--e2892708-5296-4f8e-b7c0-c02c795fcfb2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658a4243-20fa-4ab1-a7ad-1cc9c945d092", "sighting_of_ref": "indicator--797866f1-002f-4ed9-8bf8-fbd529c0074d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae3a65c2-aba7-42f9-a781-75b481549dcc", "sighting_of_ref": "indicator--d4c0b7b4-ed97-4d08-9c5a-07626ee53338", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173d6cb2-b2c0-4c9e-8c64-d62fbb9e143c", "sighting_of_ref": "indicator--d4c0b7b4-ed97-4d08-9c5a-07626ee53338", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8259d64e-9950-4070-8bc5-5ad1dc143ec9", "sighting_of_ref": "indicator--7769bd64-6240-4167-962b-214dcf87a4a8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9924c179-3e1d-4026-a69e-cda45dad4827", "sighting_of_ref": "indicator--7769bd64-6240-4167-962b-214dcf87a4a8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b284a76c-95dc-4f7a-9698-4614152a5785", "sighting_of_ref": "indicator--709d19a4-bb04-478b-b7a3-0f3682a93100", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4145e562-42a1-4fa6-89e3-9924c9f07f1a", "sighting_of_ref": "indicator--c025e672-5608-4c3a-baee-9692c8f76370", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4d6492-428a-47ff-922e-6c1853025375", "sighting_of_ref": "indicator--233a4639-b704-4830-b4da-198c1e4e6287", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38586f83-5bbf-40a6-837c-bce11e61076f", "sighting_of_ref": "indicator--0c306a6e-e533-4be2-a8c9-21f6fbea0c9a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1e5bda-57bc-440b-9bc6-ebf7183a0134", "sighting_of_ref": "indicator--58c7db88-618b-4838-b443-9aeb8b68d62a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--115a29db-162b-4904-8841-3a1c37c266ea", "sighting_of_ref": "indicator--2a8f6a05-c94a-419e-aab9-0b0c84f4c70b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e94505-1a4a-4bdd-b797-2f341889d652", "sighting_of_ref": "indicator--2a8f6a05-c94a-419e-aab9-0b0c84f4c70b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034ae0d0-37d3-4710-81cd-39a94138cb8b", "sighting_of_ref": "indicator--2a8f6a05-c94a-419e-aab9-0b0c84f4c70b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a482dfc4-9177-4000-9ead-ce38defd6c60", "sighting_of_ref": "indicator--55e66795-5a42-4b4d-ae84-4d2572147942", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6bf7aa5-9c0d-4fab-8019-13d748e731e9", "sighting_of_ref": "indicator--b68bd94d-6f05-4899-9645-86bb597ada4d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fd4cce-9534-4532-bddd-d5b0b5fb5a5c", "sighting_of_ref": "indicator--2d92fd7b-e727-4138-a108-b8043b44e0dc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0eef918-23b8-4e07-981d-072d3037de3f", "sighting_of_ref": "indicator--2f0978de-5cbb-4e37-96bd-ccb4ab492ee1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e236f9-3f2d-45a7-8105-9ce4464c492a", "sighting_of_ref": "indicator--27386253-ac53-43ed-912a-91a79328eb1c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824f7759-495b-41b4-bb85-74790e2eb9d4", "sighting_of_ref": "indicator--df4e7d78-6f54-4111-9589-487387e1a96b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b4220f-b792-412a-9acc-68746e5be829", "sighting_of_ref": "indicator--d5523fe9-d85e-4304-b7e6-f1c7dde5c80c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88dec464-91cb-46a0-b9c2-8441bf2fa2cc", "sighting_of_ref": "indicator--d935a8ad-a6e4-4305-842f-cbad43508ac3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f36a71-74c0-4cea-8466-03be1af11824", "sighting_of_ref": "indicator--f4fefe8e-88f4-4d76-80a6-224e5bc09a35", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc809754-4afd-483c-896b-069971a931eb", "sighting_of_ref": "indicator--f4fefe8e-88f4-4d76-80a6-224e5bc09a35", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7f476c-83b4-41ff-b6f5-e8848a1dfa43", "sighting_of_ref": "indicator--2f37329c-300e-46a4-803f-c916ef3fa994", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a40ead-bd3a-47b7-8434-5acdef0e34ca", "sighting_of_ref": "indicator--ad117734-ee18-46f5-8829-9f3d71d39f02", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d655556-5255-4e4c-83c9-aa4f1677fad5", "sighting_of_ref": "indicator--ad117734-ee18-46f5-8829-9f3d71d39f02", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229ac404-7002-4c4e-b677-78367dacf3b5", "sighting_of_ref": "indicator--fa39ef0d-738e-4aeb-98b8-be257b24abd0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3253b1b9-0b78-4305-bf64-032a4f65a64a", "sighting_of_ref": "indicator--86487211-51ea-4353-8fe8-5aa318750345", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad295aa-65ad-48a4-b432-16abbd87b28b", "sighting_of_ref": "indicator--99c78a35-4f32-4d95-bc1d-477171147c94", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b139d024-2d48-4158-81f9-3c2f7cb78bef", "sighting_of_ref": "indicator--06a0dd0a-f4e8-4331-93c1-c631e9079c74", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e114b73e-9476-41a8-8523-ae08c0850121", "sighting_of_ref": "indicator--06a0dd0a-f4e8-4331-93c1-c631e9079c74", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0091fd5e-1b76-4398-945b-421f82d3ad3f", "sighting_of_ref": "indicator--a965ef4e-7e52-4572-9709-b4568c46264f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b6561e-3c73-4dfa-89cc-f81b9605d33c", "sighting_of_ref": "indicator--a638e534-36bc-4785-b3e3-15f3f111b528", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d376f8d-ac50-4b3c-95f8-7a5e22386509", "sighting_of_ref": "indicator--0c6b2db9-6889-436e-955c-954aec30690b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6431962-84fe-4231-8af3-f1ae91b02466", "sighting_of_ref": "indicator--0ed5e86a-e24e-4255-aaa7-2e502e8dea5e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7763b262-8f32-4e7b-b992-167c468dbf17", "sighting_of_ref": "indicator--d151ea13-2b60-46c8-82e5-f170842b986c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba71e6a-ddeb-41d0-8094-5011841f48b5", "sighting_of_ref": "indicator--db586c1d-9ad3-4032-bcb4-ccc01f375602", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ffe1cb-0949-453c-8a78-9b2fa2ecfc75", "sighting_of_ref": "indicator--73a6d1bf-78c5-4e71-98df-aeed02984b5a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca453df-ba22-4009-a19a-ddc9b48345c9", "sighting_of_ref": "indicator--4a073d63-b3da-42da-8fe1-e35458b0d8ee", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3c120f-ae5a-4c5c-97c4-6394fd0768d5", "sighting_of_ref": "indicator--cbd454c0-ac61-4e13-b6b6-8bbd8b3526a4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--544353f1-7c34-4f7a-9a1f-11f2bb73fddb", "sighting_of_ref": "indicator--711d9d25-a4c2-4c68-bb6c-88f72ba9ec2e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4796a3da-d63d-43ff-9fbf-36eff22bea27", "sighting_of_ref": "indicator--5b459bc0-e86a-4e0c-a8d8-f89836a3682e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a85af1-674a-4412-8a82-964c2af0cfda", "sighting_of_ref": "indicator--5408a7bd-52ee-42f4-a046-92fb821278a2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3eb678-a944-4af5-835e-947dcabdd0e9", "sighting_of_ref": "indicator--3e8550da-4cb1-48f3-abd2-3a67d1984b49", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd52980a-d011-400a-a336-d18daf3dfe20", "sighting_of_ref": "indicator--7eb9eed2-04e9-4a75-b31e-cc1d75381bf7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737e7b1a-10fb-42c7-a0b7-7c3a00394d7a", "sighting_of_ref": "indicator--7eb9eed2-04e9-4a75-b31e-cc1d75381bf7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300db649-acfb-488e-a2fd-eaa035e33080", "sighting_of_ref": "indicator--350e7951-e232-47eb-9018-35763cb74429", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8254b2f8-ddad-4061-b23e-bc994e508ea1", "sighting_of_ref": "indicator--8370fa19-72fb-4fdd-856d-b81c0e1f197a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b085d794-e629-4f5d-9dac-60d91f09d7e1", "sighting_of_ref": "indicator--b661c902-40e2-487f-828f-025c7e062d7f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b81bccc-0f63-4b6c-ae8a-43e9adf98e72", "sighting_of_ref": "indicator--3763564a-d57b-4a95-90db-5db7df190ce9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82af2e2a-5cc5-42a3-85cb-8fd6933abd9e", "sighting_of_ref": "indicator--d9245318-4fbb-4b22-a2ce-f2b3540ffe33", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f1ca17-3cb1-4cc0-a1d6-cc3d1374f00a", "sighting_of_ref": "indicator--77efbf62-df20-4ced-b1f5-618287a99e2a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77821a58-f779-4af0-9254-20081e07cf15", "sighting_of_ref": "indicator--77efbf62-df20-4ced-b1f5-618287a99e2a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61764f38-f386-4376-b3cc-cd0e927cf50c", "sighting_of_ref": "indicator--0c2766d0-b907-4fe0-b59b-1a4011a40d9c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162790f5-78a6-4b7b-8c83-6f2d90c62984", "sighting_of_ref": "indicator--fb5d0c18-e18e-4c4b-a7a6-0b48fb2ffa8e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f45478a-def7-46c5-8ef5-41290bf4b4a4", "sighting_of_ref": "indicator--fb5d0c18-e18e-4c4b-a7a6-0b48fb2ffa8e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552fea2b-f467-4d2d-b8c8-a0276309ccaa", "sighting_of_ref": "indicator--557bcd7e-9c7d-4d48-8a20-ea40c71b3fe6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7555418-8474-438f-8c37-423ea38719fb", "sighting_of_ref": "indicator--da80f714-1fe9-44e3-9672-fdc8cb3469f7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc46d7e2-5425-44c2-8c7b-e3ed2ec3c21b", "sighting_of_ref": "indicator--c6bb52ca-e881-4661-bb43-7a9711a80c42", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246741e4-1c8a-4bda-8dd4-852776903451", "sighting_of_ref": "indicator--6dd86ba6-14e2-41ca-ac72-c8e40649d71a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997d0a0e-0072-4e32-bf18-a13914834897", "sighting_of_ref": "indicator--8196a436-9046-4d50-aa2d-94ab2127944b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d9ce37-d58d-440b-82d9-543a532d33aa", "sighting_of_ref": "indicator--2058d2a8-6465-46b8-ab75-d1fb541cc272", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997b9231-b7e0-4753-9d82-72b0cad4c4ce", "sighting_of_ref": "indicator--b9d09b1e-6ee3-4e5e-bc09-11d8f9278cb4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1cb50da-7a39-4e3b-8a56-5d1807aa4797", "sighting_of_ref": "indicator--5bbf2b93-8555-49a3-bd3b-41694351e0f3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53feb98-91fc-4be8-953c-4aaafe1fc408", "sighting_of_ref": "indicator--bc8c49a0-4877-4678-83df-426b7968119e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66e853e-cc7f-44bf-aa92-2acc26fa0408", "sighting_of_ref": "indicator--6ff9436f-9f26-44e1-8014-de8ecd433f81", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49f2283-3a3a-4350-9b27-9d80e69e85cc", "sighting_of_ref": "indicator--6ff9436f-9f26-44e1-8014-de8ecd433f81", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beaf2e21-b0f4-4a92-9a36-3054c45a7d4b", "sighting_of_ref": "indicator--6fd685a1-30b9-46a2-87d5-ef23915b7012", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840fe9c8-5512-4508-85b3-dce1fc092fc4", "sighting_of_ref": "indicator--0f892845-de17-4f08-b434-ae6c16728c29", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae4b586-dff1-4d32-8e85-cb32bd45b64e", "sighting_of_ref": "indicator--5fb6f514-d1c5-4325-999a-df1d21d7c5bc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39c871f-2591-484f-9b0c-8cd159347bdc", "sighting_of_ref": "indicator--8c6de32f-707f-4e90-9c02-e6d39a536b48", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e3ed16-973a-4252-b218-823b3e31a350", "sighting_of_ref": "indicator--8c6de32f-707f-4e90-9c02-e6d39a536b48", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0663f70-a579-4082-9e04-a4e846398d45", "sighting_of_ref": "indicator--4227b932-6489-422d-9d52-a55d26b0640c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b061eb07-273f-4173-bc07-1ba70300a905", "sighting_of_ref": "indicator--586af803-d72d-4321-84a9-4f0274fb0c19", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d8e2e7-d120-435b-a4c8-8970d536b412", "sighting_of_ref": "indicator--586af803-d72d-4321-84a9-4f0274fb0c19", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a848e5-e5be-4129-918a-67793c50ff8f", "sighting_of_ref": "indicator--dcd6f27f-af98-4ec9-9691-e935e470c2a6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1cc84f0-dd3b-4793-93ff-306e9c37bd3c", "sighting_of_ref": "indicator--137d98e0-75de-46db-93f2-ca852bf74621", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a449636-31de-4b70-8568-50b180f8a0c7", "sighting_of_ref": "indicator--137d98e0-75de-46db-93f2-ca852bf74621", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee051993-d04e-4c92-b500-7cf97d2df296", "sighting_of_ref": "indicator--99795aa0-ac13-44f3-ac49-49a1551e0087", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a8460e-dd3d-46e4-bd1d-dcc721ae5233", "sighting_of_ref": "indicator--ee764a23-e899-45e1-ab03-2ab0c3271ec2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00aafdda-cb6c-434b-8c02-0ecd75594fb7", "sighting_of_ref": "indicator--2d13b397-5e26-4c3e-a28d-eaac7e050aa3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b5be0e-afdd-4712-9211-7224f8bc04ab", "sighting_of_ref": "indicator--8e8db34f-5b87-43ef-b8d1-68a21ddd3374", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9853d614-ad90-43bd-a9a4-b548c54d56b9", "sighting_of_ref": "indicator--17dd37da-2a91-4ca9-ae8a-5dba4b300c33", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d7ae46-5259-4bcb-8bb0-b7a66b5ece32", "sighting_of_ref": "indicator--17dd37da-2a91-4ca9-ae8a-5dba4b300c33", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c904b00-cb81-4dad-994d-9b630502b00b", "sighting_of_ref": "indicator--2b0a9501-3c94-43f5-a0f9-9a9f28792342", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0454367a-829e-4b90-9560-848ae53a2bfe", "sighting_of_ref": "indicator--2b0a9501-3c94-43f5-a0f9-9a9f28792342", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f49c33-42f9-4fee-b7b5-09689e2fdf82", "sighting_of_ref": "indicator--2b0a9501-3c94-43f5-a0f9-9a9f28792342", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2a6fef-d4b8-45b3-8119-7a58e6fb0757", "sighting_of_ref": "indicator--d5405a43-c3f9-4c3b-a8fb-8279bd9bdbef", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae1baaf-ac45-4df3-ac12-8323941a8648", "sighting_of_ref": "indicator--d5405a43-c3f9-4c3b-a8fb-8279bd9bdbef", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8452b112-a89c-486e-b59d-e44619ed21b7", "sighting_of_ref": "indicator--d5caf048-c6b3-4fb8-9e5d-532db0b61c7b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eea5616-5d48-4b0c-940e-aaf0040882ab", "sighting_of_ref": "indicator--d5caf048-c6b3-4fb8-9e5d-532db0b61c7b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20058a71-c4ff-4a90-8784-1abbfe9841b6", "sighting_of_ref": "indicator--f046542d-498d-4960-b8df-f59f48cdf549", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56740f64-f55e-4d9d-a87b-e1eb1f77dd01", "sighting_of_ref": "indicator--65667acf-9cb7-4ba3-9d50-1a5e9bab7654", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d68c568-d44c-4a67-bfaf-8f0a89fba082", "sighting_of_ref": "indicator--65667acf-9cb7-4ba3-9d50-1a5e9bab7654", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1307633-e230-4b38-984e-82ef1d6916d7", "sighting_of_ref": "indicator--65667acf-9cb7-4ba3-9d50-1a5e9bab7654", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b087883-ffaf-41eb-9ace-deacb0ed40d8", "sighting_of_ref": "indicator--4d2f4a8d-0b8d-467e-a4d5-e19d7ef10a23", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5b2989-9437-4543-9c97-1f075be40d00", "sighting_of_ref": "indicator--530f3708-3910-467e-b037-44d1b896ecd0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a10bd5-e9e3-4ea1-9cbe-acf30a2aa108", "sighting_of_ref": "indicator--530f3708-3910-467e-b037-44d1b896ecd0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3724dc4-12da-4234-ba88-c7fa8a8dd872", "sighting_of_ref": "indicator--530f3708-3910-467e-b037-44d1b896ecd0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f787bf3-c31c-4f63-a818-76c8a61ddfa7", "sighting_of_ref": "indicator--cc93dcd9-91db-4aa2-8345-6e1d35a36fc4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2cc5b8e-f9fc-4a46-8aa7-65ce905ad0ab", "sighting_of_ref": "indicator--cc93dcd9-91db-4aa2-8345-6e1d35a36fc4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ccb4265-4065-4bcf-8858-b9a6f3159020", "sighting_of_ref": "indicator--298ff0cb-ee66-4c55-88a3-7706f4d80046", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45604b6f-e96e-41d9-b669-077fc61aef23", "sighting_of_ref": "indicator--298ff0cb-ee66-4c55-88a3-7706f4d80046", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f3e9a4-f3bc-472c-8dff-69a1148d366c", "sighting_of_ref": "indicator--78907302-1f07-466f-aeda-598045af6483", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1667aad6-d03b-41a7-ac8f-973abf353109", "sighting_of_ref": "indicator--78907302-1f07-466f-aeda-598045af6483", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1e2702-73f9-4d11-ba72-bb06010583aa", "sighting_of_ref": "indicator--78907302-1f07-466f-aeda-598045af6483", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c9b1d3-6653-4231-a383-ca58988f52d1", "sighting_of_ref": "indicator--8f1c7141-69a3-41c0-af98-56b5d386ce67", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c15bae2-de6f-452a-9316-e66d4853c21e", "sighting_of_ref": "indicator--495b4b96-ea03-4c6e-b4de-152ccae2fc1a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6a5e9f-d140-4c08-b946-9d31049b0113", "sighting_of_ref": "indicator--495b4b96-ea03-4c6e-b4de-152ccae2fc1a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578797ee-a6dd-4ceb-a1ab-d410eaaf492b", "sighting_of_ref": "indicator--f71e2168-bea4-47cb-86ba-1239b69dd93f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30ea7f7-43c4-4c21-87b6-e27d47578ce3", "sighting_of_ref": "indicator--532e4ebf-2226-450a-8451-6ac6dd337402", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ab8387-3886-40a8-a82c-9a11645c814a", "sighting_of_ref": "indicator--532e4ebf-2226-450a-8451-6ac6dd337402", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23d7523-6d07-44f9-9bc0-48c6ebe7bd51", "sighting_of_ref": "indicator--532e4ebf-2226-450a-8451-6ac6dd337402", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b797d2b1-2c3c-425d-9fc6-6a3025034428", "sighting_of_ref": "indicator--549744a8-ca0c-42e3-aabf-eb360212fe29", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e1a7b6-427f-4062-b449-ac7f6bbeb1f2", "sighting_of_ref": "indicator--e1b9340c-1277-4c4a-abe0-b160e651e57c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f392d9a7-c993-4fdc-9a1e-578ab4a0fb7c", "sighting_of_ref": "indicator--e1b9340c-1277-4c4a-abe0-b160e651e57c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3299d393-d0a4-4297-bb4b-f1417d47926a", "sighting_of_ref": "indicator--e1b9340c-1277-4c4a-abe0-b160e651e57c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd897f9e-dcd6-46c3-b336-13dc5f46ae58", "sighting_of_ref": "indicator--2809c2f2-5b81-46a3-bafc-997ecb3d9b6e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef27a322-680e-497f-aaae-7203647f9432", "sighting_of_ref": "indicator--83074f79-3989-48e6-8bb3-de8802868215", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a3a17c-3248-4e2a-9771-2adf8575bdc0", "sighting_of_ref": "indicator--4e8a9b08-89f8-45a8-8545-1d0ca7f1b283", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc34dfa-ab61-48ab-835e-030913e7d403", "sighting_of_ref": "indicator--4e8a9b08-89f8-45a8-8545-1d0ca7f1b283", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53dc43f-dea9-4196-ab3f-940653028a8b", "sighting_of_ref": "indicator--4e8a9b08-89f8-45a8-8545-1d0ca7f1b283", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4930e90-586f-4c1c-8917-d450cb3677cb", "sighting_of_ref": "indicator--aaef5215-f83f-406a-aa2c-42a180299db9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621fa28c-6824-45a2-ad88-a76ea93f39df", "sighting_of_ref": "indicator--76fdcfae-f898-4576-8632-947bf855c742", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ae887d-d48e-44a5-b652-d025bc00f4df", "sighting_of_ref": "indicator--76fdcfae-f898-4576-8632-947bf855c742", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99a5bc4-bc29-43d1-99bd-a33d91560704", "sighting_of_ref": "indicator--173ac6bb-f8f5-458f-b0bf-ead6f4586547", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a618f1-e988-4900-9f0e-19d98264ebb6", "sighting_of_ref": "indicator--16276d8e-ea71-47a6-ba27-7d8085a1cf87", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d549112-f192-4af1-b034-69b113e21839", "sighting_of_ref": "indicator--16276d8e-ea71-47a6-ba27-7d8085a1cf87", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1de585-1345-4e1d-a8f7-377b5f332237", "sighting_of_ref": "indicator--16276d8e-ea71-47a6-ba27-7d8085a1cf87", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6a9f53-76c6-4502-b07c-d3664a04e2d1", "sighting_of_ref": "indicator--be93b6ba-bab6-4abd-9ff7-124262c1cd8f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1752e7-9fd1-4abf-ba04-241f8eb2599e", "sighting_of_ref": "indicator--be93b6ba-bab6-4abd-9ff7-124262c1cd8f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bc1ac9-4bec-4903-83c6-4d50ab3d3552", "sighting_of_ref": "indicator--be93b6ba-bab6-4abd-9ff7-124262c1cd8f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252d1475-9c12-4121-8983-5d4ceb8b9f3f", "sighting_of_ref": "indicator--c702b8d6-7999-45ed-a1a1-9294202e5cef", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7907a4-676b-49c3-a998-83cbcaf361b2", "sighting_of_ref": "indicator--c702b8d6-7999-45ed-a1a1-9294202e5cef", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a0fb04-830e-4a70-8e33-58f035977adb", "sighting_of_ref": "indicator--c702b8d6-7999-45ed-a1a1-9294202e5cef", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80351749-7097-41a0-8758-98ee93aadd54", "sighting_of_ref": "indicator--54d857ba-91b1-45b1-abc2-da147a049d08", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044b778c-cf3c-43b4-aab1-1bf7558cce11", "sighting_of_ref": "indicator--54d857ba-91b1-45b1-abc2-da147a049d08", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20312985-7dc5-4b91-87ec-eaaf3abb8f6e", "sighting_of_ref": "indicator--54d857ba-91b1-45b1-abc2-da147a049d08", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1895d2f8-5c8e-4276-8ae1-d8cf238f811c", "sighting_of_ref": "indicator--a1ff3bbc-6453-4756-a62a-8f7639e683c9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6ad5ae-31f8-49f0-972c-0a239819de2a", "sighting_of_ref": "indicator--91518a6e-8ae7-4c9e-aa56-2534a06f3c2a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90797620-8639-4a6f-997b-e4c30820b7fd", "sighting_of_ref": "indicator--9dead84a-8864-400f-9ecb-c49b63e41a77", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d960944-fb28-4c2d-ab13-740072cf22b2", "sighting_of_ref": "indicator--9dead84a-8864-400f-9ecb-c49b63e41a77", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5d44f0-d848-457d-9a2c-98d9dbad756a", "sighting_of_ref": "indicator--9dead84a-8864-400f-9ecb-c49b63e41a77", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f6f294-af87-4257-bcb2-62c5d5f673a7", "sighting_of_ref": "indicator--8369f372-9082-4ce9-83a7-41929d374724", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1705fd3b-d13d-49e1-997e-9a902aa60de1", "sighting_of_ref": "indicator--e34c29e7-80bd-4370-8c2b-0f2f33bf2f85", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbe14b1-ef5b-433e-a928-61e641e643f9", "sighting_of_ref": "indicator--bf5f01c8-47e5-4a50-ad47-d01825c093ec", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c6794d-3b21-4e5b-a0ad-2ba5b3aa7061", "sighting_of_ref": "indicator--0435cd1b-d63f-4327-98b7-d792551a6dda", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa39d123-0144-45df-b3a4-8ccc9f304e5f", "sighting_of_ref": "indicator--ae32f106-44f5-4253-a0bb-545d5d64f206", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f7c1ee-4c1c-496c-b30f-b09113074e0a", "sighting_of_ref": "indicator--2ca9a79d-1de7-4044-a4b9-2945832dd61d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925f6550-c4a1-46b8-90e8-cab390b3f210", "sighting_of_ref": "indicator--8c01e98d-705b-42dc-9f79-b9f953d46b4f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e05c750-34af-4bef-88d9-2f4efcb73827", "sighting_of_ref": "indicator--2adf16b8-7ae8-4312-85e5-2b77a9972b70", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f0ae1d-079c-464b-b2f7-ca0e01b5af81", "sighting_of_ref": "indicator--331b35a4-6d56-4eac-8161-f10d5ec0643b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76be2c4-c05c-495b-abb5-0c232671623e", "sighting_of_ref": "indicator--b6dc1bf0-fbe9-41f3-8e81-1ac9535be1a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba610721-76e0-4404-beb4-cf88d5988843", "sighting_of_ref": "indicator--1494b4c8-daed-4ce0-b87b-e9de8ffe1f9a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed786867-1f9e-4266-921e-055dda2d95f2", "sighting_of_ref": "indicator--78a4af6c-94e0-49cb-8365-e64db21a533c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61291ee1-1ee2-4efa-9ad6-06135fb9c064", "sighting_of_ref": "indicator--13fb0500-8a4d-469c-99de-020540193a5c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3ea706-58dd-45e7-b93c-903047dc070b", "sighting_of_ref": "indicator--f951cac7-9408-4382-b0eb-d09c68c53548", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4497e85-17fe-4dd2-a654-b26ca439cc4d", "sighting_of_ref": "indicator--7571d936-c592-4b4d-ae53-6f2f59390154", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc74df53-9dd1-489c-97cb-85970234d17b", "sighting_of_ref": "indicator--cc1eaa44-1233-426b-9852-3ff11be2970f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a917eb-882b-447b-94dc-999013f9a202", "sighting_of_ref": "indicator--4d170bd1-1476-4de0-be5d-75d1410149dd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e640db-f977-47d4-98e9-9f954a88c642", "sighting_of_ref": "indicator--4d170bd1-1476-4de0-be5d-75d1410149dd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7a62c7-40aa-44bf-9009-f18e51b9fb0c", "sighting_of_ref": "indicator--4d170bd1-1476-4de0-be5d-75d1410149dd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--146b69dc-8212-4070-aac6-e95a1215c79e", "sighting_of_ref": "indicator--2746fc2c-5ad3-485f-98d1-40d8830c41d7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d448506f-e536-41d7-8fe0-4d52ad56a75b", "sighting_of_ref": "indicator--2746fc2c-5ad3-485f-98d1-40d8830c41d7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3122e419-877a-4714-980a-41aa97a11feb", "sighting_of_ref": "indicator--2746fc2c-5ad3-485f-98d1-40d8830c41d7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357602eb-380c-41b1-b5cf-998f12c86f3e", "sighting_of_ref": "indicator--034784be-19f3-40bd-a909-5cebedd8d5e1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6044a608-61d6-4e01-967a-7e6872c67654", "sighting_of_ref": "indicator--b43a3595-39ee-407c-95ab-0234daa52915", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6aa6d0f-39d5-403f-9c54-84677a621095", "sighting_of_ref": "indicator--acc79f02-64c3-486c-b788-4665195255e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f083d616-d836-428a-82f0-2b0b0abc4ef1", "sighting_of_ref": "indicator--84f22c0e-9f37-4ab2-a878-5ad7a3d14d01", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca742599-1c99-4d25-83ba-8d14d9d95011", "sighting_of_ref": "indicator--4d23ec5b-8cdf-4c0b-b35c-25d39b1f25a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1aedd6-4de5-49c1-bd56-ec3282846a7e", "sighting_of_ref": "indicator--fe04a4a7-4a4d-471d-8765-78504be53c2c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1871e69-8ab6-4747-9f62-e91412e85a15", "sighting_of_ref": "indicator--fd4ef9b8-44ff-48e3-9e25-5a3d5f220d9b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a6a7af-a911-468c-a057-0feec7031c8a", "sighting_of_ref": "indicator--d0391e49-ad00-4adb-9900-d6365f7006a0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6671d2fa-c1c8-4539-b6d0-b25c569572b6", "sighting_of_ref": "indicator--66ae8166-4bb6-4bc7-a7a1-360b89e2eef8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73457003-f953-4a93-9c84-ff68b14da2df", "sighting_of_ref": "indicator--786baf5d-4895-42d0-800b-ec2acfc841c1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9898611b-85c7-47b0-8bcb-82324587324e", "sighting_of_ref": "indicator--7fd42659-4443-4ed5-87f3-9c404955c282", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9210c7-9fc7-4787-86c7-4018245be350", "sighting_of_ref": "indicator--2ba08421-f20c-48ef-828a-f7085a18e14e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0cca4b-a5ca-493a-ab59-562d743163e7", "sighting_of_ref": "indicator--f2854209-7855-497e-9f0c-3be0d51e50ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26e554b-f62e-4a7a-b53b-fd8e7ccc158f", "sighting_of_ref": "indicator--eb35280e-f411-4e1a-b386-2d0894b619d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97a77dc-b3c0-4c3d-9388-69d961e363a7", "sighting_of_ref": "indicator--ce500606-f98d-4cd6-9b95-62af0a217153", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e43c5f9-b0ef-4841-ac80-0b5a08061301", "sighting_of_ref": "indicator--2cfe5eb8-4a31-4de3-82cb-563f489be977", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a673c466-f1fe-4e94-8463-3b8102f404ad", "sighting_of_ref": "indicator--97bf7a1d-1bd9-4a3e-941f-2cd8257ffcf2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2d0eaa-020b-49fa-bb8c-562fa92caa11", "sighting_of_ref": "indicator--29e20c41-7a71-4ed2-99f8-6d7c59961763", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48abe788-8dbc-4e56-9b56-e442758e2a2d", "sighting_of_ref": "indicator--a7d94ed2-72d3-430e-ae7c-a28d0bd8ca68", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642e8dce-9c22-4122-9d45-6a60c8927a0f", "sighting_of_ref": "indicator--a044181c-5103-4813-9efb-13836d693831", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c0c888-39c8-493e-ba70-5e9d52738fe1", "sighting_of_ref": "indicator--efbaf325-08f2-4115-b57e-e7980161e5ca", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7d8eed-bd4a-4b3b-b1a5-6f90250bdb78", "sighting_of_ref": "indicator--cafab66a-fb05-414e-b0a0-ec34e4736e6a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af7db35-d1a5-424f-9bbc-b77e6cc17bb2", "sighting_of_ref": "indicator--e87e18de-1eaf-4667-9232-3ec7c57c9ee3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad67a23-9d79-45be-a8f1-cf9503ed0757", "sighting_of_ref": "indicator--e87e18de-1eaf-4667-9232-3ec7c57c9ee3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d57aa79-a208-44ff-96e5-be9b0fd1deea", "sighting_of_ref": "indicator--e87e18de-1eaf-4667-9232-3ec7c57c9ee3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52809aa3-ee68-4bb1-9e71-57e3035bd372", "sighting_of_ref": "indicator--e883b16c-80f6-4125-97e6-b960839fe863", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f93199-3ca6-4c61-8c38-6c32da2638ff", "sighting_of_ref": "indicator--3a62483f-7c1b-4ac1-bc85-bb3a1f1bc894", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c1d2e1-16d3-41ab-9ef8-d579ba9831d2", "sighting_of_ref": "indicator--de9ece96-2431-4327-91eb-366658c1ac73", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d63cc8d-c2f7-4235-912d-37a7f037c1f9", "sighting_of_ref": "indicator--5583d552-7a54-44fc-84ec-cc3d11ab5e54", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2118fba-4d5f-4c70-8f22-493e9b946970", "sighting_of_ref": "indicator--5583d552-7a54-44fc-84ec-cc3d11ab5e54", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30050422-b748-458e-90b3-f73a87f76f97", "sighting_of_ref": "indicator--5583d552-7a54-44fc-84ec-cc3d11ab5e54", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a477bae-d67e-46e3-86ff-76a91e9a5970", "sighting_of_ref": "indicator--199efb2c-8438-4f21-90a1-0c135ba7b62e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71583a2b-2562-4073-bf7d-a2b6d7ea7076", "sighting_of_ref": "indicator--199efb2c-8438-4f21-90a1-0c135ba7b62e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a49634c-27f2-4957-a829-f60df10ae752", "sighting_of_ref": "indicator--199efb2c-8438-4f21-90a1-0c135ba7b62e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77fee6b-09b8-4bd9-bd8a-76b8e3cf2eb1", "sighting_of_ref": "indicator--95ace17e-3a15-4018-9db2-71db68fc008d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72ad387-ef48-4ee0-822f-19d43e183e69", "sighting_of_ref": "indicator--95ace17e-3a15-4018-9db2-71db68fc008d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd62df2-4121-40e8-bddd-cb0065b0a73d", "sighting_of_ref": "indicator--95ace17e-3a15-4018-9db2-71db68fc008d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aace166-7caf-4998-ae69-d807d64d74e8", "sighting_of_ref": "indicator--b7edbf63-2bac-4686-9aec-f6d502c11e46", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06971cbe-4cea-4535-9b6e-b3c6178663dc", "sighting_of_ref": "indicator--b7edbf63-2bac-4686-9aec-f6d502c11e46", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c81cfb-8391-4393-a3bd-0ee376a8008e", "sighting_of_ref": "indicator--b7edbf63-2bac-4686-9aec-f6d502c11e46", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9c2514-93e3-430b-880a-f7116420786e", "sighting_of_ref": "indicator--7bc1cbd4-d737-4dfa-b752-5abb2a482457", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34aa419-c6f0-4861-a6a8-f4247636ffed", "sighting_of_ref": "indicator--7bc1cbd4-d737-4dfa-b752-5abb2a482457", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f88af7-7ffe-44e2-a6af-8a13a033b4fc", "sighting_of_ref": "indicator--7bc1cbd4-d737-4dfa-b752-5abb2a482457", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1595f7df-c3ea-4f66-88a4-ce4164626348", "sighting_of_ref": "indicator--e7b45a8b-f666-4c46-82be-e97f4cf80daa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e175a120-d4f5-4167-b1ad-cbae16b69147", "sighting_of_ref": "indicator--e7b45a8b-f666-4c46-82be-e97f4cf80daa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182d47da-1136-401d-9985-36c81f9005f3", "sighting_of_ref": "indicator--e7b45a8b-f666-4c46-82be-e97f4cf80daa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e2b04e-04f0-41be-990f-cbb76232343c", "sighting_of_ref": "indicator--88311150-47ed-4be5-a06a-ef9c8942b5ff", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1580ef69-7cd1-4103-a921-944c48af5681", "sighting_of_ref": "indicator--88311150-47ed-4be5-a06a-ef9c8942b5ff", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24711f2-2f74-4314-8b8f-143dd1bd580e", "sighting_of_ref": "indicator--9e9d39cc-ca63-4164-af6a-711fdd6b5136", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce9700b-fa63-496c-bd3e-c9c2215b0aa8", "sighting_of_ref": "indicator--403190bc-564f-407f-bcbf-c552e816773b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7bbf6d6-2019-4509-8821-fb4a85346a20", "sighting_of_ref": "indicator--47a34b15-91cd-42fb-9258-0168363c1a95", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d1d390-5c02-4059-b9eb-759455c13011", "sighting_of_ref": "indicator--e0015299-44b3-408c-baa9-0a87ade5f903", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b136b7b3-c01d-4dfb-87c4-314cef373425", "sighting_of_ref": "indicator--1cf73515-0265-4324-95aa-9bfd0ca428d5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b875a352-02bc-4c35-a0c4-b67c2dfe4c2b", "sighting_of_ref": "indicator--f90ec6ac-5203-4992-a128-585552ff56f7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78ac424-9d2c-470a-b0d8-2bdab1d6176a", "sighting_of_ref": "indicator--2985c1a1-f065-4616-a205-6a2df22d9577", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eee1c2d-5e3b-45d6-b233-4924ccecf9b4", "sighting_of_ref": "indicator--2985c1a1-f065-4616-a205-6a2df22d9577", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30772a6-a4cb-40f8-bde9-a1f13cc434ff", "sighting_of_ref": "indicator--39be240b-7991-4c8e-be26-429c9fc6da70", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96936e6d-ee1e-46b1-9c6e-96f09d1a5940", "sighting_of_ref": "indicator--39be240b-7991-4c8e-be26-429c9fc6da70", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e50e91-3fa2-430f-b7ef-e24dc6fb9c98", "sighting_of_ref": "indicator--2e0e83d1-478e-49a7-a987-658dc2e8ab12", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed13fe3-09fa-4fef-915c-0212a7cb53bb", "sighting_of_ref": "indicator--a7606349-0614-4e16-8fa5-da2533826c33", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77401402-db39-44b4-a262-202c2c35eb9a", "sighting_of_ref": "indicator--4dcf4b67-bbcc-4281-a894-fbd3e399e960", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd40c0eb-80c1-4b8f-a31c-41c0163a6475", "sighting_of_ref": "indicator--33ea6a25-fe02-4341-8077-8ae9840e24b5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e6cfc8-a5ec-49e4-a927-ca1a1d41a7f9", "sighting_of_ref": "indicator--33ea6a25-fe02-4341-8077-8ae9840e24b5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc82cb7-c3e1-450e-8b3d-02b45454f9c1", "sighting_of_ref": "indicator--33ea6a25-fe02-4341-8077-8ae9840e24b5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38acd42-173f-483f-875d-cefd1063cf3e", "sighting_of_ref": "indicator--c4986b9d-fca6-436f-a61b-e8089fe06ce4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d24fe99-f713-4b23-82b9-73b1e3b4e6a8", "sighting_of_ref": "indicator--dd060e4a-d690-4ce9-8423-ad5893dc1e23", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc636536-32fb-42e4-b019-eb02d3af7ec5", "sighting_of_ref": "indicator--2b2e1f78-56a7-4eb4-a4a2-e88be36eaa6d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5971522d-e9ee-4df4-9065-b4e5fa2656d9", "sighting_of_ref": "indicator--32f236c9-295b-4ab4-a8cd-df3738450de4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f5cd57-0084-4c26-b76c-5ea80c7b9ef9", "sighting_of_ref": "indicator--b56f583b-b84c-4e82-b74b-5a58eeffa374", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ca28ba-46e6-49d5-a4f7-8e512d7463d6", "sighting_of_ref": "indicator--a021c516-1e1f-4dbc-940f-1184b5e11bca", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3eb87b-e41c-4417-8894-0c10fd48d0e7", "sighting_of_ref": "indicator--479e80f8-c6a8-488d-ba53-ee4422615e1e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4edcb62-6f21-40c7-b970-7bfa5025b7bc", "sighting_of_ref": "indicator--d4b56e1f-3e92-496b-9e49-70be95a83eb5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d649f013-f954-49de-ae90-baef272686d5", "sighting_of_ref": "indicator--1a04435e-be84-4d77-8b18-6a7bd3d35ca9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df871105-4d5b-4b8b-bd6a-07ef8f0d40a3", "sighting_of_ref": "indicator--a55652d0-25ff-48c8-b29e-4c36dccbca52", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a64665-0489-4e77-905a-1e4e6fcb6aef", "sighting_of_ref": "indicator--dd712f31-021f-4ef6-900a-c61994ac3bae", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89cae40-fc48-4742-8ae8-253003c9eb66", "sighting_of_ref": "indicator--3237673d-be47-4db1-b5f5-07c694fa66cd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4377ac-783e-4e81-9cb6-61ae7f4b4ef9", "sighting_of_ref": "indicator--c769d50c-7f23-49a9-9989-19d36158d553", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1a1683-630b-47ae-b70a-c2ad8b9f887c", "sighting_of_ref": "indicator--a3c39e86-aefb-4e8e-a55b-820232198b14", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c59d184-90c6-487d-8731-1e31dea4a41e", "sighting_of_ref": "indicator--0749f29b-9a0c-4b52-ab30-50c7a90af827", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009ad937-5ccf-44a8-a7c6-795f8189de50", "sighting_of_ref": "indicator--0749f29b-9a0c-4b52-ab30-50c7a90af827", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd1faa6-7beb-4eb1-8e66-9de43ddbeebe", "sighting_of_ref": "indicator--0749f29b-9a0c-4b52-ab30-50c7a90af827", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84fd55da-52d6-47ff-8e16-9499e758554f", "sighting_of_ref": "indicator--5dc3b02c-2a5f-4054-b16e-925a3be9af09", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea8ef3e-ce3f-453a-9517-93178fe1b0f4", "sighting_of_ref": "indicator--fea963ce-2c31-4b1c-9f48-94302af62256", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93808cb5-9181-455c-b89a-dadec4b682c8", "sighting_of_ref": "indicator--fea963ce-2c31-4b1c-9f48-94302af62256", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f877bd-1948-446b-82c3-7a7d14aa7ccb", "sighting_of_ref": "indicator--fea963ce-2c31-4b1c-9f48-94302af62256", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b812586-6fc7-47bf-9262-02daa95f74fd", "sighting_of_ref": "indicator--3c5f0e48-24dc-4fce-8e40-990a5195aad0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf9a375-f169-4eb3-a9f0-c50f9d6bf7af", "sighting_of_ref": "indicator--de445504-4cfd-41d3-8702-edf542586ea4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c294c33f-8e04-430a-9b68-4dac1088b573", "sighting_of_ref": "indicator--5b2da348-021b-4d6f-b796-9395f20435b9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12c0cbe-29ce-47d0-b2fb-108e116eb91e", "sighting_of_ref": "indicator--4a422e0c-6017-4e34-afea-0a91b8d8bfed", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b6989e-61fa-41df-811e-801508f710bd", "sighting_of_ref": "indicator--4a422e0c-6017-4e34-afea-0a91b8d8bfed", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49420245-8690-4e98-a923-a03bb0bbb73c", "sighting_of_ref": "indicator--4f5fdbf5-7b86-496e-9b95-e2bdd74d16fa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4cbf160-cc57-4591-9cc9-4f3b430e6e4f", "sighting_of_ref": "indicator--a19038b7-2561-4784-ac6c-b0003e3dd220", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71511ba7-8148-4aba-b8ff-9e7cc27af80c", "sighting_of_ref": "indicator--7c7cb34b-fe5d-4f51-87a4-e272d81ebf67", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2f7592-141c-476d-a0f0-8f877b264219", "sighting_of_ref": "indicator--7c7cb34b-fe5d-4f51-87a4-e272d81ebf67", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5a6a8f-069a-45bd-93ed-cb8bbe511e45", "sighting_of_ref": "indicator--7c7cb34b-fe5d-4f51-87a4-e272d81ebf67", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9550b35d-2fda-4d94-ae0a-91425659df39", "sighting_of_ref": "indicator--71d47b26-82fa-4116-a24a-1b5c2ee127a5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022bdcbd-213a-4888-9462-f804134db674", "sighting_of_ref": "indicator--71d47b26-82fa-4116-a24a-1b5c2ee127a5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778f021c-66ed-4632-83aa-39dbb4b85975", "sighting_of_ref": "indicator--ab68bfde-e4d3-4880-9f40-6c86ed542ace", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baae8021-46d5-424e-9010-a2e62151c7d1", "sighting_of_ref": "indicator--ab68bfde-e4d3-4880-9f40-6c86ed542ace", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fadc7b4-0475-4212-a48e-67bc33b5bfb5", "sighting_of_ref": "indicator--ab68bfde-e4d3-4880-9f40-6c86ed542ace", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7314d3e1-4fcc-4b61-9089-ae0b8b8d3fe5", "sighting_of_ref": "indicator--f961917b-4fe3-48e4-9fb9-7d4ec2b143c2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139f7e9c-9af1-4259-b177-7e4409105480", "sighting_of_ref": "indicator--eea0aa02-4d8c-4743-be33-ceea2a9a26f6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549511dd-b266-4e61-ba02-e7ab77da2354", "sighting_of_ref": "indicator--7e6dd0d1-50e9-42e2-b3bd-abd8fe762d3e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18aeaf11-0b8b-4836-8b00-3442034b971d", "sighting_of_ref": "indicator--7e6dd0d1-50e9-42e2-b3bd-abd8fe762d3e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df4d96a-90f8-485b-afdc-00bd0558e4dc", "sighting_of_ref": "indicator--025f7c27-5afd-4ad2-91ba-1121f873d8f3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7daddc03-c4ac-4406-b9fa-6ddab761fa3d", "sighting_of_ref": "indicator--1b6f003a-5966-4430-8036-ccecaf335cfd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6a0141-ce44-40d5-b3b2-83d6d2661756", "sighting_of_ref": "indicator--1b6f003a-5966-4430-8036-ccecaf335cfd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782b053f-f128-4a51-a2c4-08d5e266bf95", "sighting_of_ref": "indicator--1b6f003a-5966-4430-8036-ccecaf335cfd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2436ca-a160-4860-8311-06061babf56f", "sighting_of_ref": "indicator--16583eb9-6f4b-4df8-a96d-d2ad84c1c6f6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a329e22c-a7d3-4494-93ae-3e3e8a7c2102", "sighting_of_ref": "indicator--837d9d9c-532c-46e8-9738-9afc2f4183fe", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3d5e63-cedb-4dc9-84f1-a09ceee0388c", "sighting_of_ref": "indicator--837d9d9c-532c-46e8-9738-9afc2f4183fe", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c459ac1-7200-4ee9-97c3-b932bf7728be", "sighting_of_ref": "indicator--cbf1ad26-1055-4a52-98db-a0c911e72d20", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb214871-5e76-44fb-8a21-da56f7f91c65", "sighting_of_ref": "indicator--cbf1ad26-1055-4a52-98db-a0c911e72d20", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7b9c48-1f8a-41a6-b047-dcbedef87cf0", "sighting_of_ref": "indicator--cbf1ad26-1055-4a52-98db-a0c911e72d20", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e45e3a9-0dec-4c3f-8fc2-8828c19e60b3", "sighting_of_ref": "indicator--44e975f4-c9f7-4665-904a-3c0d84e404c4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fdb0e63-f513-4a84-9d0c-da3b5d35a828", "sighting_of_ref": "indicator--ff6235a1-cbe6-4105-94b4-065b16d00a93", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db99155-329e-4bea-a2d8-92fc6201f655", "sighting_of_ref": "indicator--f4b1c48d-e700-428e-a8dd-a1c950fab752", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9323a9-c309-4b19-9966-6f85db3fa6ed", "sighting_of_ref": "indicator--f77d1caa-703e-4fbd-bb59-d8ecabb58d07", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59cf257c-e28c-4e74-9ab8-23d7e7c303c3", "sighting_of_ref": "indicator--f77d1caa-703e-4fbd-bb59-d8ecabb58d07", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a07266f-7499-4a11-ad6d-fee297d26886", "sighting_of_ref": "indicator--f77d1caa-703e-4fbd-bb59-d8ecabb58d07", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231115b5-310d-4731-8165-b074c01b432b", "sighting_of_ref": "indicator--bf86ac68-2872-442c-b186-cb458d343375", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a2ce71-0768-4c15-a45b-7a58918d8e63", "sighting_of_ref": "indicator--bf86ac68-2872-442c-b186-cb458d343375", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8eedd5-0d36-478a-a995-e8013af2d4fa", "sighting_of_ref": "indicator--bf86ac68-2872-442c-b186-cb458d343375", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee8312c-5ccf-4220-a662-e2d71ff0ddbc", "sighting_of_ref": "indicator--29b1a8df-905f-4ee6-88b0-b59d1b6bbedf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98acd498-2f88-45a3-a7c9-9b4ebce3c3a2", "sighting_of_ref": "indicator--29b1a8df-905f-4ee6-88b0-b59d1b6bbedf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1062fa55-74d7-44be-81c2-b360a206b959", "sighting_of_ref": "indicator--900a5ff1-b9d9-4273-9d40-2fa18b04887d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61565a24-eacb-4e01-8d25-e794552a0275", "sighting_of_ref": "indicator--900a5ff1-b9d9-4273-9d40-2fa18b04887d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a57fee99-1c8c-4eae-a502-65f601b2625d", "sighting_of_ref": "indicator--900a5ff1-b9d9-4273-9d40-2fa18b04887d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392a9b07-a1da-4a6d-a6a6-ba7f2e42b89d", "sighting_of_ref": "indicator--faa6b5c8-29cb-47d8-91f9-a9cf86309927", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d1be44-5565-48d0-813d-0d8359236e78", "sighting_of_ref": "indicator--faa6b5c8-29cb-47d8-91f9-a9cf86309927", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ce4875-b53c-417d-baea-2d2a346c0e4c", "sighting_of_ref": "indicator--00e32bb0-6454-4d32-8769-e54f1bb80e63", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a3109e-d952-4c77-ae44-420e33ecc879", "sighting_of_ref": "indicator--7b14d7fc-6ec6-4d4e-a7e8-7d0250c80d56", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12fef3d-6ac2-470a-87fb-38ca72e9b095", "sighting_of_ref": "indicator--afe8679a-c90c-404b-83d3-50adb0c84d29", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d012235d-2ea9-4897-bc5d-7356731100e5", "sighting_of_ref": "indicator--343756e7-09c5-4ae9-af97-68d3df1ca30e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8aa2d2d-9ad9-4468-a095-95f0b21b26de", "sighting_of_ref": "indicator--08ac060a-8917-4578-8911-12fb72e4bae9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6821d7c-498a-4ba0-9d1c-25defb8ff252", "sighting_of_ref": "indicator--2b723f40-155b-4a08-9ac1-8ad1cd9068fc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46e3bd2-01aa-40fb-af8f-7d7522100010", "sighting_of_ref": "indicator--7e72d8cd-ce52-45f5-a8c6-060b638ea00a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46d6dee-91fe-4fb8-96ed-62348450c242", "sighting_of_ref": "indicator--7e72d8cd-ce52-45f5-a8c6-060b638ea00a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c399e574-8a26-449b-aae4-a41c411a4fe5", "sighting_of_ref": "indicator--f65ed0c9-ff8e-425b-a06e-50e20419144b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393442ad-11fb-4869-8ecb-4f53f4be1559", "sighting_of_ref": "indicator--4d1a4d8a-959f-4414-9430-d4c9a3ebcdcc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18acd38-37c6-415a-9b57-97e2cbd144a7", "sighting_of_ref": "indicator--4d1a4d8a-959f-4414-9430-d4c9a3ebcdcc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d706672-1ccf-42ae-9ebe-755db4851a3a", "sighting_of_ref": "indicator--3b0f32b7-5e77-44f2-be27-497a8e46e6f0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6269e10a-a648-4d6f-86b4-6dee70f18f79", "sighting_of_ref": "indicator--3b0f32b7-5e77-44f2-be27-497a8e46e6f0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9547d7a1-fbcf-4fd1-a078-5516394f504e", "sighting_of_ref": "indicator--ced85fb4-8df7-4729-948a-6f43e24b0521", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2164d5-1e6d-4cdb-94b8-915f02fd2d0b", "sighting_of_ref": "indicator--ea2064b0-de51-4beb-8b92-ebe9fb81200b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2b16ae-2a03-4a3c-b1b7-a04fa6a90972", "sighting_of_ref": "indicator--ea2064b0-de51-4beb-8b92-ebe9fb81200b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e2c443-e51e-465d-8b0a-f74148a11e2b", "sighting_of_ref": "indicator--ea2064b0-de51-4beb-8b92-ebe9fb81200b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc51658-c88c-4c50-8a31-2a6357280e84", "sighting_of_ref": "indicator--099034a0-6759-4536-b6c7-a9f3dcfd23a9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d5ea8e-3ee8-49f1-9f70-6790f8c1cffb", "sighting_of_ref": "indicator--97642685-b4c8-4beb-bb41-9db3b18690dc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b588605f-9a35-4d7a-9e55-7337f0ee816f", "sighting_of_ref": "indicator--76ace894-5044-417e-b8ed-783e8e7b759f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e05691-2d64-4d1f-973d-385ff3037f17", "sighting_of_ref": "indicator--76ace894-5044-417e-b8ed-783e8e7b759f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ecef8f-7cdd-4b65-aeb9-ca98477cc052", "sighting_of_ref": "indicator--76ace894-5044-417e-b8ed-783e8e7b759f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4fe154-8b78-4824-a3d8-9123f37bfbde", "sighting_of_ref": "indicator--f9b893ad-2d43-433b-b1ce-4f78f41d7313", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f131d79-3aa1-475a-8575-205c8a852d81", "sighting_of_ref": "indicator--9d890cca-b30f-4d30-8fe4-e458c8230aaa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62dc1f31-263b-40a3-af8c-7add53c6859f", "sighting_of_ref": "indicator--adf3b739-9590-499c-baa8-49037a073d0d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d752e55-be06-48c2-b590-0e8911bcc939", "sighting_of_ref": "indicator--adf3b739-9590-499c-baa8-49037a073d0d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f89f9bb-8b64-4069-bec3-6a373beadc28", "sighting_of_ref": "indicator--adf3b739-9590-499c-baa8-49037a073d0d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e984b5f3-80bb-4eac-87c1-897477da05d9", "sighting_of_ref": "indicator--e41fc967-427b-420c-8fc7-540c652eed2d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f548900-5f39-4b2a-a20b-b749dd3b3538", "sighting_of_ref": "indicator--b44cc428-ab47-4a55-9e20-03abf980d010", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00955d4b-620e-4b09-91b4-4d4178a491cc", "sighting_of_ref": "indicator--27f07405-5686-4ebc-aa69-88eb2d087a7e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be931c92-b9dd-4ba8-940e-672e3db9e23b", "sighting_of_ref": "indicator--9b3e4a7c-dcc1-4cf4-8219-37bb76d3a2bd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72eda714-da91-48cb-9b62-ada6d3ce42c9", "sighting_of_ref": "indicator--48e47e75-fc8e-4df4-b4d5-f379b3275bd2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cfd108-8925-4e5e-aa3e-8bd7d3c5b758", "sighting_of_ref": "indicator--706991f9-d36b-404b-b191-ec2583aff243", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77609d31-fcaf-4cf9-af2b-eba4e3cd0a5b", "sighting_of_ref": "indicator--706991f9-d36b-404b-b191-ec2583aff243", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589d3821-72b6-48e6-bb59-f74b8e6714da", "sighting_of_ref": "indicator--a9c9a05d-ee33-466c-ad45-f167fde14d1f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8662510-cec1-4adb-8754-e02893184eed", "sighting_of_ref": "indicator--8b9dc0fd-7410-4285-9236-2ed2708cd59a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c7a690-2254-423e-a066-3834d69b94bc", "sighting_of_ref": "indicator--55ee015d-35d5-46c6-ae6e-0c0723c773b4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9a9b2e-159a-472d-ac21-980e2dce3b6e", "sighting_of_ref": "indicator--0c7dc809-f4e0-43a0-97aa-d266a4763417", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a660e7e4-784c-48c5-b430-480b4751e815", "sighting_of_ref": "indicator--c7373ff9-caf0-49c3-9d61-7f919afd194a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5072557b-1a74-43af-9ace-7e755b5d4ac3", "sighting_of_ref": "indicator--b1e1389e-b296-4502-914a-9c8a13075dca", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279fb668-1000-41c5-a6e4-9facc2a39997", "sighting_of_ref": "indicator--a22ab4d3-b5bd-4b25-a732-3e4c742e2fdc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b8581d-4559-4a8e-807e-7a783f54981b", "sighting_of_ref": "indicator--a22ab4d3-b5bd-4b25-a732-3e4c742e2fdc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46e7146-6bd2-4d59-959f-5fc086a46686", "sighting_of_ref": "indicator--1aa9451d-400a-4008-bc02-ddda50d9ca35", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--410ebd68-4583-439d-acf3-bc7888bda3f3", "sighting_of_ref": "indicator--1aa9451d-400a-4008-bc02-ddda50d9ca35", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b05e41-cc3f-4842-9ee7-2ca331bc88ca", "sighting_of_ref": "indicator--f81debe4-c5d2-4e80-a9b0-cab06d6888e6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33217535-d4c6-4e68-a024-583611f21ae0", "sighting_of_ref": "indicator--27458950-c4f3-427a-90dc-94b01bb00385", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c73e596-628c-413e-a2a0-f6af3fe94ca6", "sighting_of_ref": "indicator--5e9d06d5-079e-48cd-ab67-3df0431a7a53", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975e7d1a-50e7-4eae-82d4-871c2df91f42", "sighting_of_ref": "indicator--45a56975-6462-45dd-b4f8-606d816e197a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37746d3-167e-47a9-8cd2-9790ae3433bc", "sighting_of_ref": "indicator--eb62a1e1-e54d-472d-ad71-eae2736f9dc4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9763519-e6b0-40ee-a6af-9bb14e4639fc", "sighting_of_ref": "indicator--5617c0d6-377b-45b2-8105-1e328fcc7ab4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0515571b-5b91-43ce-805f-44cea4292bf0", "sighting_of_ref": "indicator--5617c0d6-377b-45b2-8105-1e328fcc7ab4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b90a82-425b-4835-aead-a2375c1f4a47", "sighting_of_ref": "indicator--82568d73-f364-4a45-801a-9778dd77ab32", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea77e696-b2cc-4800-88b2-151c3f0e5163", "sighting_of_ref": "indicator--9908474c-5d66-417c-8ea5-d786fc8e0192", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7ee658-fc11-48c2-9e1e-50da25c51746", "sighting_of_ref": "indicator--fb550297-44ea-431e-900e-e509ce84220b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64f48b9-4279-46f5-a733-ef36de3c2ae9", "sighting_of_ref": "indicator--0266092a-5cbb-4f6c-bb9d-40527654f4c5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82305c89-21e8-4498-962c-258cd3928ad8", "sighting_of_ref": "indicator--2e4c9d4f-fa6a-4575-9343-dcaac76522b6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89459b60-c888-465f-86fb-44c0d1d64779", "sighting_of_ref": "indicator--18c0d81e-adfe-4fec-9ad7-5bf40aba840a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f22976b-da12-45d4-8063-c0cc16eb3741", "sighting_of_ref": "indicator--e894c3e9-e0b7-434b-869a-b4611a8fa879", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f301c44c-b374-4bc0-98f7-15adb12f2a85", "sighting_of_ref": "indicator--bd341736-e282-4491-a242-88ef08ed221c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c511345-bf24-4e2d-8cb3-84eefc2cd3b4", "sighting_of_ref": "indicator--5c146a02-1b77-4a74-b94c-f905546bbe0d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e11a2c-dd60-4bd3-8e87-82669c3f389d", "sighting_of_ref": "indicator--5c146a02-1b77-4a74-b94c-f905546bbe0d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde6be7d-37e0-4572-864c-27a598060315", "sighting_of_ref": "indicator--3d7e629f-da32-4de8-9684-f23305f14c87", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb7c19b-6490-4c3e-be50-803f49bac688", "sighting_of_ref": "indicator--be2739f9-2e7a-4863-9c9c-68b993729966", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af2657a-d5d6-4e67-8087-4246c7c9f625", "sighting_of_ref": "indicator--be2739f9-2e7a-4863-9c9c-68b993729966", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa6180b-17d7-4e62-b878-535a895f7e26", "sighting_of_ref": "indicator--1a070079-3897-43b6-8a7b-5246e631573a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a978fd17-72ed-40fc-ad70-1a5217c4c5be", "sighting_of_ref": "indicator--60a6b7c0-ddd8-453a-9257-94bd958c1f84", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c54281-a5ae-4ee4-a508-5f927a4ecce6", "sighting_of_ref": "indicator--26b60572-f06e-4c6c-8ee7-640da406198d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c079882a-21f2-4aa9-92e0-c6d4eea062b3", "sighting_of_ref": "indicator--26b60572-f06e-4c6c-8ee7-640da406198d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136783ee-5329-47fd-8438-e86b48cee88c", "sighting_of_ref": "indicator--a4e4730e-f170-4aa5-b825-0576bc4258db", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1796876f-0a0e-417e-8d4d-2cca63f096a1", "sighting_of_ref": "indicator--efca97cb-2d5e-4c57-b9bb-9922ffa2a53b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3caf43d8-45a3-475a-980b-bfec52a271ce", "sighting_of_ref": "indicator--a8240fa3-8c55-4b43-a2c6-eab4f6351454", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298b5062-f792-4f87-86eb-56cbb8407605", "sighting_of_ref": "indicator--b10606c0-9dfd-4295-8ec0-2ff1efebb245", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c42bcc-0a3a-4ef1-8ef1-e1f90350e1ac", "sighting_of_ref": "indicator--d0f690e3-0db5-41cd-bc70-fb7adc5bae59", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d5256a-966e-4d81-9844-bb9b14e8ade3", "sighting_of_ref": "indicator--be1a949b-2208-437c-8f58-3a3de258cc99", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c829f3f8-0c82-4cb4-bad1-fe0381425fe9", "sighting_of_ref": "indicator--b970b969-2cf7-41ef-8fec-ff020e970c1c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6e8db8-6464-4f01-a5b8-dda529a11f08", "sighting_of_ref": "indicator--2e09eb69-a22f-40dd-a850-abcfcc8660d2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aefcd2d-4d1f-453a-8fae-ee9ac8424da9", "sighting_of_ref": "indicator--71bd96ac-1597-462f-a6e9-175d707e3f24", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e23c9f3-edfa-44b1-8c88-2dd11cb8ff95", "sighting_of_ref": "indicator--2966710a-b132-4bcb-b76c-97b8b322d568", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa99392-4c17-46ac-a2e7-83ae86992550", "sighting_of_ref": "indicator--c5100202-ec78-4a64-a1a2-bc9da1a7ae81", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a35ab4-d6d0-41fb-aad5-0883a59730f5", "sighting_of_ref": "indicator--95ed1913-4127-4258-b800-4cf96666fe38", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b20fca-5875-4d32-ae84-c3a05d5d94f1", "sighting_of_ref": "indicator--10baa3e0-6c85-4622-8969-41fe664daf18", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10dd2b48-faf5-410e-8017-f4c9fa72cfa7", "sighting_of_ref": "indicator--036ca276-3786-491f-8f51-2003b77194ed", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110ac3b7-f835-4e6a-aea0-94a7544d7f47", "sighting_of_ref": "indicator--036ca276-3786-491f-8f51-2003b77194ed", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43a79a6-005b-4cd2-b3b4-1ca7617b4618", "sighting_of_ref": "indicator--b3bb8d95-81d9-4f2a-aee2-40850144bc30", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cc4bde-57b6-43c5-bf41-bb29bfa9b1c0", "sighting_of_ref": "indicator--7a261af3-2592-46b6-9fa9-925fc9a79f4e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539bfcc9-e199-43f4-8e70-f0bb3e27809f", "sighting_of_ref": "indicator--84ae72c0-8c53-4ef6-ab00-9f801ec8f225", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a4c3c2-66d7-4854-b1c9-f43f0ac1a495", "sighting_of_ref": "indicator--3da921ee-1512-4430-89cb-61fa61703f6f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4b3d03-82ce-454c-9d9c-f56b2ee1ee37", "sighting_of_ref": "indicator--18897947-0c91-4852-936f-82baf28d56ee", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70254ea6-7907-445b-89dd-6a0cb3fb0637", "sighting_of_ref": "indicator--18897947-0c91-4852-936f-82baf28d56ee", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63833420-dd77-4918-a5f8-25d3184187a4", "sighting_of_ref": "indicator--18897947-0c91-4852-936f-82baf28d56ee", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bd52ea-221b-4b95-b286-66c1aa86f601", "sighting_of_ref": "indicator--3af978d5-c1ce-4c90-97c9-f3d8bc96254a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bed779d-b163-4eee-b34e-5cf57dc5a033", "sighting_of_ref": "indicator--3af978d5-c1ce-4c90-97c9-f3d8bc96254a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e7f885-7e9e-4824-ab8b-8ecdef13c4e3", "sighting_of_ref": "indicator--3af978d5-c1ce-4c90-97c9-f3d8bc96254a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3532ff86-ee7f-4286-b5be-de037c546538", "sighting_of_ref": "indicator--e0756fd9-ff1d-43ef-8bed-731bc949c6e8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd76b2a7-0936-4d16-828b-84f48df7259b", "sighting_of_ref": "indicator--f27689a0-63d4-4429-ad4d-469c09c8dcc0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c3b00f-85e9-47db-8377-06cc5b7a4b62", "sighting_of_ref": "indicator--f27689a0-63d4-4429-ad4d-469c09c8dcc0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e808ca-f189-4b49-8497-88b56585b6dd", "sighting_of_ref": "indicator--e2b42e22-b359-4bd6-a60c-7681692515ec", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4926e8-9468-4dee-940f-59b58f2a5ddf", "sighting_of_ref": "indicator--c27c4c68-da1a-427e-9e21-8a0573f3e54d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a1ed80-e135-430a-b9ba-83789bf947ff", "sighting_of_ref": "indicator--302a32a4-121e-4aad-9ce3-7220722f73dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98598d79-d2d4-42a5-ac8a-6711c4d8eaae", "sighting_of_ref": "indicator--df90c371-21ab-4541-b2f3-d157938886cf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1942ff5-9495-4ac3-a9c9-7458b979bb6f", "sighting_of_ref": "indicator--1bb3bf67-7327-464f-9f78-126245acd1fb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db422287-da4c-44b7-b054-fd169adb3b7a", "sighting_of_ref": "indicator--9dc596d2-37b2-4b60-9ca7-1a635ebc1e42", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aadc398-5a3e-43d0-b735-dd91c99c95ce", "sighting_of_ref": "indicator--1f61ae33-c03a-462c-878d-2daf42076383", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55876acc-e211-44c5-82b2-283028df7444", "sighting_of_ref": "indicator--dd1b142a-0924-4122-9f4f-ed589d612887", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce4e8bac-2a21-4db1-839c-ec54faaba064", "sighting_of_ref": "indicator--dd1b142a-0924-4122-9f4f-ed589d612887", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989117b2-46ce-434e-b9ec-eae43876f01b", "sighting_of_ref": "indicator--dd1b142a-0924-4122-9f4f-ed589d612887", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4babd7-7892-41f5-91fd-c540d0b56e2e", "sighting_of_ref": "indicator--1c8ea060-f761-491f-a3b7-01046d7c5be8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32c8101-a568-456e-ac80-8eab133fec2a", "sighting_of_ref": "indicator--1c8ea060-f761-491f-a3b7-01046d7c5be8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bafed4e-2b5d-4553-82f9-24c00ebb81b3", "sighting_of_ref": "indicator--1c8ea060-f761-491f-a3b7-01046d7c5be8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7672a12-79f0-4e3b-9645-0d737bde0918", "sighting_of_ref": "indicator--50a96bd8-82ce-48ae-ab03-23e45a6e5568", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5938a3-fe9d-438a-8247-fd8a9164069a", "sighting_of_ref": "indicator--a8ebf2e4-58d4-44f4-afb4-73518181a9fd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce4846b6-217e-41cf-ae11-691e20c319a1", "sighting_of_ref": "indicator--a8ebf2e4-58d4-44f4-afb4-73518181a9fd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7d1189-e03f-4be3-9073-256ffcf993fd", "sighting_of_ref": "indicator--a8ebf2e4-58d4-44f4-afb4-73518181a9fd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cf9fdc-ec13-410d-9fdf-d8514a161948", "sighting_of_ref": "indicator--c626b882-78b2-4aa4-8b74-5549509367dc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89fed425-5084-43e5-94c5-e7a361148d0c", "sighting_of_ref": "indicator--c626b882-78b2-4aa4-8b74-5549509367dc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b60d81-2c2c-4de8-8405-3928d97aaff6", "sighting_of_ref": "indicator--c626b882-78b2-4aa4-8b74-5549509367dc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c5a835-2488-4d9c-9908-0749f3b48383", "sighting_of_ref": "indicator--3c7db174-b89e-48ba-8971-bcf755db8eb0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752f1ba1-69a1-4cbf-ba3e-d552831b9340", "sighting_of_ref": "indicator--b16f2c6d-0f9f-4e19-8472-7e59dee9a8b2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ae0656-3119-4670-8682-812d1eefea89", "sighting_of_ref": "indicator--b16f2c6d-0f9f-4e19-8472-7e59dee9a8b2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271a47b3-4897-4bc5-97f1-9058ad513f66", "sighting_of_ref": "indicator--b16f2c6d-0f9f-4e19-8472-7e59dee9a8b2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ae1d70-a052-4153-84aa-cbb84d0955d9", "sighting_of_ref": "indicator--ffc24da9-2d87-464d-b682-6a7867f78484", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a475de-5689-49e0-a45c-c0b313231392", "sighting_of_ref": "indicator--ffc24da9-2d87-464d-b682-6a7867f78484", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70f7a48-9961-4859-83f0-0a0ae29fdffb", "sighting_of_ref": "indicator--ca0d0606-3f68-45a5-a896-43f88ea760cc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86738ce-c437-4547-ae05-de9e74b10bc6", "sighting_of_ref": "indicator--a81aca2e-dc2d-468e-aecd-7d5ad8622ece", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba93e8a8-2bab-42e5-aa4b-42b4c86170a4", "sighting_of_ref": "indicator--a81aca2e-dc2d-468e-aecd-7d5ad8622ece", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7b6ff3-f78b-4690-a00e-6394aa6eb43a", "sighting_of_ref": "indicator--03c2e88f-5977-4f38-9316-0a2be9907236", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8834e163-e8b1-4f72-b684-5bfe5cc29616", "sighting_of_ref": "indicator--d31af189-884e-4451-8bf6-9fd21f78e149", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e637a38d-81b6-407b-9ba4-d9ab31d02f3c", "sighting_of_ref": "indicator--3aae1f09-86df-4580-8e65-da636c9d90d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0eb7959-9d1e-475c-b165-3fffeb0d586d", "sighting_of_ref": "indicator--5f815117-8aa2-45cb-89e2-eaed91b662df", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059b10d2-faab-47d2-a7f3-511c14fae8f8", "sighting_of_ref": "indicator--cce63e5d-1f7f-498e-996d-05c8e3958ea4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024694da-8b3d-44f7-ab57-f2ceeb6a37bb", "sighting_of_ref": "indicator--cfd82b0e-2e8f-41c4-a43e-5ab6132f43a7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79433cc1-b394-441a-9300-b7309bda381e", "sighting_of_ref": "indicator--cfd82b0e-2e8f-41c4-a43e-5ab6132f43a7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34767839-2729-4364-8876-e6039f99a0d7", "sighting_of_ref": "indicator--b5f60d85-a1b6-460b-b84e-5bd810273a2f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3acb21c4-d132-4b05-9010-f0a1e52ed3ee", "sighting_of_ref": "indicator--b5f60d85-a1b6-460b-b84e-5bd810273a2f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cdfaf20-639b-415f-bbb4-1b09e91a623b", "sighting_of_ref": "indicator--8a2418ba-0121-42aa-8c5c-0a2bd00ed08d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986b5e6c-52d7-488f-a3e1-bd1f34a6f812", "sighting_of_ref": "indicator--8a2418ba-0121-42aa-8c5c-0a2bd00ed08d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f585e9-682f-4a90-ab1c-399efd22d1f5", "sighting_of_ref": "indicator--8a2418ba-0121-42aa-8c5c-0a2bd00ed08d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1639f9ec-e05a-4427-a286-02f860309680", "sighting_of_ref": "indicator--b4f69673-cb00-4593-b473-b14d317ca8ce", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483ce0a9-e36f-4d66-8a58-df25277ad82d", "sighting_of_ref": "indicator--b4f69673-cb00-4593-b473-b14d317ca8ce", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c748846b-2b1b-42db-a378-f66035ac2031", "sighting_of_ref": "indicator--cfbf9197-b3fa-4cdd-aaab-e4ec2fb9ca04", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4c7b79-8267-4904-89d9-a940e2aefcbf", "sighting_of_ref": "indicator--cfbf9197-b3fa-4cdd-aaab-e4ec2fb9ca04", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e20701-b0b6-4e0b-8491-35f560f588ff", "sighting_of_ref": "indicator--cfbf9197-b3fa-4cdd-aaab-e4ec2fb9ca04", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c37e3a2-8cca-4143-87e2-36bd266e5823", "sighting_of_ref": "indicator--0ea9dd47-838b-4149-a48f-577dbb2e0682", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f71dabe-8326-4659-92f4-528a55dfbed3", "sighting_of_ref": "indicator--0ea9dd47-838b-4149-a48f-577dbb2e0682", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d558d1f-3485-4ac3-8ece-60d95aa90003", "sighting_of_ref": "indicator--0ea9dd47-838b-4149-a48f-577dbb2e0682", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6551c05b-64ed-4e93-85c9-0ab7fcd80607", "sighting_of_ref": "indicator--139feb6f-667a-4bd0-a007-bfd643dd50dc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861498e3-4772-46c6-af25-0b5677287529", "sighting_of_ref": "indicator--139feb6f-667a-4bd0-a007-bfd643dd50dc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150eee54-fe66-4e4a-a365-e253d19dac44", "sighting_of_ref": "indicator--139feb6f-667a-4bd0-a007-bfd643dd50dc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b6ea7c-f1e7-4c58-9899-51faa4640bb1", "sighting_of_ref": "indicator--d0a4292f-48fd-4c69-a288-12bbd40af5c8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61d2a26-fc1b-4c5a-948e-ce6e230d83de", "sighting_of_ref": "indicator--3754b7f5-af51-43a6-9a2c-8a03806c3268", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c28a31a-62e5-426b-91ca-a0f7e4af0c37", "sighting_of_ref": "indicator--3754b7f5-af51-43a6-9a2c-8a03806c3268", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45319cc2-9bdf-4061-942c-9c2fc1956d58", "sighting_of_ref": "indicator--0f84ba03-9d30-45df-9920-b6a670343bcc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca8279c-15fa-44b8-9c06-5761abe4aa96", "sighting_of_ref": "indicator--cac29cda-02cb-40f6-abcf-189219b5ebd1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510f63d3-e100-4cb6-bd87-6a7dadfcf0dd", "sighting_of_ref": "indicator--eb5c7393-aac5-4c95-be87-ed13b485a26f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cfa81ce-583c-46b9-a880-0a397b229c42", "sighting_of_ref": "indicator--eb5c7393-aac5-4c95-be87-ed13b485a26f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba63026-f18c-42e0-b2ea-688e8579d720", "sighting_of_ref": "indicator--4cb0eab9-b0db-4f74-9e14-4eb34eb3b7aa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba89a318-e681-42a5-8a11-4797f526efa4", "sighting_of_ref": "indicator--4cb0eab9-b0db-4f74-9e14-4eb34eb3b7aa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42fb0e83-437a-418a-840a-b69cd0514423", "sighting_of_ref": "indicator--b800ccc1-a1fd-408d-9d23-28463349b1c1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3e5cb2-4771-4b2f-97cc-c8fb1d597b49", "sighting_of_ref": "indicator--b800ccc1-a1fd-408d-9d23-28463349b1c1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1758a033-c05a-4679-b684-6b42bf5ee366", "sighting_of_ref": "indicator--efb9ee64-0062-4174-bcb8-93a3ed86c3df", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d74142-29b3-4a9f-a36e-80dd0a92ce56", "sighting_of_ref": "indicator--efb9ee64-0062-4174-bcb8-93a3ed86c3df", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c526e579-0ea0-4927-ba0d-e9f35ea72918", "sighting_of_ref": "indicator--efb9ee64-0062-4174-bcb8-93a3ed86c3df", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4dc6703-7533-4e37-aa93-90cfd06ebec6", "sighting_of_ref": "indicator--b18a0600-d021-4e20-8af0-ef7aff03437f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde50162-1ff9-460e-83e3-d2d97bfa6932", "sighting_of_ref": "indicator--b18a0600-d021-4e20-8af0-ef7aff03437f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad1e9e8-3f63-4543-9903-53a3910a1e72", "sighting_of_ref": "indicator--b18a0600-d021-4e20-8af0-ef7aff03437f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d8d657-5b34-4a92-90be-0e204166b6ca", "sighting_of_ref": "indicator--d24dfd1e-b748-4a1f-b272-3b7b6de59864", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81df72c1-0430-4f85-8ce9-aa75bbc2f815", "sighting_of_ref": "indicator--d24dfd1e-b748-4a1f-b272-3b7b6de59864", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a209d2a2-4afd-45e8-8379-b24bdcbc31e2", "sighting_of_ref": "indicator--cbb35656-a152-4854-81c5-ac40c746bd36", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3a709d-e55e-4573-80df-a2caca6d1be1", "sighting_of_ref": "indicator--cbb35656-a152-4854-81c5-ac40c746bd36", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c3dcf5-8444-4b72-96c4-b7b43350dd0b", "sighting_of_ref": "indicator--cbb35656-a152-4854-81c5-ac40c746bd36", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6739d973-2af5-4154-be50-c2c2700caa6e", "sighting_of_ref": "indicator--8de8c6ee-23d3-432f-8338-7a40f7c30d1a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b387f686-967e-454f-a3ae-0c1cf739c77e", "sighting_of_ref": "indicator--8de8c6ee-23d3-432f-8338-7a40f7c30d1a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eea13a0-2906-44c9-8c76-b744cc95423e", "sighting_of_ref": "indicator--8de8c6ee-23d3-432f-8338-7a40f7c30d1a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c411b01a-70a4-4a7a-81e4-78110d946eb5", "sighting_of_ref": "indicator--34b0979b-65da-4d45-a32a-14a80244718b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946fccee-a863-4341-a638-e6f307a59edd", "sighting_of_ref": "indicator--34b0979b-65da-4d45-a32a-14a80244718b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c112979f-f35a-43b6-9496-d0ebc15a7291", "sighting_of_ref": "indicator--34b0979b-65da-4d45-a32a-14a80244718b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59af44d8-8af8-4846-af01-c1efa1fa843a", "sighting_of_ref": "indicator--ce99a660-015d-4391-bb83-827bdeeeb68c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273a2bc9-ca49-4de8-bf1c-a02d1a361df8", "sighting_of_ref": "indicator--ce99a660-015d-4391-bb83-827bdeeeb68c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee969ff-5b3c-419b-95af-bfb4ad491b1a", "sighting_of_ref": "indicator--ce99a660-015d-4391-bb83-827bdeeeb68c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69294af-b890-48a4-9465-c169f7ac607d", "sighting_of_ref": "indicator--9b532510-7a9e-4701-bccd-2124f6e01e01", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0589c7-24b0-4e8e-ab2e-90953ae6ba29", "sighting_of_ref": "indicator--9b532510-7a9e-4701-bccd-2124f6e01e01", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b789f97e-d9d7-491c-b7f6-c27316900236", "sighting_of_ref": "indicator--9b532510-7a9e-4701-bccd-2124f6e01e01", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e7bf25-ed15-4ccb-8418-e35122ef7601", "sighting_of_ref": "indicator--fc4ead90-690e-433b-9ff4-37ac76a0b881", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce72c49-d1ab-4546-9f10-36d978ab1635", "sighting_of_ref": "indicator--fc4ead90-690e-433b-9ff4-37ac76a0b881", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d81f21-61e8-4d76-9f59-f868208a1c71", "sighting_of_ref": "indicator--fc4ead90-690e-433b-9ff4-37ac76a0b881", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985c2f1e-b1b4-4a0d-a9b8-bbb19f31222d", "sighting_of_ref": "indicator--9644d21a-a997-41ec-8b79-d7b7b59b75d8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59631e7f-b4e0-4d0d-8e2a-aead7786d8d4", "sighting_of_ref": "indicator--9644d21a-a997-41ec-8b79-d7b7b59b75d8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9081c84d-8d81-430c-98f4-225d8b6c3af3", "sighting_of_ref": "indicator--9644d21a-a997-41ec-8b79-d7b7b59b75d8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824bc17a-c249-40b8-9d8c-bee5deb98761", "sighting_of_ref": "indicator--7749d232-3c56-4431-a495-1d93c8f061b6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019d1773-4d97-4c91-af84-323c73d0ea82", "sighting_of_ref": "indicator--7749d232-3c56-4431-a495-1d93c8f061b6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15dd913c-1290-4b95-83e9-32f4c9e100aa", "sighting_of_ref": "indicator--7749d232-3c56-4431-a495-1d93c8f061b6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc28e6a2-e130-4f43-b3d9-0c6556bc7648", "sighting_of_ref": "indicator--9b9049d1-752c-4430-a1f1-b10613c18fbf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5d8fd0-0904-4b7c-a57d-0d357af354ff", "sighting_of_ref": "indicator--9b9049d1-752c-4430-a1f1-b10613c18fbf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7671b052-6f30-4618-b5b5-83cd788f974b", "sighting_of_ref": "indicator--9b9049d1-752c-4430-a1f1-b10613c18fbf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300bfb79-e37f-4fea-8e30-5237dc77c066", "sighting_of_ref": "indicator--e9d48943-97a1-4708-b206-217796312ce1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43733c3a-a4d9-4bf0-b880-74fe36d763d1", "sighting_of_ref": "indicator--e9d48943-97a1-4708-b206-217796312ce1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47dd2e3-6df6-4b07-9682-6b6f52483a6a", "sighting_of_ref": "indicator--e9d48943-97a1-4708-b206-217796312ce1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c737b24-df8f-4979-8e89-c852a08045b3", "sighting_of_ref": "indicator--97455a90-f730-4a83-8278-e6c16a7b1156", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf3f715-37a5-4140-881b-fde71f70bde2", "sighting_of_ref": "indicator--97455a90-f730-4a83-8278-e6c16a7b1156", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc451a15-f724-4652-8d45-486adb12b898", "sighting_of_ref": "indicator--97455a90-f730-4a83-8278-e6c16a7b1156", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0e035f-26c7-4c7c-aa2c-14254ab883b1", "sighting_of_ref": "indicator--3004f62b-f9ba-4115-93db-d7232c55c52e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a06616f-e275-41da-a959-c54ee0d0faea", "sighting_of_ref": "indicator--3004f62b-f9ba-4115-93db-d7232c55c52e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6225c4cc-ffca-4236-bfad-92394a730aed", "sighting_of_ref": "indicator--3004f62b-f9ba-4115-93db-d7232c55c52e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fc0d54-b36e-4a8f-9eac-9c41983c7cfc", "sighting_of_ref": "indicator--5b03504e-aa5e-45b0-8b13-aae2b44a64b2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf73857-78b8-4941-8ac9-ee50887409d7", "sighting_of_ref": "indicator--5b03504e-aa5e-45b0-8b13-aae2b44a64b2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d5f0b3-c9a5-43c4-8958-ee42b2939ee2", "sighting_of_ref": "indicator--219025ef-4606-49cd-b18d-b7232ce8ea23", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68225e98-ab23-4432-85bf-5abeb8367610", "sighting_of_ref": "indicator--219025ef-4606-49cd-b18d-b7232ce8ea23", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62265212-9a9e-425c-bd62-63bea60b752a", "sighting_of_ref": "indicator--219025ef-4606-49cd-b18d-b7232ce8ea23", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22bead93-76e7-426b-a030-f180d45a40d8", "sighting_of_ref": "indicator--f88a7e02-870b-4a54-8a4c-a15de63daf6d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--713ffdb5-6f11-457a-bdca-2e315ce5b077", "sighting_of_ref": "indicator--f88a7e02-870b-4a54-8a4c-a15de63daf6d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a589949-9c74-4802-b613-e5c57a19300d", "sighting_of_ref": "indicator--f88a7e02-870b-4a54-8a4c-a15de63daf6d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6c8999-997f-41e6-aa6b-7bb65406315a", "sighting_of_ref": "indicator--82f85b15-3625-42b7-8a0e-d49b7ee33c15", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba3b1d9-af26-4daf-b43a-c07d2e30a614", "sighting_of_ref": "indicator--82f85b15-3625-42b7-8a0e-d49b7ee33c15", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20516388-451c-407c-98cc-aad048a8d41d", "sighting_of_ref": "indicator--82f85b15-3625-42b7-8a0e-d49b7ee33c15", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b6e636-1b86-451b-92b6-763d7850aef0", "sighting_of_ref": "indicator--9409ebda-fd4a-44d5-8f8c-5dc4eae929cb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03bdf95-6314-424c-a214-1eb2af61a9e7", "sighting_of_ref": "indicator--1dc843a0-59ba-4c51-a8d3-815a4a012e14", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebd94a1-96ad-4289-a090-4ad7ae5e9563", "sighting_of_ref": "indicator--9117b7ea-5b55-4843-a547-791eaa9e7cab", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eeb1c6b-bb08-4c6d-ba62-2dc92648d561", "sighting_of_ref": "indicator--8344a2c7-ea8e-46bc-8ce5-d464892398f9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38906ac0-4eb4-4e30-a0d3-f96658b1e87a", "sighting_of_ref": "indicator--4bfb3a6d-d75e-47d1-a93f-c8a1bfbe4974", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab987a88-45ef-46f8-a323-2e952d973d43", "sighting_of_ref": "indicator--6bfaf2de-99be-4cdf-b517-e17a424e1268", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca2edaf-6fb9-4b97-92c4-0986e8006080", "sighting_of_ref": "indicator--b77d1795-22a9-46b8-8eac-d8f35a2b8fed", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c910d9-a1ec-4f9c-95fe-86e9b3cd0907", "sighting_of_ref": "indicator--b77d1795-22a9-46b8-8eac-d8f35a2b8fed", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbfda51-c86b-4f9d-ad38-11d3ef641b96", "sighting_of_ref": "indicator--33e1ce9c-af8f-4250-9d9f-143e92ff012d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5968b6-ed7b-472d-8aa7-273184842762", "sighting_of_ref": "indicator--33e1ce9c-af8f-4250-9d9f-143e92ff012d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad26985-9e9e-4045-8475-f8b1001292d3", "sighting_of_ref": "indicator--24ec3b74-a7c3-4f1d-96ae-6ef03476538f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85d659e-350c-493c-9f33-500898099145", "sighting_of_ref": "indicator--24ec3b74-a7c3-4f1d-96ae-6ef03476538f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a48fd07-ae38-48ea-8562-45dddcd0bd4e", "sighting_of_ref": "indicator--aec514f9-5ab8-4b1b-8b21-eff67dccc0f4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62522f09-7031-4d63-9ce5-c6ece98611bd", "sighting_of_ref": "indicator--aec514f9-5ab8-4b1b-8b21-eff67dccc0f4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2f2c09-ea6e-47cf-baa8-4a32e3078d38", "sighting_of_ref": "indicator--c08b85f1-b79c-4563-aaba-7fce20819421", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099d5d56-e1a0-4a6a-a8be-6a1f55a88c38", "sighting_of_ref": "indicator--f2294f6a-e3e4-42ce-8b92-f5ba42aaa447", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8020db-ea3b-4806-8cfe-73df1aaf6abd", "sighting_of_ref": "indicator--f2294f6a-e3e4-42ce-8b92-f5ba42aaa447", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25f5c3b-545c-45b7-84a4-9d2a5a1ec64a", "sighting_of_ref": "indicator--c10c221a-a0b1-4d06-a5ff-b380d996857b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0f70be-eefe-4296-8501-85cc19c8a8d6", "sighting_of_ref": "indicator--c10c221a-a0b1-4d06-a5ff-b380d996857b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b42f0e1-e63a-4340-bdaf-1eb6ac93d5ba", "sighting_of_ref": "indicator--bd1aa4f7-b123-4d80-b72b-433195832d7e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0fb4d68-52ae-4bbf-bd56-f6b2a7eba9b5", "sighting_of_ref": "indicator--bd1aa4f7-b123-4d80-b72b-433195832d7e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4d5525-bf28-4142-8dc2-fb1153400c26", "sighting_of_ref": "indicator--2a729572-9c18-4eda-88b4-b94ca55ad56a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309803fd-a2d8-4c18-bdb5-9dbec815eae1", "sighting_of_ref": "indicator--2a729572-9c18-4eda-88b4-b94ca55ad56a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4def70a-ec1e-40df-b566-613d070208f4", "sighting_of_ref": "indicator--3a556daa-45a8-4e7f-9238-cf6d58d3990a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a8c87d-d40c-4e2e-ad81-5ddcdc4d58dd", "sighting_of_ref": "indicator--9455528c-64ee-41e5-9cc5-f23de289c915", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7a95f4-e1ac-41fb-b838-fb1c8887025d", "sighting_of_ref": "indicator--1ad30cb7-53af-4e59-a5fd-8d59ea77eff3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d6cf72-b5d6-43c3-ab44-10973a3173b1", "sighting_of_ref": "indicator--379fea22-b891-4a50-8eaa-0bbebf94b446", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ce6722-de07-45bd-adab-89f9657fecc2", "sighting_of_ref": "indicator--766d8295-044d-42c9-bd81-b0cd78a98231", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0d0a91-3130-4bbe-b6e1-4b40d08eeefa", "sighting_of_ref": "indicator--4d9a06e7-b241-4893-b338-7b25556bac66", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533e8fd2-e828-4282-a9f1-fa3383fa2ccf", "sighting_of_ref": "indicator--c24191e1-ead5-460e-846d-126f1bb29c90", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bcd00a9-72d8-458e-9737-e8ea852c6d35", "sighting_of_ref": "indicator--cb87ba3d-f7bf-4fd6-8279-d200faaa4b81", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7df629-ffa2-4614-ac60-7a9709ea748b", "sighting_of_ref": "indicator--24227a9e-af3e-4b19-af97-1573d38547d9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4f10c7-3609-4fa8-a337-a2ab0eaa92e0", "sighting_of_ref": "indicator--24227a9e-af3e-4b19-af97-1573d38547d9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b43c2a-5b0d-421e-8da1-7337baa4c72a", "sighting_of_ref": "indicator--4679954b-d08c-4b0c-9953-54d838e5ac74", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b496f72c-ae43-4ae1-9366-433edbef5bb4", "sighting_of_ref": "indicator--7abb2ad6-8636-413e-aabe-a6c1c16083ce", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d96db2f8-99d7-4126-bcde-e77e8faae7d6", "sighting_of_ref": "indicator--4a1bf4c8-1e93-4ca1-b523-2188505195d3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe7f019-b275-4a1b-a060-9f43b8dbb366", "sighting_of_ref": "indicator--a670b9b6-ca7d-42cb-89c3-309242b9a19d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a5b23e5-154f-4108-8336-636ee8b62060", "sighting_of_ref": "indicator--1d7e0b69-ddb6-4ac4-b3bd-bfc159ca04df", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b32f0c-5592-4fc2-85c2-26c74e7c8a70", "sighting_of_ref": "indicator--6caafb5f-6ea9-4337-a7eb-b602411fc333", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d7c904-15bf-4c37-934b-4f99712078c2", "sighting_of_ref": "indicator--4ae8f874-bda2-4f56-a55e-94b113a10053", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9ebc57-71fb-415a-8bc9-00b29d927264", "sighting_of_ref": "indicator--ee229572-2dab-4ed2-9581-e30acf66d5a5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd2b258-5ba4-4fa0-84bb-74e234cbfa7a", "sighting_of_ref": "indicator--904f5026-2a3c-468c-b474-ed4ed42499de", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c6f673-b1e2-401a-94fe-99bd8d317d1d", "sighting_of_ref": "indicator--904f5026-2a3c-468c-b474-ed4ed42499de", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49436645-8321-4389-a372-0fcf0a240339", "sighting_of_ref": "indicator--43254f88-3880-474e-99ce-9673cbc6e1ec", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a54b5f4-c026-43e0-be70-47a0a57b9736", "sighting_of_ref": "indicator--43254f88-3880-474e-99ce-9673cbc6e1ec", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6fd4fb-4948-4d23-a8d5-1d6685120929", "sighting_of_ref": "indicator--b41c4a12-eb07-47e3-9ef4-a23dac31f55e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7029f3f3-3b25-4366-9ee1-31c1d481f218", "sighting_of_ref": "indicator--15a7b33e-066b-42bf-b0cc-5f42ab847f00", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b575aa5-b5f9-4975-bd66-95bc022c425c", "sighting_of_ref": "indicator--9069c984-d7c6-45a5-9ed6-ab127a9afad9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a378cb-8db5-462b-8af1-2aa9e8cef851", "sighting_of_ref": "indicator--aca07f9a-8343-437b-b1bd-11885f18c3a9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b462a47-4d6e-49da-85ba-70da592255b0", "sighting_of_ref": "indicator--1f235f9e-3aea-4d13-ad23-636eb021b22a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24e7733-df3b-42db-89c5-f432c2c8dbbb", "sighting_of_ref": "indicator--3a353051-96a7-47f6-a0c3-a7c0118ebfac", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a4629c-f3b7-4ab4-b29b-effa7f8c1587", "sighting_of_ref": "indicator--d7987c14-1df9-473a-8ead-2c43f92ad477", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4cdc5d-21a5-4698-97de-7cfb7301d86e", "sighting_of_ref": "indicator--99f5bcc6-91fd-47c1-a23f-939a7458889d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e42a849-9955-4c52-a157-e08f47b2d8b3", "sighting_of_ref": "indicator--4796e808-87e1-4e09-a847-1f4c02fa80ec", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe51868-8b88-445f-9fb6-4daafa6ecbee", "sighting_of_ref": "indicator--996111b6-1e69-49ba-a4f8-00e57dcfee87", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4383f576-b7f4-490f-abd9-02b943c4f4a3", "sighting_of_ref": "indicator--03514e97-3c36-43cd-a798-f506c40a2dae", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e367cf1c-d573-4add-b05c-2fd924490d35", "sighting_of_ref": "indicator--15e50847-c39f-44df-bcf4-ec1c3c297ffb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ddca5b-c61b-47a6-b62d-669cdaef6678", "sighting_of_ref": "indicator--f6e478e1-7b1b-463f-a713-f41a182cfb11", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b692d9-0f95-4668-9c0c-2595ffc30dea", "sighting_of_ref": "indicator--ea0f366a-34af-4f65-a6b2-ace108bbe533", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb25f7ba-890f-4b9a-850b-32be09bd45fd", "sighting_of_ref": "indicator--d8f5f364-bcc8-48e6-bc1b-05a1a96b7626", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c88305-cdaa-43e5-8e20-c3eb2a68c3db", "sighting_of_ref": "indicator--d83ddc66-b96f-4b43-8d61-13008cec9cce", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d461a1a-7ac9-44e3-9d69-33de409ee3e1", "sighting_of_ref": "indicator--1ccb40d1-274e-4227-980b-93b034cfcf57", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae5e09b-f15d-4244-bdbc-b77ef07923ae", "sighting_of_ref": "indicator--fc4563c4-d266-4e56-b7d1-2cdbb99a70bf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c55f9f-586e-44a6-b1fc-6164929b7234", "sighting_of_ref": "indicator--173b9989-0898-46d3-8882-bd92af8162b8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b9d3cd-d2f9-4c46-8b68-eed5f75ebff4", "sighting_of_ref": "indicator--5d78d30b-ffcc-4a41-8385-a86ae8ee6ea1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b36a999-aaee-491a-9aaa-37e5047625d7", "sighting_of_ref": "indicator--5d78d30b-ffcc-4a41-8385-a86ae8ee6ea1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92991ae0-35b0-4863-bf16-6158ce68002b", "sighting_of_ref": "indicator--149422a5-dbf4-4d1b-b614-2ca3dd115ac5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a10d17-b543-4723-bd93-2292c14d0fd2", "sighting_of_ref": "indicator--9dcd50eb-f710-41b2-bacc-d65c2a202a1b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719e419d-3d7c-4a53-b722-ec1911c758af", "sighting_of_ref": "indicator--9dcd50eb-f710-41b2-bacc-d65c2a202a1b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ebeb2f3-cde2-4653-8cb3-5f15bc982802", "sighting_of_ref": "indicator--83df1bcd-8e13-415c-a096-02f4dbe2d34a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a683880b-56c2-4402-a5ab-6f4ab86e3f59", "sighting_of_ref": "indicator--83df1bcd-8e13-415c-a096-02f4dbe2d34a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb35390-9a72-46d1-a44a-98e8b4e0ac4f", "sighting_of_ref": "indicator--be5b8729-c70b-4f87-9477-119d81b61cc7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e5383a-e4d3-422a-a463-5313f001497e", "sighting_of_ref": "indicator--be5b8729-c70b-4f87-9477-119d81b61cc7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee53c8a8-71a4-4e9a-b2af-b03dff9cfaea", "sighting_of_ref": "indicator--c5157085-3dbd-4cca-9990-c63b39d5d9bf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5463f620-e02c-4f2c-a87c-3dd0bf56850c", "sighting_of_ref": "indicator--c5157085-3dbd-4cca-9990-c63b39d5d9bf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2db0052-5186-4d52-85e3-cf5e6af1f6d8", "sighting_of_ref": "indicator--c5157085-3dbd-4cca-9990-c63b39d5d9bf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e511d753-1e9e-4d64-ad40-628821f1aece", "sighting_of_ref": "indicator--482c0965-6ec7-4266-a453-146cd7b4f515", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33e70d8-23ee-46f7-8e3d-1d5b74d68048", "sighting_of_ref": "indicator--482c0965-6ec7-4266-a453-146cd7b4f515", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1319b5cc-58cc-4c69-ac97-f00962d2fe15", "sighting_of_ref": "indicator--fd9eaba1-e5ec-489f-8906-ac28f09d2e07", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee772d1-6795-49a0-925f-27d0cadca030", "sighting_of_ref": "indicator--fd9eaba1-e5ec-489f-8906-ac28f09d2e07", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca9a541-84a3-4c60-9fb0-3bd6ec11fdd6", "sighting_of_ref": "indicator--1bb3cc3e-7858-4e8d-a60d-d922506f0b0e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6c0e13-7cf5-4e89-bcbe-07b49f1186b3", "sighting_of_ref": "indicator--1bb3cc3e-7858-4e8d-a60d-d922506f0b0e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0317e8-072c-4ef2-a50c-54481237307f", "sighting_of_ref": "indicator--ce252d41-3d7a-4de6-8810-71596b4a88a4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93252d86-f228-4a23-8c2e-5e9a46690105", "sighting_of_ref": "indicator--ce252d41-3d7a-4de6-8810-71596b4a88a4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0750d1e8-0a4d-401d-b257-8b4f85637be5", "sighting_of_ref": "indicator--1e48e196-0643-4db6-9681-6448e9b0293d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4094b998-0fc7-4f51-88ff-8bf642eb866d", "sighting_of_ref": "indicator--1e48e196-0643-4db6-9681-6448e9b0293d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c847ad63-8b45-4a23-9950-865be8817e14", "sighting_of_ref": "indicator--c07fd50e-26c3-4c2c-a6cb-5f16baba9106", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--874e5935-3abe-4f02-96da-0b72659fb9a7", "sighting_of_ref": "indicator--c07fd50e-26c3-4c2c-a6cb-5f16baba9106", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832212cb-b2f3-4c93-9bd0-4705077d0f13", "sighting_of_ref": "indicator--6d4ee66b-5f53-4db7-a0e3-79c01e6a124f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db52fb6b-05c3-4044-a1e5-ebe857fc4783", "sighting_of_ref": "indicator--6d4ee66b-5f53-4db7-a0e3-79c01e6a124f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834308d4-7c57-4201-ba38-8e30ddcffab8", "sighting_of_ref": "indicator--728a3129-7b68-4300-8f44-0a372fb98e5d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e52fcb-3d12-45d4-986d-ab175e96e383", "sighting_of_ref": "indicator--728a3129-7b68-4300-8f44-0a372fb98e5d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb909caf-a96c-43d9-8af2-cb53c5f757d6", "sighting_of_ref": "indicator--15ae4e9e-c1ae-4988-a3ff-810212012710", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa010fc-f258-464a-8ba1-4ad1653a2fcd", "sighting_of_ref": "indicator--15ae4e9e-c1ae-4988-a3ff-810212012710", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6172219b-9255-408d-8f2f-f74dc9c0a8c5", "sighting_of_ref": "indicator--8f84566c-1b89-4da8-8569-5cd1fdb227fb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c91443-25fa-4ace-accd-f9bfc9d85cff", "sighting_of_ref": "indicator--8f84566c-1b89-4da8-8569-5cd1fdb227fb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5fd1b1d-e5c4-4dc3-bbf6-09536a20c955", "sighting_of_ref": "indicator--519405f0-249f-4116-aa63-7a752ce1f631", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c1c8ed-8874-445f-a962-d995f9605638", "sighting_of_ref": "indicator--519405f0-249f-4116-aa63-7a752ce1f631", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4f6787-075e-4afc-8e31-eb3615a9cc49", "sighting_of_ref": "indicator--cf42319f-f27b-4223-a6df-7214ef1e75ca", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b2f084-1eff-4f62-9103-1774be0f698f", "sighting_of_ref": "indicator--cf42319f-f27b-4223-a6df-7214ef1e75ca", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f0b37a-d519-4830-b539-61818bb2b672", "sighting_of_ref": "indicator--3b40966e-6764-4eae-82df-2f3b7a463785", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777e32a0-f69a-4963-ae61-afe9645e50a6", "sighting_of_ref": "indicator--3b40966e-6764-4eae-82df-2f3b7a463785", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b1668e-ebb5-4bb1-8b15-1e6b288d1dda", "sighting_of_ref": "indicator--b8d0bb4b-327d-4485-ba5f-8db21f139507", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc53e978-5835-4167-a3a2-0f6ca5214d3b", "sighting_of_ref": "indicator--b8d0bb4b-327d-4485-ba5f-8db21f139507", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75032099-0535-447b-b378-b8b9527d10c5", "sighting_of_ref": "indicator--ebd3f863-a217-4459-a402-49a90e6e7443", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e9517a-5e04-4a62-9d64-feb754d71b9b", "sighting_of_ref": "indicator--ebd3f863-a217-4459-a402-49a90e6e7443", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f22186b-81c3-4e12-b7fc-f30c176a41cc", "sighting_of_ref": "indicator--17ebb910-4297-4805-966c-053f74d5cf6d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3301c2d7-1e7e-4afb-b711-7e5febb411d7", "sighting_of_ref": "indicator--17ebb910-4297-4805-966c-053f74d5cf6d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f75e0f6-c753-47bc-9375-11c49bdde4f4", "sighting_of_ref": "indicator--47a4f746-bdbb-416f-9ee0-8ff55aa20f66", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247134ca-6faf-4626-9c58-8ecd6bf63e38", "sighting_of_ref": "indicator--47a4f746-bdbb-416f-9ee0-8ff55aa20f66", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7e68f6-3ede-43b4-9430-aa5cf485a263", "sighting_of_ref": "indicator--c809d86c-752e-4eda-853b-8d14859263c0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b593c75-54ea-4544-a95b-f52c593cd101", "sighting_of_ref": "indicator--c809d86c-752e-4eda-853b-8d14859263c0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e19a1ff-255c-4ea3-ab14-5b29b1c47241", "sighting_of_ref": "indicator--6ca45761-2204-4948-9ffa-7eccc0b6764f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfce81e-d4dd-4ff0-9a47-415515a28ea9", "sighting_of_ref": "indicator--6ca45761-2204-4948-9ffa-7eccc0b6764f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620cb862-40f9-407f-92ee-6112b928b27f", "sighting_of_ref": "indicator--3caa4f0a-1461-4267-aaca-9395c45db00c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f278bce-b9eb-4915-98ac-a021fc904bd6", "sighting_of_ref": "indicator--25b9d6ce-1714-41fc-b169-26635a60271a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc472c9-cc56-40f8-933b-fa2fc87d028f", "sighting_of_ref": "indicator--25b9d6ce-1714-41fc-b169-26635a60271a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6790a66f-9f92-4bf2-95aa-b11e1709f37a", "sighting_of_ref": "indicator--25b9d6ce-1714-41fc-b169-26635a60271a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52e3ad0-6f3c-46d9-ab91-3c56ae529f2c", "sighting_of_ref": "indicator--a8bfe6a5-8ec1-4936-8844-04ae9b1cf0cd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d78268b-6673-4664-82d9-83d0946d6c14", "sighting_of_ref": "indicator--1851adbc-ce19-4d31-a5b3-ea657c3206f6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f11be9b-4b79-486f-8560-76ad906d674f", "sighting_of_ref": "indicator--6a61a715-9600-4bb4-9c44-6b15b4dcdae9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5781cc2-a8bb-4cc4-85aa-3466f7be6251", "sighting_of_ref": "indicator--6d84c620-ed05-47f4-968a-49af3b430595", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e157cf18-5a51-48dc-857a-f62967d2de73", "sighting_of_ref": "indicator--af0a712f-86f7-42bd-85a1-4204faf35310", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f6979c-8bb7-49d7-8408-bff4e7fdf77f", "sighting_of_ref": "indicator--df8e9fd0-0689-4efa-b849-e660db440f8b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382bfb6f-b59c-41cc-b2f0-e022fdfe243e", "sighting_of_ref": "indicator--da324cd6-f207-43e6-8dfb-d441b69e61f8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d4a1ef-4668-43a8-9664-479f7a41677a", "sighting_of_ref": "indicator--da324cd6-f207-43e6-8dfb-d441b69e61f8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35122dd7-d48b-4fab-b273-accd7219783c", "sighting_of_ref": "indicator--da324cd6-f207-43e6-8dfb-d441b69e61f8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba384cd8-c197-4a2b-a0ee-2c46c153708b", "sighting_of_ref": "indicator--3474d625-8aec-4b29-be0d-33c02c723fb7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99b879d-b926-4431-80a8-a69f0a02f60a", "sighting_of_ref": "indicator--3474d625-8aec-4b29-be0d-33c02c723fb7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcf4354-bc6b-4f97-ae56-005fd53468ad", "sighting_of_ref": "indicator--04df8ed4-fa87-4222-a54e-78f6e2541411", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee50b27d-9b32-4722-8a43-649af0aa1272", "sighting_of_ref": "indicator--65daada1-ec2b-4087-8f69-16067a28c44b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bac34c-f261-4550-889c-3e0b2b85b725", "sighting_of_ref": "indicator--a27cad50-f795-4aff-b443-8f4229188035", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ffc960-ec90-4399-a118-419206b8dc75", "sighting_of_ref": "indicator--a27cad50-f795-4aff-b443-8f4229188035", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b21ab95-1440-4462-a554-7150d899d3e5", "sighting_of_ref": "indicator--fcce6523-e351-4560-98ea-d15181e2d063", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ba402d-e6cb-4199-a303-203d7099d9e7", "sighting_of_ref": "indicator--fcce6523-e351-4560-98ea-d15181e2d063", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6ebfcc-78e5-4899-ac12-519f5a78ef48", "sighting_of_ref": "indicator--fcce6523-e351-4560-98ea-d15181e2d063", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45601048-b308-49fc-834f-cecf003d9cb7", "sighting_of_ref": "indicator--6547c564-a69d-4793-b6f6-3b101cd667a2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d8b862-1951-4566-8dfd-16ca9e4904bb", "sighting_of_ref": "indicator--6547c564-a69d-4793-b6f6-3b101cd667a2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fac886a-8f7c-4d8c-980b-553c77175cf3", "sighting_of_ref": "indicator--6547c564-a69d-4793-b6f6-3b101cd667a2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c068b4e-3fcf-4ebb-a7d6-ae4051bbd16c", "sighting_of_ref": "indicator--da7c5c04-84db-4560-b0a5-866470dbedb1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e27e2a-4a2a-4cfd-aaf2-8f875f6d7f01", "sighting_of_ref": "indicator--da7c5c04-84db-4560-b0a5-866470dbedb1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9947bf43-60de-4d99-8e87-e3ed1bcad540", "sighting_of_ref": "indicator--4170e5ca-5c68-4e60-a672-7315dc3432d1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481d58fb-87a5-4fd7-bd07-aa8c7c591b74", "sighting_of_ref": "indicator--4170e5ca-5c68-4e60-a672-7315dc3432d1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4462a4-f68b-4c75-9729-1977fc9fe887", "sighting_of_ref": "indicator--cc17449b-2570-4ee2-ab15-9a81b03d4152", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a45704-9f74-4e8d-87b5-60dee9c03edc", "sighting_of_ref": "indicator--cc17449b-2570-4ee2-ab15-9a81b03d4152", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68d67c7-fb41-4ba2-986f-f90c5f4d6f7d", "sighting_of_ref": "indicator--2438d0f7-3abf-4c21-acf9-360704419d4f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c65837-ebc1-44c9-8813-f9d14333b6bc", "sighting_of_ref": "indicator--b68bf7b3-6506-4678-b4ac-385ea055244a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f61fabb-fd3e-48bc-9385-a8649a0e7c6e", "sighting_of_ref": "indicator--b68bf7b3-6506-4678-b4ac-385ea055244a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd31d67-03bf-437b-9f9d-995bb47e2fd2", "sighting_of_ref": "indicator--68b9c2f6-a8c4-45de-8d46-3ff548408088", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34defff-043d-4b2b-bf1d-1f27490d0870", "sighting_of_ref": "indicator--68b9c2f6-a8c4-45de-8d46-3ff548408088", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3fe569a-2fcb-492e-9160-ab96e272797b", "sighting_of_ref": "indicator--063edfa7-7c12-4b73-b835-414ebf2585db", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d520db-e64a-4f4f-b5b6-812fa6cc2c2e", "sighting_of_ref": "indicator--063edfa7-7c12-4b73-b835-414ebf2585db", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c31a896-b789-4b4e-b5e3-bd058887b8cc", "sighting_of_ref": "indicator--9cf23575-b4d0-43ad-bf6a-0426cad6b67e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124c3f08-f5e2-4267-8120-35d4e8077fc9", "sighting_of_ref": "indicator--a1dec80c-93b5-4c79-b567-d5e4f162ece8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4109f0f-7d94-4def-b32a-e79a87ff68af", "sighting_of_ref": "indicator--a1dec80c-93b5-4c79-b567-d5e4f162ece8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd3d955-0816-414e-b45f-324ae6da2b08", "sighting_of_ref": "indicator--a6f6137f-69ef-442b-8690-de6829949a87", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd1c58d-8956-455a-9abb-26f1878be1a9", "sighting_of_ref": "indicator--a6f6137f-69ef-442b-8690-de6829949a87", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65f30e0-51c7-433c-9e00-86afd4c0448a", "sighting_of_ref": "indicator--6714221e-c113-497f-920e-80c5e1e34d1f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96167277-ce5e-4625-8494-9cb6d04b2331", "sighting_of_ref": "indicator--1ae51e05-c085-4502-935d-50d6141e8810", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e2ea65-d4b0-4072-9233-ed453af7afda", "sighting_of_ref": "indicator--dd3bfe5a-c83d-4a62-badc-b9d687377f97", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e02c312-50b2-4405-b9fe-bafa03b3f123", "sighting_of_ref": "indicator--dd3bfe5a-c83d-4a62-badc-b9d687377f97", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba3d662-b90b-41a6-bb36-11af701df2b2", "sighting_of_ref": "indicator--dd3bfe5a-c83d-4a62-badc-b9d687377f97", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f07b24e-fd21-483d-b6c8-8eb221fc5546", "sighting_of_ref": "indicator--0c52dfa6-98d1-4f9f-8ac0-f114b9b38884", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18506628-96c3-4203-95ff-6a4bc7909077", "sighting_of_ref": "indicator--0c52dfa6-98d1-4f9f-8ac0-f114b9b38884", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--974be6c7-64f8-4a18-868b-f4dd29ed2fd0", "sighting_of_ref": "indicator--029b3c43-8c5f-4ee2-929e-b6462a21b202", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3a2c47-055a-4fba-8951-7148d6ddde5a", "sighting_of_ref": "indicator--029b3c43-8c5f-4ee2-929e-b6462a21b202", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7cd265-2ab5-4484-a017-51fec0a55cb9", "sighting_of_ref": "indicator--029b3c43-8c5f-4ee2-929e-b6462a21b202", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded847f3-434d-4f3f-b73c-fa2a9bbd4e2c", "sighting_of_ref": "indicator--029b3c43-8c5f-4ee2-929e-b6462a21b202", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1fd217-9802-4004-bf7f-8b32244d8c64", "sighting_of_ref": "indicator--a53bc2f0-48aa-42df-9005-20a582afdd74", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f823bd-0d1a-44f2-a901-b7ab0481a4a8", "sighting_of_ref": "indicator--a53bc2f0-48aa-42df-9005-20a582afdd74", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d219e57b-9147-4862-951f-1f934ef00587", "sighting_of_ref": "indicator--a53bc2f0-48aa-42df-9005-20a582afdd74", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ddbb8f-5197-449b-81b0-fe9127cc324a", "sighting_of_ref": "indicator--3044c2c8-c90f-4575-b5c9-69475110d7a8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127d401b-17c8-4294-9afe-b441e8dba569", "sighting_of_ref": "indicator--3c0904e8-7f2f-40b0-9d98-3d0666e42454", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc764d81-3064-41a2-9b8d-c65e6b11d208", "sighting_of_ref": "indicator--3c0904e8-7f2f-40b0-9d98-3d0666e42454", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782629ab-5aca-4d90-b97a-dbf6493554fd", "sighting_of_ref": "indicator--22d0a437-2287-4d0e-9bf6-afb03586ae36", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7131f37d-ed1c-4b71-884a-54ffb6096793", "sighting_of_ref": "indicator--4d35775e-2964-4234-9aa5-4017a024c141", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd360101-cf38-4be9-8cc6-93e907bdd6d1", "sighting_of_ref": "indicator--4e057a01-098b-4868-8a92-7f91cdf9f431", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a9eb37-da3f-460a-9c10-444f2607bfc2", "sighting_of_ref": "indicator--9b71d94a-f474-4859-8def-596f4b7506fe", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935f10e2-97d4-45ec-80db-701a64b2d597", "sighting_of_ref": "indicator--4f009ca0-c94e-4003-b29f-ca772f7806b0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0600df8-2514-48b7-b2ce-c8c57b6fd557", "sighting_of_ref": "indicator--40f4298c-8a52-4e98-b088-c9969f9ab088", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a569fb-1b2b-4535-bd1f-784d665b8236", "sighting_of_ref": "indicator--adc40e55-5b98-4c34-916d-a6c2791695cf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e89729-f3ef-4e3e-92bf-0c6f2d81170e", "sighting_of_ref": "indicator--fbb597b5-8a3d-43da-be34-d7e9d93fdc6f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54114a8-6ba3-4337-b0d7-45399b0cfd77", "sighting_of_ref": "indicator--31f49317-237a-468b-b0db-6ef9f3bc52d5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47213aeb-a352-4c25-911a-d7f6f89eb055", "sighting_of_ref": "indicator--3d749989-e713-49e8-97dc-5d8b88a91985", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f9fa92-d698-482c-a1b4-12987a9826da", "sighting_of_ref": "indicator--4fda6d3a-933f-4774-863d-21903c5ae462", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6975cfa-3f8d-463f-8c36-4d279e5d14e4", "sighting_of_ref": "indicator--1b2fae1b-16db-4fe9-aaa0-26afe21a998f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37df90cc-cae2-4196-b10d-95b492cc5764", "sighting_of_ref": "indicator--1b2fae1b-16db-4fe9-aaa0-26afe21a998f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04e0927-432a-48b6-aa6c-08774b99a534", "sighting_of_ref": "indicator--75609812-8c8c-40eb-bf2e-2fa7af81be51", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4207a9a5-d6b2-499f-92cf-3ed8339413a1", "sighting_of_ref": "indicator--93403cd8-c2ea-45cf-85b0-fa475ad880f1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca31149-8d61-469f-9f33-15a2f39e4ab5", "sighting_of_ref": "indicator--93403cd8-c2ea-45cf-85b0-fa475ad880f1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d100405e-5bc2-492f-a6ac-26bb7d265616", "sighting_of_ref": "indicator--67bb1939-ff9e-4919-89d8-a49eb4db5de0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c464af-daad-4bda-b101-9d304e247742", "sighting_of_ref": "indicator--67bb1939-ff9e-4919-89d8-a49eb4db5de0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3d61f5-6bbe-406d-8d1e-875f26311fba", "sighting_of_ref": "indicator--567864d0-9cab-4b44-98a2-13909c6b39d2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba83bd59-6318-413b-ba55-f04a873e5e54", "sighting_of_ref": "indicator--5c0d195f-231e-46b9-8ce3-9a2221538bfd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59673d1c-fc3c-404f-80e6-8a61a8971118", "sighting_of_ref": "indicator--6db131e9-af88-4934-bfe3-c96da23fe7fa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a182b9-2f83-4bc3-a6c5-b14ef52cbc14", "sighting_of_ref": "indicator--363a7e83-07fe-4a66-9cc6-e1e7032dcf5f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42774882-4435-4838-8f27-b6cb09aaa99a", "sighting_of_ref": "indicator--b21c7f87-5121-4eb7-8141-b43443f813c8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3e500d-802c-4ebf-9441-027780fd138d", "sighting_of_ref": "indicator--07fae094-ec5f-43af-bc0e-49d7542eb79b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb77a3b-24a2-473e-9a14-a28f0c4bd1ab", "sighting_of_ref": "indicator--502d1767-3cea-4676-8a60-2abe3961d701", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ec9b65-b4a9-4462-8459-2ddd2258b72e", "sighting_of_ref": "indicator--1686713d-3133-4939-a5c1-e4af02582bf6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71479987-a4ee-4e9d-b888-fc67e21ea882", "sighting_of_ref": "indicator--1686713d-3133-4939-a5c1-e4af02582bf6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807c54ca-f703-40c1-9998-8ef878168474", "sighting_of_ref": "indicator--1686713d-3133-4939-a5c1-e4af02582bf6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1241bbb-45c6-4adc-9883-0efd8264e276", "sighting_of_ref": "indicator--67250fca-36ce-4ce9-bc8e-56be836607a6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef4a0c4-fee1-4115-9071-2ea45599f42e", "sighting_of_ref": "indicator--7881a665-1ef9-4f37-8067-a393f440475c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf8ce52-7c41-4780-9f4a-6988516bc507", "sighting_of_ref": "indicator--1ab88196-eeb1-4fa3-8194-afd63b9129cf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ac58ad-f307-43f9-887f-2f910b09ad2a", "sighting_of_ref": "indicator--2c4073ce-919a-4171-91ec-71dc7345ef2a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36968713-51b4-4801-951b-1d36639aaaa8", "sighting_of_ref": "indicator--ac3db3a2-a2ba-4123-9ab7-928860bcb70f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeff236e-f66c-437f-8c0c-463dbfc637f1", "sighting_of_ref": "indicator--9b1e2364-0e2f-4fb8-ab89-a275920fc29b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c079322-c83d-40ad-bf57-a22fe28ac1d2", "sighting_of_ref": "indicator--0a829f06-3f0c-483c-a216-f8dbb596db43", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d548e29-496b-4104-ab13-df3ffa5942da", "sighting_of_ref": "indicator--497dc103-11f1-4e27-9fd4-4c640843f359", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7e5b63-b516-40b3-9d0d-08fcaf75516e", "sighting_of_ref": "indicator--6d65f5a3-e5d7-42d4-a172-a43fb51def65", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f1db08-7406-4a28-ba7b-c26dc817959a", "sighting_of_ref": "indicator--6d65f5a3-e5d7-42d4-a172-a43fb51def65", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693783d6-aa26-44f6-9cb0-87085acb977e", "sighting_of_ref": "indicator--660d52d8-72b6-4e1a-a13f-25dc384d6d04", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603b94cf-90b1-4994-b463-1b374cdbc7aa", "sighting_of_ref": "indicator--78553fcd-257c-4ef6-a77d-961b8b40c78c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a02583b-6ae7-4534-bad8-84827c0d0bdd", "sighting_of_ref": "indicator--1327cb53-b3ed-49f0-b3c0-447c1d08b0d5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9df53cc-b90f-4d38-a488-4b5069a8fa7c", "sighting_of_ref": "indicator--adfdda88-c209-4e15-b6be-d20d2342fed3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a995315-8878-44ee-a600-361febe123d5", "sighting_of_ref": "indicator--feb2b48b-b0c9-4c7d-8e74-81516bf918c2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edb1aee-ef72-4114-9c87-1119cab69d6e", "sighting_of_ref": "indicator--c4ad1204-6da8-4143-b69d-dae06f55a819", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6285fcf2-f835-4ce1-aea0-ec5fb41e4c94", "sighting_of_ref": "indicator--bc0549ed-f587-4960-a5a3-1c84caf51c14", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569ab3f6-fe8e-4b0e-9e3c-3e4927278446", "sighting_of_ref": "indicator--6f934f83-3daa-476d-af4b-0566f3b4961c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df93d2fa-a1cf-4f63-bb09-82000885062b", "sighting_of_ref": "indicator--18884ee8-875e-450f-97cc-c5481058cb22", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c36f8be-7fcd-4994-abcd-35be88365636", "sighting_of_ref": "indicator--75397973-b63b-48ec-bf52-c4e682fb79de", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed78769-ed2b-4724-ad6f-bab4e1e4c534", "sighting_of_ref": "indicator--1919ef8a-5ba1-4602-8cc2-5c997cbab9c8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9388ce71-3fe7-423b-8f1e-00dfd451b735", "sighting_of_ref": "indicator--61a1e0d2-4dc1-4a87-a7cf-88a6cb507b61", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b948084-f4bb-4c30-9b7b-dfc8c49cfe72", "sighting_of_ref": "indicator--c7be670c-b5c9-40be-bab2-1e99db62cb8f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2852ef01-3542-4100-aec7-1510c0924099", "sighting_of_ref": "indicator--b72f22f7-04fc-4ddc-bfc7-98f9a18f6eb8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921ff60e-fb7c-4fc7-bf0d-59349d0241ce", "sighting_of_ref": "indicator--7c01b132-320a-4875-bafe-08b0fe9ad01c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ca12b4-7d7e-42ca-bffd-e4f306ca6ddb", "sighting_of_ref": "indicator--39ee3a97-9185-49c3-8575-af01cb11dfcc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958f481e-d47d-4ea2-bff8-ae080745644c", "sighting_of_ref": "indicator--e88e8111-a525-4df0-9b01-d888a42371a7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab917c91-6b5d-4106-88c7-36a91b902ca3", "sighting_of_ref": "indicator--ee45e9a7-e31b-4532-8822-03093f93cacb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0265fa47-4f2d-4c64-b798-ff319ab4ea45", "sighting_of_ref": "indicator--9a2e3a8b-e75a-40a0-aa05-cbc85f03748f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9e5afc-72cd-4afb-9030-de0dabb01a65", "sighting_of_ref": "indicator--cf335f88-e796-43c7-a46b-fc17a5c83916", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c7d48d-e9f0-4b1e-8e47-835cf1b27475", "sighting_of_ref": "indicator--adc05da7-6efb-4450-9b1f-876c196501e1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ea80a3-af2a-4c1d-9a8b-90ee6194d1aa", "sighting_of_ref": "indicator--93fd05fd-8d80-448d-90b2-4dceced1dc69", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c26a266-cfdc-493d-99f2-245f3c5c6e67", "sighting_of_ref": "indicator--75ba70d9-7e1e-4ab8-8e61-0d9a9e9a6518", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f7e8e3-c424-4183-b065-d2c00eb3a277", "sighting_of_ref": "indicator--fa4ce747-2489-4e42-a877-3a032ff8df91", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c258b1-cd80-4dcb-8915-acbd83640fb9", "sighting_of_ref": "indicator--8c66dc63-c23b-4af8-a7d5-82b4ec2fa410", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c1679c-8964-46d2-a475-931e97724b5f", "sighting_of_ref": "indicator--78a5bfec-a93c-41a0-a2e2-19b7c16ce930", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7a349c-5497-48ee-9857-d2bfa6917b04", "sighting_of_ref": "indicator--afd08db6-082f-4618-ab31-f8b44ee97fbc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393864b7-41d9-4120-93a3-9f9d94dbb62d", "sighting_of_ref": "indicator--f57f5181-8feb-48b0-b6f9-a94e288e22c1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95769a2d-e572-421f-918d-d706bc9b2e1d", "sighting_of_ref": "indicator--3b0abd17-5f61-42d9-adac-da2f1d16b141", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327e9655-5be8-4fef-9de5-6d26867dcbaf", "sighting_of_ref": "indicator--a2c3b661-d5e5-4f95-891c-7895686a17d7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1d440e-9e12-4c30-8171-46001f28142a", "sighting_of_ref": "indicator--917dbdc1-1f8e-4742-bea1-bc2709750f3e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c407b4-b989-47bb-9216-7c5ac7b507e3", "sighting_of_ref": "indicator--d09cf88a-b46e-460f-8d2a-8461199a74f6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f85e0a1-bd6b-4d86-b7df-32d0d5952460", "sighting_of_ref": "indicator--c1ec73c7-c3fa-4c77-8aaa-e090de4affcc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1dd5bd-ed0c-4245-bfb8-f0f7ca0ae433", "sighting_of_ref": "indicator--30598c9b-aca0-40aa-a63a-20e9ab766799", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42a1a84-d6ee-47c7-ae0b-9e8012ed094f", "sighting_of_ref": "indicator--30598c9b-aca0-40aa-a63a-20e9ab766799", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37704b7-3974-4c46-804d-cacc89d04036", "sighting_of_ref": "indicator--cb0250f2-d739-4ff3-8939-78828c74bfd2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de473ee4-10e6-4841-908f-f339d85bc60a", "sighting_of_ref": "indicator--cb0250f2-d739-4ff3-8939-78828c74bfd2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9041f785-0c30-4999-87f3-a1babf10df96", "sighting_of_ref": "indicator--cb0250f2-d739-4ff3-8939-78828c74bfd2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661886b0-32a6-457d-b0e5-337326771330", "sighting_of_ref": "indicator--9c0f0b84-cef3-4c5a-9a82-15ed886da2af", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be20cae8-f56a-49ea-872e-b1ec6da5f614", "sighting_of_ref": "indicator--9c0f0b84-cef3-4c5a-9a82-15ed886da2af", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05120748-51dd-44d9-8989-73bbc0f15fac", "sighting_of_ref": "indicator--9c0f0b84-cef3-4c5a-9a82-15ed886da2af", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8dec20-ff9b-4569-8016-f1a9f8968539", "sighting_of_ref": "indicator--734bc955-f804-45a8-9978-9f47092c28d9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466dfed2-42c5-451f-b1c2-edf56e80806c", "sighting_of_ref": "indicator--d424d941-44a4-4f65-8049-24b91a063e15", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725d8510-36a7-4b8f-b4bb-4400c6a02ac4", "sighting_of_ref": "indicator--6bd6b8c5-a7be-4d5c-946d-784ac3c638ae", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bed8b3-366d-40c8-8382-c1266217beaa", "sighting_of_ref": "indicator--0455b90c-a4e5-42ed-851d-928c6e1c351b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c98bbd-6f30-4ddc-b6dd-70708fb72f09", "sighting_of_ref": "indicator--0455b90c-a4e5-42ed-851d-928c6e1c351b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a9673c-3c32-42ac-a9ee-317652918095", "sighting_of_ref": "indicator--0455b90c-a4e5-42ed-851d-928c6e1c351b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c886bbfb-1709-4b0a-be13-91d913993654", "sighting_of_ref": "indicator--9bc6b7d5-c6d9-494b-8c17-462df29aec46", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e617ecb-7a88-42a1-bfe6-be29c21794dd", "sighting_of_ref": "indicator--9bc6b7d5-c6d9-494b-8c17-462df29aec46", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe7e1267-0cd6-480f-b357-26d3ee24dacb", "sighting_of_ref": "indicator--9bc6b7d5-c6d9-494b-8c17-462df29aec46", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8296afc2-c385-4f35-85cc-93ce60f74028", "sighting_of_ref": "indicator--c930f687-c630-4f40-8187-df2a4ef15823", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f93a2f-0fd5-4ce7-b50b-4978758323d0", "sighting_of_ref": "indicator--c930f687-c630-4f40-8187-df2a4ef15823", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e6a431-42c1-4463-ac97-70fbb296d7ae", "sighting_of_ref": "indicator--c930f687-c630-4f40-8187-df2a4ef15823", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b81ac0b-d2df-4099-b921-6399c93de30a", "sighting_of_ref": "indicator--94979a16-5a5b-4469-a1c5-0d80cbd07173", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a4a2ac-5797-4023-bafb-3c0a7c92cd63", "sighting_of_ref": "indicator--94979a16-5a5b-4469-a1c5-0d80cbd07173", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1b3369-0c67-4de7-979f-0f14825cf5f1", "sighting_of_ref": "indicator--48547e2a-c4a3-4142-9127-4f75016dd940", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5baa8e9a-80e5-454c-af6d-b0f37eef7ae2", "sighting_of_ref": "indicator--48547e2a-c4a3-4142-9127-4f75016dd940", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4073ce-1e3e-4b51-942c-7e18ea21ecfd", "sighting_of_ref": "indicator--48547e2a-c4a3-4142-9127-4f75016dd940", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf2475f-b396-4e35-a1a0-5a553b4315e5", "sighting_of_ref": "indicator--fb63d8a0-e7e4-4b87-9653-f33b276ed4a0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99531dd-0c89-44e5-ab87-1a3eabbf30d6", "sighting_of_ref": "indicator--fb63d8a0-e7e4-4b87-9653-f33b276ed4a0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f287fe5c-e61a-4331-b161-99a84d0b2fee", "sighting_of_ref": "indicator--fb63d8a0-e7e4-4b87-9653-f33b276ed4a0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4458866b-8c73-45a6-86bb-32562b82176f", "sighting_of_ref": "indicator--e9b57422-8384-449d-a8fd-35de6910ceea", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cfdd211-862f-41cc-a402-12e2b2e4efe6", "sighting_of_ref": "indicator--e9b57422-8384-449d-a8fd-35de6910ceea", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db96a83-e91e-4c94-94f6-666210414ac7", "sighting_of_ref": "indicator--e9b57422-8384-449d-a8fd-35de6910ceea", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397176e2-eb83-4b60-83b8-2cfcfedf3bbb", "sighting_of_ref": "indicator--ef8ee5c1-fcb1-4fa6-b294-1f0d3fb559b5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee08a33-624d-4b17-9d6d-f4d326b36308", "sighting_of_ref": "indicator--ef8ee5c1-fcb1-4fa6-b294-1f0d3fb559b5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42782cc-0af0-4b56-a0b1-5a5cebf9e407", "sighting_of_ref": "indicator--880c789d-b3d1-4cb6-8015-cb13b46317a0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7782a3e0-6771-4067-bff1-2f09ec0e1597", "sighting_of_ref": "indicator--880c789d-b3d1-4cb6-8015-cb13b46317a0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520b2106-12a5-4b7b-87e0-f41dd1eff117", "sighting_of_ref": "indicator--880c789d-b3d1-4cb6-8015-cb13b46317a0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72cc4eff-377a-4808-9d91-6359ba62f3cb", "sighting_of_ref": "indicator--d2639b93-2f23-459b-9eee-8ee987f56485", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e2c172-763b-4110-81f2-392e97cc9417", "sighting_of_ref": "indicator--d2639b93-2f23-459b-9eee-8ee987f56485", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdae3feb-4529-42dc-9ac3-8fa882c5ce05", "sighting_of_ref": "indicator--d2639b93-2f23-459b-9eee-8ee987f56485", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f691a92-521f-492b-8c41-120abcdc0e1e", "sighting_of_ref": "indicator--6a8dd441-9f4c-4d58-9751-3cdd6b2c24eb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ab0386-aec5-4dc7-8b09-2f079d8aed1f", "sighting_of_ref": "indicator--6a8dd441-9f4c-4d58-9751-3cdd6b2c24eb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca73fce-485f-4609-bd25-e5e51006e0ba", "sighting_of_ref": "indicator--6a8dd441-9f4c-4d58-9751-3cdd6b2c24eb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f499f39d-4340-4539-92a9-edcb54bb162d", "sighting_of_ref": "indicator--61c87c4f-27a0-4435-a0b6-c0dbd789bb70", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8e5234-96ee-4574-88d1-84d0e12942c2", "sighting_of_ref": "indicator--61c87c4f-27a0-4435-a0b6-c0dbd789bb70", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4aed0d8-973a-4b51-8441-f16b784031da", "sighting_of_ref": "indicator--61c87c4f-27a0-4435-a0b6-c0dbd789bb70", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b695644f-4578-4b3b-92ce-49ba24c9dc41", "sighting_of_ref": "indicator--147aade9-231d-47c8-bfa9-f36c94b7e827", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0f5dea-0081-410b-b1f9-e0ff961f78fe", "sighting_of_ref": "indicator--147aade9-231d-47c8-bfa9-f36c94b7e827", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167c598c-51c1-4109-a012-3b4247d07777", "sighting_of_ref": "indicator--147aade9-231d-47c8-bfa9-f36c94b7e827", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bbd99d9-b9ba-44c0-8ed4-b36bb55eeb07", "sighting_of_ref": "indicator--2179c8b9-777f-43ff-ac9b-436c5c97c8dc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e52d09-783d-4c13-ad94-7b52ae5b6161", "sighting_of_ref": "indicator--2179c8b9-777f-43ff-ac9b-436c5c97c8dc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198d9020-0aef-4263-8a69-8552d721cedc", "sighting_of_ref": "indicator--2179c8b9-777f-43ff-ac9b-436c5c97c8dc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bfdc3bf-1fb0-472b-8fe2-1ef9f0d418a1", "sighting_of_ref": "indicator--fb3458f4-d36a-4cd8-a8e6-3b1b0fd3ccc4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d15895-dc38-4f2f-a4d3-1f13398a962f", "sighting_of_ref": "indicator--fb3458f4-d36a-4cd8-a8e6-3b1b0fd3ccc4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6fbcdb-11f6-42d5-abdc-3452faf3414c", "sighting_of_ref": "indicator--fb3458f4-d36a-4cd8-a8e6-3b1b0fd3ccc4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b3cb65-7a89-44d5-915f-aae3824bd8ac", "sighting_of_ref": "indicator--32390244-d613-4a10-8355-d4fa3a34ae2c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2014eb72-8e78-401b-b377-df6160f22b07", "sighting_of_ref": "indicator--32390244-d613-4a10-8355-d4fa3a34ae2c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7861282b-d886-4cde-a4a6-940c5666c227", "sighting_of_ref": "indicator--32390244-d613-4a10-8355-d4fa3a34ae2c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a70961d-5f70-4eef-a8ce-9e857d7f5293", "sighting_of_ref": "indicator--3e863853-8f41-4191-9b9c-2bd7ddaa259e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc93d42-99c4-42ee-8913-e1ef9f177591", "sighting_of_ref": "indicator--6d9d9961-c00c-43c9-b38f-1ca9d28ecd2f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc09fce4-3644-424c-8244-74fc56d9f007", "sighting_of_ref": "indicator--6d9d9961-c00c-43c9-b38f-1ca9d28ecd2f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563f4aa2-eeff-4313-b89d-981d9267189f", "sighting_of_ref": "indicator--6d9d9961-c00c-43c9-b38f-1ca9d28ecd2f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e80272b-02d2-4c94-b838-d16c0c7def32", "sighting_of_ref": "indicator--686ee155-4e9e-41e8-9313-16ae88f8e97e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca585339-c26d-483b-822d-0449950b3b01", "sighting_of_ref": "indicator--686ee155-4e9e-41e8-9313-16ae88f8e97e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02561fb-1c1f-4a93-82ce-ec68cd83b5dd", "sighting_of_ref": "indicator--349a4064-3bad-4810-948d-267bb2a56d34", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb52c26-c841-4825-a2f7-d57f03c53904", "sighting_of_ref": "indicator--b4a37838-96f7-41e2-9c4c-d27ccaacba13", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569ed32a-26aa-4fbe-8a23-e1cdf6cdf94d", "sighting_of_ref": "indicator--b4a37838-96f7-41e2-9c4c-d27ccaacba13", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bfd132-b614-4505-aa50-dc1cf9f7753f", "sighting_of_ref": "indicator--b4a37838-96f7-41e2-9c4c-d27ccaacba13", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297e683d-d9d1-4465-9de7-63894f25acde", "sighting_of_ref": "indicator--4921e4ed-201a-4f76-b24c-e0d20169dcf2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7353ba37-4410-49d8-8aaf-17169197516d", "sighting_of_ref": "indicator--b0a749dc-9aca-4eb3-8047-ec9f0d2c1adc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125abdc1-d7fd-4cbb-b9af-bcf7d69a4cd9", "sighting_of_ref": "indicator--b0a749dc-9aca-4eb3-8047-ec9f0d2c1adc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca6416a-292e-46cf-bfe2-8efd5c375027", "sighting_of_ref": "indicator--b0a749dc-9aca-4eb3-8047-ec9f0d2c1adc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988a8d86-c6bf-486b-a211-e4a89d9fc620", "sighting_of_ref": "indicator--4cfaf40a-8698-4772-956b-bf6f007c67a8", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45f2e26-9bbc-49ec-9704-dae393d0cbec", "sighting_of_ref": "indicator--5336c19f-5ab0-42fe-8308-cd2458b5f654", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e039d4a-7094-4a13-8d9f-a135f8c2b0bf", "sighting_of_ref": "indicator--178c7b87-0ea5-4d53-ba5e-897180b77807", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99eb151-08e7-4d6a-bab8-1205f9b85eda", "sighting_of_ref": "indicator--e0835d86-5850-4029-8cbf-7cde1e0e11e0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702ed576-e3a9-4ede-b04e-a8005913a999", "sighting_of_ref": "indicator--fd75643b-d445-4664-ad54-cacae7436c50", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab80f6f-cd44-48cb-8aa0-3c2c1d3a016b", "sighting_of_ref": "indicator--eca23abd-b772-4e39-94bb-3d0b71dc3eed", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c882dc3-3197-4611-8818-a97fa6ec482f", "sighting_of_ref": "indicator--eca23abd-b772-4e39-94bb-3d0b71dc3eed", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e123696e-9c22-433d-9c47-4055ea6670c1", "sighting_of_ref": "indicator--eca23abd-b772-4e39-94bb-3d0b71dc3eed", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a972dbcd-ae66-43c4-b701-00a2aff17643", "sighting_of_ref": "indicator--15b1e714-9560-4b52-a6e1-70551aa2d962", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56125ade-01dd-41e9-a907-5ac37a285b13", "sighting_of_ref": "indicator--1bde730c-fbee-4f4e-a3cf-60f8934d1de2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f52e62-5bad-43be-a1fc-e6f2054a0eca", "sighting_of_ref": "indicator--57aa4e5c-9da0-401a-93dc-be2359c611a7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ee7dd6-e178-4d61-9c31-800541fd74f5", "sighting_of_ref": "indicator--2b7a8020-96af-4c8c-ae1b-ab37e3322bc6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b7aca0-e772-4b4b-b976-565705304588", "sighting_of_ref": "indicator--2b7a8020-96af-4c8c-ae1b-ab37e3322bc6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53e2369-806a-4f26-9b63-59c9b0bd1bad", "sighting_of_ref": "indicator--9a6b51f9-f807-49b9-a20a-5aaf835bb660", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4a7aff-c1dd-446a-a805-39b9ccbfaafb", "sighting_of_ref": "indicator--9a6b51f9-f807-49b9-a20a-5aaf835bb660", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87f8a2b-982a-4b50-91db-24786a07d73e", "sighting_of_ref": "indicator--911397a0-9918-4d29-845c-8f3334bb0253", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23bf5065-4c3b-426a-982f-6be8db5f182b", "sighting_of_ref": "indicator--911397a0-9918-4d29-845c-8f3334bb0253", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b902bfb-b474-4100-82dc-f72364fea550", "sighting_of_ref": "indicator--fe65266a-2cc7-4d13-a1c0-176b29e31e20", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc7582e-5b7e-412c-a490-af6f66b0b8c6", "sighting_of_ref": "indicator--fe65266a-2cc7-4d13-a1c0-176b29e31e20", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06befd6-6ae4-466b-80c5-bf303b35c5a3", "sighting_of_ref": "indicator--49a52ec1-d1f8-4714-92e4-e85b0e789fa5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde9eb5d-6055-4499-bd1a-606d80ea42a1", "sighting_of_ref": "indicator--833c02d1-3bdd-48bc-b78a-42e30bb0e4d3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9c5ec6-6ddf-4a37-80e5-326534a4cdd3", "sighting_of_ref": "indicator--014c0ff8-1ae1-4277-9976-855f038a51af", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddab6c6f-975e-4c17-9f6f-5d30881059b7", "sighting_of_ref": "indicator--014c0ff8-1ae1-4277-9976-855f038a51af", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109a939b-a606-421f-b472-ace8667331d3", "sighting_of_ref": "indicator--37a2d1e7-d96d-44f6-b210-65175f87f61f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03e021a-2dee-4f50-9c7f-2329cc3425b6", "sighting_of_ref": "indicator--37a2d1e7-d96d-44f6-b210-65175f87f61f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f64d9e-4041-4df9-8880-df3fdb04c33f", "sighting_of_ref": "indicator--ee89c68a-c419-4124-be05-e046fd22f973", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2c16f2-3465-45e0-9bd2-2b78badfa24f", "sighting_of_ref": "indicator--ee89c68a-c419-4124-be05-e046fd22f973", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e0a763-54c9-46ad-8a59-6211d6588d07", "sighting_of_ref": "indicator--c226cb59-b248-4454-ad08-da2f7ce628ec", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e7c3e2-68c7-4259-bbba-eb126c469837", "sighting_of_ref": "indicator--c226cb59-b248-4454-ad08-da2f7ce628ec", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe2967b-f52e-428d-a805-8cf73b253166", "sighting_of_ref": "indicator--adb8145a-311c-4106-8de9-78a14913d243", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc20e15-6ae4-4cea-906f-e2e7bfeec71b", "sighting_of_ref": "indicator--07647f0a-c1b2-4614-9fd4-d699756a352f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cade176-140b-4d90-85fb-71e31fc6eb21", "sighting_of_ref": "indicator--07647f0a-c1b2-4614-9fd4-d699756a352f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7523b044-936e-432b-9ac4-c1fd66d4027e", "sighting_of_ref": "indicator--afae7484-3404-40e4-a5e5-021ac76ddc6a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34fddb58-d51b-4648-a2c4-f856eb6305db", "sighting_of_ref": "indicator--afae7484-3404-40e4-a5e5-021ac76ddc6a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a1c56a-e66f-454c-82e1-f990c62f4c33", "sighting_of_ref": "indicator--2497cc50-464c-48ab-9c32-187fbbf43b35", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81817836-d2c3-4178-8396-b8612eec89bc", "sighting_of_ref": "indicator--2497cc50-464c-48ab-9c32-187fbbf43b35", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97940e9-7ff3-4b64-8377-f09be6e3db55", "sighting_of_ref": "indicator--97c96e5d-9fc7-4848-aaed-7246b5f3bc37", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0330a41-27d8-4faa-9d0b-8a9636f0d572", "sighting_of_ref": "indicator--97c96e5d-9fc7-4848-aaed-7246b5f3bc37", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177d1a01-b222-44d1-8dde-97acdd44d447", "sighting_of_ref": "indicator--324d6448-9091-4939-b67a-dc7b38431d9b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c80cd6-2ce4-413f-bcf6-94dcf393384c", "sighting_of_ref": "indicator--a68365db-7a25-4149-b3cb-4baa058a3a0b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f965118-cc31-443f-9910-74220afa562d", "sighting_of_ref": "indicator--e0a43034-9535-42bf-a0c9-a2db7309b872", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fd4e66-3e7b-437b-aa43-521ac5dd21d4", "sighting_of_ref": "indicator--3ee744ef-f807-4c98-b59b-37eac9ef8588", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133c0a09-37c1-4d4a-aefb-fd3a4a6a1de0", "sighting_of_ref": "indicator--3ee744ef-f807-4c98-b59b-37eac9ef8588", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6c93e1-8394-4d32-9eb9-4f3d9ac192d6", "sighting_of_ref": "indicator--6b47fe68-356e-4f68-ae19-36ab92498c42", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2dc1ee-b73f-4220-a615-0af68dc09c12", "sighting_of_ref": "indicator--6b47fe68-356e-4f68-ae19-36ab92498c42", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468aa4c9-245d-45db-b538-ad20b12913a5", "sighting_of_ref": "indicator--a9c07e2e-99b0-41f0-bc5b-30f7a4007da4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1384582a-ee16-4f86-8eaf-d9747c328eae", "sighting_of_ref": "indicator--a9c07e2e-99b0-41f0-bc5b-30f7a4007da4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0c2c82-f6ac-49a1-80e4-d32b8f03c2ca", "sighting_of_ref": "indicator--fe9adb87-d89b-4e28-921b-d1ec7ac2e9fd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c8e1de-980a-45ce-8861-ceac2114b4e7", "sighting_of_ref": "indicator--fe9adb87-d89b-4e28-921b-d1ec7ac2e9fd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abcbd207-2a6f-41ce-9ba9-cd31f71e1b5e", "sighting_of_ref": "indicator--99020d64-58b3-44fe-9901-8bdff763cd8f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b772e8-43a6-47d9-bc60-57dda7b869c4", "sighting_of_ref": "indicator--99020d64-58b3-44fe-9901-8bdff763cd8f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4803b3-dbe4-4d11-80ae-0ba272da891d", "sighting_of_ref": "indicator--e7b8bd93-8567-4899-a175-3aa8d4459aa7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f89b83-cbd0-4076-b14d-54777635b858", "sighting_of_ref": "indicator--e7b8bd93-8567-4899-a175-3aa8d4459aa7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949b241e-6665-4d73-8462-e4581a03357c", "sighting_of_ref": "indicator--db510712-7e07-44c2-88bb-6cb38d8d3db5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b1c54c-b3aa-4758-a244-94a9c8ba94b4", "sighting_of_ref": "indicator--db510712-7e07-44c2-88bb-6cb38d8d3db5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f074414c-1b3f-4c78-bd09-c0923ff89bb1", "sighting_of_ref": "indicator--a89b5e8a-2fd4-494d-80c8-20e3cc4b7d45", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a972d2-f4c4-41d9-b3c8-40c90f386ab9", "sighting_of_ref": "indicator--a89b5e8a-2fd4-494d-80c8-20e3cc4b7d45", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afa8883f-3852-4b4a-867a-8f740079949e", "sighting_of_ref": "indicator--4f8d09f0-8cc3-4246-b58d-71f8a81da4ab", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada3805b-0355-4742-9198-c2f38ed3ffd0", "sighting_of_ref": "indicator--4f8d09f0-8cc3-4246-b58d-71f8a81da4ab", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22620082-f2dc-4f53-bd87-01c6d72f355e", "sighting_of_ref": "indicator--89a2b4c8-6445-43ad-935e-23a9d9e4e653", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f485ba5-df7b-4239-a0ca-ee9d6f24a9cc", "sighting_of_ref": "indicator--89a2b4c8-6445-43ad-935e-23a9d9e4e653", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdd1fe2-be74-4e31-ad1d-ec33f3bb47d8", "sighting_of_ref": "indicator--cafda810-8c45-46c7-b652-063851115a59", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b296b3a-e0d9-4f24-842c-fecd204e06ba", "sighting_of_ref": "indicator--cafda810-8c45-46c7-b652-063851115a59", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a507e963-0f26-4457-bee7-30cb57cb1aa5", "sighting_of_ref": "indicator--4a751d58-14d1-4757-a7a9-4f894dfff578", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4776d8bf-5180-4938-b7c1-5e4fb4ad3837", "sighting_of_ref": "indicator--4a751d58-14d1-4757-a7a9-4f894dfff578", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bbaa997-4805-4b06-bca1-6d45a4b20b71", "sighting_of_ref": "indicator--15624873-0b99-4840-8b87-e8a243cccfad", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a055a2f-ee96-499c-a544-352c4be9bcd2", "sighting_of_ref": "indicator--15624873-0b99-4840-8b87-e8a243cccfad", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3dcf75-cc95-4c26-a50d-d80de24287c2", "sighting_of_ref": "indicator--e91a8cc1-7da5-428b-bb6e-a11789dc26a1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e91474a-3c9c-4ab9-9d65-8ee5c60e84b1", "sighting_of_ref": "indicator--0d252602-af22-4a15-b4e6-adabf02f5da2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2215afd-e985-4d7c-bc1b-7167c49c983f", "sighting_of_ref": "indicator--1dc25aa0-4079-444b-9704-917c7c0182f3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827660cd-59f9-4a83-ae52-c80ab4718fd2", "sighting_of_ref": "indicator--1dc25aa0-4079-444b-9704-917c7c0182f3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dce1a61-5cea-4fb3-b670-8fa22ad9a55a", "sighting_of_ref": "indicator--448064d2-cd29-4b2a-ba8a-82cc08ae800f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36dbf80-a121-49a7-a336-b13de6351bad", "sighting_of_ref": "indicator--448064d2-cd29-4b2a-ba8a-82cc08ae800f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e1861f-2589-4bd1-896d-aff828bb612f", "sighting_of_ref": "indicator--7e8d2d80-f196-4877-a2a5-9741ecbd2c63", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f18413d4-0302-4f35-a94e-5bcb618bf6e6", "sighting_of_ref": "indicator--7e8d2d80-f196-4877-a2a5-9741ecbd2c63", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8632d495-3d09-455a-8dde-14f76cac0bc1", "sighting_of_ref": "indicator--0ce2dfee-7dc3-4988-85ed-b0fca11ab49b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e215c68-b04b-47c1-aa22-5e2ea33ffb3a", "sighting_of_ref": "indicator--0ce2dfee-7dc3-4988-85ed-b0fca11ab49b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901e1314-3700-44dc-bdab-1e414ccadd7a", "sighting_of_ref": "indicator--29484576-2ac6-40ba-b687-dee3e6ba8eae", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eebcb3b-d7dd-43f2-b11e-9aa9bcfb6624", "sighting_of_ref": "indicator--29484576-2ac6-40ba-b687-dee3e6ba8eae", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984caaf5-33e9-460c-920d-6b20ab84948e", "sighting_of_ref": "indicator--57d16141-ca13-458b-9380-5da657fac40f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea422ccd-0076-4b03-a5c2-29dc510c9b19", "sighting_of_ref": "indicator--57d16141-ca13-458b-9380-5da657fac40f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589c876e-b1c4-4b54-bfe4-37cc61bc3353", "sighting_of_ref": "indicator--ae1a6b8c-eb57-47a1-9f26-c8cec4166352", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e843004f-fe43-44bc-8d97-8c3a15e28409", "sighting_of_ref": "indicator--ae1a6b8c-eb57-47a1-9f26-c8cec4166352", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6977ad22-6c6d-4984-9ad5-c99e88a4c1c9", "sighting_of_ref": "indicator--ebf183a6-c34f-4f96-b0b6-281daedaaaf2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0cbcfea-1c30-4769-8a5f-d849394e5fd0", "sighting_of_ref": "indicator--ebf183a6-c34f-4f96-b0b6-281daedaaaf2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8c47af-a4fb-4592-97f0-8de21d975b49", "sighting_of_ref": "indicator--99f827df-2e03-4e77-ade1-3d4272f0e243", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d9c8f8-e0d4-4098-9943-3fd8088ff409", "sighting_of_ref": "indicator--99f827df-2e03-4e77-ade1-3d4272f0e243", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217665f7-3587-495f-8502-70cb89f9ce1f", "sighting_of_ref": "indicator--99f827df-2e03-4e77-ade1-3d4272f0e243", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c053575-5c0d-42cf-9cbd-f83b15835976", "sighting_of_ref": "indicator--ce127899-4976-4554-b125-ad8938278f37", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d28e04-3abf-47c8-8a54-b1c6d1779bb1", "sighting_of_ref": "indicator--ce127899-4976-4554-b125-ad8938278f37", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b7b6c7-d239-43af-9e3e-167d4007d827", "sighting_of_ref": "indicator--be0b3304-02b4-41b4-aece-11ab6e32a0e4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26865a62-20d9-443d-8fbb-7d24da63de5e", "sighting_of_ref": "indicator--be0b3304-02b4-41b4-aece-11ab6e32a0e4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b3086a-310e-4265-9d3c-c45285bb58b7", "sighting_of_ref": "indicator--e377e1ad-71bb-4f07-9706-59236f3111f0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f5678f6-6011-4513-ae54-f98cec824739", "sighting_of_ref": "indicator--e377e1ad-71bb-4f07-9706-59236f3111f0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3a09f4-65a5-4fbe-9b51-5c2940a73e8d", "sighting_of_ref": "indicator--f64719f9-4417-4c28-b789-addf05973bef", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab6b290-4779-423d-b58e-d7d4eb4a5079", "sighting_of_ref": "indicator--f64719f9-4417-4c28-b789-addf05973bef", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38455abe-71a5-4d8d-822e-51f97ccc415e", "sighting_of_ref": "indicator--588ecbfc-ee6a-4358-bd6f-95c084b43a94", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62321eb3-2d82-4b37-ad89-cc151ce484ec", "sighting_of_ref": "indicator--588ecbfc-ee6a-4358-bd6f-95c084b43a94", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d549c444-681b-4574-90d2-77220fa0106a", "sighting_of_ref": "indicator--20d1942b-ecf9-41e9-bb50-4d5174294ded", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8140b74-b40d-4d08-a337-68182a092bcc", "sighting_of_ref": "indicator--483792b2-8280-44a2-970c-3a051510b978", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141c1a45-7c96-4414-afd6-f2675dc7c36f", "sighting_of_ref": "indicator--ef75364d-7936-478b-a5e9-a928678bd1fa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e2e56a-0479-4bf1-b6e5-9bb378c3b6a0", "sighting_of_ref": "indicator--ef75364d-7936-478b-a5e9-a928678bd1fa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7321f15-c43a-43e4-85a1-a53bee93e507", "sighting_of_ref": "indicator--a447ca1b-4bdc-4c80-9942-569e2197bbda", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b2f3f5-9bb5-457d-8858-08f63a850f94", "sighting_of_ref": "indicator--41f4a347-6d6f-4f84-86e2-218f7e5f6c67", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181e511c-b3f5-4bc4-8ca6-097b095275f2", "sighting_of_ref": "indicator--03ae4470-6997-451d-9e57-5aa790b3ef0f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c57b1a3-9521-4d23-b1f7-b00744011021", "sighting_of_ref": "indicator--03ae4470-6997-451d-9e57-5aa790b3ef0f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0506318-61a6-479f-b654-96c67516f615", "sighting_of_ref": "indicator--d2f22667-5838-4654-a8d5-17b757475b38", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7858d52-e833-4e15-8cab-2fc66af57324", "sighting_of_ref": "indicator--d2f22667-5838-4654-a8d5-17b757475b38", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dffe8414-9dbe-4123-b4b4-426c6771ee67", "sighting_of_ref": "indicator--9146ad68-cbdc-4c3f-81b7-e3f706471995", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74bfe6dd-3256-4f7e-94f9-556d06397318", "sighting_of_ref": "indicator--9146ad68-cbdc-4c3f-81b7-e3f706471995", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91a0326-6514-428e-a446-93186ac3bbde", "sighting_of_ref": "indicator--6ce758b3-a59b-427f-a865-9f0f8f6f2c8a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8951abee-0612-4f3f-a45f-2375d1ee24be", "sighting_of_ref": "indicator--6ce758b3-a59b-427f-a865-9f0f8f6f2c8a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03cb7820-b1ce-4a07-82dd-f3780e73b170", "sighting_of_ref": "indicator--1c3e29e0-4050-43ec-99ba-145121880218", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd0ca7a-2b42-4a8d-98b5-622c2df985b6", "sighting_of_ref": "indicator--3968f337-acb8-4e78-8839-81168c0d0a0f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6028fd26-0ef4-4ffd-a163-945acc5740f5", "sighting_of_ref": "indicator--e95ce08c-b907-4b36-96a1-3d1e3ba1f812", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f6af2e-130d-4ae3-b193-8bcd9f17f289", "sighting_of_ref": "indicator--e95ce08c-b907-4b36-96a1-3d1e3ba1f812", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98de62af-ee4e-48ee-97d4-cd9ff23270a4", "sighting_of_ref": "indicator--35dd24a0-4729-48fd-a695-254a66ed4b06", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269d1a4d-6e36-41b6-b940-8fd07117e8db", "sighting_of_ref": "indicator--35dd24a0-4729-48fd-a695-254a66ed4b06", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6368e3e-235c-47dc-ae34-e7127062d943", "sighting_of_ref": "indicator--fcb62815-aa43-42a9-953e-6749a8b85ed9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c370607-40b0-42cb-a532-f06923937bdc", "sighting_of_ref": "indicator--fcb62815-aa43-42a9-953e-6749a8b85ed9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1fff65-6eaa-4942-902c-2019ef070919", "sighting_of_ref": "indicator--af2819de-6568-4505-8fe3-07dea17fd02a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5deed5-a0f9-45a5-8f4c-58bce5802341", "sighting_of_ref": "indicator--af2819de-6568-4505-8fe3-07dea17fd02a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da75f48-ca02-4a7f-af67-89017132fabd", "sighting_of_ref": "indicator--3d2fa629-b1e6-4d86-a61a-a404ca305773", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b776eb3e-2de4-4872-a2ba-e699a18a5d30", "sighting_of_ref": "indicator--3d2fa629-b1e6-4d86-a61a-a404ca305773", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6f7733-fc97-49b3-862b-4f04bd62a954", "sighting_of_ref": "indicator--2d15584f-8aad-4214-bd97-5524988bf950", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d1fcd9-399e-47c5-8c0f-c5017da6f602", "sighting_of_ref": "indicator--2d15584f-8aad-4214-bd97-5524988bf950", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542bf42a-c0d5-4efa-b481-eeafe61d3c7b", "sighting_of_ref": "indicator--0c15543c-59e9-4aa8-83ad-515fdc40bf5d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3eb898-a17c-4b78-9d11-6e533c84ece4", "sighting_of_ref": "indicator--0c15543c-59e9-4aa8-83ad-515fdc40bf5d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e42b7a-c39f-4c47-ad00-d3d921804554", "sighting_of_ref": "indicator--097011b2-05ba-4d7e-bfc9-1d0e5ecab203", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b4af88-cf2a-4584-93fc-c6118e791c99", "sighting_of_ref": "indicator--097011b2-05ba-4d7e-bfc9-1d0e5ecab203", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1449110b-c0aa-4f66-a32d-30c34831144a", "sighting_of_ref": "indicator--5c296d0b-ac88-4c61-bc16-6697cd01dadc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5ec413-2f19-40eb-9d91-947d409e70b1", "sighting_of_ref": "indicator--964ef53f-ada5-47d4-9c96-96d949a426f5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090bde77-5376-4cd9-aa91-c6ca8a6da8dd", "sighting_of_ref": "indicator--336cac12-3961-4b07-9f56-e32dfa192512", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7125e4d7-e4f6-43cf-ba3b-e4947fa66a61", "sighting_of_ref": "indicator--192f2720-4525-432b-826a-422befc7b2e7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f31d06-8ed6-43f2-a8ee-3d477fbaa2a6", "sighting_of_ref": "indicator--192f2720-4525-432b-826a-422befc7b2e7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e3ab1f-6694-4d41-8cb0-c71a40e5cdbb", "sighting_of_ref": "indicator--892eeb05-3574-4abb-909b-b6e76826e311", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7039322c-443f-48a0-8dc0-1ccdaf81d78d", "sighting_of_ref": "indicator--892eeb05-3574-4abb-909b-b6e76826e311", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45d36ec-da3f-4222-a227-09cfe1f31ecd", "sighting_of_ref": "indicator--e1fc96c5-dd33-4fda-bc06-69c26604793e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82b8c81-0d38-4773-9f49-8e404d8bd4a0", "sighting_of_ref": "indicator--e1fc96c5-dd33-4fda-bc06-69c26604793e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e542aeeb-f285-4711-9978-ca8d410ada02", "sighting_of_ref": "indicator--10f8051c-336c-4805-aee0-8f639202a2be", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8adc22-870e-4563-bf70-d8430ed59199", "sighting_of_ref": "indicator--10f8051c-336c-4805-aee0-8f639202a2be", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ff7071-682b-4d6d-b027-03e07e51cf43", "sighting_of_ref": "indicator--319d77ef-7ddd-4286-9988-f3d6576312df", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88043dc-7943-4e24-8800-f217bfe4e494", "sighting_of_ref": "indicator--319d77ef-7ddd-4286-9988-f3d6576312df", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c651dd-1454-405f-8272-08bad9829ceb", "sighting_of_ref": "indicator--c160d0ff-3d8c-44c4-92f3-bc663329931e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7ede3a-8442-43ff-9f1b-59fd74f1ee3e", "sighting_of_ref": "indicator--f82b7f96-621f-47ad-a4d8-773468eaa13d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b5bef8-3df5-46ce-8ca3-eb79c50ca54b", "sighting_of_ref": "indicator--13c7ff24-7373-41be-9410-f01ec708f04c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5cb5a6-99b6-448e-baa9-efe34bc84a74", "sighting_of_ref": "indicator--13c7ff24-7373-41be-9410-f01ec708f04c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941d359e-8542-4aa6-9b87-235dea9abde8", "sighting_of_ref": "indicator--7cfcdd21-e1a9-41b0-8037-2068e9c2d73e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1267e0c-cb66-4301-8961-0eed239d8ebe", "sighting_of_ref": "indicator--f3b5f988-5eb4-4aa5-a8fe-78d9d2df0607", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88724caa-3d73-4fc4-968e-55a283fc435c", "sighting_of_ref": "indicator--a87698af-4f9d-49cc-b94b-e7a544fb1870", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd393a6-9d28-45a3-8217-0d1edab663b2", "sighting_of_ref": "indicator--a87698af-4f9d-49cc-b94b-e7a544fb1870", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277eabd3-8227-4559-af6f-818f5e7f7623", "sighting_of_ref": "indicator--a87698af-4f9d-49cc-b94b-e7a544fb1870", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b449d12-8119-47d9-86fd-9e6019251537", "sighting_of_ref": "indicator--b2f58b4c-3102-47c2-8479-4621b9e4e424", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16097853-fdb7-40e6-9ef4-17f91bb8b05d", "sighting_of_ref": "indicator--9ca4175e-b360-4800-bfcc-7836a703ed03", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7dd9ccb-44e0-47bd-90f2-4ac36744c818", "sighting_of_ref": "indicator--c3be8cd6-36f8-4035-8097-0c2783a6c365", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6017c4-3c54-45fa-bff4-847ab19a5577", "sighting_of_ref": "indicator--c3be8cd6-36f8-4035-8097-0c2783a6c365", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54682223-c507-488d-98d2-3d540b1f5566", "sighting_of_ref": "indicator--9d627d9b-8874-416f-918b-a1419681f1e0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10379856-c618-4433-a733-5536a536b185", "sighting_of_ref": "indicator--09dae51a-c512-4eb3-bdb9-f89de278f2b1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f41e68-fda3-47de-a336-d9156cce035c", "sighting_of_ref": "indicator--c6fe7ace-2333-413a-9278-2f9f663d73b1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6252c360-f8ee-418c-9544-52fc762cda7b", "sighting_of_ref": "indicator--c6fe7ace-2333-413a-9278-2f9f663d73b1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154cfe31-54b8-4e3e-98b2-b2b27b7b8ef6", "sighting_of_ref": "indicator--c6fe7ace-2333-413a-9278-2f9f663d73b1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55538027-e4ab-4ea8-acec-a48e2bb6a586", "sighting_of_ref": "indicator--1d97c29a-13ee-4905-87c1-e554a32cbc52", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa24212-593e-462e-9a9e-3e17a7e6751c", "sighting_of_ref": "indicator--4dcd01cc-5294-4a1a-9035-bdd8b99b9678", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d810afdb-d3bc-45b0-be5d-4bf2eed6597d", "sighting_of_ref": "indicator--68c4a260-f898-4c3d-98cf-4e53e31e954e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01d643f-838a-42c2-bebd-3aa8fcd87654", "sighting_of_ref": "indicator--69dd498f-6245-48c0-a6c9-dcc17c5252a5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8dbf94d-0528-4a74-9b65-6961fc21b723", "sighting_of_ref": "indicator--2ede6a64-0f67-4b26-89d5-2e7718973910", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf95757d-41e4-41cc-901a-3acae91394d5", "sighting_of_ref": "indicator--d56987e3-7009-4347-9371-12cca73a96fa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab6c977-dd98-4f94-a3db-a796391a23cf", "sighting_of_ref": "indicator--7d5dd196-1428-4e9e-a82a-77b91b7d0665", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6257c452-35a0-444b-afc5-37874b8f9395", "sighting_of_ref": "indicator--7aaebdd9-20a9-437e-8488-aa39e6a94823", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9935e018-9312-47e5-a1ca-200e23aba2a1", "sighting_of_ref": "indicator--7151b7ab-dfa3-4b60-86dc-3cec1a605461", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b5e66d-f382-4fde-b75b-33efd8002a4a", "sighting_of_ref": "indicator--d1f8851f-55df-4225-822e-045422b2edbf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2178df07-4655-48fc-b2f7-2f37f94743cc", "sighting_of_ref": "indicator--e8b8024f-5031-4713-adf8-4dd5d83073c5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7bdae1-6d47-48eb-8dee-b40f038a3c80", "sighting_of_ref": "indicator--e7953744-6e7c-45d3-9a05-9eec80d989fa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea59f6be-0cc4-411e-8dea-b9b1d93b16bf", "sighting_of_ref": "indicator--1a7db995-5be2-4502-88ed-1cafe5042b1e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b8e08c-87ad-4c7a-a018-e19586619ae3", "sighting_of_ref": "indicator--44ab1f52-1658-4464-84a0-b5982847cb72", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a8d658-17d3-4ccf-baee-23f5b31613b9", "sighting_of_ref": "indicator--c9332f11-3396-4f89-b01c-f60f8a7dc57d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf70399-8300-476b-9eec-6e5b62984725", "sighting_of_ref": "indicator--3aa3c239-795a-47c9-bc63-7413deaa6aa9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c62b20-05ac-4bf1-ab67-b4e18be45365", "sighting_of_ref": "indicator--3aa3c239-795a-47c9-bc63-7413deaa6aa9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b021e8f2-c559-40d4-9421-e4b8675e344e", "sighting_of_ref": "indicator--1b544442-3c15-4fcf-8a7a-6e40c3760bfb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2833bd-47d3-4a29-9264-0f6df8e8abf4", "sighting_of_ref": "indicator--39e78e48-6480-4c8a-ac07-0777358a39d7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3103dc-421b-4ba5-a00f-b4fe3931f184", "sighting_of_ref": "indicator--5b1d261f-517b-473e-a42c-4ccb336ce021", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87353de6-f195-4ea6-b705-c8a30d1e4c56", "sighting_of_ref": "indicator--e6018078-8a68-4982-861b-5001be02c6c7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d629bf6c-6f4a-4fb7-999e-1420314e47ea", "sighting_of_ref": "indicator--e6018078-8a68-4982-861b-5001be02c6c7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0d6b35-0467-4c05-a19f-ff95bba68f49", "sighting_of_ref": "indicator--e6018078-8a68-4982-861b-5001be02c6c7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab37e19-6a22-4a1c-b9c4-e152923253cf", "sighting_of_ref": "indicator--4f4b230f-e554-4318-b766-8181a79a4fc3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90950408-018d-4e0a-a859-92e500e95060", "sighting_of_ref": "indicator--4f4b230f-e554-4318-b766-8181a79a4fc3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f855fc-0b47-4ef7-bfb7-174475dea8ff", "sighting_of_ref": "indicator--b6b3fbbc-89cd-4534-840a-ee19d8dead8f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b51f722-b2d7-42c8-bbfd-b11cae467075", "sighting_of_ref": "indicator--adbf2677-7545-43a8-9f69-9c7c920853c3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f4cac8-28fa-41ca-927e-6d358a50299c", "sighting_of_ref": "indicator--b64fc1ce-9b7d-4e3c-b33a-cbd40e18db46", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8107c51f-ffe9-484b-8fcd-6107043a5cb8", "sighting_of_ref": "indicator--30beac12-d656-4ae4-9aa4-bef1aac6562b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcc72f5-63a1-4661-9320-ed0a68c74ede", "sighting_of_ref": "indicator--ce70ffa9-cda5-4f8b-b667-50194d39a284", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae1d210-f3d4-4ce8-b270-2c62f5a5507a", "sighting_of_ref": "indicator--aa5a18d2-95e0-4fc5-9435-6c63f81045a7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837135fc-ba48-48d0-8ebe-9819b3b78a28", "sighting_of_ref": "indicator--aa5a18d2-95e0-4fc5-9435-6c63f81045a7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d187bf-215e-47ba-808d-06a5c1d8354d", "sighting_of_ref": "indicator--a6c029dd-fa0c-49bd-8641-4a163000b27c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc69813-f05a-4e8a-be09-0504a70abe62", "sighting_of_ref": "indicator--e4d00a26-62b9-47e1-91e5-e1f1fd878025", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec0dd35-f046-4e92-a01b-ec4be84936ef", "sighting_of_ref": "indicator--e4d00a26-62b9-47e1-91e5-e1f1fd878025", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0008e968-116a-41e8-96e2-a338b32a9427", "sighting_of_ref": "indicator--b78934d0-9a4c-49de-ba62-70766be04636", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20feb7a-d5ce-480b-a0fa-84bdab675ef4", "sighting_of_ref": "indicator--b78934d0-9a4c-49de-ba62-70766be04636", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abcde2db-3e60-4be6-ad37-9df3db2e1941", "sighting_of_ref": "indicator--3869634e-1c08-40b5-9252-48db5b8cb9d4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb259559-0c7d-428d-8bd8-653acdc3657e", "sighting_of_ref": "indicator--3869634e-1c08-40b5-9252-48db5b8cb9d4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c4b5bb-f82a-4b60-87d1-1cd545829d2d", "sighting_of_ref": "indicator--f5d25bc3-6bdb-48dd-ab66-c8c135e2e053", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902fdb65-ae70-47e7-8b13-7d27f0ebf63e", "sighting_of_ref": "indicator--a7d57b0f-c1fd-47ea-870f-85a1bca713b2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e96475-970f-4673-ac87-e19b05a14b9c", "sighting_of_ref": "indicator--a7d57b0f-c1fd-47ea-870f-85a1bca713b2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8661478-c3df-45ae-9422-f0867a33a43d", "sighting_of_ref": "indicator--e09330e6-cf1a-4cf5-9ddb-1a269b11c2fd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b740cc0-e6c6-479d-8131-bf8930b531a5", "sighting_of_ref": "indicator--e09330e6-cf1a-4cf5-9ddb-1a269b11c2fd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e33ac5-15fe-40e9-bbda-74023d8d4826", "sighting_of_ref": "indicator--4575ba85-dad9-4244-8d12-98d21b1bbf8a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc4ce46-7fd2-4cba-9232-a8941efab201", "sighting_of_ref": "indicator--9833691e-822c-4ff4-a961-6664d84f9679", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a26a2a-9335-4797-b847-c666e97fd0e1", "sighting_of_ref": "indicator--faf4f3dd-71ee-4330-966d-0568edb38534", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6362ed21-5579-4d8a-a340-09564b5b6b16", "sighting_of_ref": "indicator--faf4f3dd-71ee-4330-966d-0568edb38534", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae04899-064c-4ef1-bc0c-217cefa46783", "sighting_of_ref": "indicator--797f1e1a-7c56-42f8-ad48-d0acb1ff13ab", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4a57db-2965-4932-aa66-c9c13811fd0c", "sighting_of_ref": "indicator--69b57e22-3b17-4c34-beb3-af5e7cc795b2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f2625d-aa36-4b86-9773-a8abf2c7c82d", "sighting_of_ref": "indicator--69b57e22-3b17-4c34-beb3-af5e7cc795b2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35622aec-3111-4caf-878d-8ce58da275e2", "sighting_of_ref": "indicator--60525bfd-ce0b-462f-a821-a2bfd874b39d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16da6df-b740-4547-add2-782cc2c12c54", "sighting_of_ref": "indicator--57dac9b2-94f2-491a-909e-2137d2aba2dc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd924df-6263-4e69-adef-43ea0949ebb1", "sighting_of_ref": "indicator--57dac9b2-94f2-491a-909e-2137d2aba2dc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efa9280-2e03-4220-a93b-9b3977eecf39", "sighting_of_ref": "indicator--57dac9b2-94f2-491a-909e-2137d2aba2dc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca7bda9-c644-4c1e-9626-293c2550baa2", "sighting_of_ref": "indicator--99f1af20-6c1f-4ddc-a347-01c710688d64", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51cef383-5094-452d-b2f6-6aed3bdb573e", "sighting_of_ref": "indicator--99f1af20-6c1f-4ddc-a347-01c710688d64", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88eec879-bf17-465d-8a9c-52ba8aac620d", "sighting_of_ref": "indicator--99f1af20-6c1f-4ddc-a347-01c710688d64", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165bd1ef-e49f-4549-a2d5-fae8e4a5c640", "sighting_of_ref": "indicator--1a2dec10-ed90-483c-b3e6-6af13ab0d829", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83fb5945-30c5-41b6-9892-55c069209e3c", "sighting_of_ref": "indicator--8b1f2bb8-5ee9-4d26-8989-d8ce99cf6c3d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14608d0-9251-4979-80a4-cb48417b3896", "sighting_of_ref": "indicator--0df20a69-dbf2-45ba-b7ff-3c1554de6f0e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13963dbf-5e32-411e-a70b-b963bd43411f", "sighting_of_ref": "indicator--0df20a69-dbf2-45ba-b7ff-3c1554de6f0e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6d5be5-eec5-4588-bcf3-193bf13f0eea", "sighting_of_ref": "indicator--eea7e322-511d-4856-98c1-871931c0e580", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97916ac-a056-4326-bf9e-66d8c6361bc9", "sighting_of_ref": "indicator--eea7e322-511d-4856-98c1-871931c0e580", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b684199e-fc21-4bd7-abd3-ebefb58b646c", "sighting_of_ref": "indicator--d497a0c2-8afd-40e0-a044-6cdd95b62a76", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23833f8e-1ef7-4f00-9c43-494dc5950ac7", "sighting_of_ref": "indicator--d497a0c2-8afd-40e0-a044-6cdd95b62a76", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8dbc030-2584-4f81-a247-eaa9cc0b34c3", "sighting_of_ref": "indicator--a3dc6049-7d9d-49a6-ad50-68e747025bef", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1aaa471-5a3f-48c6-9536-af52b514367e", "sighting_of_ref": "indicator--9ac40fc4-12f8-42d9-8e6e-ccb6541bdc24", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d17191-75d3-4918-be5f-b589af928a63", "sighting_of_ref": "indicator--5e4e7e95-1e36-4f03-a2e5-febd2cf3a122", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd3904b-7c7f-4e1e-942f-b5e0d717bb98", "sighting_of_ref": "indicator--5e4e7e95-1e36-4f03-a2e5-febd2cf3a122", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56460ea-571a-4a0b-8738-2a15dae54134", "sighting_of_ref": "indicator--12e9a25b-62d2-4c47-9405-4a15f1ab77ae", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f51289-fe85-4eaa-8e34-bd5848de8b4e", "sighting_of_ref": "indicator--bfcf592d-3947-4fb9-9ee7-e05c2d29180d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc394eb6-ec09-48ff-8dcc-89964d46e5dd", "sighting_of_ref": "indicator--108f358d-0064-4c12-b49a-1945cc144138", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf963df1-1257-4daa-9ed1-9c6fa85802f2", "sighting_of_ref": "indicator--f5eb8958-a264-46e1-8cb6-90db96dd81d9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45aaa248-eb32-490f-8be1-0907321961fe", "sighting_of_ref": "indicator--5b345068-feda-4f00-be71-61b8a942130d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8df4da2-b39f-4553-82cf-50bb8d5bc3f2", "sighting_of_ref": "indicator--cee4b3c4-c7a6-4575-af2f-27c71f8dbdb1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8c5b21-f705-4c28-ac90-56d7fa1bafe1", "sighting_of_ref": "indicator--61f1e31b-524b-4d01-a488-bb2d96ca924b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e66fd0-f627-4547-90bb-3b2fe3bf832f", "sighting_of_ref": "indicator--1c5e44c1-2ddd-4445-8a27-a3a557d4f319", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173f3ace-4b06-48fc-b340-8a9a29189485", "sighting_of_ref": "indicator--4fe1ce5a-416a-4217-b5ff-d88c743d23c9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16ef105-8e68-4c72-9c51-f6f022812b5a", "sighting_of_ref": "indicator--c5324215-c2e5-4262-93fb-cf61bca70b64", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580bcb12-f187-4754-8b04-53d2b9f83368", "sighting_of_ref": "indicator--fcbe8c2f-c632-4ba6-8c36-fbf8ace807f2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d638a5-7e0c-495d-a01a-86d2830cae25", "sighting_of_ref": "indicator--ce2c578f-d467-4415-85c5-b35a73f1f654", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e73267-2647-4ec5-b257-6cdaab4303e6", "sighting_of_ref": "indicator--ce2c578f-d467-4415-85c5-b35a73f1f654", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215eac94-a98a-455b-9a95-da01153eaec6", "sighting_of_ref": "indicator--43e0aabc-dec4-4045-b92c-e248abd9479d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00db8dda-99fb-44cc-a3ca-60208d675a0b", "sighting_of_ref": "indicator--d34658d6-5054-4509-8595-ab9c06893f02", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f513b3cb-6fd3-4fd1-bf06-399a3512e468", "sighting_of_ref": "indicator--e1079762-73af-4d00-9172-60403449afe9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff5b97b-7126-4a38-9ce2-93274aae7a26", "sighting_of_ref": "indicator--c2220059-250a-4480-8b79-5e7db40085c5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7c07ce-e9d0-4660-9871-b1ec7a7e947f", "sighting_of_ref": "indicator--16807d5e-20f6-4d12-a3fc-ed23822281b1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6778193-c6e0-41a5-8486-f4d91d0f0166", "sighting_of_ref": "indicator--16807d5e-20f6-4d12-a3fc-ed23822281b1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7541704-fe1e-49d8-8c50-024ecbf7501c", "sighting_of_ref": "indicator--aa16a06f-c133-4d82-9268-74d0617daf7e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286c5777-55ea-484c-a6a3-2d261ad4acf3", "sighting_of_ref": "indicator--5cb10b0b-81fa-42a4-9912-d102e6dc7529", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d83447-c6f7-437f-98af-623046048a1f", "sighting_of_ref": "indicator--5cb10b0b-81fa-42a4-9912-d102e6dc7529", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b3d9e4-22cc-43ee-b9c4-a616c290a016", "sighting_of_ref": "indicator--1e5d3104-8dae-4c3f-a376-87973ad517f0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10da5fc-099b-4db1-a922-04611ea448c9", "sighting_of_ref": "indicator--1e5d3104-8dae-4c3f-a376-87973ad517f0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b787ea5d-13cc-498f-a604-8d1935f3ba0d", "sighting_of_ref": "indicator--14b319cb-617d-46d2-af73-972dc5795280", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cddab45-6189-4fe1-a71e-b6fcb1ef3d2c", "sighting_of_ref": "indicator--c239d673-d85f-4866-8121-696d46aaaf8b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1041a66-a79d-422f-918b-12821abb1760", "sighting_of_ref": "indicator--84a90213-58c4-4b6a-9c32-904d09d01466", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba289e35-a422-40c9-ae6e-72cb0d80adaa", "sighting_of_ref": "indicator--84a90213-58c4-4b6a-9c32-904d09d01466", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--971c2476-f7c5-4533-9031-f9b8f10df434", "sighting_of_ref": "indicator--84a90213-58c4-4b6a-9c32-904d09d01466", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ea2b16-4347-461f-82a7-77dc3bde5867", "sighting_of_ref": "indicator--29f199ad-2c06-4b59-8d59-3a9435d91a56", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0de3b5-cdae-450c-8cdd-2d959f32a908", "sighting_of_ref": "indicator--34035065-c60a-4499-a7d7-81e6c3cd94d8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af97aad-dddd-4c4b-9aa7-157618b8006b", "sighting_of_ref": "indicator--34035065-c60a-4499-a7d7-81e6c3cd94d8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212f9d18-47eb-4361-978f-7ea4d2585b0e", "sighting_of_ref": "indicator--d02ac370-ff02-405e-afd9-bde955a84f60", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a325ab6-3e68-49f4-a2a3-6c1c79eb8165", "sighting_of_ref": "indicator--26ef11c5-d58d-4efb-8a7a-ad8cf9956a0c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bbdbfe-334f-4a6d-a30a-c0576d1efc49", "sighting_of_ref": "indicator--26ef11c5-d58d-4efb-8a7a-ad8cf9956a0c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38847c8-6f84-4cd0-b035-ad864e282aa6", "sighting_of_ref": "indicator--ba4e20a3-6fde-4ec8-9d05-e3bef9625388", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e64e6ec-3c1b-4cac-9da0-05fa2c1b8e9f", "sighting_of_ref": "indicator--ba4e20a3-6fde-4ec8-9d05-e3bef9625388", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491df8b9-ccd7-47ff-a899-ec3c5d48bf49", "sighting_of_ref": "indicator--afdc9584-24bf-45f4-ba87-05dd5851b7af", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a8fefc-0b80-476b-ac15-e96cc7dcd69a", "sighting_of_ref": "indicator--afdc9584-24bf-45f4-ba87-05dd5851b7af", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3961c593-9eac-4012-8867-6ef95cf31cb0", "sighting_of_ref": "indicator--3e832e9c-e2dc-4b92-a10e-8a3528d6cf6f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212fd03a-20d3-4699-bafb-762093ccf3ff", "sighting_of_ref": "indicator--3e832e9c-e2dc-4b92-a10e-8a3528d6cf6f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ac1856-e906-497b-a0ab-41534f3cd933", "sighting_of_ref": "indicator--2a1aaa8f-1882-4d69-b2b2-c797d051996d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abbc4129-1fce-4d98-957d-e0ac25c0aab9", "sighting_of_ref": "indicator--2a1aaa8f-1882-4d69-b2b2-c797d051996d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72efc1c-8b43-4dc9-b53a-10ec013be737", "sighting_of_ref": "indicator--75db3ed9-1eaa-4229-97a2-b8dcbef8ac46", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340781fd-ff52-4fad-be4e-d891a80ad542", "sighting_of_ref": "indicator--75db3ed9-1eaa-4229-97a2-b8dcbef8ac46", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbe78f3-7cc3-4b13-ace8-066b2faedd68", "sighting_of_ref": "indicator--054ad3ab-bd9e-4baf-984f-4f1ac3616656", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56feaeb7-07a6-4b38-b527-b6af100ba9ec", "sighting_of_ref": "indicator--041006ab-2631-41ce-80a8-09feb483618b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad83b8d-3075-421b-9564-c1ad0c294e1a", "sighting_of_ref": "indicator--348f8484-a8cd-4a08-940d-457beb928cfd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a7c9da-64f5-4ee2-917c-0d4bdefbf1be", "sighting_of_ref": "indicator--348f8484-a8cd-4a08-940d-457beb928cfd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c3ace2-1966-4490-b14b-d3d3214d94b7", "sighting_of_ref": "indicator--fdb4d3d0-901e-4602-96e9-fcc53b45fc42", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ead9453-e28a-4c13-a479-29904dd5e0b6", "sighting_of_ref": "indicator--fdb4d3d0-901e-4602-96e9-fcc53b45fc42", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8d9460-c828-4e9f-a004-73d1921e347a", "sighting_of_ref": "indicator--a0a5eb00-8319-464f-b657-8ee3027c0c69", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5512ff-1a2e-4717-b5e3-534febc39737", "sighting_of_ref": "indicator--a0a5eb00-8319-464f-b657-8ee3027c0c69", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e5d3bb-fd54-4c62-8d4d-5815f784b0b1", "sighting_of_ref": "indicator--017e7262-0544-44d8-bac3-0d7cb5efd50e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afb7de6-90db-4a8b-93eb-59fc32c7d3d2", "sighting_of_ref": "indicator--5a64c43e-fb60-4775-b4cd-50bbb057811e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774b6a06-3a17-4186-8f15-8b0b35a11e3f", "sighting_of_ref": "indicator--df6ac023-c421-45b8-8c39-808ce59cc91f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11cc2503-7f74-4518-91fc-1d399ed55432", "sighting_of_ref": "indicator--df6ac023-c421-45b8-8c39-808ce59cc91f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c121c5-1506-4816-bda1-34751438b8ac", "sighting_of_ref": "indicator--58d113ad-0b97-4458-9918-4b710943994d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4793d3de-8b15-420e-95a0-e0ef69b39ddc", "sighting_of_ref": "indicator--58d113ad-0b97-4458-9918-4b710943994d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43dc07c-4a43-43e0-b31a-bff36d1b00b5", "sighting_of_ref": "indicator--179c75a6-5f0d-48be-80e5-1d711487958c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c73e29d-b5ff-472f-a02d-2e741dca86e1", "sighting_of_ref": "indicator--179c75a6-5f0d-48be-80e5-1d711487958c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f4c03f-68cc-4a12-8bed-1a7adde1f7bf", "sighting_of_ref": "indicator--122f0cf5-e5f4-498a-95a4-d3f2293a4dd8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b166cb7-faaf-4aaf-a8d5-3a9b18ba7d21", "sighting_of_ref": "indicator--122f0cf5-e5f4-498a-95a4-d3f2293a4dd8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0064b50-d8c2-4ad4-b299-f63f9c644ce0", "sighting_of_ref": "indicator--1bc9b4eb-071c-495a-93d3-e55b68f1e7f1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21030890-e0d5-4479-a7eb-bc745ffce9b7", "sighting_of_ref": "indicator--1bc9b4eb-071c-495a-93d3-e55b68f1e7f1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff5549d-00ae-4451-a26b-52d119cb0597", "sighting_of_ref": "indicator--1bc9b4eb-071c-495a-93d3-e55b68f1e7f1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0d6138-b805-4838-91b6-25356dedb0e9", "sighting_of_ref": "indicator--8ba1a6d4-6861-43c3-a3c2-2488dff14d1f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee2053a-1757-4455-a323-6d7e55c08f27", "sighting_of_ref": "indicator--8ba1a6d4-6861-43c3-a3c2-2488dff14d1f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5970d55-a481-4b09-b768-60d3b776e545", "sighting_of_ref": "indicator--d7fe0ba9-e7dd-4103-b734-7597ebc981bd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f7e573-42eb-47da-b1be-f755e58d72b4", "sighting_of_ref": "indicator--d7fe0ba9-e7dd-4103-b734-7597ebc981bd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8163388e-a130-4a4a-bb8d-ea109223b0a4", "sighting_of_ref": "indicator--d7fe0ba9-e7dd-4103-b734-7597ebc981bd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805a9b1c-d84a-4b45-b993-2950129d84d2", "sighting_of_ref": "indicator--18e35545-ddf1-4284-91e2-c163ef305723", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5aeb8f-268d-4acc-b036-57d66d72713b", "sighting_of_ref": "indicator--98be80ad-70b4-4dd4-b7d8-e2d42efe3a7c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c62e56-acd6-4c10-9ba0-0f2bfee1fb75", "sighting_of_ref": "indicator--7783f00a-d31d-46f8-be97-447dfa9bc116", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9042afce-1f46-483b-ad84-83061f09a8c8", "sighting_of_ref": "indicator--7783f00a-d31d-46f8-be97-447dfa9bc116", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8287db55-e2b7-4c86-b1bf-8e40662f24a9", "sighting_of_ref": "indicator--6b2fac07-1bb5-4b3e-960d-19e912204a16", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f2e60c-7063-4a8d-b055-6d252bab97da", "sighting_of_ref": "indicator--6b2fac07-1bb5-4b3e-960d-19e912204a16", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a76f6e26-9d3c-450a-8220-a0dee1f35e10", "sighting_of_ref": "indicator--6b2fac07-1bb5-4b3e-960d-19e912204a16", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e4d408-4ee5-4b6f-9b71-58598580dddf", "sighting_of_ref": "indicator--c66f143d-613e-4ab3-87fb-6851fd097bfd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206b3a2c-c1d4-4901-ab6b-fc5736739873", "sighting_of_ref": "indicator--c66f143d-613e-4ab3-87fb-6851fd097bfd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f23633-2824-44c9-8fa7-c524def3b594", "sighting_of_ref": "indicator--044bae85-3966-485f-813e-590420ded872", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f86353-7e21-43b1-b721-5ffb81f9ceec", "sighting_of_ref": "indicator--044bae85-3966-485f-813e-590420ded872", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b434e029-101a-4f4e-8c99-d47133987e85", "sighting_of_ref": "indicator--d93ca333-c557-475f-a9e3-4689cee96a28", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607c6184-2c9b-413a-8452-534ddd54bbc3", "sighting_of_ref": "indicator--d93ca333-c557-475f-a9e3-4689cee96a28", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a739da0-5b66-426f-bc89-d4c7e3e67768", "sighting_of_ref": "indicator--1fc6e2b9-8baf-4869-8c67-d82d42483bdf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834dd829-d955-49ba-9606-99be381cd03e", "sighting_of_ref": "indicator--1fc6e2b9-8baf-4869-8c67-d82d42483bdf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ce3854-3fa4-4a03-9a97-2c2857a28294", "sighting_of_ref": "indicator--138429cd-4dc0-44ef-bba3-6fbe4e210b1d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466ee47e-4841-4a62-ac4a-d13614dac33f", "sighting_of_ref": "indicator--138429cd-4dc0-44ef-bba3-6fbe4e210b1d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69dfbab-9a98-427a-b6f7-c246adfba6c2", "sighting_of_ref": "indicator--e3c40fbb-2558-45a9-9b2b-22ed767c9f36", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f503164b-d4e2-4c45-bb3e-45fc135c6909", "sighting_of_ref": "indicator--e38117ae-a6b4-40b6-b348-3df06129a2c0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4880924-843e-4779-9767-2d3c92cbfe94", "sighting_of_ref": "indicator--3e67ac70-2a59-43ae-91c3-79972fe2fe6b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4953502-653a-4163-9616-84d8fe38ae1c", "sighting_of_ref": "indicator--23f8bccc-dd24-4712-9516-8cbf392d3aff", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74741f57-d4c2-46c6-96b6-806d926ce208", "sighting_of_ref": "indicator--23f8bccc-dd24-4712-9516-8cbf392d3aff", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2bb044-3d13-4f52-beb6-bcc5645cc5b7", "sighting_of_ref": "indicator--b735e5e1-256b-4c93-aebc-94cdddb701f1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7139e694-df7d-4edf-8fcd-fba059afdbbd", "sighting_of_ref": "indicator--b735e5e1-256b-4c93-aebc-94cdddb701f1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf9c691-8f62-40fe-b76a-c98575dcca5e", "sighting_of_ref": "indicator--4dcd77d4-c132-423d-b897-97c28c811f33", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478760d9-539a-4ea3-8a68-18b53ad392cd", "sighting_of_ref": "indicator--600b13c6-e2d7-4df9-8c70-4657428dc360", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903af44e-5542-4afa-97bf-0fcbd521b81c", "sighting_of_ref": "indicator--600b13c6-e2d7-4df9-8c70-4657428dc360", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbc72dc-ee94-4cd2-bd5c-b189525462f4", "sighting_of_ref": "indicator--fa55f810-cb72-4dae-a832-ddd2593f8f4a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c89e216-b929-48ce-8a8d-0529db8398e9", "sighting_of_ref": "indicator--f619f660-d73d-4ba9-af2a-a9b4362a679e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b60fdc-b691-45b5-95bc-c4b338c65a4b", "sighting_of_ref": "indicator--f619f660-d73d-4ba9-af2a-a9b4362a679e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6753a608-e0c4-4908-b0fb-e3a74e8943ba", "sighting_of_ref": "indicator--f619f660-d73d-4ba9-af2a-a9b4362a679e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f3674c9-9c94-4e5b-a85c-3d35c39d1adc", "sighting_of_ref": "indicator--292c6d56-f3ec-4bc9-af50-2cd5d440ec2e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a53e13-f5a8-432b-90cc-b21d6697d10e", "sighting_of_ref": "indicator--292c6d56-f3ec-4bc9-af50-2cd5d440ec2e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be60e5ec-21ac-40ab-b671-e012620c03cf", "sighting_of_ref": "indicator--72e1d35b-7f3c-4249-82a7-e20d1cf199f1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2e6bf0-29ce-4f8b-b04a-3c8edec4c8d5", "sighting_of_ref": "indicator--72e1d35b-7f3c-4249-82a7-e20d1cf199f1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2cf361-418c-43ae-82bb-222dec1dbb39", "sighting_of_ref": "indicator--0a42cb01-f549-45cb-a246-8ac12e915742", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b63722-15bf-429f-8aa9-da528ad46a4a", "sighting_of_ref": "indicator--61a1ec19-b659-4c6e-a15b-a180eff1474f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b796453c-d0ea-45e3-9b1d-01feed4f1ce5", "sighting_of_ref": "indicator--61a1ec19-b659-4c6e-a15b-a180eff1474f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835ec811-f482-4975-aa1a-634f2606e0ee", "sighting_of_ref": "indicator--e62fd31a-e0b1-42a9-8fd9-8705d7b52605", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1c3f26-0cd1-46f5-8eb2-3826e7f47e74", "sighting_of_ref": "indicator--e9b95742-2c1b-4a4b-92d6-bb4f7e9fe659", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78196a8d-d97d-420e-a7e7-1fabba1d7b4b", "sighting_of_ref": "indicator--0453eb71-fe21-46a6-875b-f2a9f75b9889", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4723162-7573-4595-aa50-ae315d42a769", "sighting_of_ref": "indicator--0453eb71-fe21-46a6-875b-f2a9f75b9889", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a9b014-24a6-4c7e-82fb-c9a3767c013f", "sighting_of_ref": "indicator--55c0e9b4-68db-49c0-a883-3e47320f027c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8b3b44-aa05-4a48-b36f-89840b222d97", "sighting_of_ref": "indicator--68e4a444-38af-4a96-8062-d069f8203d00", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5758bc-a96a-4f02-a4af-b1b101fd0bc6", "sighting_of_ref": "indicator--68e4a444-38af-4a96-8062-d069f8203d00", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c3eb51-20d1-4dfb-8697-78f2b3cdd9d2", "sighting_of_ref": "indicator--80f79650-1f6a-4ff2-8b8f-8abe7f2f52b1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25fe0bb-201f-4536-b106-20fab8667f4c", "sighting_of_ref": "indicator--80f79650-1f6a-4ff2-8b8f-8abe7f2f52b1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651b3228-2308-413a-b022-a5e105d871b6", "sighting_of_ref": "indicator--457dc56d-2fae-423b-9c09-4a5f84e3aa35", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187f25b1-dcc5-4a55-be66-a83a940b597e", "sighting_of_ref": "indicator--457dc56d-2fae-423b-9c09-4a5f84e3aa35", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163681f5-cdd1-4c9a-afe5-2be8020f67f6", "sighting_of_ref": "indicator--4e9b5547-c6f2-4e7a-a6c4-2dd1c698423a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664efb10-b514-4701-8f40-63ce4d20dcde", "sighting_of_ref": "indicator--4e9b5547-c6f2-4e7a-a6c4-2dd1c698423a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ccda2fb-d840-475e-b672-8ceeed94c573", "sighting_of_ref": "indicator--d4122430-027f-48e6-adad-8fbf74281b1a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52b65b7-2997-45e2-8258-d63e9f5646c2", "sighting_of_ref": "indicator--d4122430-027f-48e6-adad-8fbf74281b1a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a435c5-b7d5-4621-bbca-b5d130ca13f8", "sighting_of_ref": "indicator--1911c3a3-fb5d-4a32-9848-6bda8b6123b9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba038341-447e-49eb-a51b-803241bbd14c", "sighting_of_ref": "indicator--86b9b744-990b-4713-82b7-b6c333a50f23", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed6b612-e61c-4d62-bec4-fcf0908ff027", "sighting_of_ref": "indicator--dd380552-5673-4850-bd0c-fb2dcfa2cff9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b04ab0-e32c-4d52-a3ad-255021bfaf5c", "sighting_of_ref": "indicator--dd380552-5673-4850-bd0c-fb2dcfa2cff9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7f2437-a851-4f69-ab66-6c1c06d2a4a1", "sighting_of_ref": "indicator--d36cac2e-afee-4eb7-8517-0607e64ada4e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e65c33c-7438-4872-b522-01ab5f4cbecd", "sighting_of_ref": "indicator--d487ed06-0d8f-41eb-8ca8-e49b77e2ccd3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a965a02d-bbb5-44b1-ba66-facb2915aa1f", "sighting_of_ref": "indicator--d487ed06-0d8f-41eb-8ca8-e49b77e2ccd3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b897dea7-ad47-4b3d-b3c0-d55ad00efeea", "sighting_of_ref": "indicator--82964c0d-f46c-4ca3-b366-86e7f20250b3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e75945-0cd3-4bcd-a772-614ed94cbec4", "sighting_of_ref": "indicator--1f25304d-61de-4169-883f-9b6b21c331c7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9cf35d-3a8d-40c7-b1dd-11361d75d890", "sighting_of_ref": "indicator--232d9055-2698-4645-8300-207dacaae8a5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72099b3-7924-4682-9e5c-5c729cd26680", "sighting_of_ref": "indicator--232d9055-2698-4645-8300-207dacaae8a5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c19d0f-c88b-4c98-aa11-f300d7360aff", "sighting_of_ref": "indicator--170c6f1c-f7d0-457f-a37d-87e0c4aed1a3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b149737f-7c53-4261-a462-79d440459d5c", "sighting_of_ref": "indicator--170c6f1c-f7d0-457f-a37d-87e0c4aed1a3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12d223e-783a-4269-ad5e-2879d3fca1bc", "sighting_of_ref": "indicator--1dd84fbb-a0fc-4c8b-b553-8a4b4e0ee272", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8fadbd-9927-49d6-88a1-8c6b76830bca", "sighting_of_ref": "indicator--5f1b07ae-5a20-4233-9923-460227da6138", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daaacc49-72ee-485f-b53a-0b855b013b27", "sighting_of_ref": "indicator--5f1b07ae-5a20-4233-9923-460227da6138", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f156ff5f-f447-4760-bb08-ced237f5ea53", "sighting_of_ref": "indicator--fb381812-5a75-459a-baf0-a5c2d52d2e9d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46b0087-5d8b-438f-a379-58b7a7dde181", "sighting_of_ref": "indicator--fb381812-5a75-459a-baf0-a5c2d52d2e9d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf98ae6-fcbc-47d0-beba-a588ad801b87", "sighting_of_ref": "indicator--fb381812-5a75-459a-baf0-a5c2d52d2e9d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc81e807-4b42-40e3-b860-c69d5279bbe8", "sighting_of_ref": "indicator--e11c6a18-747c-425b-8f6c-503ce548de77", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb73bed6-de5d-47e4-a340-b4b7ac3477b2", "sighting_of_ref": "indicator--e11c6a18-747c-425b-8f6c-503ce548de77", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eaaa2f8-6024-432d-9281-a85ddf9b1094", "sighting_of_ref": "indicator--e11c6a18-747c-425b-8f6c-503ce548de77", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5632678-80d0-4565-87fb-8f959dc0bdcb", "sighting_of_ref": "indicator--4ad82510-a54b-4490-930e-fb51a677efa0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d583a5-bce4-41c7-8005-cf07e130f6a8", "sighting_of_ref": "indicator--4ad82510-a54b-4490-930e-fb51a677efa0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf3198a-abee-4832-a55a-816fd255898f", "sighting_of_ref": "indicator--4ad82510-a54b-4490-930e-fb51a677efa0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b5350a-fd32-4464-b71e-78924b6f09bc", "sighting_of_ref": "indicator--4742b00d-0072-4019-ad9d-944322aa030f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6f433f-653b-47a2-9e67-7b731ca4328f", "sighting_of_ref": "indicator--4742b00d-0072-4019-ad9d-944322aa030f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f8a68b-7c75-4b40-8d86-12f20a9439d6", "sighting_of_ref": "indicator--9284e5b5-e7bd-40e4-afbb-19cd159e4efe", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9628a08a-509d-4879-9593-efa59a2c083c", "sighting_of_ref": "indicator--c992709e-037f-4696-9421-2818571f4c38", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60b65f3-b527-4590-b99f-531cdcadfb42", "sighting_of_ref": "indicator--d00c32c8-c018-4eb5-a2da-85f846ed26af", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d816dc-d7dd-44b8-8f31-8f0bb2099b96", "sighting_of_ref": "indicator--d00c32c8-c018-4eb5-a2da-85f846ed26af", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a43cd0-db7d-4f8c-908a-98aca3f23051", "sighting_of_ref": "indicator--dac47e9b-061b-4702-a635-27b1e7abec3a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9d270d-6988-45ca-b2c2-9a2925dea485", "sighting_of_ref": "indicator--8c1acbcf-92f1-4a6a-a1bf-a3d396aa7623", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf1df8f-465e-4455-9e96-339aa3e8fe31", "sighting_of_ref": "indicator--8c1acbcf-92f1-4a6a-a1bf-a3d396aa7623", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648457ef-8a3c-4b98-8183-2156f03f0dd0", "sighting_of_ref": "indicator--8af6f8e2-afdb-4b7f-94d3-b622b8f16f26", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f51392-285c-4326-9ff7-d41b3225ecc3", "sighting_of_ref": "indicator--7eda0070-9374-4054-b8b9-16c1812869c5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8458d4d0-9fe3-4eac-b317-78b75cdcb40d", "sighting_of_ref": "indicator--7eda0070-9374-4054-b8b9-16c1812869c5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9440afc-3b67-4470-87a7-cd64e864531f", "sighting_of_ref": "indicator--7eda0070-9374-4054-b8b9-16c1812869c5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22268a01-ca0a-4198-b74a-d90a4d7c316a", "sighting_of_ref": "indicator--cf225d7b-f82f-45f3-a1cf-0f43c620cb7d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05949eb3-e9bf-48e3-91f1-1d881938b05c", "sighting_of_ref": "indicator--cf225d7b-f82f-45f3-a1cf-0f43c620cb7d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c9c75f-8dc2-487a-888d-72cdc2544a8d", "sighting_of_ref": "indicator--587f3580-fc1a-44d7-bbab-358fda95ffa9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0959de9-3e5a-4b25-9108-48f822a17996", "sighting_of_ref": "indicator--7e3cc8e6-66c0-45cb-afa4-51d219106662", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f26f04c-5731-4f52-a557-38ee77464e28", "sighting_of_ref": "indicator--7e3cc8e6-66c0-45cb-afa4-51d219106662", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48db2c8f-a1dc-4044-91be-e0d4d86b0f05", "sighting_of_ref": "indicator--93fa52ab-f721-48f7-8fdc-3c189848e0c5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e5c983-5f49-472a-94c8-bcd1703a2891", "sighting_of_ref": "indicator--93fa52ab-f721-48f7-8fdc-3c189848e0c5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188a3c8b-7ba4-4273-91e3-9a6879553b32", "sighting_of_ref": "indicator--8dc4907d-f3af-4994-97cc-36604794ac34", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a842bc-e7bd-473f-bc47-5318fd448566", "sighting_of_ref": "indicator--7dc28a0b-b40e-4374-9f49-e5360c2f3563", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70adbd9-7c1a-424c-a178-471d089d7c1e", "sighting_of_ref": "indicator--9f6b2bbd-8a5e-49af-a76e-75c4524004f9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438259f0-c281-4ebd-934e-0049fe1cc9f8", "sighting_of_ref": "indicator--ede54836-7adf-4d08-af95-84d08202ef1f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d4b29e-c0e4-482e-acba-4bfcc0f08573", "sighting_of_ref": "indicator--7f28fec5-b248-4d4f-9f4c-3f7b37403a6c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4291aef0-0635-4394-bc60-88dd2c428e02", "sighting_of_ref": "indicator--7f28fec5-b248-4d4f-9f4c-3f7b37403a6c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d795ec3-10d2-4ed1-a13f-93df37ed81ce", "sighting_of_ref": "indicator--7f28fec5-b248-4d4f-9f4c-3f7b37403a6c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7944e633-b792-400b-95a6-83bb3ddab228", "sighting_of_ref": "indicator--1afdae28-a3ed-4847-823a-9c7513e5bc76", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0231353-9344-45d8-98a9-364b16e0e321", "sighting_of_ref": "indicator--1afdae28-a3ed-4847-823a-9c7513e5bc76", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1cdd91c-af21-4d41-add5-6dbf4881b7ac", "sighting_of_ref": "indicator--c2253692-4719-4a85-b841-3a39c33588d5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0b2008-81e4-4adc-ab0c-11a3a2e26acb", "sighting_of_ref": "indicator--c2253692-4719-4a85-b841-3a39c33588d5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9ea03f-a7a2-4c7f-a1f7-f5976a1a55ba", "sighting_of_ref": "indicator--c2253692-4719-4a85-b841-3a39c33588d5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c3d716-bd11-4f3f-9718-bc2adee616de", "sighting_of_ref": "indicator--be475d0d-983d-4673-a393-4ac0d520d553", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbdb87d-caa1-44e7-9b4e-a5c1558df74b", "sighting_of_ref": "indicator--a2193a2b-fd0c-4417-a575-71614959c18e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f18f0874-6024-493e-bf6e-874c7a1c4042", "sighting_of_ref": "indicator--a2193a2b-fd0c-4417-a575-71614959c18e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605aaadf-a169-4e02-b52c-b0cd7a93d807", "sighting_of_ref": "indicator--771caa4a-5c62-432e-990e-da00c085c78a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b42af9e-3069-450c-a80b-b540e15b0da3", "sighting_of_ref": "indicator--d99342c2-b9b3-43a6-b330-f0214843535c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769d6bea-661a-40ad-8307-3500c5da15b8", "sighting_of_ref": "indicator--b3bf8360-89dc-43bd-ac1a-b97c0ec61035", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25b884f-0e1c-414d-b69f-7df29cb081b8", "sighting_of_ref": "indicator--b3bf8360-89dc-43bd-ac1a-b97c0ec61035", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4c7a28-4d6e-46f8-b725-77a6e9928764", "sighting_of_ref": "indicator--de9aadb9-ea4f-45f8-a131-9e8b9d04a822", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7191987d-9df9-4167-89f7-f518da13bb3d", "sighting_of_ref": "indicator--de9aadb9-ea4f-45f8-a131-9e8b9d04a822", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7a6b33-a3f7-4054-99ca-f53c638eb134", "sighting_of_ref": "indicator--260de078-d338-49e8-b6cf-3db7da5044e2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd58a18e-6746-44c0-acad-21e265bbc9a4", "sighting_of_ref": "indicator--8ed99ba8-c2dd-4657-95f8-5d108b6ddadc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc9b81f-9e58-46c7-a968-00c92ca783db", "sighting_of_ref": "indicator--54133856-1863-471d-87d9-993ebe56c4c4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c97c8c2-ef93-4ba8-b064-bd1bb591e1ea", "sighting_of_ref": "indicator--4a5ed07b-9bde-4d72-b965-9638b0ec998f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184731d7-99cd-4ad1-8f1a-fa22980e5232", "sighting_of_ref": "indicator--b8560ac2-bbf5-4481-af0f-3e186a13915a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99a06c0-6ecd-4573-a1e8-b2a32daca65d", "sighting_of_ref": "indicator--0e1f6076-c89e-4800-930d-b4ae809ab141", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72439093-d0d4-4c24-ab3f-7744b54e03ec", "sighting_of_ref": "indicator--0e1f6076-c89e-4800-930d-b4ae809ab141", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db41cb1e-710c-406f-9320-360c99e4d2be", "sighting_of_ref": "indicator--0e1f6076-c89e-4800-930d-b4ae809ab141", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12379bc2-56f9-4448-9f74-383487620f2c", "sighting_of_ref": "indicator--4854bf0d-77df-41eb-8f12-599e90f057ab", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93982680-e388-4d58-97dd-52c49e64ca6f", "sighting_of_ref": "indicator--4854bf0d-77df-41eb-8f12-599e90f057ab", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b402ac-a9fe-43c8-93dd-c80ff73d46e7", "sighting_of_ref": "indicator--a1bb4ebb-52c2-46e0-b3b0-b0766c31fbe7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62cd69e3-0c96-4b84-8f9f-a3cf74a797ac", "sighting_of_ref": "indicator--a1bb4ebb-52c2-46e0-b3b0-b0766c31fbe7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e50b3ee-4421-4907-b850-ff63aedeff53", "sighting_of_ref": "indicator--aacdb228-bc3d-4b1b-9fc6-1762121a341e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ee6777-be3d-4af5-a33a-880c719da488", "sighting_of_ref": "indicator--d585ebc7-e35a-430a-845f-6f981174dcdc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09283a3c-d759-4e4a-ba9a-ece1b687e741", "sighting_of_ref": "indicator--d585ebc7-e35a-430a-845f-6f981174dcdc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846b7a10-0c92-44ca-9324-b961dffea9b1", "sighting_of_ref": "indicator--907dd570-6f61-454f-8f7d-6ecb39dcef94", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd6a051-5997-4ee3-87a9-8dc76b4db4e9", "sighting_of_ref": "indicator--907dd570-6f61-454f-8f7d-6ecb39dcef94", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad92778-3594-4b34-bcd1-60ea2c8b9568", "sighting_of_ref": "indicator--b30b4b8d-0d4d-4baf-a73e-55f02a5d98f1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244e6339-cc12-4c48-9065-a1d89578d400", "sighting_of_ref": "indicator--b30b4b8d-0d4d-4baf-a73e-55f02a5d98f1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949e1f01-27b0-4385-a733-b0643439bd0d", "sighting_of_ref": "indicator--b30b4b8d-0d4d-4baf-a73e-55f02a5d98f1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89962fab-1f8c-4db3-93bb-d2e318c7f501", "sighting_of_ref": "indicator--95bc7532-6db5-4e37-bf6c-de91e013621a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc35c202-606c-4a12-b5f5-105ba62d4209", "sighting_of_ref": "indicator--95bc7532-6db5-4e37-bf6c-de91e013621a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df0aac6-185d-4ca6-a24e-ca63f8508069", "sighting_of_ref": "indicator--d6dad550-354f-461d-9107-4d5abdaafad4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7383a0-f417-4487-b5a7-fad74553f1f3", "sighting_of_ref": "indicator--8d7ace06-8b63-4a06-8b0f-8230c20756e5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e26b22-f987-4e3b-bac5-618591a75fd2", "sighting_of_ref": "indicator--8d7ace06-8b63-4a06-8b0f-8230c20756e5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55fa430-2767-497d-915e-338c41296c8a", "sighting_of_ref": "indicator--2f4c88f0-a5f4-4aa1-af01-3ad5ad530f09", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ffa5cc-b6a6-4990-9f3e-b435907e1cd7", "sighting_of_ref": "indicator--2f4c88f0-a5f4-4aa1-af01-3ad5ad530f09", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e359af1b-1c39-4ae0-80fe-89cff8f87bc4", "sighting_of_ref": "indicator--ddeaf9fc-a820-4fc7-af01-9837b248dc48", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317d3644-2d38-4fbc-9484-7ae6f4dfc65f", "sighting_of_ref": "indicator--5e2d7541-2321-433d-ad9a-ffe413b67f54", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacaf453-c550-407c-a931-657c6141565c", "sighting_of_ref": "indicator--80a4754e-2eec-4553-a37d-bf1392a91e8e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e25be2-6384-42b0-8517-1c9748510ea4", "sighting_of_ref": "indicator--80a4754e-2eec-4553-a37d-bf1392a91e8e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0eae830-e1b3-4334-a7a8-836d054757dd", "sighting_of_ref": "indicator--0961cb0a-1c2a-4c81-9aa6-61030488f682", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda3b4cc-2967-4aec-a785-060b5db837cb", "sighting_of_ref": "indicator--b6a53005-ca7a-44ef-8e94-cdf0ef04fd28", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e02b9666-da95-47b6-9da0-a7d04fad883a", "sighting_of_ref": "indicator--b6a53005-ca7a-44ef-8e94-cdf0ef04fd28", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebed3b16-8c55-4a70-bcbe-546081433d6c", "sighting_of_ref": "indicator--b6a53005-ca7a-44ef-8e94-cdf0ef04fd28", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432b5e09-a706-4038-a51c-d905f28e669b", "sighting_of_ref": "indicator--b02aab44-4c5e-4825-85f1-b77717c98a9c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2a2d63-54f3-478b-afee-94a08bdf8816", "sighting_of_ref": "indicator--3cc8f6de-8b16-4dee-9817-2ab86d269bcc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bbd72b-bb8a-4df5-b08f-251436510980", "sighting_of_ref": "indicator--b7b185c1-4d12-4a6b-9915-9063b12dd137", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e856f3-b6df-4c8e-b110-383debab949e", "sighting_of_ref": "indicator--840c9408-9ce4-47e7-b245-598d26c8bcdd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7427d3c6-5aa6-4557-9aaa-92943a41a3ae", "sighting_of_ref": "indicator--b26a4d08-70f8-422a-a636-89cf7182258a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02bc3c6-6393-4ec9-b004-a954dc69cab6", "sighting_of_ref": "indicator--38fe1734-b7e5-4722-afa7-6b02367316b6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a7881c-ce2e-4246-bfe8-fc38979719a7", "sighting_of_ref": "indicator--38fe1734-b7e5-4722-afa7-6b02367316b6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802f92aa-9f30-4b46-8028-4e3daa0af3ee", "sighting_of_ref": "indicator--3080ec1e-17f5-4cd9-9cbd-a66c21764c6c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e42d163-4d34-406d-aa9e-26b9d5f52b4b", "sighting_of_ref": "indicator--3080ec1e-17f5-4cd9-9cbd-a66c21764c6c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39bf9337-1fd9-46f2-87a2-6b32e7e9afdb", "sighting_of_ref": "indicator--3080ec1e-17f5-4cd9-9cbd-a66c21764c6c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4119d8b8-b89e-4717-a081-1c8bf0f0d188", "sighting_of_ref": "indicator--6c0f3e13-a3b8-4682-964f-1458a32141cc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f0c6ae-db7c-497f-8a0d-3dbcf97e137f", "sighting_of_ref": "indicator--6c0f3e13-a3b8-4682-964f-1458a32141cc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4014b5fe-b2c5-46ec-94cd-29bd520e2f8b", "sighting_of_ref": "indicator--468ec4a6-d97b-4d05-b877-fd02debef7fd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0909d836-dfbc-4077-a047-7a91bc96bb13", "sighting_of_ref": "indicator--ebb99a5b-ac2a-4f0d-82cf-963695e8bfed", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875c4577-c450-4ffa-8b79-3c3b52dacde6", "sighting_of_ref": "indicator--4573b824-bb4a-4f9f-9464-ff17a33fd357", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9e795d-88c5-4750-84ca-faa138583667", "sighting_of_ref": "indicator--4573b824-bb4a-4f9f-9464-ff17a33fd357", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a728d74-487e-4a51-8ae2-c848fd46a0eb", "sighting_of_ref": "indicator--64f062cd-f37f-482a-99c5-da356c5563c4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0583062c-1f85-41f4-9547-8292152aa702", "sighting_of_ref": "indicator--64f062cd-f37f-482a-99c5-da356c5563c4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12851d8-4199-4b6e-99e8-0b29bb00284a", "sighting_of_ref": "indicator--64f062cd-f37f-482a-99c5-da356c5563c4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8380f214-4cb4-4749-9448-52346c0f2b3d", "sighting_of_ref": "indicator--6332efab-a329-41ba-9f3f-4d02e18436ae", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930fedd6-e556-4b96-8b68-19911e39eabc", "sighting_of_ref": "indicator--6332efab-a329-41ba-9f3f-4d02e18436ae", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6118435e-2d61-4a25-aa24-7039a49222b9", "sighting_of_ref": "indicator--a0b6acf0-c74c-4efb-b151-6cd96fb3f3cf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abb1b82-47cc-4512-b121-bfb6e90eaa6d", "sighting_of_ref": "indicator--a0b6acf0-c74c-4efb-b151-6cd96fb3f3cf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b63acd-d0e6-4de2-8d0e-214dfcd62c2a", "sighting_of_ref": "indicator--a0b6acf0-c74c-4efb-b151-6cd96fb3f3cf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7996fcc-b5d8-4a6f-8e6e-88fcbd049225", "sighting_of_ref": "indicator--7c36c638-04db-4265-a998-1586a9db186f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9deec869-422d-41cb-9410-5a46ddf2a663", "sighting_of_ref": "indicator--7c36c638-04db-4265-a998-1586a9db186f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f635094-a1fc-4da2-8a70-a7c7ede8106d", "sighting_of_ref": "indicator--d5605902-e982-4f39-8f39-96f2913a207a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba29bc80-e985-4a1f-8411-0e5624ed99a2", "sighting_of_ref": "indicator--d5605902-e982-4f39-8f39-96f2913a207a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26126504-0dfc-496d-87f8-9556e2227e2b", "sighting_of_ref": "indicator--ac5173fb-c185-41c4-9535-2e31f4f14dd9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49255a25-e1ce-4768-9935-69ff3e04ac31", "sighting_of_ref": "indicator--7db629ac-d137-4467-ba6d-f69ec9dde18f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9243f2d0-0d5d-4f3e-abb6-063338555c30", "sighting_of_ref": "indicator--33a74d4a-dcfa-412b-8258-1c5a2594f4a2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35cd8349-37e1-4551-a822-4676283f4c46", "sighting_of_ref": "indicator--50e6a2bc-19f9-4eb7-89fe-41fe81c52a6e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3325e9-a416-4d50-9d7a-2b74895a911b", "sighting_of_ref": "indicator--50e6a2bc-19f9-4eb7-89fe-41fe81c52a6e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f72d7d-d862-4fb1-942a-e345d99f1920", "sighting_of_ref": "indicator--50e6a2bc-19f9-4eb7-89fe-41fe81c52a6e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7fb6141-4e25-49c7-8071-5f3f62c04a13", "sighting_of_ref": "indicator--6d6f5eef-454e-40f8-9ebd-f80aa3ef9d0e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c975d720-534b-4fef-8964-d860673aee5d", "sighting_of_ref": "indicator--ab8a9619-6a6a-47e0-8d3b-6899f7a288d7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c360180d-0347-42b5-8d39-6484666968c1", "sighting_of_ref": "indicator--ab8a9619-6a6a-47e0-8d3b-6899f7a288d7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ad7eaf-cfef-4de4-9574-bde28cc92b4f", "sighting_of_ref": "indicator--0867cd78-e6d0-4871-a3cc-cd77b0914c02", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4685e6-414a-487a-bb07-5322c6418dd6", "sighting_of_ref": "indicator--966362ad-dfd0-4cd1-9e30-f7fb9f790fd7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa73649e-6e63-4f4e-bf8a-c8b6d8bddab7", "sighting_of_ref": "indicator--966362ad-dfd0-4cd1-9e30-f7fb9f790fd7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0b2702-4ed5-4cf1-bcd4-106e8e56fee8", "sighting_of_ref": "indicator--966362ad-dfd0-4cd1-9e30-f7fb9f790fd7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1c0336-66f8-4a15-98e2-466a8bf7e38f", "sighting_of_ref": "indicator--4d5296bf-bc02-4db8-933f-f6b19a841596", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eda5427-3450-4457-aca1-cf4d5f307db6", "sighting_of_ref": "indicator--50292f53-2149-4863-851a-93084d31fcd6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6251ae9f-f987-4b90-886d-20e4bad3c8cf", "sighting_of_ref": "indicator--ddda8188-19ab-4752-9a03-3fe8c5b76489", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e95be7-4694-4b55-b97a-f14846f7e6de", "sighting_of_ref": "indicator--ddda8188-19ab-4752-9a03-3fe8c5b76489", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b63a332-bad0-447a-975b-d3f1e2fb318e", "sighting_of_ref": "indicator--eae9af03-48c2-4816-bbec-f6d4271e80fe", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97396332-8a23-4468-b943-ec2ca4cb193f", "sighting_of_ref": "indicator--0bf3d4f0-010b-44c1-8b35-8c7088e79b8b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a9db39-ce99-4a34-9893-15db603b328a", "sighting_of_ref": "indicator--0bf3d4f0-010b-44c1-8b35-8c7088e79b8b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cba222b-93c7-4a42-870d-cd2367cc55c8", "sighting_of_ref": "indicator--53dfaef5-953e-469b-a65e-d660bb2316ce", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e0047e-b3b6-46ca-a65c-4c6b9490124f", "sighting_of_ref": "indicator--53dfaef5-953e-469b-a65e-d660bb2316ce", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377eaa4e-791d-43c8-8466-33b5beb756f6", "sighting_of_ref": "indicator--3e374a1b-20d6-49e7-a09f-849b2099d851", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e125c08-fb95-4034-a5a6-164dc6bf9a73", "sighting_of_ref": "indicator--fb9dbb5e-2d16-4186-aa6c-5dae82e53b90", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c01155-f02e-4e03-af2a-951a4a5d963a", "sighting_of_ref": "indicator--6912ede8-19b0-4e91-a5ae-ea5ba454ddb2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa6aa38-161a-4eac-99b8-7f4f26e7eddb", "sighting_of_ref": "indicator--7891ceb7-dff5-48f9-b971-be1d9fa3debb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e582cb8e-6aad-42b7-90db-2445b74d9b01", "sighting_of_ref": "indicator--1db13365-621e-48c1-9c00-18890b5efabb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11f1fc5-58f1-4796-913d-2039bdcb5628", "sighting_of_ref": "indicator--1db13365-621e-48c1-9c00-18890b5efabb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d646ee84-3ae3-4f19-b3fb-29124b02d131", "sighting_of_ref": "indicator--1db13365-621e-48c1-9c00-18890b5efabb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff393e5a-e713-4096-b365-7803f95dcce9", "sighting_of_ref": "indicator--048a5977-ee47-4720-97c1-2fd8c5aa9516", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b2910e-da47-4c50-bddb-6afb0a42c6e9", "sighting_of_ref": "indicator--048a5977-ee47-4720-97c1-2fd8c5aa9516", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1766fc2-dbcc-4b6c-a76c-b165be5dc044", "sighting_of_ref": "indicator--048a5977-ee47-4720-97c1-2fd8c5aa9516", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e451b5df-6dd8-4289-a6de-746ad346d440", "sighting_of_ref": "indicator--77656268-d09b-4d74-93b0-53f6daba0f73", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f93101-e4a0-4683-8f93-a421edb63ab9", "sighting_of_ref": "indicator--77656268-d09b-4d74-93b0-53f6daba0f73", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d30a7b-4a8f-4321-95be-5a4454675d2d", "sighting_of_ref": "indicator--77656268-d09b-4d74-93b0-53f6daba0f73", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8a6b57-6a98-4f95-9bbc-4d223d707de3", "sighting_of_ref": "indicator--1050a905-c77c-49c3-a2c8-e613baab11e8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c3df37-effa-434a-a1f4-0ad2a877dc27", "sighting_of_ref": "indicator--4b3abb1c-f513-4428-be16-33ae32a30881", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8ec851-2927-497c-9235-b098b85c5eb5", "sighting_of_ref": "indicator--4b3abb1c-f513-4428-be16-33ae32a30881", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fcef03-17d7-4c76-83c0-8c4f98f1bda7", "sighting_of_ref": "indicator--4aa3f092-37c1-485d-ad18-f6882a2660f8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e69af96-e468-4b60-858d-379d44f03e08", "sighting_of_ref": "indicator--32cc5c6d-9c50-4ea2-910d-6c9af5be215c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683a5fae-f7fa-45f8-8dfa-72488bbef24c", "sighting_of_ref": "indicator--76d1c45e-fd05-4b2f-a561-28af4efe2556", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4761f961-91ba-4a46-a953-52e9a7a9dea7", "sighting_of_ref": "indicator--76d1c45e-fd05-4b2f-a561-28af4efe2556", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00af693-3a37-4a87-bcca-910d3f519030", "sighting_of_ref": "indicator--872f1ed5-d06a-4909-b4bd-a8f49807d940", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb2f35e-0915-474a-932b-a848b25d86cf", "sighting_of_ref": "indicator--75919d1f-5bf6-4dfa-b101-43f94ca5404c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877f01c4-2f7d-4709-bd17-c6cac7f94bfe", "sighting_of_ref": "indicator--75919d1f-5bf6-4dfa-b101-43f94ca5404c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579cf86e-750b-4985-bb49-8d265a14d0a1", "sighting_of_ref": "indicator--acd844c8-3a8b-499b-bcac-e82f23b3a133", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766aba84-6fd4-4024-bc00-dd5c410ecc2c", "sighting_of_ref": "indicator--acd844c8-3a8b-499b-bcac-e82f23b3a133", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0256da-c0bc-49f5-916f-5ae392fb0859", "sighting_of_ref": "indicator--acd844c8-3a8b-499b-bcac-e82f23b3a133", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38060304-8ddf-4267-aa81-66350a25fb7a", "sighting_of_ref": "indicator--031ec7f7-17fc-41e5-8839-15cf6390b254", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4dd91e-a229-43d9-8161-b7ef99c05961", "sighting_of_ref": "indicator--6d901331-73e0-4710-bf25-607fd6d73e6f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b7111c-ce21-400d-b476-e73a180c89a8", "sighting_of_ref": "indicator--9c4fd214-3478-4b3e-883c-975b854b339c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47a30db-5dda-4851-9600-619accc424ab", "sighting_of_ref": "indicator--9c4fd214-3478-4b3e-883c-975b854b339c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab06e4a5-e646-48ae-bf97-c2c907a33854", "sighting_of_ref": "indicator--c26d1d73-da4a-4378-8c1f-b7d4fbaa5f82", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad20fd1-6f96-406a-a308-3488d85a293e", "sighting_of_ref": "indicator--83c9af12-f25d-4abc-aca6-ae0174b870d6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92827439-ee92-4783-aa8b-ee93af224af3", "sighting_of_ref": "indicator--64f45212-a22e-4419-986a-a01ff5de695b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e302b295-6158-474f-ade9-5c7ecb000fb6", "sighting_of_ref": "indicator--c8933d53-4b62-48a0-927d-738acfba1acd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f65822-803c-4b45-aede-4fba9a513e6c", "sighting_of_ref": "indicator--922e8054-1e77-487a-b5ad-453a911c1f3e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67c0afd-a39f-40d4-93eb-08fc11c74ae5", "sighting_of_ref": "indicator--43eed0fe-953c-46fe-aeac-c90c82525b30", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cde69c3-088d-47cf-b662-b6e9c739ad0d", "sighting_of_ref": "indicator--32e36e19-89fb-462f-8f19-2518d4bb8386", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256b62fa-d261-45b2-b6b6-cccbff0e3d80", "sighting_of_ref": "indicator--c7eae9f3-7e79-410b-a5b8-e6def2b132be", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e59f29-173d-42d3-a70c-6a0ad5e1a483", "sighting_of_ref": "indicator--64e04cef-c279-4a90-a967-eb82864acda9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbaaeb20-e835-4da6-acb3-d9c85710e1c4", "sighting_of_ref": "indicator--80855f10-0c67-4608-bdfc-b1f0f88e8562", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dbfb9b0-9421-4d6f-873c-d3624f8fa92e", "sighting_of_ref": "indicator--80855f10-0c67-4608-bdfc-b1f0f88e8562", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de39f67-028b-43de-ad35-5025eeba5101", "sighting_of_ref": "indicator--dd495b6e-988d-437c-b6d5-3c767ad651c9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ab085f-6c8f-4866-803d-24714f4f3dfd", "sighting_of_ref": "indicator--47324832-8bdb-4d25-9e5d-52bf90afa3a7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7d87fb-02e2-47a0-b899-6c82823fb49f", "sighting_of_ref": "indicator--670773e6-d6c4-419a-8cb9-e2d18d2c4982", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d29e03-9772-4ada-89bf-4256f84e0b65", "sighting_of_ref": "indicator--670773e6-d6c4-419a-8cb9-e2d18d2c4982", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54385976-69cf-4d89-b95f-2817fe73e280", "sighting_of_ref": "indicator--670773e6-d6c4-419a-8cb9-e2d18d2c4982", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8b5e4c-f1b4-47da-901b-a2a949bc7bed", "sighting_of_ref": "indicator--fc2e18e3-d4c6-425f-b8b1-e922b7a95859", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8fc2051-3345-419b-aa99-8d0941601e9f", "sighting_of_ref": "indicator--fc2e18e3-d4c6-425f-b8b1-e922b7a95859", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c36a01d-9faa-437d-9a89-943f74e53316", "sighting_of_ref": "indicator--e6b2b218-ce88-430d-b85d-a583fb84bd06", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8633ddce-37af-49c8-8f4a-475c022e6f3a", "sighting_of_ref": "indicator--e6b2b218-ce88-430d-b85d-a583fb84bd06", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b48bb17-a1ef-4d5a-b42a-3f2698adba10", "sighting_of_ref": "indicator--e6b2b218-ce88-430d-b85d-a583fb84bd06", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8337e580-1f34-475b-84af-839a3587e6e9", "sighting_of_ref": "indicator--e40297c6-6f73-4a31-a67a-529fb9915ace", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e0f3fa-4cac-49a5-a6f6-eecd11c7316b", "sighting_of_ref": "indicator--e40297c6-6f73-4a31-a67a-529fb9915ace", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68598c23-0e8c-41b1-9d57-171ec13e7da9", "sighting_of_ref": "indicator--e40297c6-6f73-4a31-a67a-529fb9915ace", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf54f9d0-bc30-42fd-8a6a-b0f604bf273b", "sighting_of_ref": "indicator--6a0026e3-0c4a-49d3-b2d1-4dbba1de2dd4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e854f2ee-1127-44b2-a258-7d5649801134", "sighting_of_ref": "indicator--6a0026e3-0c4a-49d3-b2d1-4dbba1de2dd4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc2c300-0da8-460c-aae9-7a6f4d532f3c", "sighting_of_ref": "indicator--6a0026e3-0c4a-49d3-b2d1-4dbba1de2dd4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733f658d-8704-4369-bbc7-37bcdf4b68ee", "sighting_of_ref": "indicator--f19c6d3b-5c0c-49bc-be4b-da6073e31881", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873061d5-5521-488e-82ae-802c77426833", "sighting_of_ref": "indicator--f19c6d3b-5c0c-49bc-be4b-da6073e31881", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345a6d2c-780c-490b-a9b7-a3e364b879fa", "sighting_of_ref": "indicator--f19c6d3b-5c0c-49bc-be4b-da6073e31881", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b63486-ac6f-4c79-b728-ff9d0f2fdcbd", "sighting_of_ref": "indicator--1627f088-204b-4d95-88aa-c8f07303faf4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb6dbb3-ccaa-4dcd-b7e3-1f303a91ccdb", "sighting_of_ref": "indicator--1627f088-204b-4d95-88aa-c8f07303faf4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2a06a7-026e-4aff-a063-1ed01c7abe25", "sighting_of_ref": "indicator--c314eb2a-9ee2-4d72-a0c8-73de12c75157", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d157d68d-a78b-49dc-a05c-b25db75e7833", "sighting_of_ref": "indicator--c314eb2a-9ee2-4d72-a0c8-73de12c75157", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7019363c-961f-4e88-83f2-5271af7a2804", "sighting_of_ref": "indicator--c314eb2a-9ee2-4d72-a0c8-73de12c75157", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868f9759-e0a6-4d17-a09a-d25204ea51f8", "sighting_of_ref": "indicator--31a39229-3d49-41bc-b26d-14f30dfecbff", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef332eb-94dc-4fc0-a1de-80d1ceddd3b1", "sighting_of_ref": "indicator--31a39229-3d49-41bc-b26d-14f30dfecbff", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266d76ee-c414-4b47-abdb-dbd784df5477", "sighting_of_ref": "indicator--31a39229-3d49-41bc-b26d-14f30dfecbff", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5073afa-ac3a-43f3-81ea-07c547d2fc64", "sighting_of_ref": "indicator--f72e79c7-f177-40ef-a9b6-276e5dad46fc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa78da34-5056-45bb-a84d-145e2016ed4a", "sighting_of_ref": "indicator--f72e79c7-f177-40ef-a9b6-276e5dad46fc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aab5b62-f0c1-4f63-8a3e-1705b44b3a6f", "sighting_of_ref": "indicator--2394fe6d-b8b0-4f2e-b571-142434cfc827", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ce8b71-5269-41fa-9045-28574bc9e513", "sighting_of_ref": "indicator--2394fe6d-b8b0-4f2e-b571-142434cfc827", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a174c773-f78a-44a7-bd3c-d6a7a55171b2", "sighting_of_ref": "indicator--2394fe6d-b8b0-4f2e-b571-142434cfc827", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a2faaf-13db-43a6-be64-3935bb1bffeb", "sighting_of_ref": "indicator--7b8feb84-314c-4298-8169-944cab2499de", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df678dda-a592-4f70-aac8-04737bf95293", "sighting_of_ref": "indicator--7b8feb84-314c-4298-8169-944cab2499de", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ee2897-1024-41de-acf3-ae07bb340426", "sighting_of_ref": "indicator--7b8feb84-314c-4298-8169-944cab2499de", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5ff5e5-74c5-4f8b-8c25-ad17f85a9670", "sighting_of_ref": "indicator--c2cb808d-8aa5-4b9e-8d64-ce759a65c5aa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a251207-cafc-475d-965d-b24bd1d66852", "sighting_of_ref": "indicator--c2cb808d-8aa5-4b9e-8d64-ce759a65c5aa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13082374-09fa-4a60-bcf3-cd4d5d8319e4", "sighting_of_ref": "indicator--c2cb808d-8aa5-4b9e-8d64-ce759a65c5aa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e13246-188c-4198-9842-07389877296e", "sighting_of_ref": "indicator--73751936-eb47-4ad8-8efd-28fa236800e8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82ccb7e-be88-47e8-aeea-5aa5949e0c54", "sighting_of_ref": "indicator--73751936-eb47-4ad8-8efd-28fa236800e8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d55b49-1f77-49d5-a596-54d7967e0900", "sighting_of_ref": "indicator--09d953c0-1c1e-4322-a2d7-7903c8c463e8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10b0aa0-3890-4bfa-b773-4f84e7ebc8ae", "sighting_of_ref": "indicator--09d953c0-1c1e-4322-a2d7-7903c8c463e8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a89f20-ff29-454c-b43a-f2e69a2b3573", "sighting_of_ref": "indicator--09d953c0-1c1e-4322-a2d7-7903c8c463e8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed1b696-ec68-43ce-982d-b5c0e3602e31", "sighting_of_ref": "indicator--11c697c6-3dd9-48e7-99f5-2788decc094e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d18a0c3-6641-4542-b081-9b9cf474be32", "sighting_of_ref": "indicator--11c697c6-3dd9-48e7-99f5-2788decc094e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc41893-94bd-45e8-9d91-b8540bcf5259", "sighting_of_ref": "indicator--11c697c6-3dd9-48e7-99f5-2788decc094e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2a70a5-bb9d-46a5-9b28-c8a5571468c2", "sighting_of_ref": "indicator--a9bfe307-9db4-4978-a4d2-c377edd6c1de", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812e45a6-9fdd-4a1c-b067-cb89cbfebd08", "sighting_of_ref": "indicator--a9bfe307-9db4-4978-a4d2-c377edd6c1de", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8668cad7-c926-4038-a529-95a5e3894b85", "sighting_of_ref": "indicator--cd9e4291-5d86-461b-a2b5-1bced1b2ca91", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ffc7dd-d83b-43e5-9a2c-17f58ee5848f", "sighting_of_ref": "indicator--4cfc680a-0efe-4a45-bfea-647ce713d9c0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75760b6-3697-4e97-a8df-0d07f13ae3b8", "sighting_of_ref": "indicator--96150c91-845e-4969-b91f-6c34b7477ddd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121e1b06-a98d-4cda-805e-e70ff01b2f2d", "sighting_of_ref": "indicator--42e862e3-d26a-4457-868f-0c1555115d38", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c752a034-d29b-49aa-9593-fb12238ee24b", "sighting_of_ref": "indicator--be36cda3-50c6-43cf-9200-a44c45e67231", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ecd722-1298-470e-9dac-05b44fb4522b", "sighting_of_ref": "indicator--e462b725-cbae-4fb7-8baf-01b8fcc58af0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e619b201-4375-47cc-9a32-17387db9e658", "sighting_of_ref": "indicator--79d15721-a8fd-4f4f-b605-24b9e59b4a98", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf8b2d7-c745-4d82-9869-813dc6dada6c", "sighting_of_ref": "indicator--c0411cb3-9c5d-4078-bda1-e8fb100030a5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b1898a-4036-4801-b42d-3b50a8971121", "sighting_of_ref": "indicator--c0411cb3-9c5d-4078-bda1-e8fb100030a5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3380840-0089-49a6-a325-c6fb7198b795", "sighting_of_ref": "indicator--7f99fcc1-81d0-4752-9b86-b26dd5347471", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc764199-d65d-4b2c-9eaf-ace8bb050ae5", "sighting_of_ref": "indicator--7f99fcc1-81d0-4752-9b86-b26dd5347471", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7874f95-0b93-4261-b221-aea72b14fbd9", "sighting_of_ref": "indicator--9992cfd7-c0a7-48e7-a1ac-2aa4950420b4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7daa2c-8962-41d7-abc5-0905ecd48638", "sighting_of_ref": "indicator--5f7eca8a-407d-4a9e-ab4b-942cd431c2f9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843e6220-2696-45ab-afbe-ee95be552adc", "sighting_of_ref": "indicator--5f7eca8a-407d-4a9e-ab4b-942cd431c2f9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba05aae0-14ff-47e7-bf6a-441079b51802", "sighting_of_ref": "indicator--c0a6c4d9-baa9-4188-a40f-2b75efaef7a3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2375af-e4d9-408f-b97a-65e236c25b90", "sighting_of_ref": "indicator--82bb3dda-0bf0-4005-b010-104e6363e64a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fcfafa-9d19-4a66-b97e-b7ef1d174055", "sighting_of_ref": "indicator--e6e92109-2884-4516-8150-9734411a5f41", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ace1669-9738-46ef-88f4-d34725edebe2", "sighting_of_ref": "indicator--553b4124-ce48-47fe-bcef-dee3fef15489", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3999ffb-8693-4f73-81d8-6592fe34e009", "sighting_of_ref": "indicator--a9f22536-259e-4085-bb3a-fad83f3eef87", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838c5c95-6234-45bd-8fa5-2aab2372d7e6", "sighting_of_ref": "indicator--515beb89-c4f5-4d9f-b8ca-e8f3726d6282", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2a5a1d-bfd1-4b06-a59d-8a4693b7c7f9", "sighting_of_ref": "indicator--76f70f28-3f00-4aed-9b95-d4e68fefbf08", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16c4c00-dd2a-43c7-9de0-1fdcf8b6b409", "sighting_of_ref": "indicator--76f70f28-3f00-4aed-9b95-d4e68fefbf08", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef11c990-85e6-4e2a-9c79-7bb575c289c4", "sighting_of_ref": "indicator--c239e792-d6ff-4533-8b04-141205627bd0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1875fb-fd38-4022-adc7-e855f7d8629c", "sighting_of_ref": "indicator--65c3a8cc-51b8-4e6d-8e9c-f35c20978b7f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b63ba8-76fb-4d50-a5b2-9a627af48a0b", "sighting_of_ref": "indicator--cdf1b113-5f17-46cd-8bec-8dbed8d530ec", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b328176-854e-4d58-b092-1bc704a1a9cd", "sighting_of_ref": "indicator--feeab002-292f-4a6e-b361-7817c9ed36ae", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c398a50-85b2-46e8-b81f-04b394109a5c", "sighting_of_ref": "indicator--fbb4adbf-e74d-4969-a3f3-a3a8c9002c67", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bab5690-e989-4a2f-8355-e45f85e8b27e", "sighting_of_ref": "indicator--fbb4adbf-e74d-4969-a3f3-a3a8c9002c67", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d01191-3883-4d13-807e-eb38edcf04a7", "sighting_of_ref": "indicator--c8bf4a12-925e-4ee4-85a0-df16ac6bca7b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1911f1d1-bf06-4d68-afd4-4ad82e44397a", "sighting_of_ref": "indicator--ad92cb91-1057-47d6-b143-6bc73f8c4123", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64fc1444-c6d6-47e4-8f33-d8eb39df91f8", "sighting_of_ref": "indicator--ad92cb91-1057-47d6-b143-6bc73f8c4123", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b755a5ab-644b-4720-9497-f707fea3771b", "sighting_of_ref": "indicator--a70762f5-ce8d-445d-ac18-f3c775b57f01", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ca59f0-344b-4c38-92b7-d21f92acce99", "sighting_of_ref": "indicator--a70762f5-ce8d-445d-ac18-f3c775b57f01", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d0467e-7c33-4a48-a72e-64305752eba3", "sighting_of_ref": "indicator--a70762f5-ce8d-445d-ac18-f3c775b57f01", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e7c442-c881-4e3f-a9da-6f790f074a8e", "sighting_of_ref": "indicator--66dfb2a8-f514-43f1-96de-835d87f29b56", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729e7dfb-5e85-4ebf-8152-87485c41e343", "sighting_of_ref": "indicator--cce997d8-6987-41bc-a788-3ed97d857669", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed073dc-54c9-45d5-b400-80131af679bc", "sighting_of_ref": "indicator--cce997d8-6987-41bc-a788-3ed97d857669", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f9faae-5835-4c8c-a8d7-be1c673338d9", "sighting_of_ref": "indicator--cce997d8-6987-41bc-a788-3ed97d857669", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918ccf0d-6840-439b-bb76-d4fafe9d90ee", "sighting_of_ref": "indicator--cce997d8-6987-41bc-a788-3ed97d857669", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7d6839-8814-48e9-9d07-8460b1650830", "sighting_of_ref": "indicator--6bc0904f-005d-4347-bd0c-d0060548864d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d3b0a5-6aeb-4603-8346-62f4828bbdb1", "sighting_of_ref": "indicator--6bc0904f-005d-4347-bd0c-d0060548864d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e35aa9-fb56-4508-8139-e3f7856a4b06", "sighting_of_ref": "indicator--6bc0904f-005d-4347-bd0c-d0060548864d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0dd1412-b6ff-4105-a7d0-35f18c9cb106", "sighting_of_ref": "indicator--6bc0904f-005d-4347-bd0c-d0060548864d", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11657a3-d8e5-4c69-9102-dae6d0b2364d", "sighting_of_ref": "indicator--916f41c5-5be8-4022-9bbe-7fb7e7c47ad2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc188a8-2377-430b-b9ff-2931258fd557", "sighting_of_ref": "indicator--916f41c5-5be8-4022-9bbe-7fb7e7c47ad2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d564d1-46ce-4653-a3d7-354de69da347", "sighting_of_ref": "indicator--034f16f5-d14d-482f-8b1c-029f8a65cdef", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa4c7ab-8719-4aad-ba83-dbbd3df085ee", "sighting_of_ref": "indicator--034f16f5-d14d-482f-8b1c-029f8a65cdef", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a36153-6717-434e-b37f-f49e9b94b78b", "sighting_of_ref": "indicator--7197edc3-7814-440f-81a7-f23f7048cf61", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7e8c84-05b8-419a-8aab-731ab1841bdc", "sighting_of_ref": "indicator--c2db359f-730e-425b-bfee-b53c5adb0103", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed347e5-2b88-4ff5-9af4-4ec468d77705", "sighting_of_ref": "indicator--55c46ac1-80c2-4840-a0b4-035363703368", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd84d3e1-4c0b-4f67-bc1a-b2d446d2f7f7", "sighting_of_ref": "indicator--83ca6454-345e-4007-815d-d4edc3b14298", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85be3c1b-9442-4823-bcd5-f4901a1cbedd", "sighting_of_ref": "indicator--02115b48-96ff-434d-b923-fe0e0e2f17a4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5694db98-5271-40f0-872e-edce64389194", "sighting_of_ref": "indicator--02115b48-96ff-434d-b923-fe0e0e2f17a4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025cd519-35c9-44fe-bb96-75f53b7a9edd", "sighting_of_ref": "indicator--d41547eb-08f8-4ea3-b3ba-7558845db248", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88386c51-b71d-4ad3-9c1d-9848b3a0d0b4", "sighting_of_ref": "indicator--7e346025-a786-4248-afce-58de880df0de", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7441fc30-f811-4d8e-b91a-81ac39beedd1", "sighting_of_ref": "indicator--d21dfec1-62b6-46e5-b0ce-f8fc6d86aa9b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0dcbc6-385c-4db4-b353-fb568ca15603", "sighting_of_ref": "indicator--7c2d1624-2bd3-4082-8cf8-1d817d06adb3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56d0c38-60fb-486a-bd27-221b905aaefc", "sighting_of_ref": "indicator--a1d31f0b-cd30-49e0-a7ef-8d021d3c677e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23429efc-2a1d-4fcd-a3e8-6480ec58948e", "sighting_of_ref": "indicator--d3968130-f8e1-4e52-9982-9095801fecde", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18816190-0bb1-4395-86f6-5cd7b406c4f3", "sighting_of_ref": "indicator--db6de514-da10-430b-829f-7c960ee8faf3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ae834d-bbd3-442d-b7d6-23821cb23ef4", "sighting_of_ref": "indicator--9920b457-ce2e-4647-bc49-c49c6e381862", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27cc55d3-d3bb-4067-8025-54ae3d9f53f2", "sighting_of_ref": "indicator--4c746e9b-3ed0-46be-a219-f68af495dc05", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f39b32b-ad31-4f03-937b-ae1a8cf3cc52", "sighting_of_ref": "indicator--c7f07276-7bd7-42ab-9031-40fe31798a24", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e9f54b-a453-446f-b24c-6da60fecd269", "sighting_of_ref": "indicator--0afcb6de-2b85-46a8-a062-27ad68c20572", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1193c12-4b18-4eef-8c33-e1793e29e7d5", "sighting_of_ref": "indicator--5de64c90-912a-4a87-a436-27f894aa143f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ddf1806-a344-48b9-9640-eb63aa319dce", "sighting_of_ref": "indicator--8a386ab8-790d-4d15-b97d-9464dbc07082", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86df8709-44ec-4cf6-bde1-f7f4f7a0b0bd", "sighting_of_ref": "indicator--b276915a-6b80-4a95-a947-00a69a082d71", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973596f3-3804-4762-a8e5-60a6e0bd9bef", "sighting_of_ref": "indicator--f955de16-7fe5-44bf-ac6f-f3e4ca2de8a0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8b2fb8-ffcb-4e5f-925f-8ff8f525e930", "sighting_of_ref": "indicator--97957f84-8fdb-44f0-ac3c-017506ce2b28", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff225fb-a23b-499f-bee5-1480bd7d217d", "sighting_of_ref": "indicator--b41ebbe7-cf73-4358-a74b-9310b8b964c1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9fbc031-9308-45f5-b997-2e780e38483a", "sighting_of_ref": "indicator--64c6d048-451c-4535-8824-f90807009e0a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fb9a4a-72d3-4f3b-a54e-c7022753db28", "sighting_of_ref": "indicator--ebb73a8e-74bd-4650-b469-4ab545d48e45", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b53856-97c4-4595-bf1e-e234a94e8dfb", "sighting_of_ref": "indicator--3452ca13-6ea0-40ba-9b15-ed3ce36d6cfa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9768e2e-2451-41c6-b6da-7d2132d4394e", "sighting_of_ref": "indicator--11e8eebc-03d3-4f1e-91d0-bf554d9294f9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741da5b7-79b7-4dc7-b3fd-74a75264e380", "sighting_of_ref": "indicator--edcf453d-a3fa-4b65-a5ea-3b255bd85331", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394234b7-6b2b-49ef-850b-ba9f9f0a85fd", "sighting_of_ref": "indicator--9228b22f-418e-4685-acfd-946013fc0753", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be8f3f2-ba3a-4975-93f7-c534ce4d244b", "sighting_of_ref": "indicator--edc60750-67b8-4718-8595-b0d220e6cc08", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c734b80a-c14f-4f92-a0c7-3849f41305af", "sighting_of_ref": "indicator--f3d814ba-ce30-4849-b908-e0d54c9cd696", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1d2c54-daf6-424a-b1d0-bfc487c0b5fd", "sighting_of_ref": "indicator--f3d814ba-ce30-4849-b908-e0d54c9cd696", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b925b259-39ed-4351-9c50-9b90fb933ea6", "sighting_of_ref": "indicator--a649f3d6-9830-418d-b14a-858adeaa6f9a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049d05df-ce13-4b4c-b062-9711fea65f1d", "sighting_of_ref": "indicator--5a43c270-285c-4c94-b7f2-721f68e3b7a2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ad69b5-5bb7-4935-bda2-108b68856b97", "sighting_of_ref": "indicator--4eec6bf5-ed2c-4636-8a25-0a83b03a998a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b7d108-7167-46ad-9554-2efd4916112b", "sighting_of_ref": "indicator--8a281586-83f8-416e-b228-428fec04e7f3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd5e308-1a04-46ec-9607-2afe562e0515", "sighting_of_ref": "indicator--839fd0b3-d17b-4d02-adcf-6d66a22459c1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e257e474-099b-4378-bfa4-dc1e7dc45714", "sighting_of_ref": "indicator--18e47d73-0a2c-4f52-ad41-99a886f7fb18", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291f663e-29f5-4f7a-a71e-c14eb7cf4c00", "sighting_of_ref": "indicator--503de102-81e5-4b4c-a564-1afbb7705045", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742f355b-6d33-4f11-9e17-1e62980430b2", "sighting_of_ref": "indicator--42062b3b-697f-4bb8-b91a-421f882151e0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5168ace8-ee8d-4d94-b9e5-f6e6df39d418", "sighting_of_ref": "indicator--6a0dabc5-cf56-4bfa-bcf9-61778ba90a0c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659bb2a8-32e0-46ea-94bb-c0229f78d600", "sighting_of_ref": "indicator--03f66312-3488-473a-8d54-c5686bfaa65e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a1b720-ac13-4d15-8878-5adcbca77e41", "sighting_of_ref": "indicator--de11695f-66f2-452e-81c6-365cbeaa266d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad700e10-15e0-47a1-aa07-e4989fb701d4", "sighting_of_ref": "indicator--f314b737-1f62-4142-b239-638eea15c77e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceed9d4d-82be-4960-b9ef-05612a9290da", "sighting_of_ref": "indicator--f314b737-1f62-4142-b239-638eea15c77e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033dce08-030a-4cd4-8c0b-1b62924ae849", "sighting_of_ref": "indicator--ff0c08b4-c98c-47cf-ad1a-bd7819f311ed", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bafe1141-a4a6-4228-8ed2-196d24889085", "sighting_of_ref": "indicator--d7dde4a7-5865-4b73-a2f7-9e5d58ddd2c1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67330156-a59a-4b0c-a9ec-99d471f2163a", "sighting_of_ref": "indicator--969737ea-29f9-400f-a71a-340c7a3ef77f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4cbdcfc-4dd8-4529-90c9-f7fb98dd7955", "sighting_of_ref": "indicator--e57ec4a5-355c-4ee9-9176-b295df46ffbb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b960db9-b7c3-4cbc-8f64-4f2c447fdc58", "sighting_of_ref": "indicator--cfc130a8-5cb3-4377-a3ff-644c9567d7f3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6518f6-c942-4dc9-b1b5-fab2d4fe9a28", "sighting_of_ref": "indicator--cfc130a8-5cb3-4377-a3ff-644c9567d7f3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23a135a-7661-4606-90b4-315f1382ae73", "sighting_of_ref": "indicator--00687e00-4b01-4d3a-beb2-f5b0248a9863", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e86b553-367a-4e78-a708-83f647887678", "sighting_of_ref": "indicator--2d6a5bb1-a694-41d0-a812-98c1229b6fba", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eebc9ad-0bcf-4a02-99f2-c98f07d79148", "sighting_of_ref": "indicator--5c41d6e5-c5d0-4d99-a492-03b570c33e60", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58dd5430-2205-47bb-a6eb-548702199036", "sighting_of_ref": "indicator--1f2e0f5c-453e-4a85-a6ad-48690a5a94c2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c479c27-68b5-4295-8381-54359d83d38a", "sighting_of_ref": "indicator--322fd2c1-2651-4c64-9fe7-f919890e49fa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5579ed-352d-4985-9a15-554e0d598ea1", "sighting_of_ref": "indicator--efedbca0-b98e-435c-a2cb-f8c678e7be50", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0320cff-8a27-4b81-a71b-0c83ffb8c53a", "sighting_of_ref": "indicator--2db08e37-7440-4cd0-ae23-931743ac1287", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df57a98b-2598-4467-83fc-9913b5094988", "sighting_of_ref": "indicator--b9cf0339-b29c-4dd5-874c-ea862e89620d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22c7d70-2256-4eaf-b8ee-26c7dd07dcaa", "sighting_of_ref": "indicator--b9cf0339-b29c-4dd5-874c-ea862e89620d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd45d84-bcc4-4b36-9b03-ad3582fdb894", "sighting_of_ref": "indicator--318574c6-b3a7-4a4b-ae0e-13e11f3286ac", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce58844-c700-4870-8029-4247fa5ed7df", "sighting_of_ref": "indicator--cac028b0-73aa-47df-b919-3b905d74bab6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062bdc31-c931-43ef-9c9f-bd129ddba153", "sighting_of_ref": "indicator--b6d12e96-77b9-430c-9b59-c98c3ace74b9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1431081a-c1e5-40cc-b6f4-8bdf01813ce9", "sighting_of_ref": "indicator--9076f5ab-0d4c-46e7-b162-1de3b7cb27fa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fd6287-2815-475c-a465-0550f64547d1", "sighting_of_ref": "indicator--3bf2b5f2-8cf6-4a68-8660-9688901ca313", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dc1942-d14e-4333-96c6-9a1e23b72640", "sighting_of_ref": "indicator--3bf2b5f2-8cf6-4a68-8660-9688901ca313", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054042a7-9342-47fe-b876-3681c3435469", "sighting_of_ref": "indicator--a94afdde-5ede-4515-8d4c-3d09982e8589", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942d26a0-35f7-4f78-b0e3-386c8386515a", "sighting_of_ref": "indicator--bc3404a7-5e9c-454a-bc0a-972dee202ed6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69be2bf1-5fc1-4531-a78e-1d9b414e6f88", "sighting_of_ref": "indicator--861ce5d9-0739-4c54-b3fa-b2eeb28be79f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b022f44c-25ab-473f-8e94-6e254b88aa7a", "sighting_of_ref": "indicator--c3a87880-0cf7-42ce-91b2-978b3dc81c7a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5fee36-f669-4d97-a7d0-ae04a7dc4f7d", "sighting_of_ref": "indicator--c3a87880-0cf7-42ce-91b2-978b3dc81c7a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24dd181-a82b-471e-a586-3fe1a98233ac", "sighting_of_ref": "indicator--c82f6f08-5526-4e36-8174-11bb800c9385", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89e503e-446f-447e-92b5-e0de2eef6d4f", "sighting_of_ref": "indicator--ab599d4e-ce7c-4eb4-bf75-50a481a14079", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe239941-22b5-4281-b26e-8e4571b81edb", "sighting_of_ref": "indicator--b191c25a-bfa2-4e92-b8d5-5f0c1c3fca46", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955c7afb-0a60-4bb0-a817-5c35dc39de98", "sighting_of_ref": "indicator--3d206f15-fe9a-463d-bb1c-5b6749040096", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d44ac95-5a02-484d-a489-f6e6c972e19a", "sighting_of_ref": "indicator--4a647cfa-7787-4ad1-84d6-4516c722ffbf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c5c2d9-dc0e-4c7a-af5d-a1b96a5a4b48", "sighting_of_ref": "indicator--162e3948-ecb4-40d3-84dc-8ca42c1b9f57", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a67515-7cb5-4441-820d-0099b57ee78e", "sighting_of_ref": "indicator--3116ae2a-4d55-4f61-ac4d-ca20c947828c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b60f657-7deb-43d0-b385-9e3698e7dc13", "sighting_of_ref": "indicator--a14e8ff4-3986-4638-bb3f-edd640b2c62c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414f1038-7540-4a66-b21a-d87b71a8893f", "sighting_of_ref": "indicator--7eaaf6c2-57e2-41ea-ac12-056e73ed260d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc6675c-14f9-4b74-9920-c5efcd4961cb", "sighting_of_ref": "indicator--5fb5755f-5fb3-40a2-b2a4-fa678af04f73", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afc9490-2afc-4750-a064-7466a55da436", "sighting_of_ref": "indicator--c25f0dbb-670d-4dba-8f77-c0f4f9d0c1b2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8336d77f-f986-4234-8d42-5a07a6c38bb2", "sighting_of_ref": "indicator--8f39dd2b-2b18-460c-bd9d-bf243256c260", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b8b675-6500-4767-889c-dfa28cdb6c78", "sighting_of_ref": "indicator--c40c6a9b-5714-4187-ae92-f9db5a45bb9f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caab001d-310b-468e-8cab-9d9e4633b070", "sighting_of_ref": "indicator--b5770032-088d-4b6c-af98-9d9b569337d9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bea0f4-afd6-4f62-acd7-5b8020994ea0", "sighting_of_ref": "indicator--256fdc2d-500a-4199-9c23-ca3f53648c46", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f69a282-727c-483a-b86a-6f53e7767cae", "sighting_of_ref": "indicator--5d99d109-6813-44af-b265-b254ef75be96", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2348183-43ac-47bc-bca9-7c429817db99", "sighting_of_ref": "indicator--bf0a60af-a1bb-4d52-9256-7a2a5a7b0582", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f67b9be-558b-408f-9b26-25f0a4d8a63f", "sighting_of_ref": "indicator--add5f52b-870a-4c9f-9600-756c4c4079e7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39918f19-faec-471f-80b9-3a0f804c4bcc", "sighting_of_ref": "indicator--7f4caf3e-766f-49c0-9866-740d205d3cdf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1a3601-f85a-4b31-80f6-2f617fedce7d", "sighting_of_ref": "indicator--65ecd382-56a6-4ee1-ac08-0a72294f5463", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac0ca86-68f0-4d88-9294-1b5062416b70", "sighting_of_ref": "indicator--08ae747a-a8bc-495f-97ee-f182ab43096f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33217d0b-cbaf-43f0-b05a-90c77585bf3a", "sighting_of_ref": "indicator--08ae747a-a8bc-495f-97ee-f182ab43096f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607d67f7-0892-40f2-9b32-81946605717b", "sighting_of_ref": "indicator--cbeb7706-f9ba-438e-8ba1-fdee4a8c170c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f272b0e4-ce9a-418c-b211-41618c674d0a", "sighting_of_ref": "indicator--f1d62e04-e253-49df-86f2-2dfd3ce5d186", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e395be6c-68f3-4b8c-a11d-ea77f5106f49", "sighting_of_ref": "indicator--d9d04cfc-a1cc-420e-9e0e-7167944cdf56", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17f4e00-32f1-41d5-b795-8df9ac82e947", "sighting_of_ref": "indicator--ad9456b5-c686-4b35-b979-f14f75900ccd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904d9c52-81ac-4312-bbd7-f560065c0dc1", "sighting_of_ref": "indicator--23a59864-56a9-443e-84fa-0993f785ab4a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17949eb9-a3bc-4647-8325-119207c3eb99", "sighting_of_ref": "indicator--352da80c-7b5f-416f-9a99-93f66f9abcd4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4f9743-a048-4835-844a-7e9237bceebe", "sighting_of_ref": "indicator--352da80c-7b5f-416f-9a99-93f66f9abcd4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac79ddc-8c92-43ec-93c9-87e9aeefe111", "sighting_of_ref": "indicator--0e1bdb6a-f592-494c-bcfd-2967b912e570", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e1acaf-7114-4daa-96c8-fabe8aa20c87", "sighting_of_ref": "indicator--ac2dcf80-9171-41ea-96e6-4c6d8cb86f06", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1c8fae-8d1e-4454-b880-7920032fb07f", "sighting_of_ref": "indicator--d610783a-1149-4c50-8401-c1a484d2e6fd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ead954c-c9df-4a45-ba57-314431e12771", "sighting_of_ref": "indicator--51ee3d5b-bd72-40ab-a71a-268d8dfa7350", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ee3e70-fd3a-4339-b929-3e3d2e67cf62", "sighting_of_ref": "indicator--0f0d46a3-5529-4a26-a9cf-237cab5536e4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0221e482-c31d-4ad9-a473-fe4c2ebaead8", "sighting_of_ref": "indicator--bb06b490-d578-434d-ac14-bc736233ef65", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb746b63-ef60-40b7-859b-3988b28d3428", "sighting_of_ref": "indicator--d68ec8a7-c5cc-4595-990a-b63816e6c3c5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1fd994f-6771-4226-b178-1daf36eb5ebe", "sighting_of_ref": "indicator--a1289642-b588-4238-8db0-8cbaed227dda", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d99133-5dbf-4491-bce0-56249a8595b8", "sighting_of_ref": "indicator--22b21e52-93e8-4486-849d-00b13fcd8974", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72925824-8e59-495a-a427-5b92ca289fd8", "sighting_of_ref": "indicator--512d7cc1-080c-4d2e-85d3-2bd3b8bab206", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7202573-880a-478a-9b0f-f53b6d439dc5", "sighting_of_ref": "indicator--2404722b-465e-4373-8c32-0345c7aeec6f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3dba4a6-dd47-4755-a5ff-b97882ec1ade", "sighting_of_ref": "indicator--ea4f0d60-57be-41a3-9588-5b11b5e7d6b9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f32d09-012c-4e9a-b2ca-201476005cfc", "sighting_of_ref": "indicator--78fe1110-3423-4574-a527-1d568f794903", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da807c76-b86f-433b-9c8b-15c7959fbc9f", "sighting_of_ref": "indicator--049c865b-0852-4d0f-be41-0d5cea1793ab", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d1abd5-abd9-4024-9f13-45d7cf705327", "sighting_of_ref": "indicator--b971b33d-c35b-4c4c-9ca1-790e727dcc30", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6085420a-d328-4933-b66e-93a0a2daf1be", "sighting_of_ref": "indicator--4d57c1ac-8799-40c0-8905-02353656b4a1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6505c57f-f741-49a7-8fac-2056148c0b0b", "sighting_of_ref": "indicator--1afd635d-3f9d-49d2-a11e-b33d3b51ec18", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9546ede-2a84-4907-b440-68027dd58fe8", "sighting_of_ref": "indicator--4e9050eb-202b-4e96-aed4-b3394e0c1215", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16393388-8316-477c-b730-7d6b5622ef65", "sighting_of_ref": "indicator--18ee83b8-3d13-4116-935f-0e655af1002b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf6ecbb-34af-4a82-9a6f-6d6dae56fa20", "sighting_of_ref": "indicator--e68c10f8-d047-44be-9ab8-2ce46a3c46ff", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00024407-e008-44fe-97ca-1f19d11ad5d3", "sighting_of_ref": "indicator--98664c4e-0299-47b1-ab8d-903dc97968c3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d9901a-7f4d-4b12-a7fd-22d0c5f62154", "sighting_of_ref": "indicator--fd39dd94-329a-4a7d-af1f-8f01af503c6a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af97bd8-b200-4c52-a118-e4089cbb6fbc", "sighting_of_ref": "indicator--8d000791-a42e-49fb-8093-021b31a4e28a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2bbf2b-4307-46be-a19a-302581794863", "sighting_of_ref": "indicator--01b8646c-8531-43f7-869b-5257a5c86c0b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f14f1f-cacb-4d38-a851-e15a60a9780c", "sighting_of_ref": "indicator--52a89f80-4940-4b08-94f3-5e0d477fd5c1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fcb0d3-2e50-4825-b5b3-866d9ad87ab6", "sighting_of_ref": "indicator--fde77597-1c16-478f-a300-9f52d7ed4475", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b58672-5274-4797-b179-a01ede365e5d", "sighting_of_ref": "indicator--0846dfde-f2c6-4d2e-8bc7-7baa7b82651a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b89c6b-8990-4c73-b28b-d4c9c66f6968", "sighting_of_ref": "indicator--0846dfde-f2c6-4d2e-8bc7-7baa7b82651a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6572a52f-a795-497f-aa07-ab4b52e8a719", "sighting_of_ref": "indicator--2adb19b5-b462-4de9-98e0-6c6717bbad00", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57108903-e63c-4e54-a9d6-7e6b244039e7", "sighting_of_ref": "indicator--62afc25b-57e7-4d92-a228-d3494610e94d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a77f608-99a1-4454-a6a3-b2ee44654a24", "sighting_of_ref": "indicator--c35a0bca-8e77-4494-bbd9-acf7c6d817ff", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af1fc0d-185c-4d98-a4fc-23755605abf1", "sighting_of_ref": "indicator--76cf3df2-af79-4554-95ee-6c41c579c0a1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97eb765-0d89-4f37-8c61-b5be32936cea", "sighting_of_ref": "indicator--7423f057-b6e2-48aa-ba92-e6bff6caf173", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4327d31-77c2-4ca3-a03e-f963ea5707ff", "sighting_of_ref": "indicator--4c6ae924-9be8-41a8-a957-3c24261efa28", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1698064e-64c1-4d1f-ad62-293131db5dc4", "sighting_of_ref": "indicator--2cc19e6f-38f5-4959-8f2a-58ee9f199e10", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e8349c-fd17-482d-94c9-6c7a85d440f5", "sighting_of_ref": "indicator--65ecafa1-de54-4f22-a90f-895924e2a38f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3517a727-06cf-4867-b3b1-e83d22e03822", "sighting_of_ref": "indicator--156a77d9-a35c-4965-b2a6-fc01403a9d70", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6226895-111e-426a-9d80-678b66123d57", "sighting_of_ref": "indicator--e6134e57-2277-4d1f-8475-747439947b52", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c53688-6533-4c84-a301-812655c8ecc9", "sighting_of_ref": "indicator--70d453df-0b8d-47e7-95e6-9a2a9cffb545", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68151355-2bbd-44d9-b793-a5c2401af568", "sighting_of_ref": "indicator--d8c41460-21a6-4179-a076-477242467e02", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676c756c-cfbb-41d5-9146-eff7f734571f", "sighting_of_ref": "indicator--ddb9e4dc-38b2-4b04-9bc9-67db16c5a4f5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ff50bb-5b2f-4f88-b9b1-683809d0153f", "sighting_of_ref": "indicator--80b52cda-3210-43bf-8827-e9feaa5647b7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789079cd-7936-4969-a3e5-139244708b65", "sighting_of_ref": "indicator--80b52cda-3210-43bf-8827-e9feaa5647b7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f261c02d-901f-42e9-952d-aeab30558ecb", "sighting_of_ref": "indicator--a195ec65-7c01-433e-be3e-4cd9a058c2f4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ebb9cef-04e9-4b35-b662-defc648a9905", "sighting_of_ref": "indicator--2d296219-7d5d-45c5-b19b-61e20f7ff6ba", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141dd373-f375-4803-ac18-8c8253acd378", "sighting_of_ref": "indicator--715a4207-a9f4-48d5-8508-dcf7c6c003ac", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65559b8-6460-4161-83a4-ac1ee08b2b4e", "sighting_of_ref": "indicator--715a4207-a9f4-48d5-8508-dcf7c6c003ac", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7de74dd-f53b-414b-a82c-2c4b6a21bc4d", "sighting_of_ref": "indicator--642b35ef-ec4d-4829-92f4-8a05d03f882d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9412f37f-2de2-4264-8e65-d86758483092", "sighting_of_ref": "indicator--aa7817fa-d373-4af8-b4c9-d604ba08b37a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb915260-bf46-4f52-b093-4e999407ab58", "sighting_of_ref": "indicator--34cf2d28-c44f-47da-86e0-dbcbffd4a69d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a792c8-d75a-4dcf-9467-4ca99559cb77", "sighting_of_ref": "indicator--b450e3bd-ac22-44f1-ae7d-de5f2c910669", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d350dd-fe35-43df-aeae-c8ca8e79edf7", "sighting_of_ref": "indicator--507f70d8-3fcd-4124-bdd7-81c73c184186", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13977629-4081-442d-abe3-201c8ce370be", "sighting_of_ref": "indicator--79658841-c73d-4711-a2d5-968b9c9eccd8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fc34ce-a0b1-4a64-95c6-5e7758b2219c", "sighting_of_ref": "indicator--887e6a20-7d18-4d77-9020-940d1d9c5fe9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e917f83-d26f-465a-ba78-c06680f79833", "sighting_of_ref": "indicator--0e52e83e-76c7-4e44-9197-6cba21d254d2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2d5953-1dc0-40ad-86ff-22954c72e90a", "sighting_of_ref": "indicator--566c4dfb-6944-4778-b042-d3b68c2b4d82", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58baf12e-844c-462f-a5ed-c15eafa7d942", "sighting_of_ref": "indicator--566c4dfb-6944-4778-b042-d3b68c2b4d82", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75af700c-2064-4696-9d04-bb3818c54609", "sighting_of_ref": "indicator--0ca10120-709c-4603-adfa-bbeef2d85987", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de273903-d4d9-4864-82d1-fc87d2b43b8b", "sighting_of_ref": "indicator--806138bf-2fc3-4847-9127-ebe505183102", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3875df-0070-49eb-8c76-c0bace45a9d6", "sighting_of_ref": "indicator--da8c65b7-4824-4b2c-a739-e1f3a9c85bf9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7488476-05af-4f71-a59f-1eaed88e5b6b", "sighting_of_ref": "indicator--8a1158b8-55d9-4cb4-af13-6dd56b1e1da3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0acf3d8f-bcf6-4d9f-a4dc-cbc8a575149f", "sighting_of_ref": "indicator--a273d1fb-b1c8-4517-996f-a2384b33586a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4b12c2-011d-4495-aa13-73ab77009306", "sighting_of_ref": "indicator--f90a5514-cfcd-4132-87a4-e9eeb2413144", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc757d2c-d8af-491e-b335-4484cd9f2654", "sighting_of_ref": "indicator--2c0b09ac-2ba4-4c43-bd13-bc7f7b93e10a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fecb055-dd2e-441a-8eae-f1288b1b1009", "sighting_of_ref": "indicator--2c0b09ac-2ba4-4c43-bd13-bc7f7b93e10a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c73585-afbb-406f-9102-d0d81fa9cf5e", "sighting_of_ref": "indicator--3a9c31dd-4c08-4708-a6e7-e49569bfbf25", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980a027b-39a9-43e7-8eec-e0c0da781f5b", "sighting_of_ref": "indicator--2332150e-ee05-4910-a575-e8d011b38f75", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b09b729-39d3-4d5d-a873-5c9ea2904d30", "sighting_of_ref": "indicator--2332150e-ee05-4910-a575-e8d011b38f75", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de869974-e4c1-41b4-bec6-b5f4a7d860f8", "sighting_of_ref": "indicator--227295cd-be07-4539-9a7d-a5b8a7dd08e5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ec0c0e-bc81-47da-b15f-2c847e8f28e6", "sighting_of_ref": "indicator--f00c7572-e18e-4892-9c2d-5d0c4c716ed2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e93a9b-57aa-4430-9684-3c5c064a8ce7", "sighting_of_ref": "indicator--89687486-0245-47a1-9e9f-33abf76ea6e6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68cb8e40-8e23-461a-a1c1-979c61168ecb", "sighting_of_ref": "indicator--34d49eaa-859d-4436-8475-a6f46af220e5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e186c6ef-8910-4d33-b4df-358c41b70846", "sighting_of_ref": "indicator--d6f73c91-77c5-4f5d-87d0-10d70ca98618", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb0fab4-cf3d-4b5c-b8ff-8536b6b89b59", "sighting_of_ref": "indicator--b066b929-ecbe-4dfc-925a-1823e6888323", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2edeaa-5b55-44cf-b059-68d41f110d41", "sighting_of_ref": "indicator--d6dd0035-947a-46a6-8a67-63f219e8d67d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8102c25e-4dc5-46bd-b38b-b1745467d389", "sighting_of_ref": "indicator--d6dd0035-947a-46a6-8a67-63f219e8d67d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36548e42-2dd1-4291-ad14-8233d7e250fe", "sighting_of_ref": "indicator--f223b1eb-5a77-427e-b459-b4063453e3ba", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a970eb-9256-4a0f-bd09-bd237f37e0a4", "sighting_of_ref": "indicator--86e81bd5-1878-4f26-b3ee-0f2c8b0d1c6b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbf01e4-056f-4137-9853-3e6f3915af11", "sighting_of_ref": "indicator--0ead97a4-2476-423f-a1b5-98c8f7240bb1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a453ffaa-14a9-4c0b-8758-8fa4158e0938", "sighting_of_ref": "indicator--e4925ff4-a154-4e3d-9b35-4b66e0dcac8b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20469163-8b37-4165-9569-5d004e39c807", "sighting_of_ref": "indicator--e4925ff4-a154-4e3d-9b35-4b66e0dcac8b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3b6e96-a66d-4207-98f0-06b2514cad61", "sighting_of_ref": "indicator--6ff33cc3-6cd0-40f5-8cc4-f20276c415ac", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446b9cdb-752c-4963-a8c7-72a26fbea5f2", "sighting_of_ref": "indicator--8e26cdfa-c599-4626-b4fc-5d386254ef00", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88740c96-5def-4587-8785-2c8a026a129f", "sighting_of_ref": "indicator--7e249975-087b-4915-bf3b-2f181702a9b9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694c4ca6-d71c-4d81-a820-07e4246cda1c", "sighting_of_ref": "indicator--4466857e-e473-40cd-97ca-0fae27f89b2f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851a537c-9644-4976-8d0d-c356727f1f53", "sighting_of_ref": "indicator--51f66d54-ea80-4dc6-a04c-878643019dc3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8e237f-f3aa-4d90-a205-ecbf5a8978c6", "sighting_of_ref": "indicator--1793e4ae-0eaf-4c9b-8e29-35500bd2617e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64af6c1a-9bd8-4a60-af1a-9fcc54caefce", "sighting_of_ref": "indicator--1793e4ae-0eaf-4c9b-8e29-35500bd2617e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fdfc7cf-63cf-49c9-8a6f-486d00b0e340", "sighting_of_ref": "indicator--107c3f0b-d458-4993-9f9e-a7d8fd13bdac", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e84d74-671f-4382-abae-c06964f7f4eb", "sighting_of_ref": "indicator--107c3f0b-d458-4993-9f9e-a7d8fd13bdac", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7464e01b-e4ee-472a-a92f-db96a57c4d49", "sighting_of_ref": "indicator--d1feb033-21ea-4866-9602-22f557ca6010", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165e9b6d-7869-49e2-9b2b-59cf2203b1af", "sighting_of_ref": "indicator--4620f67b-665e-4c30-9526-90bb93d9cee7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0e0ba5-bce0-4783-98e9-0665bdde56c1", "sighting_of_ref": "indicator--422e772b-3ff3-4989-8ce3-ec8aacd92bcc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61665a8-fa01-4a43-af32-d382b80e8df9", "sighting_of_ref": "indicator--1c61637a-8532-44cd-925a-0cba3d0c1ab4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064eb01e-9edc-44a0-a6a0-9ac5e2431582", "sighting_of_ref": "indicator--74048308-d738-4a6d-b5e0-a81f714f406c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1157f155-c226-43b5-bcc5-49a7c91b6ef4", "sighting_of_ref": "indicator--72aa7a58-b5f1-47ef-aca2-70bcdbf1cb81", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a8fa3d-4aac-44fd-8612-7dafcd954509", "sighting_of_ref": "indicator--9bc7eb0d-ad89-4ace-98d0-2468380d2f25", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432ce0cc-0ba4-4b30-a49c-a4ca3133df14", "sighting_of_ref": "indicator--2ea87c0a-9b2f-4346-bbc4-371177c065b1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be81ab5-831b-4c52-9644-32bbe8436c7f", "sighting_of_ref": "indicator--256b20cd-1dd3-44ec-a7a1-133cff2cdf41", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1a70d0-ae65-4cfe-b637-a606378f00c2", "sighting_of_ref": "indicator--256b20cd-1dd3-44ec-a7a1-133cff2cdf41", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39cf0a06-56fb-4850-b088-9c68772e7170", "sighting_of_ref": "indicator--9f8bd984-8cbf-4740-ab15-7685d919bbcc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f971a4ec-421f-4ecf-9550-6f87f75d3d57", "sighting_of_ref": "indicator--2f303640-937c-4ab4-8614-0113de6d54bd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0160445a-d724-4c4a-b900-5d8a87fa252f", "sighting_of_ref": "indicator--3fc8377f-b75e-4718-af2e-56afc64f8ea3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c46f2d0-f54d-4b40-8b0a-81e659e3b830", "sighting_of_ref": "indicator--e507962b-2a46-4939-99fe-94628c0c2f23", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea99d3a9-a6f1-41d3-9031-ad8667c5784b", "sighting_of_ref": "indicator--fc8a775c-d1ef-40ba-bb89-69e305008048", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a67e561-53fe-440c-a046-2eb93f3e7429", "sighting_of_ref": "indicator--fc8a775c-d1ef-40ba-bb89-69e305008048", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34cf9911-c91b-489e-9826-4bc1a55d50d9", "sighting_of_ref": "indicator--dc85db12-5a6f-407d-9d83-5b013959a333", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a5a516-2d0d-4022-b42e-aa56b581fc0a", "sighting_of_ref": "indicator--b085e177-4224-40f7-a80f-9a5e7aec47c1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9add8cc0-4015-4119-9c95-7182102e79b3", "sighting_of_ref": "indicator--207329fd-24a8-414e-9478-1d779d24c805", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce5897b-355e-469d-94ef-c1d927f2d371", "sighting_of_ref": "indicator--207329fd-24a8-414e-9478-1d779d24c805", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe50cd03-3d7f-4fd4-b58f-ed32299e7500", "sighting_of_ref": "indicator--727e5da0-8b03-4f92-8def-c01af6c57a96", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c470a7aa-65f0-403a-a3fe-a2afb411b5f4", "sighting_of_ref": "indicator--141fe54f-a371-4686-a25f-c19f1e8ad758", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9b5ee7-7d1f-4043-897f-17f45e6adb1f", "sighting_of_ref": "indicator--ab6b7ad0-1889-49bf-b599-c2df77519668", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b780ddb0-e534-4fb9-8399-9f64470837ed", "sighting_of_ref": "indicator--0d454563-1240-47e0-bc98-b00d0cad95ea", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916950f4-4579-4fa9-862a-de34e133d5b1", "sighting_of_ref": "indicator--ddfc06c5-ee73-4d8e-80a9-94fcd72aab0e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d9c89d-7342-45e2-a270-efe0b0e2d534", "sighting_of_ref": "indicator--a8edb35b-7313-444c-a9c9-ac74039edee5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b915335d-ab25-492b-ad27-0f4c623642c8", "sighting_of_ref": "indicator--57019bf8-489b-4077-8460-c00feec19f2a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493e32b9-e9b3-43c1-9df0-11c2a8555daa", "sighting_of_ref": "indicator--10e73667-f1e8-4f71-9649-831be23347f7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bef3cb8-a010-4ecd-8df5-667c7e2fe6cc", "sighting_of_ref": "indicator--040d9416-15aa-4ba9-93f7-2fb3dc032229", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d05e42e-2794-4e38-9be2-f3dd5a0baec1", "sighting_of_ref": "indicator--c5cb55df-9591-48c5-927a-6486ca932e5e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037db070-4852-4374-a958-76966c9bd5fc", "sighting_of_ref": "indicator--c5cb55df-9591-48c5-927a-6486ca932e5e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05bd67a9-7b28-45af-acae-dbcccfcf4046", "sighting_of_ref": "indicator--f6769987-8288-4239-8ba6-9943ac26c313", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba2feee-6815-42ad-a71d-7c805d2deb5f", "sighting_of_ref": "indicator--f19489ba-78a5-4459-b021-b69b9f6cbaae", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8ff98d-1c42-4ffa-afe0-c81788174701", "sighting_of_ref": "indicator--a2448a3b-4fed-47c7-bc9e-bd2710811afd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d92dbf-dc30-4ab3-80a9-a2f497a8dfca", "sighting_of_ref": "indicator--e5ac1784-3c95-4c01-a7f9-c90cac2ca69c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cdef68b-4889-4271-8a35-b276a2592d4c", "sighting_of_ref": "indicator--44be6ef0-3442-4629-935d-455b121ec559", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abe64cf-a9e3-414f-bd4a-9e59d51bdb6b", "sighting_of_ref": "indicator--7cac45d0-fe12-4e4c-a2e5-41713612a5a9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5b9199-4817-4e75-a02d-718f61221299", "sighting_of_ref": "indicator--0d346338-0102-41b0-8d4e-7283847c2a41", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0299af2-75b2-4162-b1fa-3df9aa646369", "sighting_of_ref": "indicator--1b308284-0547-4f11-82eb-e0aa5fa42476", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b02954c-f91d-4e51-8966-472bd9c88702", "sighting_of_ref": "indicator--1b308284-0547-4f11-82eb-e0aa5fa42476", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b545ef-140d-4827-9963-6b29765d180a", "sighting_of_ref": "indicator--7aef7a77-1c89-4dcc-b11f-b9360a9a0b3f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e829af3f-9ec5-40e0-8e8b-908e7838510b", "sighting_of_ref": "indicator--4871649a-0318-458a-85c7-f86408fbf7ec", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4dbff7c-2da0-414b-84b2-e5960dcb094e", "sighting_of_ref": "indicator--d57b7546-682f-4bd1-8959-9b87a66f1769", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c85692-f328-463e-98d7-73791ece686c", "sighting_of_ref": "indicator--eaf6d44e-341e-44d1-8ea9-77c614be0d04", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f748cb-19e8-4a2b-9f1f-56a0e8dddf2b", "sighting_of_ref": "indicator--f768f1f9-b856-4940-bbca-2aa9f943dc06", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e784b16d-5e08-4421-b750-9c7e0804eba7", "sighting_of_ref": "indicator--352404e2-f19f-4ad2-a76f-ebf7522b08df", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc1e79a-25df-4471-a4da-539f7d9d42a6", "sighting_of_ref": "indicator--352404e2-f19f-4ad2-a76f-ebf7522b08df", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225e5a0b-fb5e-42b7-93fd-25db2627fc23", "sighting_of_ref": "indicator--de83604e-ca5f-4697-94f5-280032d4f150", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc22cb3-ce3a-487f-a96d-8fbd7f450197", "sighting_of_ref": "indicator--24cd955b-0521-4be5-8eb6-7519c737ad55", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb3c0e9-7fc9-4f77-8f22-d2c414602281", "sighting_of_ref": "indicator--912be44b-8e8f-4896-9ec4-f58678ded4a2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b678e5-cf84-4550-8aa2-78d60298f954", "sighting_of_ref": "indicator--caca8cec-2b8b-4495-89dc-a530a244f67b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ea19a6-d4be-41a8-85d2-2a3cc9724065", "sighting_of_ref": "indicator--0692cd49-c3fc-4467-a9ae-07a95266cbc9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47499f86-75d3-4a70-b2d5-f958e83a4e9e", "sighting_of_ref": "indicator--1c60a768-52fa-4466-86e4-a6592712ca82", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883d7910-04ab-4c89-bb09-b5b8d2e46557", "sighting_of_ref": "indicator--75075487-1d10-437d-9efb-bf490691574b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4e9e21-7c1b-4197-88bc-ce7ecbc9a419", "sighting_of_ref": "indicator--d908408e-0989-41c1-941d-66297325fd31", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd51886-0e60-4a09-8437-fce59eb9b8c5", "sighting_of_ref": "indicator--243be1da-611e-4106-9ac9-95c243d05bb4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26cba83c-5bad-4a63-9c90-b03b24770038", "sighting_of_ref": "indicator--4340f1f9-13d8-4ad7-b48b-777952c52ea1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c23630-ef78-48f0-a7a8-ffac7dc78a27", "sighting_of_ref": "indicator--2da0ea3e-bd93-48d4-a576-4da637a8117c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da82031-2667-4e5f-89a9-304cb3288cdd", "sighting_of_ref": "indicator--2da0ea3e-bd93-48d4-a576-4da637a8117c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6221497f-69f5-430e-ac90-12ae923d8807", "sighting_of_ref": "indicator--59b35da6-3783-497f-8287-652fbcc7c717", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73d80d4-6f69-4942-b7bd-e7487d61ec22", "sighting_of_ref": "indicator--27dfff34-f164-4ee3-95d3-346f29812c01", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71611c8-3882-4478-a468-b80105eee3c8", "sighting_of_ref": "indicator--5bce5ca9-3c90-4ef7-b975-9dd703c2aecd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b94ea88-159d-487a-9cb8-704b828d306e", "sighting_of_ref": "indicator--0704383a-9b30-47f3-96b5-21b000604958", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad2b554-c7a5-46b8-8363-a7fc982cace8", "sighting_of_ref": "indicator--7636861e-bf76-451f-84c2-cbac68717b88", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a7dd77-0ea9-4e0b-aa2a-7dfe949751fb", "sighting_of_ref": "indicator--d125d95c-4deb-4c8e-89e3-f22d1c5eabc0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a5d5ea-7c09-4cec-8590-48b98fc13e95", "sighting_of_ref": "indicator--d125d95c-4deb-4c8e-89e3-f22d1c5eabc0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e05ca8-16d5-40b3-b4e6-22140bb2a2eb", "sighting_of_ref": "indicator--c45d0634-dda6-4b01-8394-e695b2777827", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e209cb62-271d-4925-bc71-d3fe1e0c94e7", "sighting_of_ref": "indicator--928591f4-93d1-4ad4-80cf-c6da027c1339", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3c585c-1106-4e34-9880-c87d896d8bc5", "sighting_of_ref": "indicator--92dccf88-cb5c-4e28-abb0-93f692eecf82", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a73a3d31-0138-472e-a46e-5f5fabaa34a6", "sighting_of_ref": "indicator--30e1f720-2861-419b-8310-18a5485499cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679b0138-9653-4b79-bc1f-04202b32cbdb", "sighting_of_ref": "indicator--30e1f720-2861-419b-8310-18a5485499cf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bdab3f-522f-4eea-82c5-f3480093a3c3", "sighting_of_ref": "indicator--8e98df0e-3e3a-4975-b3b7-20f876040348", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae500996-3259-4479-beea-df5a04583aea", "sighting_of_ref": "indicator--8e98df0e-3e3a-4975-b3b7-20f876040348", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e14fa6-8e4b-4685-a5dc-e75b2c88ff8d", "sighting_of_ref": "indicator--84d81732-8737-47b7-b0c6-a221ef73052e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c5305f-6a5e-4afa-8e0f-c08adc0a1765", "sighting_of_ref": "indicator--024611e0-5bdf-435b-8e44-d00813d2701c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912c04e8-ab68-4d8e-b1f5-5ddd41816fff", "sighting_of_ref": "indicator--7cc3f336-e5a3-4bd4-9e86-c6cc398825aa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c14c7f-292a-47c3-8666-17971fdcc68f", "sighting_of_ref": "indicator--ac0f7688-9741-4be2-9b44-3c2bf629dff8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65247c4f-fcd2-42a7-bb83-69e0bcf5d195", "sighting_of_ref": "indicator--c28173af-c691-42fb-af48-46bbb262b5eb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f57391-e356-455e-bc9c-c55816c82175", "sighting_of_ref": "indicator--b68c4976-a42b-4436-8db6-cae4c598e962", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa4d5c1-d7ce-42b8-994e-df2ac0233603", "sighting_of_ref": "indicator--b70979c3-3902-4e11-a1be-220f36685e5c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936328ea-6a09-46d9-a35a-d10ebfa745aa", "sighting_of_ref": "indicator--6a0e0e55-87ca-4e55-b1dd-5b3ada3fefa1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec3c617-3694-42bb-86cf-33dc7570f760", "sighting_of_ref": "indicator--29173449-1ff0-4613-92e5-3f0df093c97f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa0475f-7e95-4b6b-840b-bf7d9c75718d", "sighting_of_ref": "indicator--baefa978-e723-4e63-8fcc-9327d503d109", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf29351-5f44-4e9a-9fc4-efedee8a49f5", "sighting_of_ref": "indicator--a15d3e4a-a95c-400d-a564-d704a42617d3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5b0cc8-d829-4997-aa34-beeed0aefb10", "sighting_of_ref": "indicator--36f791d1-8f66-466a-ba0a-1b2fbae84ded", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba5f332-04c3-449e-9797-5e2f11903913", "sighting_of_ref": "indicator--5403e94f-c856-4403-839d-bd86a26a9413", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94006130-2063-430e-ba42-6486d7a0c685", "sighting_of_ref": "indicator--5403e94f-c856-4403-839d-bd86a26a9413", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf801209-3a5a-419d-88ab-ace989ba2bd5", "sighting_of_ref": "indicator--51017d94-7a7c-45ac-99f6-9335ea7172a4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460cea9f-765f-43bd-a8b2-3628985b7e81", "sighting_of_ref": "indicator--e30db50c-d991-4fea-bbb4-4083e7928f4a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b0a00e-7b33-499e-b50e-c42fbadd8188", "sighting_of_ref": "indicator--c0d1881b-5fc1-4a00-a287-d2b5e9d96570", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c988651-8a9f-4766-be16-888354e3141c", "sighting_of_ref": "indicator--2affef6e-eb93-4cff-9d40-ad363d09316f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fea94d2-9bf4-483b-92df-ef54b70c01dd", "sighting_of_ref": "indicator--2a6c4ac0-11be-4a54-89bf-e4662858b7f2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365443df-f67d-4026-a262-234f8c357dbb", "sighting_of_ref": "indicator--bc5092e9-aa1b-42af-b5bc-259aec4d9ef9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468a9755-6117-4644-9727-c7f438d4a5cb", "sighting_of_ref": "indicator--377767cd-ffc7-421f-a8ae-de18ba2e7780", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a4030b-8cc9-41f8-89dc-7ec26dbd10ac", "sighting_of_ref": "indicator--a577b16a-f5b7-44bd-b226-d4896ae91e96", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6113714e-40e5-4511-9a8e-61b56bc20983", "sighting_of_ref": "indicator--3db95129-8d9b-4965-afaa-8dd37c6b6543", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28e81bf-12e5-4e7d-93a6-37ca22d134be", "sighting_of_ref": "indicator--0cf380bb-c659-4cb6-83f9-3f1029aba5e8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159c1f14-f00f-4c5c-a4d3-3a71b5862b80", "sighting_of_ref": "indicator--9a1379b2-6dd3-4782-9e01-819067f3fd6a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a29063-720b-4ba3-9f62-8ed4be12fa14", "sighting_of_ref": "indicator--565e79bc-c716-455e-8ce0-c62c26f3c566", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0464ce30-0ddc-492f-949c-309d9ce00ada", "sighting_of_ref": "indicator--9c6b6ee6-d82e-4816-b22e-702809f0b157", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd13070-8d0f-4b84-ad7f-31cb231d206f", "sighting_of_ref": "indicator--519be2aa-e225-44fa-8134-e68c706243d8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f56c331-74cd-44fe-a2e2-6d8c169a57aa", "sighting_of_ref": "indicator--519be2aa-e225-44fa-8134-e68c706243d8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9c6311-7da7-4430-a2f7-97015e186551", "sighting_of_ref": "indicator--bf5a2b96-eaa2-462e-818a-da00bb6ded08", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8280adf-302d-4b12-8527-e49c0c69c6ee", "sighting_of_ref": "indicator--3182dad8-cc1c-4d68-81a4-62786c7ff085", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75ab2a3-1ce8-406b-b276-7b80a48f35b2", "sighting_of_ref": "indicator--700accfb-3123-4662-ba03-23c08aebc823", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7505d1f6-503d-43cf-ae1d-4d8ded5ba75f", "sighting_of_ref": "indicator--c1f24107-731c-43e2-b280-3d61f3273557", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36da6700-5343-462e-8b4c-12c9df555257", "sighting_of_ref": "indicator--30124dea-ca14-445b-b760-e8486ffdf15b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a76fde31-2b3a-477c-8341-4785ef8373b3", "sighting_of_ref": "indicator--21d0b755-ac44-4380-b09d-8ebadf28cb73", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e300ad-d09d-4eae-aae7-1d76b2d07f85", "sighting_of_ref": "indicator--554edd2a-8b15-4385-b7ca-1442c009e7d5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d44a616-2032-480a-8dcb-9f31a39baad1", "sighting_of_ref": "indicator--e72823f1-296f-4afa-9fe3-8f01605a9958", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70a6b3a-8d6b-4436-b1ea-4594a8599a73", "sighting_of_ref": "indicator--70620a03-1de0-4280-9134-acde89ddb9ab", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e42b100-db2e-466b-b4f1-ee5c840eb51a", "sighting_of_ref": "indicator--0830838e-2ed0-43f2-86e1-2260c63be39f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b021dd3-f077-4c0f-bbd2-4b8ed360b8cf", "sighting_of_ref": "indicator--fa2fd886-d685-47bf-991f-feba02d4fc89", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a98874-c5f0-4902-8887-f41029e0025c", "sighting_of_ref": "indicator--fa2fd886-d685-47bf-991f-feba02d4fc89", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8355fd4a-dfcd-4ee9-aa92-9be654375508", "sighting_of_ref": "indicator--ed86d234-7f7a-4240-943a-88c0fa90086d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d931663-b00a-4e5a-bfec-388cdea8aded", "sighting_of_ref": "indicator--ed86d234-7f7a-4240-943a-88c0fa90086d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ee3608-ddf1-4eef-97c9-7d55193fb305", "sighting_of_ref": "indicator--0302231c-6f7c-4bd0-92ce-b01e6001bdcd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd8b3fe-dcdb-4e15-bd60-01e929cfde1d", "sighting_of_ref": "indicator--06c4a1c7-2ab2-4274-9999-e586cbe74676", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34712cd-1818-4781-9513-cdbcd6571e45", "sighting_of_ref": "indicator--f759df6c-29c8-476c-b62d-c78ff9735236", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eba6565-f74d-4871-a889-ec66e5a21ffe", "sighting_of_ref": "indicator--6d37a426-0b42-4743-8319-a81f696923b8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6422f27d-f434-4c4e-9ead-b5f779d78377", "sighting_of_ref": "indicator--cd1de0d8-565b-4bcc-b8ce-61d30532691f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e83b84-35b8-4a0c-9384-fe9e0a461cd4", "sighting_of_ref": "indicator--cd1de0d8-565b-4bcc-b8ce-61d30532691f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4fff466-775b-4e80-aabd-413041f8ea6c", "sighting_of_ref": "indicator--da67248f-06ca-4ef3-b81c-998b75981555", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374d2bf1-fa74-4b76-ae9f-79ef1be3fdb1", "sighting_of_ref": "indicator--247d6fa7-88b2-45d0-a523-c1747e7fa098", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7a04ea-8713-40dd-984e-1806e145845e", "sighting_of_ref": "indicator--247d6fa7-88b2-45d0-a523-c1747e7fa098", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1429ba3-1251-48af-b9a9-d4e0d64c2924", "sighting_of_ref": "indicator--0c379544-bf56-4906-8a52-f7b3adf89a88", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907ed999-dcba-44a8-a5fe-e75efa3db764", "sighting_of_ref": "indicator--14c7e53f-61cb-4a96-a3bf-11060408c463", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd0b271-5cc6-46ee-8d8f-eb30f302180c", "sighting_of_ref": "indicator--14c7e53f-61cb-4a96-a3bf-11060408c463", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9494aa6-789a-4102-a7c8-cc331e909e27", "sighting_of_ref": "indicator--8f4a03e9-16bb-4629-904d-2528cd2abb0e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94539a60-523f-4804-9e22-be547b6cde05", "sighting_of_ref": "indicator--1e9fc048-78bf-4602-aaa2-81ab3a46d9ec", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc26169-3ddb-4bb3-91cc-31839b0995cc", "sighting_of_ref": "indicator--1887731f-2cde-4bfa-a2d0-089a41122cb0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909570f3-45f3-4b5b-9440-266e9be2afc8", "sighting_of_ref": "indicator--9af2cffc-cb7b-4f02-9538-7175214c40a4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142e3ef9-0bfc-4d63-bfb3-2db2134abfb1", "sighting_of_ref": "indicator--aa8ab5a8-db57-42b3-950e-604a17a25686", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f47dd8-0025-44c2-97c5-33aa63aea60f", "sighting_of_ref": "indicator--5c1e7566-90f6-45d5-9b1b-3fe1ed2ea427", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4250ed83-d299-49af-b7e0-feb061101b40", "sighting_of_ref": "indicator--c9077c80-f233-4828-94ed-639fcbf3b855", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a444b917-f97d-4dae-8a7c-1b9eca427c6f", "sighting_of_ref": "indicator--c956f0fa-d525-47b6-97d9-d1982d1eaabe", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bc6f63-54df-4c08-b0d3-56dd11643dd0", "sighting_of_ref": "indicator--54b588b6-3c6c-403e-83d4-18d1aab85c63", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd32c15-a027-4486-82be-1a3f6a6678aa", "sighting_of_ref": "indicator--54b588b6-3c6c-403e-83d4-18d1aab85c63", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47f5657-d82a-43f4-a40b-6d8b52229375", "sighting_of_ref": "indicator--9792281d-9b1a-45a8-861f-04965b026818", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3066dc8d-4c87-4301-842a-64461713430c", "sighting_of_ref": "indicator--9792281d-9b1a-45a8-861f-04965b026818", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c219d910-e1ed-453c-8cd8-978f5cbd20e5", "sighting_of_ref": "indicator--f9b8bc4d-26ed-4942-abe6-10ea0656c728", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64a3020-4638-4328-bbb3-24c0a9429492", "sighting_of_ref": "indicator--f9b8bc4d-26ed-4942-abe6-10ea0656c728", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f5a606-02fa-4424-9c8b-6cd62a012adb", "sighting_of_ref": "indicator--010eb0e8-b375-4cce-9fa5-1d836e413e51", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85cebcd-b135-41bd-a5ac-e701c1711495", "sighting_of_ref": "indicator--f6afc4fe-1c4a-4fe7-b88b-ab9adf896acc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae9db42-90a8-43f3-89a1-0d73ebabcdcd", "sighting_of_ref": "indicator--891f9653-1fc9-42b1-96eb-7489cba25686", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24135cc2-54fb-459b-a512-288323f78a61", "sighting_of_ref": "indicator--30ee4d4b-566e-48ca-94cb-6277588711cf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3697ce3-6994-47d1-8752-f10b1bc98919", "sighting_of_ref": "indicator--d4d4565c-7a92-471b-b393-7e82029a5037", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916278ce-fc6a-4dce-abba-d7a7f51abe05", "sighting_of_ref": "indicator--c1c24da8-3cfa-4d84-b41a-b6a3e767cc67", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f52c04-8157-4ff7-a8f1-0337f22e7c23", "sighting_of_ref": "indicator--5ebb7b99-7aa5-4f6f-84ce-a776f26ff7c3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd39fb68-01e7-416a-bbd0-d1258ada9a4e", "sighting_of_ref": "indicator--9ccd6d81-ecdf-4915-9d1a-12b998a9a71d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0e946c-10cc-41f9-8897-068ce2ac3cae", "sighting_of_ref": "indicator--295ab781-3bc8-4788-ac3e-5500fa1280f2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155ec4b5-391a-4155-b0e5-b2f23f66c9f7", "sighting_of_ref": "indicator--ba8882d1-43f1-414d-8869-0f38f04c848f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991c788d-087e-4e1c-82cc-50f80dc4595a", "sighting_of_ref": "indicator--ac7300b0-6c69-442d-9dfc-e3581b7e8988", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679133bf-29a8-467f-bd41-00580e3cbc02", "sighting_of_ref": "indicator--7c46643e-e9e3-479a-a673-4afe3320179e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b94f074-6fab-4d6a-95db-ef0f6f3cf204", "sighting_of_ref": "indicator--7c46643e-e9e3-479a-a673-4afe3320179e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbce823-87b3-4da0-b245-712b56db6483", "sighting_of_ref": "indicator--dcb72005-0519-4bd1-ac28-1c81fe2e5017", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8c3f2f-b514-492d-94eb-c70a7cf7a1b4", "sighting_of_ref": "indicator--ef68ee21-68ba-4eb4-b46e-8682c0a52d0f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d72a89-7f13-4858-9255-cb355a5b6918", "sighting_of_ref": "indicator--274cdb56-2651-455e-a422-20ed4c424913", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc18e13-60af-41ca-bc28-ef9e3e3f7b6d", "sighting_of_ref": "indicator--17c381d5-f0a0-4b57-8128-20d268f56628", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13922c0-9e66-4b06-a22d-5daab3ffdd30", "sighting_of_ref": "indicator--26ccd3f7-164a-47fa-8bcc-aac623f0d382", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079f6fdf-37ad-4fb0-b8f3-e30ff38fa4d4", "sighting_of_ref": "indicator--3cb4d2f1-9c31-4be3-9df7-964884e67277", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0acab764-1985-44bd-8798-5b32e3d16e4c", "sighting_of_ref": "indicator--628ebf4f-3af1-4efb-9fcb-1c60cf908e33", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c17c9d-f6d5-4e4c-8b54-3751cc847b06", "sighting_of_ref": "indicator--7f51bb4e-5ed8-49e5-9671-2a0aa077aabb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840112c4-a864-4516-b038-000ebdd7acb4", "sighting_of_ref": "indicator--f3ed9dea-9cce-44c9-a791-f2738cca7e32", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e751d0a-6b1f-4e9f-8575-18e480719d30", "sighting_of_ref": "indicator--b4154beb-4b57-4514-9040-8510048681cf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679a2704-a149-4ac6-b21e-962f492bc093", "sighting_of_ref": "indicator--a4f90b7f-5296-4361-8ee5-322e22ffacbd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d50d7b-137a-4549-944e-f63146d46c5a", "sighting_of_ref": "indicator--0472cf88-8fca-421c-a6c6-4e0f3222197b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d584f78-1962-4280-9fb0-056d10002d0f", "sighting_of_ref": "indicator--2fcb7f97-c5fa-43b1-b4ba-37f37ce2797f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19b739d-bd1c-4c78-8950-c9dc5475833b", "sighting_of_ref": "indicator--a6d611d7-a255-4549-b3e4-9db04d4df744", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca86cf6-8f78-486e-b9fe-df00601ac541", "sighting_of_ref": "indicator--430894c3-38f8-4792-a091-1f4205a4e31d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ead2b13-8d75-419d-a0c2-e5a65713d1ab", "sighting_of_ref": "indicator--90735f85-aede-4d33-b530-29fde0441946", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c569c056-9a8c-4a95-a77a-8ab54aa6969a", "sighting_of_ref": "indicator--90735f85-aede-4d33-b530-29fde0441946", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e612b9-0fb5-474b-89e4-a1943e2531ad", "sighting_of_ref": "indicator--90735f85-aede-4d33-b530-29fde0441946", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a2e54c-0adf-4599-a50d-b87fc705f0bb", "sighting_of_ref": "indicator--19685e44-ccca-4000-908e-8c819eb1a485", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a59488-9183-4ace-be51-c61e01d85a64", "sighting_of_ref": "indicator--c3c85876-48fc-4565-af9a-a8a933739074", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f23c03-6024-474e-acf5-3def48a344d6", "sighting_of_ref": "indicator--f5007a86-a043-4ce1-9958-b8c2721ba9fa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433621f7-b66b-49e4-aa0b-c4df70ff8cf0", "sighting_of_ref": "indicator--4e004800-d3a5-4a07-a1ab-3a8794667286", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21bfb64-f029-449a-8ae4-436853218e6e", "sighting_of_ref": "indicator--29d759d8-46f5-4e8b-a529-4ab62c7f4d6c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35478fa-2e0a-4ce1-8a6e-d764f32efc53", "sighting_of_ref": "indicator--3b0a8f43-c949-4d0b-857e-d8f6d06a7e77", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a0adda-8107-475f-981c-17c4794f6b79", "sighting_of_ref": "indicator--54a1d67b-b251-4b10-bd28-9fb50c45e9d2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc48f1f-2e44-4eaa-a6b0-7061cac047c6", "sighting_of_ref": "indicator--54a1d67b-b251-4b10-bd28-9fb50c45e9d2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43149ca5-56a9-4368-9b24-c74b25c683f2", "sighting_of_ref": "indicator--ba9b02bc-7ca7-4b58-8223-d1b9e3551026", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1f687b-13f8-4611-85ea-ae69724a5391", "sighting_of_ref": "indicator--35405d4f-5751-4181-b3af-8f3a8f6777e3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d69984-7f80-4ac9-a802-d22e520475a5", "sighting_of_ref": "indicator--bc6cc27e-d58e-4d7c-8390-482f60fb7d63", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2befa3db-8a70-42dd-b26e-e3a3a641cff3", "sighting_of_ref": "indicator--db493c9e-2b1a-4670-bfe6-5f9d2e903ae8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031bb2ae-3ce8-4f83-9d84-de8c32cf23cc", "sighting_of_ref": "indicator--4c9dde69-18f3-4ebc-94fd-2f4ee55483eb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e9f44b-29e8-4bd0-ae8b-dab6cfbce994", "sighting_of_ref": "indicator--0cafc023-7b9b-43ab-81a4-31033c8ae1fb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f5b50d-d81c-4f4e-81b0-03c7149076ef", "sighting_of_ref": "indicator--a7686f3b-97e7-4805-b673-f3f9030df090", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7373fa7-1fc3-4c1b-a3ea-7cbf1f9b5051", "sighting_of_ref": "indicator--13e894bf-c132-4211-9879-5bdb9d0e7eb0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499565c4-8e3b-4b8f-a1d9-6b255a1befc7", "sighting_of_ref": "indicator--740e824f-cedc-469b-a46f-62761d2d73d3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce28769-c5d1-406c-b0ad-698b4d091529", "sighting_of_ref": "indicator--40e412a4-6ba1-4013-a6e8-4301bf5ebad9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd0be3a-6b53-4a7d-9b61-be9891b9d9d2", "sighting_of_ref": "indicator--5c2b0944-735a-4e36-96d8-bf65f082337f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3beea1f7-b8b8-45bf-ae84-f96777f605c9", "sighting_of_ref": "indicator--95b27bf1-f796-44d2-8586-b9134d2a7196", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d01fb6-c25d-4bd4-90b2-233b9a7466f6", "sighting_of_ref": "indicator--2ec506af-93cf-44f2-84a4-9faf5442e175", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dae6841-8f68-4180-9def-28427d337a74", "sighting_of_ref": "indicator--826e533a-1b68-47d1-89e9-35e16699ea4c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6740f1-fdad-4b9e-bec7-206f571688b9", "sighting_of_ref": "indicator--826e533a-1b68-47d1-89e9-35e16699ea4c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c727dc18-90e6-43ae-8bfe-de9114c011f7", "sighting_of_ref": "indicator--2f7d706f-adbf-442f-92b4-5d0e86193639", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb702a9-6d42-4b7d-ae43-db73e40347b7", "sighting_of_ref": "indicator--2f7d706f-adbf-442f-92b4-5d0e86193639", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63311813-f8f7-432d-bc29-1ff7e701c316", "sighting_of_ref": "indicator--ad148861-ed82-4cb3-bfa0-4c5e67de5726", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1182d7a4-5f29-499d-a3b1-11b4bdfcb80a", "sighting_of_ref": "indicator--1800226e-cbb8-423a-aaba-41856dc99840", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b436d6f6-a67a-4599-8993-a771efd107ba", "sighting_of_ref": "indicator--1800226e-cbb8-423a-aaba-41856dc99840", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a7ac30-e3d3-483e-8c80-db70332dd787", "sighting_of_ref": "indicator--a7434ea2-5950-4cf5-9579-4eeb31fcb39c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12943ec-63ea-43f0-830b-b64baf54d43a", "sighting_of_ref": "indicator--39faf994-708a-4cf1-a975-1356ee024923", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62542b2c-4c71-4815-842c-b950a75189ec", "sighting_of_ref": "indicator--5caee6a7-0c5c-408d-8b0a-866ee9586ae9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e290b0f-6f44-45a4-a3db-19812ee3ca2e", "sighting_of_ref": "indicator--6c9b9282-6ab3-4e6a-a987-ebafe2fb1b7b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c2ae27-9064-4310-a670-479693d54f18", "sighting_of_ref": "indicator--8a120b37-03c1-45bd-9942-2281e41a3054", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a891dc-1266-428f-b38c-f1a7f64f5248", "sighting_of_ref": "indicator--8a120b37-03c1-45bd-9942-2281e41a3054", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9055623e-6c95-41a6-a37a-646e2d77354d", "sighting_of_ref": "indicator--8a120b37-03c1-45bd-9942-2281e41a3054", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4037783-e678-477f-98cd-8a585d614887", "sighting_of_ref": "indicator--06eb0b14-9dd1-4366-8bfd-40c0245f9a7a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6470c1-d74e-4348-9f44-103c0ba72a0b", "sighting_of_ref": "indicator--22905038-db8e-48b7-965d-6ca7e9547115", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0e1865-8708-4a87-8c8c-27c3c6d54e1f", "sighting_of_ref": "indicator--e20be373-8812-4c60-bc34-a538e3347fa9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edfc470-4d0c-416a-b7cc-72099a8a6ff8", "sighting_of_ref": "indicator--680522c4-0c08-44df-8cdc-20eeb2f22104", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e6f589-9910-4dad-900b-21cfdebc216c", "sighting_of_ref": "indicator--680522c4-0c08-44df-8cdc-20eeb2f22104", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd31c4d5-da17-4786-be29-7443cdf7187b", "sighting_of_ref": "indicator--3970e781-1423-4741-9402-652fb5f4e132", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e7fc61-708a-4f95-9d28-fb8341cfc36c", "sighting_of_ref": "indicator--116246ca-2b23-4035-bc40-6ab5cae9c60e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6f35dc-de7d-4212-89e4-669aa59e6b77", "sighting_of_ref": "indicator--116246ca-2b23-4035-bc40-6ab5cae9c60e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a5c7c7-d23a-499d-9053-db69c86ddeee", "sighting_of_ref": "indicator--9c786d8e-f4d1-4303-8754-0f2e080f96f5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61edf62c-ee59-40b0-9aad-9301335a8929", "sighting_of_ref": "indicator--9c786d8e-f4d1-4303-8754-0f2e080f96f5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1deaceb8-140f-45fd-991d-6a8f13e65697", "sighting_of_ref": "indicator--c9c27bd3-5e05-4387-bde0-1b11f47c75c5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7951c36-4cc1-4668-a6ff-175d0bbd486f", "sighting_of_ref": "indicator--c9c27bd3-5e05-4387-bde0-1b11f47c75c5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139133ea-7f16-41b9-9ece-d2e7c602b3b7", "sighting_of_ref": "indicator--9a6155da-ddc6-4319-9cc4-3b666373659e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4afc508-f7f3-4d9b-9455-7d0501238a28", "sighting_of_ref": "indicator--d414ebe3-0629-47f4-9aa1-c1224455a846", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b5c1ae-e7d9-49c0-90e5-28b2847e50f6", "sighting_of_ref": "indicator--2a5c0f0b-afc2-4775-b3a5-c458ade2e76f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb8a2d3-adab-4e54-9076-cfe58d3d4088", "sighting_of_ref": "indicator--152f5088-0d12-44e1-ba67-769566aeb5cb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85267aa0-a35d-499e-ab0e-9cb8027922d9", "sighting_of_ref": "indicator--60050dcd-84b2-4016-974e-6ee96198ef6a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d6c71e-5cd8-42f8-b1a0-47023864f95e", "sighting_of_ref": "indicator--41501085-de0d-4276-886d-64da7842ea46", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2e9fe4-3241-4079-9cfe-24325e22a70f", "sighting_of_ref": "indicator--dc2ecd68-9a4d-4c15-bb70-9b5f9cd9e8d6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99aecf23-6f51-4b43-9cc8-b315be6bdae8", "sighting_of_ref": "indicator--ab3cc471-a4eb-4bb2-983c-359d0d3dcbc2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc5d873-577e-4ca2-b0ec-feb202c56c0e", "sighting_of_ref": "indicator--8af84cd1-6dd9-42f6-b7ab-a71cb9d88bf5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77a15ed-a223-4cc8-93c8-bdceb3a7028c", "sighting_of_ref": "indicator--ff06e14b-d218-4978-becc-7131c0276a36", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41972f16-36bf-4bef-951b-35344ad6b8b1", "sighting_of_ref": "indicator--610e1b67-78d2-4533-ad89-1f6d269ca974", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945639a4-0e6e-42f9-acde-568bf89ea377", "sighting_of_ref": "indicator--bb743e5c-7b95-4fe1-8330-174971e66c43", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77875147-369e-49e8-851f-fe44c5d15ad3", "sighting_of_ref": "indicator--725e7196-a184-46a9-a43d-cbbe3dae1330", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfca12ea-ec40-4141-8787-2b565705a0f5", "sighting_of_ref": "indicator--337412a2-7e78-4b2b-bcaf-c3fe0d5cfbbf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e867bea7-90e4-4f57-bfd3-5d3668101aa2", "sighting_of_ref": "indicator--fc6c333d-4913-4b78-ba8c-cca95350a438", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d2a58e-4a13-4136-85a9-6e092c9c5b33", "sighting_of_ref": "indicator--2eb4d859-d81d-4eab-b1f0-fa5d11c706f8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c145ebc7-f1c9-4315-8fce-f5d4d5e3bc9e", "sighting_of_ref": "indicator--d1e4e0ee-198a-4252-970d-f3bfbf2e1a82", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8f4015-b0f0-4920-96e1-9c8a68cc035e", "sighting_of_ref": "indicator--72500eb0-70cd-45ae-9bd6-69e5d7fa9d72", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3574734-5b82-4aab-a619-8a5023e4cdb4", "sighting_of_ref": "indicator--72500eb0-70cd-45ae-9bd6-69e5d7fa9d72", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b534e02e-f966-4a92-b4a4-06132ce25646", "sighting_of_ref": "indicator--fb401e07-2565-40d7-9374-964aea7ac028", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363bc3b5-50d5-43a2-8941-4698233149d2", "sighting_of_ref": "indicator--2f2f50c3-13fb-462d-8037-c1efd2d06d0b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee817953-6e34-4d9c-8c56-a442a71fb7c0", "sighting_of_ref": "indicator--d84cde85-a2d3-4f13-aa60-254d8df6bd0a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd60387e-a746-4e8e-920d-02ac012edb62", "sighting_of_ref": "indicator--9bbe04e2-476f-4087-926c-9db546e545d6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e304071-ff04-4987-b4b9-57ced09c5c55", "sighting_of_ref": "indicator--b49f08c3-ebbd-4965-8854-4f4426367033", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd9d883-186c-44b4-8608-30bd44d615ba", "sighting_of_ref": "indicator--b49f08c3-ebbd-4965-8854-4f4426367033", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f8634e-b4dc-4f8d-bcb9-f03d06eb3f15", "sighting_of_ref": "indicator--7dda83ff-1fcc-463b-9e1f-6b8ba59d8828", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4164c004-ae09-487e-a9a1-08393ba829d3", "sighting_of_ref": "indicator--af135e24-4bfd-4c76-89a8-4377a2b15666", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82335942-5508-44ba-8a73-64dd477dd203", "sighting_of_ref": "indicator--60698d3f-e73d-43fc-a8e6-0572d6dce1c5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6e2785-0ed9-4be3-8c7f-50f6f2783ec7", "sighting_of_ref": "indicator--22768dd6-81a3-4ea5-ac8a-98788596111a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35d2021-6b2c-4bc4-bda2-5260a216ccb3", "sighting_of_ref": "indicator--d2be549e-d7c9-42c3-9ef6-66df0da48964", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5abcbf86-c552-4420-a3e7-68357f75477c", "sighting_of_ref": "indicator--b918e897-b0f0-4869-8029-c58d89eaee9e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6b3feb-97d0-4960-9b8f-d20abdb96779", "sighting_of_ref": "indicator--d831342a-e59e-435d-8010-f67ca10f5d2d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d045d876-397b-47b9-b786-343a6d4bc3c6", "sighting_of_ref": "indicator--d831342a-e59e-435d-8010-f67ca10f5d2d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35bc5c6-5853-4966-bd5d-974e95c13451", "sighting_of_ref": "indicator--e3335ef3-ab2b-40a8-8010-c3b81dc067a1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d9334db-3b35-4ab4-9429-c51e290114a3", "sighting_of_ref": "indicator--f1d0d452-4039-4b5e-a444-49923725bf7a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0099749a-f676-418d-ad42-fa3ab9618b88", "sighting_of_ref": "indicator--eaa7176a-a6f6-46a6-a08f-45deb6076b1d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d006a082-bff1-421c-a841-17ac68cc7825", "sighting_of_ref": "indicator--eaa7176a-a6f6-46a6-a08f-45deb6076b1d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c71718-9146-498c-9808-d3c736abe4c4", "sighting_of_ref": "indicator--4f278ea1-04c8-4f70-ac3d-25ecc546696c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f5c50f-fcb8-4097-82b2-13b3d5648e44", "sighting_of_ref": "indicator--eef96ee7-b7b6-498e-b4ef-f3313e12fd05", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf90f773-34b6-473b-9bc4-2040a9dc2ae2", "sighting_of_ref": "indicator--76f25c93-fcd7-4913-a280-c419367e993b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14248c9-b7d9-45c9-8f15-2d7453ce4465", "sighting_of_ref": "indicator--96af419e-ee4a-42b5-8218-b0ac9a18ecd5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd49c8a-9c6a-4c31-82a6-56d1dc14b7bb", "sighting_of_ref": "indicator--9bf90d68-68b2-4239-b89c-383e050bcd6a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace2c5f4-3653-4da5-be55-7c036ac58871", "sighting_of_ref": "indicator--59babad6-a1b1-4a93-bb2c-c82f04a9205b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67711802-e36d-4020-9ad8-605840c9abce", "sighting_of_ref": "indicator--59babad6-a1b1-4a93-bb2c-c82f04a9205b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626f2112-9d11-4406-800f-9447f85841fc", "sighting_of_ref": "indicator--d35f173d-af3f-4696-9a30-337a273cabfe", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c713a0-602c-456c-bf85-4915389bf5c7", "sighting_of_ref": "indicator--a548e873-b6a6-46a1-b3da-645da6f9239c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b793e366-f0fd-4244-be44-54c56c3511c0", "sighting_of_ref": "indicator--d0529c53-bf6a-4682-a2f8-dc4ff9267bdd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92399d44-8471-4699-9eef-e9a2711b209c", "sighting_of_ref": "indicator--d0529c53-bf6a-4682-a2f8-dc4ff9267bdd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07b29ab-dbe1-439f-92b7-bdc3c26e6a22", "sighting_of_ref": "indicator--971c4cd9-014e-4c6a-8030-39216c403cbb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15322111-3a4a-47e4-9658-4de90d53abbd", "sighting_of_ref": "indicator--c97456b1-cfb8-4084-8708-6622beeda22e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f852b0-17a4-448d-80b0-d4b7bd8a4720", "sighting_of_ref": "indicator--c97456b1-cfb8-4084-8708-6622beeda22e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2647f2c4-d930-47ae-a34d-3f76ab2f4414", "sighting_of_ref": "indicator--5d807294-f773-4393-a156-d12bb40eb689", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff67af5a-8664-47dc-a6bb-929e22c9d30c", "sighting_of_ref": "indicator--8b4b9316-9dfa-4cf2-b15f-e30d377f4f76", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8681593d-3533-4202-9fb0-1cdd1710e772", "sighting_of_ref": "indicator--de52604a-7e6d-4789-b31a-56764f0ff9b7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea4e770-58b4-447b-a708-da881aa11ef2", "sighting_of_ref": "indicator--bb539601-b819-48c0-9bb3-06dc3c91b2d0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006dc3a6-cb12-41d2-a6fa-e59cd7ad5130", "sighting_of_ref": "indicator--5465361b-5537-4494-b258-1c962fa48ae2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a7fbb8-33fe-4a5d-97e0-c73034df25eb", "sighting_of_ref": "indicator--21e31ee4-d87e-46bd-9f51-e61d01525cc2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a19599-3c59-43b5-b176-9272a121d8ee", "sighting_of_ref": "indicator--94063832-69e3-4fff-9622-79aba1176736", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb25086-0f66-41df-ad8c-ad9d0a6d4811", "sighting_of_ref": "indicator--49f548b1-056b-46e6-8adb-bf897e11efa6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34a33cd-ef00-49ed-8ea2-d70bd1422916", "sighting_of_ref": "indicator--07d7431e-daaf-431e-875e-a89e89631d58", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73af99a6-05a7-4c1e-a714-259c2712efae", "sighting_of_ref": "indicator--041a5158-f07b-4ae3-8615-2c0f034e46ae", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c1975a-3598-4ca8-8d3e-addc6a6c0af8", "sighting_of_ref": "indicator--b5b1c28e-3f1c-4786-b6b1-4d691e3393ed", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374cc6b7-14b9-4752-9946-96ba6f09b9a5", "sighting_of_ref": "indicator--a836358a-1738-4713-a0a1-155c92f2516b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be97244-264e-468a-b0f9-94a16ad2d7cf", "sighting_of_ref": "indicator--ae24ad91-4560-4bcb-b8fc-bfab105d3f5e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d716fe-7b80-4b37-93ca-a68bfce90f9b", "sighting_of_ref": "indicator--6323b163-fdd2-4707-81dc-c2231c0bbbcd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf541fe4-e808-4056-b73b-5a5296246e9e", "sighting_of_ref": "indicator--51bf9831-b430-4293-a8b9-7758ac17e3e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6cfc75-daff-4d02-9ed3-f4222ce9d879", "sighting_of_ref": "indicator--e4be61e4-0d1d-4e96-b9f0-e0ea1b6e1269", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b1b7f6-e5c5-4842-92ef-a9cf93632bf5", "sighting_of_ref": "indicator--e4be61e4-0d1d-4e96-b9f0-e0ea1b6e1269", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2300e076-f372-45b0-8c06-2947b5644ffe", "sighting_of_ref": "indicator--baa7f191-4441-4582-952f-fb19a9a030e9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa21dac5-2c93-4fa2-adad-7742b557d2cb", "sighting_of_ref": "indicator--8a523778-de54-4946-ac76-af9c9d654a2d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7a54f5-008a-4234-8f76-b7d9152607de", "sighting_of_ref": "indicator--8a523778-de54-4946-ac76-af9c9d654a2d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3202968c-fb49-4c12-b9a8-308fea1a1179", "sighting_of_ref": "indicator--be77f661-f537-4b90-bfb8-1ecf5f18a23e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43c4690-e007-487e-bf4c-76533f0646af", "sighting_of_ref": "indicator--457e0c40-6049-484d-9b83-7463cfef020c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8193a576-a632-4a91-bd85-067a9a94c13c", "sighting_of_ref": "indicator--ca469442-37cc-4f7a-afb0-0075799c43b9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a17e0fd-a141-4087-94bb-6368b596e48c", "sighting_of_ref": "indicator--004c892e-2c16-4fcf-ad48-91d31d70c8d4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984d94b3-bf0b-44eb-9e3a-8b17e7f07f96", "sighting_of_ref": "indicator--c536cc01-813d-44d7-88d2-a84dc362252f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534159df-7a3f-4459-82fc-6856077609ba", "sighting_of_ref": "indicator--ad2957d6-cd18-42b3-ba39-b67631966efd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6935506-bf2f-40a8-84d7-dd95e8933c4d", "sighting_of_ref": "indicator--97d5f6f1-4345-4a63-a13c-f1134c489c49", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40983ef-a6bf-42bf-a96f-ab2b3006bc88", "sighting_of_ref": "indicator--fc3740e2-6f68-4a9f-8e55-1d99c240eeaf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e6cf8b-e74a-495d-850c-3c1236803b22", "sighting_of_ref": "indicator--8a764aa4-2407-4b9e-9e16-16d5d52021df", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0759ce1-5d5b-472c-a0dc-2f9f0f1e1f24", "sighting_of_ref": "indicator--358fe0eb-1f86-4c2b-8d5c-e0b5f14642d9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d145bef-5bd8-4138-a14c-79897a7d8ecb", "sighting_of_ref": "indicator--fd1710b1-31ac-45f1-937d-39f635f73031", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843a3ad8-80ef-46e1-9159-356b5bd0de53", "sighting_of_ref": "indicator--52da6338-a809-44fd-a0d7-053e4fd7cf50", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9576fcfb-be46-4bef-9de4-6401be1b7667", "sighting_of_ref": "indicator--968bc789-0534-40f3-a0f2-a2d35b907add", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59b03a7-f155-4af9-a9c0-d1f27e3cd214", "sighting_of_ref": "indicator--09322708-590a-4fb0-9bbb-559eeaddfb42", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278e1e69-4498-4e80-999e-4040c2d4c3f6", "sighting_of_ref": "indicator--8836b437-870f-40be-8582-749c1377a75c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2688e64-c301-44dd-a039-abce0af2091d", "sighting_of_ref": "indicator--7427837a-eea6-42d5-9d0b-39ebdd28f5b5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53b5eeb-7981-4958-b8a8-7a31ec72c465", "sighting_of_ref": "indicator--6f2cb8a2-d2fd-4273-8e0a-4ddec1d26b4a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c38865c-c44e-42f6-bf29-9e6af9b7d5f3", "sighting_of_ref": "indicator--95fa60aa-70f5-4854-9d43-147f6f616716", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbce56eb-1ae0-49a3-b184-efa7639d3d06", "sighting_of_ref": "indicator--e5d059a2-3b75-4cdf-bd11-b6b994db498c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69556de3-efc3-4f92-9959-059c3e61a7bc", "sighting_of_ref": "indicator--e5d059a2-3b75-4cdf-bd11-b6b994db498c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab540cd-63f8-4882-8b01-f52822493a05", "sighting_of_ref": "indicator--e5d059a2-3b75-4cdf-bd11-b6b994db498c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d26877-db4e-441e-b809-f7d0c12f5b10", "sighting_of_ref": "indicator--de884263-50bc-4aa9-917f-585312defd43", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da8a134-606f-45ca-82df-37ce18993372", "sighting_of_ref": "indicator--1dcc7f63-503e-4cc6-97f4-4c758069e584", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d056e1c7-de02-4a57-ba9d-df0b8b23ad30", "sighting_of_ref": "indicator--6868ede0-19fc-4f96-b396-216b00167363", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eafb392a-c479-4111-9cd8-0c524290f8a3", "sighting_of_ref": "indicator--d34fb909-5970-4fe4-af1d-2edbd72fbef9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ecdecc-8997-4bb5-bd2f-6d638a2d2ce7", "sighting_of_ref": "indicator--d800e872-9b71-4b41-a73e-b48fd033a743", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b96d306-b7ee-4e63-849e-a02ce29be524", "sighting_of_ref": "indicator--9070dc15-ec6d-4d78-a3d4-dfeb8520e5a2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead3e1d1-5b82-4c96-a80d-edaf46a9732d", "sighting_of_ref": "indicator--9070dc15-ec6d-4d78-a3d4-dfeb8520e5a2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5eed20-00b2-45d7-a2c8-eeaf7ad08309", "sighting_of_ref": "indicator--7b9869a1-2166-4cca-b695-4e7b344aaa6a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0a24d3-6ba1-425f-a348-7ab9fd6490ed", "sighting_of_ref": "indicator--69631bcc-8ee2-4142-88e5-ff601e08aff5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48eb8a1f-ea3f-45b7-8d67-6253cf7aff92", "sighting_of_ref": "indicator--24e8d12a-55ee-4e6a-a666-4243abdf78f3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8633f942-ff09-4d8e-8fd5-7b93202d875f", "sighting_of_ref": "indicator--24e8d12a-55ee-4e6a-a666-4243abdf78f3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5257eb3c-f877-41dc-a910-9a3af89ce1e2", "sighting_of_ref": "indicator--267b5551-dea3-4a40-b4b2-59660f320274", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a526781-dbfb-4437-b602-7be55864c9c1", "sighting_of_ref": "indicator--b1a92872-c736-44da-b201-443edb6b594f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf83d171-4aef-414e-bc4e-967ec4f4ce44", "sighting_of_ref": "indicator--f0d6dedf-70cd-42e6-8b44-99aa532b501d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee0637f-3514-43ac-96c4-733a0664b23b", "sighting_of_ref": "indicator--5c85a4bc-100e-4cff-9e4e-6354bd1a3e85", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5885794-c898-4847-ad5f-2d3c78bf6dda", "sighting_of_ref": "indicator--05f418d6-60e8-4352-95ec-f18460987335", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2867725-73a0-4772-a374-b3224cdc112d", "sighting_of_ref": "indicator--c7a8812c-d790-40ca-9a39-b0a801df0523", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9c5aca-2f2f-4313-9d7f-4f74bd381bd4", "sighting_of_ref": "indicator--18c9b51c-0f4d-4183-aa15-faebb07986bf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d57788-03d1-46bf-9ae1-c81ad1931e4a", "sighting_of_ref": "indicator--64628e87-5e43-44b9-b5b9-336f9b7a09c7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe48c1a-f91f-4de5-9ad2-b7b9c32890ae", "sighting_of_ref": "indicator--63939bde-3bb4-4af5-bfd1-8de822dc81e3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17bca2f3-6754-46aa-8be7-8cca154c5f3e", "sighting_of_ref": "indicator--63939bde-3bb4-4af5-bfd1-8de822dc81e3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c7041a-84fa-44fa-9395-d6945d78c229", "sighting_of_ref": "indicator--a096238b-93a3-4019-9e82-d8c9b09875ab", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ea1677-8d6c-4ac6-91f2-93fb971bc5a2", "sighting_of_ref": "indicator--a096238b-93a3-4019-9e82-d8c9b09875ab", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7759539f-2950-4eac-805d-a97c26a92a8b", "sighting_of_ref": "indicator--b6c00e7c-f00a-46b7-b1eb-ebea28cf15dd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f3ae4c-210f-407f-a292-9ad4880ca9dd", "sighting_of_ref": "indicator--5c2f5711-2e2f-42b9-8d75-66b6582ccf99", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5ab107-6638-4a99-b3e4-3470ba44e8cf", "sighting_of_ref": "indicator--a0c6f413-ee03-4244-a206-0de4f7466455", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43ba6f1-2767-43c1-bfaf-5db78c225896", "sighting_of_ref": "indicator--c5fe2376-2ab9-45bc-b760-647aeb010601", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f82e4e0-7347-49a0-8c42-d7f6229e8311", "sighting_of_ref": "indicator--c5fe2376-2ab9-45bc-b760-647aeb010601", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e6c92d-f3d6-41b5-9f30-bb011f8ed425", "sighting_of_ref": "indicator--fd128d9c-f483-4c29-83d0-e4dbbf09195b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a310de14-14a9-46fa-b94b-79614676d32c", "sighting_of_ref": "indicator--23983f8a-de04-43ca-aaa4-81d1f41ec1f4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3171a3b-dd5b-4828-aa72-4e7d81c47f09", "sighting_of_ref": "indicator--2883dcbb-2183-4e3f-9f74-a94616b739d8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c41fa0-5596-4e40-ac63-8a0f3e5cf0a3", "sighting_of_ref": "indicator--2883dcbb-2183-4e3f-9f74-a94616b739d8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e7a6ec-f470-47f4-948b-c48c465dede7", "sighting_of_ref": "indicator--2883dcbb-2183-4e3f-9f74-a94616b739d8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0806c1-bd7f-4456-8acb-d34bc9fc24b7", "sighting_of_ref": "indicator--ec1daf08-08e2-4eb7-8c54-94205ee3fba0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd08933b-849d-4ff9-b3d9-e4f5831288a0", "sighting_of_ref": "indicator--7544ff4f-41ce-40e1-96ee-d2aa94190038", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45119efe-38d9-474d-973f-4073a3d2e986", "sighting_of_ref": "indicator--7544ff4f-41ce-40e1-96ee-d2aa94190038", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5be103-b387-4287-8253-ddf03b7655ca", "sighting_of_ref": "indicator--7544ff4f-41ce-40e1-96ee-d2aa94190038", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6b1f8f-2fe0-4a4b-8989-b5368246e6ba", "sighting_of_ref": "indicator--553e4cc7-7573-4d90-96a3-1f681e547332", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c21644-27c9-47b2-8371-a0eee52c397e", "sighting_of_ref": "indicator--0aaf4180-b002-4c73-9c6e-b64a978bf58a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e671146-31be-4fe1-98a5-3955fed1b469", "sighting_of_ref": "indicator--e4844ea9-36f1-4945-89ff-528b3006e8af", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e4bfd2-a5d8-4bf9-9e55-b845ebe6a2c3", "sighting_of_ref": "indicator--3697ef5e-971c-4d06-9bd4-be03c9626158", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88167eb-32d6-441f-a74c-25941673776d", "sighting_of_ref": "indicator--6dad51eb-f7e8-4ff0-bf6c-f0b893e3fad4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149ff914-f850-45a2-ad02-719fc663a135", "sighting_of_ref": "indicator--2bfd0e17-2a33-4881-8a12-b1ad749ed3cd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2612eb6-aa64-4a70-9263-8947e4dfe906", "sighting_of_ref": "indicator--2bfd0e17-2a33-4881-8a12-b1ad749ed3cd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af29eb7-4e8f-4cd8-8ad8-95f802e3f05c", "sighting_of_ref": "indicator--2bfd0e17-2a33-4881-8a12-b1ad749ed3cd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2856db-35b6-433d-ab02-8c6b8a154655", "sighting_of_ref": "indicator--da3963e1-47a7-46f5-b6c7-774730dfd352", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd42062-b4a4-4e5e-ab1f-a13dee36c198", "sighting_of_ref": "indicator--303c310a-9706-4fcd-aaf2-273234c2f2e0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259de729-d2c0-4726-bd78-694eb5fa3059", "sighting_of_ref": "indicator--6aae1dc3-375f-47c0-9f2e-e042dddd0870", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd54649-1325-4ae2-a1f2-630f146a2a9d", "sighting_of_ref": "indicator--b78878d3-925e-4c31-9586-2bae14e508ad", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90b4531-16bc-42dd-b06a-974fab19f5eb", "sighting_of_ref": "indicator--b78878d3-925e-4c31-9586-2bae14e508ad", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0752b313-1e5e-4572-9671-7276a9460805", "sighting_of_ref": "indicator--b78878d3-925e-4c31-9586-2bae14e508ad", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73cf93e-c246-417c-a766-ae8102fb496f", "sighting_of_ref": "indicator--874a1944-770d-4238-ad0d-3fba15ee55d3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676bf4fe-1816-46e3-b1db-d1cfb90cc2fb", "sighting_of_ref": "indicator--709b0fdc-0796-4fbd-8678-c2ba1c7f7e30", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfd7f70-71a0-459e-bf40-365bae92c712", "sighting_of_ref": "indicator--6e2625bb-834e-4669-a8f9-596c9d6e85d4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4b0822-f9cf-4ee8-b9e2-9a20be9848cb", "sighting_of_ref": "indicator--6b9f25ae-2123-4116-bb70-bb9c7107b06d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb560f76-d22b-4ecb-844e-0f103a37a08f", "sighting_of_ref": "indicator--6b9f25ae-2123-4116-bb70-bb9c7107b06d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57139279-9074-4386-8dc0-5e4f91befd1a", "sighting_of_ref": "indicator--c31267d7-55cd-4226-aebc-81d20176619e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb3566d-33bc-499b-81ac-9c9d5595adf1", "sighting_of_ref": "indicator--c31267d7-55cd-4226-aebc-81d20176619e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a914e3-a3e7-4601-919f-e273eea0a2c2", "sighting_of_ref": "indicator--c31267d7-55cd-4226-aebc-81d20176619e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc8bc40-f0cc-42e5-852c-12c9d47474a8", "sighting_of_ref": "indicator--d523b1a6-a4d1-48fe-865e-d7450dc858e2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7e608d-93c6-488b-89e8-2673215be7df", "sighting_of_ref": "indicator--d523b1a6-a4d1-48fe-865e-d7450dc858e2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0599dd7b-7ee8-4088-bb41-4c0c7df8a3c4", "sighting_of_ref": "indicator--ef4a394b-2a68-4faa-ad59-0bd999a49e06", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05cb76f9-5aa6-439e-a18f-c3cc8b0ad647", "sighting_of_ref": "indicator--9e8dbc65-0545-417f-b467-d7ff82d73fad", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf0cfae-1cee-4735-b810-cb719c6c2cf3", "sighting_of_ref": "indicator--b4623509-635f-44cd-963f-71ed74d25f79", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8688c83d-7563-46a3-a7f6-ac97bf373916", "sighting_of_ref": "indicator--f29af035-78c5-4274-bdec-96d621c48f14", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ccc731-9e5e-40d0-b3da-9cfaa6c00755", "sighting_of_ref": "indicator--eedc3035-2ecc-4270-9c88-7445ddd19087", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9721219-3054-4673-af4a-6303e6208c09", "sighting_of_ref": "indicator--eedc3035-2ecc-4270-9c88-7445ddd19087", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9573f2-75e3-4c56-8f75-a87b6fa4795f", "sighting_of_ref": "indicator--eedc3035-2ecc-4270-9c88-7445ddd19087", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821afcf7-3080-4556-a795-5858027aff64", "sighting_of_ref": "indicator--52e6669a-f55d-41a9-b995-a39e0cd7324b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093fe5bc-d419-4639-910f-4c5bc14d222f", "sighting_of_ref": "indicator--52e6669a-f55d-41a9-b995-a39e0cd7324b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446c544a-7726-483f-9393-48efb1c52479", "sighting_of_ref": "indicator--52e6669a-f55d-41a9-b995-a39e0cd7324b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9b6c51-c926-4229-b07f-27db8ecbad15", "sighting_of_ref": "indicator--14d31f3e-d3cb-45ed-8691-99f7a9648a03", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3efad8-5969-490e-bdef-21a22085993b", "sighting_of_ref": "indicator--14d31f3e-d3cb-45ed-8691-99f7a9648a03", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aaaa03c-7caf-4b46-b441-95ee8013e785", "sighting_of_ref": "indicator--14d31f3e-d3cb-45ed-8691-99f7a9648a03", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c872a02-8966-437e-a40c-d657ebb19a2d", "sighting_of_ref": "indicator--f508d742-81fb-4748-8c8f-b7dd6809cbfa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8844ee63-4f68-4d4b-a363-ec55601b61f5", "sighting_of_ref": "indicator--b4050456-6621-4333-8035-ff6ba4fcbef3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7120f0-069c-4925-bc66-91cca3e0138e", "sighting_of_ref": "indicator--b4050456-6621-4333-8035-ff6ba4fcbef3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17af81f7-ab44-48bc-ab8d-af0a868c5483", "sighting_of_ref": "indicator--fd869272-65b2-4070-87a4-790d83f610b6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2720e37-a0bf-4436-aa60-c7643102897e", "sighting_of_ref": "indicator--a7a48986-7630-4316-ad19-0cffab1156fd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c353b66c-334b-4d90-8435-29fdc79839d3", "sighting_of_ref": "indicator--a7a48986-7630-4316-ad19-0cffab1156fd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6165271a-613c-4c19-8e19-ed5944de1b53", "sighting_of_ref": "indicator--9502dcc3-cf9f-472b-8cdf-ca9232a588da", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d554dd-8514-4eeb-be60-1eceb135d92a", "sighting_of_ref": "indicator--8a474e7f-72e0-4381-9e8c-96aac60d83ac", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06c01f2-f469-47f6-a85b-25d163e2786e", "sighting_of_ref": "indicator--8a474e7f-72e0-4381-9e8c-96aac60d83ac", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d66ca17-535d-44a1-8ebc-00d42f99ba7e", "sighting_of_ref": "indicator--3f74c9b4-f82e-4db9-ae31-d0fa4de72d01", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3bd745-b982-4e36-86e7-5e76552294b0", "sighting_of_ref": "indicator--7c6d8e01-8a33-4dbf-9b16-c16c7a3afcd2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6079fbb-30f7-48ea-ade1-b292165f7b82", "sighting_of_ref": "indicator--7c6d8e01-8a33-4dbf-9b16-c16c7a3afcd2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082dfd81-7e6d-4fd3-8610-ee9b6c4cc89b", "sighting_of_ref": "indicator--df9a9106-6448-404d-902a-ad628f5262d1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11146b1b-3f3d-414e-8075-5b5f57931c27", "sighting_of_ref": "indicator--df9a9106-6448-404d-902a-ad628f5262d1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6763837e-b68a-4e7d-84da-fb573dbdb882", "sighting_of_ref": "indicator--d66feef9-554c-44a1-adf0-2e60d8d5cbc2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbd472e-4c90-43d9-b26d-12c52d38fff1", "sighting_of_ref": "indicator--d66feef9-554c-44a1-adf0-2e60d8d5cbc2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8823782-1379-497a-a407-72bfd7f523f9", "sighting_of_ref": "indicator--80dd34aa-6e50-4951-9729-889493e42231", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3205b5-7ebd-4d5f-9388-e0df4ab74c70", "sighting_of_ref": "indicator--6d2afabb-d2b1-4dd4-a1a3-c36f4af42055", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26d4b27-b130-4b40-ac2c-29e15815dfcd", "sighting_of_ref": "indicator--6d2afabb-d2b1-4dd4-a1a3-c36f4af42055", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1154f5e5-1dc4-4c7c-afb0-7b2455b4b7cb", "sighting_of_ref": "indicator--f6e67376-7673-44a0-989f-8da79baade88", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9874bd10-9dae-4778-9f0a-eee8cc25d20e", "sighting_of_ref": "indicator--f6e67376-7673-44a0-989f-8da79baade88", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7403a9-5192-4b8f-9425-2034c75cbdbb", "sighting_of_ref": "indicator--f6e67376-7673-44a0-989f-8da79baade88", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0adcd5b7-2799-450f-a927-3fd11df210f7", "sighting_of_ref": "indicator--f6e67376-7673-44a0-989f-8da79baade88", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d8db5c-a31d-4c6e-af4d-179c77731518", "sighting_of_ref": "indicator--1a489adb-dd39-48ed-ad89-101b599604f5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9cea36a-c8ae-48c5-b8bc-0947981c0e39", "sighting_of_ref": "indicator--fa2a5f7e-a9e0-453e-8b43-4d826fcf868c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52aea663-a368-459a-9e91-4f5575101dff", "sighting_of_ref": "indicator--fa2a5f7e-a9e0-453e-8b43-4d826fcf868c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5604ba79-e65b-48b9-9461-5a7ab2cc88b2", "sighting_of_ref": "indicator--0f94e217-196c-4094-8409-0e130e76e9ad", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a3d0a6-dd13-4354-b751-aa073380663a", "sighting_of_ref": "indicator--ffa0f8d4-466c-490f-bec9-a796963f7810", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f4c844-f80b-4d8c-b467-964d900fb359", "sighting_of_ref": "indicator--62880ef9-f46c-4c9f-98db-4e9cf3ba5a90", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563f622b-4087-4064-b4f1-b251bf157a43", "sighting_of_ref": "indicator--ce587521-983f-44d9-bb57-98fc2f8f124a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7a9a23-ce62-498d-9c12-f9c39f7df060", "sighting_of_ref": "indicator--b194e4d6-dae3-481f-ace8-ac5a38ac05ec", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981efd7b-578d-4f7a-8c31-529d85b8dce5", "sighting_of_ref": "indicator--69b6e954-551d-4fb5-8a13-1d296944c5e3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f058ba-30b6-41a5-82bd-bc406e3a360c", "sighting_of_ref": "indicator--45311c34-ef55-4d22-88ab-4a6154b8bf5f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8acdd891-7971-4910-ac57-3514f7eb41bc", "sighting_of_ref": "indicator--45311c34-ef55-4d22-88ab-4a6154b8bf5f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1d456f-7a65-4b44-86c5-553aa10a2736", "sighting_of_ref": "indicator--9f5bb6d8-1b2f-4fbb-90a3-12f76e03a464", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aab6ddc-658d-4258-baa3-aa4d64c9105b", "sighting_of_ref": "indicator--9f5bb6d8-1b2f-4fbb-90a3-12f76e03a464", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59794b2-2b6f-44fb-ba9e-afee014f5b24", "sighting_of_ref": "indicator--30940a51-16b7-4d4a-9336-c497fbcfa1c5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf263b14-35ac-4f7f-bcfb-dd74b4f64ff7", "sighting_of_ref": "indicator--f75ea9ad-fc00-4f7f-b336-08b75338bdfb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1917f2-333c-461d-a9f3-8a643e78f06f", "sighting_of_ref": "indicator--f75ea9ad-fc00-4f7f-b336-08b75338bdfb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de09a54-b5aa-431f-9fe6-7e851437a0e0", "sighting_of_ref": "indicator--c745424a-fa1c-4bc9-a36d-31082431e289", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab839c2-2adf-4bde-afb4-652e076d57b4", "sighting_of_ref": "indicator--7aeaf46d-8290-452e-a19b-89e5986f3d65", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cde56b9-df54-40eb-840b-a3c96fa87b73", "sighting_of_ref": "indicator--7da0b1a7-582e-4b90-9aaf-24f578fd7e6e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ef9483-99a0-4fca-b31d-4806360d1e03", "sighting_of_ref": "indicator--94be333c-f6fa-469d-8db8-70688e935cfc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70479b7f-0433-4624-8f2e-a2989714a95a", "sighting_of_ref": "indicator--c360cb0f-cfd6-4366-84ee-5761d9286a9d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22c9e38-8c21-4af6-bc96-47cfd03c4e4a", "sighting_of_ref": "indicator--d3f5326f-25a7-4a63-8007-880950caa382", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8065a8-b197-4cd0-9635-41bd9c55a60b", "sighting_of_ref": "indicator--72b4376e-2509-4dc3-b4f8-7aef90644171", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6f5282-3745-4d69-b601-0e9e92db9818", "sighting_of_ref": "indicator--72b4376e-2509-4dc3-b4f8-7aef90644171", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8256d1c-936d-4555-ac22-e8e67a536850", "sighting_of_ref": "indicator--fbeb90d6-4d0c-4a14-b656-4fa16eba0160", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22351a19-a921-4965-8ad4-9b66e272f0c9", "sighting_of_ref": "indicator--fbeb90d6-4d0c-4a14-b656-4fa16eba0160", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff10407-ebd2-48c8-96eb-fe049b300266", "sighting_of_ref": "indicator--fbeb90d6-4d0c-4a14-b656-4fa16eba0160", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123005ec-c65c-4093-bac0-29548ce211af", "sighting_of_ref": "indicator--3d7eb882-3c39-47a3-9143-658dcac18c45", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa331e3-20a1-44c0-a9ad-2801bbc1ddff", "sighting_of_ref": "indicator--8c62ddcc-759b-4bdb-821d-d6e0932e6f88", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb64b5ca-e2a0-4050-b6a6-fae9d9cd8713", "sighting_of_ref": "indicator--8c62ddcc-759b-4bdb-821d-d6e0932e6f88", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0389c6-9b99-4576-b343-da67e07480d0", "sighting_of_ref": "indicator--c20a59bb-41a7-481d-b874-e047fb851258", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d67556f-f794-428d-a3a2-da59316cae4f", "sighting_of_ref": "indicator--c20a59bb-41a7-481d-b874-e047fb851258", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f362a0-22ec-4e8c-84c0-4845bdab27a6", "sighting_of_ref": "indicator--e57e2947-369f-4635-9936-7c3245bfb937", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c9d54d-b47c-4371-998d-bbce278f859c", "sighting_of_ref": "indicator--fe31aa35-a820-47cf-acfb-0d01bb203600", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--208832eb-0967-4973-94a7-4c842ca4cdc5", "sighting_of_ref": "indicator--fe31aa35-a820-47cf-acfb-0d01bb203600", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded7912b-c0cc-4659-9afd-581bd179682e", "sighting_of_ref": "indicator--fe31aa35-a820-47cf-acfb-0d01bb203600", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837ae217-fcab-4067-91cf-aeea2d63d289", "sighting_of_ref": "indicator--855c3128-5249-4b04-95ae-9c3235de5d6b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc89c3e-56f4-4d25-ad88-3608d4d4d6ce", "sighting_of_ref": "indicator--770e7cf9-54f9-462f-b789-0de9b21f121f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ac9259-dc27-418c-87bf-0f4a5030edac", "sighting_of_ref": "indicator--770e7cf9-54f9-462f-b789-0de9b21f121f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c9278e-a7fb-48c8-89e7-97d1bd2007ba", "sighting_of_ref": "indicator--aa0471cd-b01b-45ae-af15-a9fc16a53fe1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e4252b-88d9-4270-90e5-e75fde2d453e", "sighting_of_ref": "indicator--aa0471cd-b01b-45ae-af15-a9fc16a53fe1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2faa2d29-84b0-426f-bb04-2638766baa6a", "sighting_of_ref": "indicator--abcbd654-02eb-4f7f-a08a-9396991e1089", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0313c590-e61c-417e-a3cf-f727199ae7e9", "sighting_of_ref": "indicator--abcbd654-02eb-4f7f-a08a-9396991e1089", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b2ed62-5dd7-491e-847e-24e14e24c694", "sighting_of_ref": "indicator--e89d3625-ff61-495e-84ce-a4a59ce01260", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7055d92-8c07-4d25-9bdd-8575ca9a4ad5", "sighting_of_ref": "indicator--e89d3625-ff61-495e-84ce-a4a59ce01260", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2103cc59-b8d1-4c6d-a997-54b5a1def859", "sighting_of_ref": "indicator--52ca0ed2-4f3d-4433-80d0-792005aae620", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4d0311-edc0-4478-afeb-e05b2685aa3d", "sighting_of_ref": "indicator--a91a3079-e0a8-4935-8da8-2bf4a9885830", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17eb7f95-d6cb-47b5-ab48-6d983145d341", "sighting_of_ref": "indicator--a91a3079-e0a8-4935-8da8-2bf4a9885830", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36de7d71-33dd-4ae3-aa01-2c730b5bfaaf", "sighting_of_ref": "indicator--a91a3079-e0a8-4935-8da8-2bf4a9885830", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97f5434-963c-4221-a8a0-03ac6b9491bd", "sighting_of_ref": "indicator--bc830f62-6de9-4881-805d-c82cec5d59f2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1cf9bd-5f06-46ad-a495-596246196d20", "sighting_of_ref": "indicator--83a52ee0-0601-456f-8265-94f6d736dd0c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69bd356-ba1c-4712-b728-2a9c2e441f63", "sighting_of_ref": "indicator--efedb1f3-beaa-4de5-8214-21bd17034d94", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4608529-2040-44be-b05d-bd6d50204c5a", "sighting_of_ref": "indicator--66584893-0940-4710-add6-f92074143c3f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2101a57-e09c-463a-a352-43125e6427cc", "sighting_of_ref": "indicator--8c89724d-da81-427a-9a7a-260591225657", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6faebbe6-39c8-4597-8c36-a7cf6b34182a", "sighting_of_ref": "indicator--683094b2-6f8c-4df2-a83c-6dd6de0018a4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08356fae-daed-4c77-ad39-1f8d0418a9c7", "sighting_of_ref": "indicator--9e2f7811-5942-45e5-8ad7-36af3022b9cb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e73354a-4e2e-42a6-a6a7-6669159e1af1", "sighting_of_ref": "indicator--9e2f7811-5942-45e5-8ad7-36af3022b9cb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6382ebfa-4bc6-444f-b90d-ed972edce15b", "sighting_of_ref": "indicator--602ae1fe-aab5-4b7f-828b-640c68c16f1f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15803f46-afce-44f6-83f4-d0e955e1e4c4", "sighting_of_ref": "indicator--2ba32631-5a5e-4038-82b0-7d74075c45a4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423ca74d-32ac-4269-b4f3-f16d88708211", "sighting_of_ref": "indicator--1079cb0b-1825-4f5d-84f7-5c7528299ab2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03ca0a1-da8e-4d71-94e2-2d5cf7a5b748", "sighting_of_ref": "indicator--1079cb0b-1825-4f5d-84f7-5c7528299ab2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ccc8582-42a6-41d6-b6fb-74bad22cb9f5", "sighting_of_ref": "indicator--54bc2a2b-c06b-40e6-9243-31b223e4b845", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0cffb09-6ec7-4de4-940a-0b5ba99a6641", "sighting_of_ref": "indicator--d4398115-0727-44a9-9741-87e8d391de92", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840e3932-0815-4e00-8b1e-01bdebf2f020", "sighting_of_ref": "indicator--71bb890c-acc4-43ee-930c-0937d36b1397", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72798b8b-410e-4b2e-9b1a-60ee7f910ed7", "sighting_of_ref": "indicator--71bb890c-acc4-43ee-930c-0937d36b1397", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3bcb7f2-079a-4e5c-8c00-870d41ede527", "sighting_of_ref": "indicator--71bb890c-acc4-43ee-930c-0937d36b1397", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96fbd316-6876-42de-9061-e8e9ff8bae58", "sighting_of_ref": "indicator--afa6316e-6b58-4968-82e7-af67469f1ddb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb3160d-32c3-4721-a6b7-f16c9dcae995", "sighting_of_ref": "indicator--afa6316e-6b58-4968-82e7-af67469f1ddb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67ab570-6342-4965-9772-f7cac80b0635", "sighting_of_ref": "indicator--6ddcc646-b2dc-4212-aa2e-1b52813fdd21", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d2b5c2-e649-4774-87c1-3b235db0d58a", "sighting_of_ref": "indicator--185ba857-d104-4b38-baf2-2a7e086bb62c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da6e768-a512-4a03-be98-4cf0ee67968d", "sighting_of_ref": "indicator--bccd05f1-c1b8-48b1-aaab-be450b95e116", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94a308b-0adc-4685-ba97-3184ce2649d9", "sighting_of_ref": "indicator--bccd05f1-c1b8-48b1-aaab-be450b95e116", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e93096e-604c-42c3-8588-27156e8eef19", "sighting_of_ref": "indicator--5a96728f-9da8-453f-a2e2-6918256e39e3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d0f81a-eb85-494e-a39e-fa7832c647c2", "sighting_of_ref": "indicator--147959e3-71ee-454f-a21f-10f6d87379d1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9227c79e-d435-4e04-b98c-6c2efccdb232", "sighting_of_ref": "indicator--1c258a40-efd3-4dc6-bd32-f24eea9b7b93", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f295b5-b213-459c-bc99-74967dbb38c7", "sighting_of_ref": "indicator--1c258a40-efd3-4dc6-bd32-f24eea9b7b93", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bce8c8f-a390-48b0-8dca-7c21394dd1d3", "sighting_of_ref": "indicator--6da49aa0-5dbc-40e4-b175-ee6cf735d0bf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8ed1f0-5926-4452-9a32-fbf305a4ed9b", "sighting_of_ref": "indicator--6da49aa0-5dbc-40e4-b175-ee6cf735d0bf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3ba25e-c82f-4bea-805f-c50ee87b133f", "sighting_of_ref": "indicator--761ebf3b-c8cc-4884-a446-42fcb4d9b259", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3ac6b1-b348-48f6-a4fe-268b1df08b1b", "sighting_of_ref": "indicator--daa55c46-69c5-4ae7-a71f-1d1b12f68098", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa0e0b4-6971-4ffa-aca7-79fa14272478", "sighting_of_ref": "indicator--76abf68e-53bb-47cb-bcb6-bbf3230eb9d6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01852355-0f24-4749-b273-76a6136d883f", "sighting_of_ref": "indicator--5a4d5278-2001-46af-b716-4a442d97d38d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd37093-201e-42f3-99a1-9b79135e0f1b", "sighting_of_ref": "indicator--5a4d5278-2001-46af-b716-4a442d97d38d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120790fa-8b00-45cf-a434-54c4a10e12ea", "sighting_of_ref": "indicator--d406cce5-3b50-4342-b103-aed962f76f95", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341fdca5-dc8d-4ddc-afe9-74e962273d09", "sighting_of_ref": "indicator--d406cce5-3b50-4342-b103-aed962f76f95", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598513a4-23b2-4b9b-8ec6-fa4832281f44", "sighting_of_ref": "indicator--d406cce5-3b50-4342-b103-aed962f76f95", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ab796c-b841-44ac-bb80-f65d21faccaf", "sighting_of_ref": "indicator--9b166fbd-0f30-4a73-8d6d-1757d497095b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24bae82a-4e74-4ddd-bc01-49bb103aa752", "sighting_of_ref": "indicator--9b166fbd-0f30-4a73-8d6d-1757d497095b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb4c6e3-d016-435b-adfe-a2b69fc6117c", "sighting_of_ref": "indicator--f3651935-c3bc-463d-9e65-23472082ff72", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a02bdb-580c-4992-9a7e-d5f1b43c3a8b", "sighting_of_ref": "indicator--475b6be6-91d0-4c32-986e-1227ff102c95", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1436b22e-7afd-445a-836f-21397036f608", "sighting_of_ref": "indicator--e0d9b016-3815-4d96-817d-5471bf397a10", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8e6619-d4c7-4eb4-b953-3359f1a7f059", "sighting_of_ref": "indicator--dc721585-2d27-4ce4-8725-245fc451c111", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e69449-4a5d-4fca-8efd-3c45e4ab4089", "sighting_of_ref": "indicator--59758f03-f4c1-400d-b4f6-39a4ae060b62", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c677390b-408b-4ecc-8fb6-f7ccb1ea85b2", "sighting_of_ref": "indicator--59758f03-f4c1-400d-b4f6-39a4ae060b62", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530f1d2c-df0e-45be-a4df-d0800495478e", "sighting_of_ref": "indicator--59758f03-f4c1-400d-b4f6-39a4ae060b62", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a5e1b0-077b-46da-ae9b-c39aa868c7b0", "sighting_of_ref": "indicator--55fb87c8-85c3-4766-9b4f-08ffde3ef8d1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5543cdab-4584-4649-b43c-a259a784d415", "sighting_of_ref": "indicator--361615e2-aaac-4c10-ba16-144b41474788", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd6383f-b601-4435-b943-673be000c8ad", "sighting_of_ref": "indicator--361615e2-aaac-4c10-ba16-144b41474788", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138fe29b-d9fb-472c-a01c-43b07f65ad93", "sighting_of_ref": "indicator--9a375bc1-7225-40c7-be8a-3152bfadb50a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296746f4-9906-4d76-b29c-6212ea771bf0", "sighting_of_ref": "indicator--680ba86f-62a0-4c44-9ad4-7a9ae752ec4b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a691c93-8331-4119-bc41-949db4f88e4a", "sighting_of_ref": "indicator--680ba86f-62a0-4c44-9ad4-7a9ae752ec4b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2bcf004-7347-41b7-a98b-45e639b97b5d", "sighting_of_ref": "indicator--cf4b8083-9698-467c-a71a-79125fa415c3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7e04e7-9b1a-4f43-9cde-8af270786d42", "sighting_of_ref": "indicator--ce4bda34-659b-424f-9a06-f74c24056e2a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0fb21d-fe87-45aa-a785-28bd02d348cc", "sighting_of_ref": "indicator--1bfb098a-b02c-45e5-98a2-eecfecf46f2c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3e1d31-c806-4492-83ce-82d82e74fb39", "sighting_of_ref": "indicator--1bfb098a-b02c-45e5-98a2-eecfecf46f2c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95844e79-9586-4787-b3f0-02f6dba7f821", "sighting_of_ref": "indicator--254ac515-b272-456c-bc4a-f3b591ac573d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe69c8e6-4336-47f2-9549-970d067a111b", "sighting_of_ref": "indicator--254ac515-b272-456c-bc4a-f3b591ac573d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d7be5d-91dc-49ce-af20-e64afcf15ad4", "sighting_of_ref": "indicator--51a3e331-4ed6-4c59-a45c-89946e20ca06", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53906b2c-cc6f-489b-ac28-4dc4ac83c7d1", "sighting_of_ref": "indicator--51a3e331-4ed6-4c59-a45c-89946e20ca06", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d25d9f-66b4-435c-9d3c-0481832fa738", "sighting_of_ref": "indicator--cdf568b0-66ba-4509-be2b-f04f7bce7185", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75acdc1c-036c-4442-86b9-d0658d70c6a9", "sighting_of_ref": "indicator--902f798f-9cfa-4c20-9119-b25c10761aad", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d55626-54eb-43ae-8520-a14d82bbc968", "sighting_of_ref": "indicator--fc1cec2e-8333-4bf5-b72f-aa9b97340c96", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206ce2fb-5051-4c0f-850f-784aa6ddacb3", "sighting_of_ref": "indicator--fc1cec2e-8333-4bf5-b72f-aa9b97340c96", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd22b39e-a402-427e-9176-65f3431b2b8d", "sighting_of_ref": "indicator--c6ed44ed-34a8-4842-9cac-affa104952bf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355eae57-5042-4f43-8dc8-dcc57cb7a503", "sighting_of_ref": "indicator--c6ed44ed-34a8-4842-9cac-affa104952bf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58aab5ff-e217-4cb5-ad25-413a062d4194", "sighting_of_ref": "indicator--c6ed44ed-34a8-4842-9cac-affa104952bf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a4d937-2aed-437a-b341-c29c5644f85c", "sighting_of_ref": "indicator--cf07d090-e49b-4567-8c5e-832556fc2bdc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4433bcf7-4188-4a0b-80a6-82095beb5d0c", "sighting_of_ref": "indicator--1a2b5e03-33a8-4950-9d33-f5ce918bd8a8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba39b23a-cfbd-4431-87fe-b75352dcf4ae", "sighting_of_ref": "indicator--8a1890ff-237d-410b-aef2-f70e9503b82b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e7f44d-8d4e-4e7b-86fc-571d96654eb9", "sighting_of_ref": "indicator--cdfbd27f-b477-4e4d-848d-d51d5ba912e7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0431bf0-749a-449a-bd67-ab0c48b2f881", "sighting_of_ref": "indicator--cdfbd27f-b477-4e4d-848d-d51d5ba912e7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df997eb-787a-4c39-a62b-c0f215a72d09", "sighting_of_ref": "indicator--cdfbd27f-b477-4e4d-848d-d51d5ba912e7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39813fe-a102-4eb6-b4a3-70ea686bde71", "sighting_of_ref": "indicator--1b3db4ec-1aed-47fb-b199-e910d38d1015", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c505a24d-cc17-4bec-99ec-56874de82034", "sighting_of_ref": "indicator--f342e5ea-87cb-40ee-a402-36175c36c031", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fd2acb-c113-40f0-9531-b0253d6fb0b6", "sighting_of_ref": "indicator--f342e5ea-87cb-40ee-a402-36175c36c031", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4213f0a8-6c00-4b02-9bbe-fec9a23e2006", "sighting_of_ref": "indicator--dc1fabcf-9649-463e-b2ca-5988c78334e1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734bd239-bf0e-4579-bcee-3e07daa4b692", "sighting_of_ref": "indicator--dc1fabcf-9649-463e-b2ca-5988c78334e1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c594622f-2b52-461e-a458-ef3a2800d8a0", "sighting_of_ref": "indicator--dc1fabcf-9649-463e-b2ca-5988c78334e1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9f81aa-af31-4d6f-9e85-f180fbf3ef28", "sighting_of_ref": "indicator--e04f0c64-d0db-482e-81d9-3954e88f77d5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63526c1c-5549-4ee7-8799-7b7fc3d2a3d1", "sighting_of_ref": "indicator--e04f0c64-d0db-482e-81d9-3954e88f77d5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826c4d03-f424-4570-9c45-f154a7289c9e", "sighting_of_ref": "indicator--4a1d9d6a-6b90-4fa8-bcfb-75cc652cde8c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd96a2ea-937a-4ab8-8d4f-0c04b0e8910e", "sighting_of_ref": "indicator--4a1d9d6a-6b90-4fa8-bcfb-75cc652cde8c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f457f73-0047-443d-8533-e40b4baaa7bc", "sighting_of_ref": "indicator--ced1eaa2-2930-4a8f-a832-dea89696b77c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31babac5-3a9a-4e35-9f1b-a2df25653e0b", "sighting_of_ref": "indicator--ced1eaa2-2930-4a8f-a832-dea89696b77c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965fb733-6ca0-4a9b-8dce-81b73e802081", "sighting_of_ref": "indicator--86e5e496-d2a1-4a50-915b-7287791875f7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e7d5b5-ac36-4031-a727-d825febe5af4", "sighting_of_ref": "indicator--cd23f18d-4aab-488a-b854-dad8ee2f11e9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779626ea-abed-4abe-adbd-7621f4ff7bad", "sighting_of_ref": "indicator--acecf579-e40c-4bbc-bbca-a07719b1c2a7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a604d96-8eaa-4c61-a34f-7d4b7c23edcb", "sighting_of_ref": "indicator--acecf579-e40c-4bbc-bbca-a07719b1c2a7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d81dc57-cc36-41ee-bf6a-c63fe6532d21", "sighting_of_ref": "indicator--4c42fc0e-db88-45ba-a1f5-f7ff33af9e52", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bfd999d-faa7-4b9c-bcce-7983ff6216e3", "sighting_of_ref": "indicator--4c42fc0e-db88-45ba-a1f5-f7ff33af9e52", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb33819-b280-4bc6-b355-aee164645561", "sighting_of_ref": "indicator--b53c04b0-2c36-48cc-9f3a-03efe9545167", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82236bb-3822-4414-81a7-73935aa7cbab", "sighting_of_ref": "indicator--6e46dd02-8344-4f62-91ce-94ff38bd36ac", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b669de-6485-4dd3-8bbb-e594affceeff", "sighting_of_ref": "indicator--a67bcf0a-2387-44b4-ae92-5639b07702f1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4d1bad-761f-436e-aa2e-b04142f1b3c6", "sighting_of_ref": "indicator--b26a39aa-5252-402a-ad2e-0db6fb8d12fa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa7d8b6-bdf8-46f8-a8af-4813e090d4b3", "sighting_of_ref": "indicator--6298712d-5929-4b66-aa07-f75311a70c80", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0a4a3c-99ac-4d17-bc89-1b05491b72d7", "sighting_of_ref": "indicator--6298712d-5929-4b66-aa07-f75311a70c80", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbe943f-ed19-4e36-8ea4-e0d0ccb12b7a", "sighting_of_ref": "indicator--840b7e2d-d4dd-498e-9ff3-efd3f28220e3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3a26be-ad8e-4c1d-99de-ee494715320f", "sighting_of_ref": "indicator--195f27a4-7120-48db-a4da-5726091e30bd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f51ec1-12cf-4c1a-9f21-ca735acec6ed", "sighting_of_ref": "indicator--e7b1fc9c-ebf3-473a-9267-57dca003fdae", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f51913b-a198-4443-9067-9abb624bbc62", "sighting_of_ref": "indicator--e7b1fc9c-ebf3-473a-9267-57dca003fdae", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6cfa7fe-e19d-4e94-a770-f47bdd9df3c6", "sighting_of_ref": "indicator--81b71429-0fbb-4d54-8a2e-70aabf24cccd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20530321-9f71-4742-8ca3-d8c8f82c99fc", "sighting_of_ref": "indicator--81b71429-0fbb-4d54-8a2e-70aabf24cccd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c151ca77-9394-4d1a-a491-58f4f7bec0c6", "sighting_of_ref": "indicator--81b71429-0fbb-4d54-8a2e-70aabf24cccd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec0ce42-fdc1-449e-85d7-372dc54b5737", "sighting_of_ref": "indicator--4ac47b2e-72d9-4b00-a4da-9af6002a8bb5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39001a5d-9ec8-4a90-8fec-2e1ed00e71b4", "sighting_of_ref": "indicator--306ca2ae-d8bd-47d3-ac42-a4d51537fa65", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d330b465-931c-4f42-89d1-1272e8928d41", "sighting_of_ref": "indicator--306ca2ae-d8bd-47d3-ac42-a4d51537fa65", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46197c7d-6009-40d4-a4dc-ea6faddb55e0", "sighting_of_ref": "indicator--1468dc8f-1cfd-4a26-a5b0-a8bba02a98d4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13a6bac-8ef2-49bc-a2a3-8fde70a9312a", "sighting_of_ref": "indicator--10eefa1b-b153-4970-8560-b2fb64c7d5c3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77f5a5e-5418-40a3-ab8e-1eb2e590cad9", "sighting_of_ref": "indicator--b5d144bb-08e4-4573-af6f-da7ed3cf8ecc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c51f5e-632e-4717-b990-d6b45c11dc0b", "sighting_of_ref": "indicator--b5d144bb-08e4-4573-af6f-da7ed3cf8ecc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88dda9be-b389-41a0-8885-a691c069d504", "sighting_of_ref": "indicator--6520fded-00cf-490f-9844-4c957475dc60", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba4b120-75c9-44df-b6f2-0abfbe9d42ed", "sighting_of_ref": "indicator--617929cc-3afa-4606-aee7-f891d80f5605", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4d0c23-b71e-4fa0-8469-8727134ae9e4", "sighting_of_ref": "indicator--32c4b20e-7783-46b5-bbff-3010902a6c31", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b3e335-bd2a-4bf4-a495-e459cedf61ca", "sighting_of_ref": "indicator--32c4b20e-7783-46b5-bbff-3010902a6c31", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4e3f03-69fe-4688-bf54-8c1051c414d3", "sighting_of_ref": "indicator--32c4b20e-7783-46b5-bbff-3010902a6c31", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e5208b-4a94-4110-a417-192d353c8b6c", "sighting_of_ref": "indicator--61bc51ea-e995-4853-9201-033d9c32f9fd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449e697a-2d54-4ea7-85ad-064c32fa33a2", "sighting_of_ref": "indicator--61bc51ea-e995-4853-9201-033d9c32f9fd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877061d4-ee1b-4bc0-a458-c5ec983d38cb", "sighting_of_ref": "indicator--49aad0d5-4d5e-47d3-bb82-a7cde8867f45", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d822f4-6de0-44c1-91dc-df39174d731e", "sighting_of_ref": "indicator--49aad0d5-4d5e-47d3-bb82-a7cde8867f45", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb06a312-59a0-403b-a6ec-545467e08a1f", "sighting_of_ref": "indicator--01623b88-f40f-46e3-b588-60f7b3a0f487", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1811fbcd-c8be-4e5a-800d-fb6cad59202a", "sighting_of_ref": "indicator--01623b88-f40f-46e3-b588-60f7b3a0f487", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcaa88f-295b-4fd9-9c04-0fc853da6914", "sighting_of_ref": "indicator--01623b88-f40f-46e3-b588-60f7b3a0f487", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2756603-2242-497a-97ef-b3ea38cda8f2", "sighting_of_ref": "indicator--a0cbd533-80c4-4aa6-b7ef-ed4294150c27", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c234000-e3fe-4891-97af-9ee5701f18e9", "sighting_of_ref": "indicator--a0cbd533-80c4-4aa6-b7ef-ed4294150c27", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68094aee-4076-4296-961a-20006d55d4db", "sighting_of_ref": "indicator--a0cbd533-80c4-4aa6-b7ef-ed4294150c27", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbdc0d40-a656-4106-b899-e806e3ed2508", "sighting_of_ref": "indicator--2dbf0131-9b58-4d10-80f1-9179f028d6ad", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9d268a-584a-43ec-a806-fd6a8c0bc66d", "sighting_of_ref": "indicator--99994ce3-7832-45b5-8757-2934fa335a77", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59cb2e5f-7403-49d0-9920-32779a66e05a", "sighting_of_ref": "indicator--523f7fb7-712d-4bd3-a319-4287d45fb0bc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d86a0c2-7099-48e2-9da7-acac5553953d", "sighting_of_ref": "indicator--523f7fb7-712d-4bd3-a319-4287d45fb0bc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b52bb45-4144-4231-af2b-3084a44e00bf", "sighting_of_ref": "indicator--647a6072-1573-4412-803d-0fd3621d1740", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1506b74-d4e3-4a73-be2b-ef940c20e7a3", "sighting_of_ref": "indicator--f84f13dc-590d-446f-be1a-083d6276108e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f7463a-2359-486e-8a99-62659d103988", "sighting_of_ref": "indicator--bac871a0-202b-4a42-9dfc-a33b8d24d493", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9eaf11-ad37-43f0-a40c-d4efc744376f", "sighting_of_ref": "indicator--bac871a0-202b-4a42-9dfc-a33b8d24d493", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c3218a-423b-4318-9c70-41435e49a278", "sighting_of_ref": "indicator--bac871a0-202b-4a42-9dfc-a33b8d24d493", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ed3010-6d1b-4320-a5a1-35886301a155", "sighting_of_ref": "indicator--1f8ecd9a-b516-470d-b598-bf158a5403a5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff3f78b-05f1-4791-ac52-9afcb6a6db15", "sighting_of_ref": "indicator--1f8ecd9a-b516-470d-b598-bf158a5403a5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bcddae5-9c8c-48e8-9326-bd9fc0c21a48", "sighting_of_ref": "indicator--1f8ecd9a-b516-470d-b598-bf158a5403a5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10fb7404-0abd-46ef-839f-31d1fb052336", "sighting_of_ref": "indicator--00abe86a-9f57-4da6-9457-c9065ec7bd7b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73f7a37-47cc-4f20-a85d-50d501cd195b", "sighting_of_ref": "indicator--00abe86a-9f57-4da6-9457-c9065ec7bd7b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2809f35c-1b13-4ea5-83a6-4a7064e0097d", "sighting_of_ref": "indicator--00abe86a-9f57-4da6-9457-c9065ec7bd7b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f31387-084d-42dc-bd34-aa60ec8bf6cc", "sighting_of_ref": "indicator--206940d4-70f5-4590-a09f-861f430f7da1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce941001-bd08-4b1a-bce3-5c04c987b5f6", "sighting_of_ref": "indicator--44cfaa13-54fa-4a6d-8ec3-a3490e97e7f6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb9f4a4-2237-442f-8a0c-8aaccef8783f", "sighting_of_ref": "indicator--44cfaa13-54fa-4a6d-8ec3-a3490e97e7f6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9c8b41-8b51-4b6b-a443-1800c6bbef9e", "sighting_of_ref": "indicator--763b5204-effe-4f02-bc13-1085777e79f6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4eed96c-6af4-4983-91cb-928c14aefb33", "sighting_of_ref": "indicator--858983a3-9620-4893-954c-eb2cdca1c9e3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5391f96e-6a5b-40a9-9522-458706ad7d9a", "sighting_of_ref": "indicator--858983a3-9620-4893-954c-eb2cdca1c9e3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ef4543-cf8e-480d-8c8f-3a6a6c37b972", "sighting_of_ref": "indicator--858983a3-9620-4893-954c-eb2cdca1c9e3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008b1099-6b62-4d90-bad0-3b46e4148a2b", "sighting_of_ref": "indicator--94e285c7-bf2d-45b7-a894-3b1a3b6724fa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25c0139-c83a-4405-83c9-40c413149d4b", "sighting_of_ref": "indicator--94e285c7-bf2d-45b7-a894-3b1a3b6724fa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6832ea07-ebea-48de-af78-dbad570d8232", "sighting_of_ref": "indicator--94e285c7-bf2d-45b7-a894-3b1a3b6724fa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06dad02b-a747-4d8c-aeab-205010ee85f9", "sighting_of_ref": "indicator--d7d510ab-5b63-478e-9a5d-14b9473d50b8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d638e55-5baf-4bbf-b684-48b0c3e3fbb8", "sighting_of_ref": "indicator--d7d510ab-5b63-478e-9a5d-14b9473d50b8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90446e6-0a3c-41b0-9204-b5b8912b5ffc", "sighting_of_ref": "indicator--cba73e84-875d-402e-b5d2-c855d6367b8d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b295624-9c55-4468-9b7e-5f3802da7826", "sighting_of_ref": "indicator--cba73e84-875d-402e-b5d2-c855d6367b8d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431bc87f-4b33-4909-873e-4fd8b90bff32", "sighting_of_ref": "indicator--cba73e84-875d-402e-b5d2-c855d6367b8d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d1dea3-14c5-40b1-9af3-e1d8a2bb8419", "sighting_of_ref": "indicator--6ced674c-9233-4465-ab3d-6d764d74b5eb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e72671-3760-4ad4-aea3-e69f61c21358", "sighting_of_ref": "indicator--607a4547-5b36-465f-ac4a-8fb5d3cb629a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bad4bcc-0242-45e5-a5ba-aa74a4527b23", "sighting_of_ref": "indicator--15d8c7d2-b5e6-48e1-9a6a-dad1432088d4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb6a82f-13f6-4e1f-8585-f21d52fad787", "sighting_of_ref": "indicator--ba8e1e9b-418d-43b3-a802-d1782a0ca190", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b727b0-3532-4b98-8f54-4973f2d4cd1d", "sighting_of_ref": "indicator--e79da5f2-2a61-4dde-9098-730bcd5dbcee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aebfdaf9-2508-41b9-b1d6-87080d98f75d", "sighting_of_ref": "indicator--e79da5f2-2a61-4dde-9098-730bcd5dbcee", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c281beb-80d3-4b19-a8de-c880e2594ee4", "sighting_of_ref": "indicator--e79da5f2-2a61-4dde-9098-730bcd5dbcee", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e423219-aa46-4058-a0ca-956a960910d5", "sighting_of_ref": "indicator--e79da5f2-2a61-4dde-9098-730bcd5dbcee", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f878168c-9763-4fc4-9ea4-0b0b98c1726d", "sighting_of_ref": "indicator--d27d44c9-4608-4a59-8743-b356bc77fe07", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275b8f72-0560-4213-b37e-b04cdfd2f10c", "sighting_of_ref": "indicator--d27d44c9-4608-4a59-8743-b356bc77fe07", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe80bc5d-c90a-45b7-aebd-6b8cf3a7074d", "sighting_of_ref": "indicator--ba1708ed-c838-459b-8553-a3e21cecc3a4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb90b50-2936-4ac7-9be3-9357ab397005", "sighting_of_ref": "indicator--ba1708ed-c838-459b-8553-a3e21cecc3a4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--effaf77d-02d1-4553-a9f5-9b11de9dc375", "sighting_of_ref": "indicator--5d3b5f75-8eae-4911-8e6f-e9164d3e06de", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6437165-2172-44d1-a6b6-04ee9c5a11ca", "sighting_of_ref": "indicator--5d3b5f75-8eae-4911-8e6f-e9164d3e06de", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e322fd-6152-4f07-bc67-2fb628608a39", "sighting_of_ref": "indicator--28c9306d-d6b8-4714-9a53-0e1639b6897c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a455a91-54bc-4eb2-b78b-720b5d311533", "sighting_of_ref": "indicator--ae6e320d-b1da-4ee5-91cd-56cd005ef6ec", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead42c6e-3870-4b68-970d-09109be68e6c", "sighting_of_ref": "indicator--0562f501-8973-4da2-9842-5a9f802062b2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3319cb52-3de0-4d24-a1da-6f308ee97f50", "sighting_of_ref": "indicator--0562f501-8973-4da2-9842-5a9f802062b2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f078e2-a60c-4ccf-9e89-5ef82c1338c8", "sighting_of_ref": "indicator--f88a05d9-8435-465a-8861-5609df7d6cd5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db9e274-86a1-4309-aa6f-1131c38cc508", "sighting_of_ref": "indicator--922cfb49-2aa0-48b3-b18c-e89810697718", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db1ae4b-6ebe-4461-bf86-f27d316db9c3", "sighting_of_ref": "indicator--9233fc77-8ca2-4f65-9619-330ad8eadf67", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a97854e-7c53-4ebd-9635-90e9df6be53c", "sighting_of_ref": "indicator--5b62efc1-69be-4d8e-bf29-455e0c5b28c2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955dc4a3-cb9e-418b-ba82-c92dcec79da4", "sighting_of_ref": "indicator--5b62efc1-69be-4d8e-bf29-455e0c5b28c2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0913cf92-b690-4a68-bc41-f8158483f0dc", "sighting_of_ref": "indicator--f59e0e91-29e8-4090-a2f6-85b07c4317c1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29d1e32-7eb3-4b05-b939-5da58ddc1f74", "sighting_of_ref": "indicator--7b203f65-24d3-43a6-8546-af6bc2a594e9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f79348-b14d-406d-9ef5-feeed9133218", "sighting_of_ref": "indicator--7b203f65-24d3-43a6-8546-af6bc2a594e9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d823abc-e5de-47c3-8da5-abed4c9ddba7", "sighting_of_ref": "indicator--54d2114c-4bd0-49d7-9c23-181ac62c4807", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d562cc36-bf62-4a4d-8692-c0f314ebc865", "sighting_of_ref": "indicator--3a4493a6-800e-4425-bd47-ed0575fe4454", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b326c4d2-e1fa-48e6-a82e-fc3ac394aa92", "sighting_of_ref": "indicator--3a4493a6-800e-4425-bd47-ed0575fe4454", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3976c55-82bc-470c-83b2-d130bf5c8ebe", "sighting_of_ref": "indicator--a9362a16-eb62-4b6d-ad84-261de08759dc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8873c3a4-682d-491c-8bd9-51a0b478fdb3", "sighting_of_ref": "indicator--a9362a16-eb62-4b6d-ad84-261de08759dc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84a2b1f-30da-4d9c-9314-7e8147575ee5", "sighting_of_ref": "indicator--6a3f2fc6-4e3a-4852-94fc-ddc8d4d381f7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776492be-dbd2-475a-af4d-0c9ac4b09d97", "sighting_of_ref": "indicator--f870efd3-dfc2-45c0-a75f-8b8eb7797e15", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85035052-9b90-43ef-99e1-774f03c3596c", "sighting_of_ref": "indicator--ef2ecf0e-3c8b-4ec4-93a3-9236c5106ac5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b40c9d-d7e9-4e0b-a1a8-5b2bb3445486", "sighting_of_ref": "indicator--e666aa5a-1a5a-42a6-ba4c-b234c08d81f6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07976081-372d-4fc0-9868-92080db924c8", "sighting_of_ref": "indicator--e666aa5a-1a5a-42a6-ba4c-b234c08d81f6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af08f43a-e225-4bf1-b5ec-1e89174d9ad5", "sighting_of_ref": "indicator--32f2e888-76c0-4c4e-963a-de69e6973101", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3abe38-f3cc-4ae5-9469-47ee81eb79ea", "sighting_of_ref": "indicator--32f2e888-76c0-4c4e-963a-de69e6973101", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4591d29-640f-4293-8946-2be297d50ebc", "sighting_of_ref": "indicator--3e6fdeef-b6d5-4217-879a-9cd508969454", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c186bccd-43f4-42bd-a653-3105431b414b", "sighting_of_ref": "indicator--6cf7f27f-bb38-4247-8b55-c93a553ac638", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351116db-fcbf-4801-85d7-5cc247cfc059", "sighting_of_ref": "indicator--01c09dd7-b659-475a-afd2-74fa7830e401", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c01e40e-a882-4a84-96ad-e12f9520278c", "sighting_of_ref": "indicator--4a4d5e64-edd1-42bb-a67f-c73fa75196ae", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33fc23a-cf36-453c-8d1b-8d636ad7713a", "sighting_of_ref": "indicator--4a4d5e64-edd1-42bb-a67f-c73fa75196ae", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3649a4bb-aef5-4f50-ab82-3f6c06d21d02", "sighting_of_ref": "indicator--4a4d5e64-edd1-42bb-a67f-c73fa75196ae", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d69ab473-00d7-40db-aec6-954eea383c2b", "sighting_of_ref": "indicator--89b6d974-aae6-484b-8125-9472719cf5e3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c131297b-644f-4075-9850-2f126db17a29", "sighting_of_ref": "indicator--89b6d974-aae6-484b-8125-9472719cf5e3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed81eec-4628-4def-af6e-e5a7c4e0a2cc", "sighting_of_ref": "indicator--89b6d974-aae6-484b-8125-9472719cf5e3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845e3f67-7e06-47c1-a7f8-39b95f3d587b", "sighting_of_ref": "indicator--5d4508f4-910e-4240-b998-f4e2d9ebdfff", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097cedbd-641f-4807-bdfa-778da1e38a56", "sighting_of_ref": "indicator--5d4508f4-910e-4240-b998-f4e2d9ebdfff", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a430ac7e-83d7-465b-a593-be1a31ab3109", "sighting_of_ref": "indicator--5d4508f4-910e-4240-b998-f4e2d9ebdfff", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c727f51e-2fb7-4cc0-90e7-19cac7dd8cdd", "sighting_of_ref": "indicator--b51269ac-2481-48e0-84bd-dd9b5a0369d9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26aa2a39-a99a-4366-a4da-58566e7a9d48", "sighting_of_ref": "indicator--822bd16c-0dc9-4858-a70c-abf83b906dcc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06bd0e2e-1314-4d38-b252-ea42096569de", "sighting_of_ref": "indicator--822bd16c-0dc9-4858-a70c-abf83b906dcc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48dc2795-bca0-4507-ae54-4760db2edf22", "sighting_of_ref": "indicator--d2cdb59b-67ab-41ac-b872-8149d1573016", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c95e03-e10e-47f3-af7b-1538a84ca7b1", "sighting_of_ref": "indicator--d394ac04-df87-40bb-86f9-3a9fc26e3471", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0801923d-5f84-4fde-9d4b-65503330f948", "sighting_of_ref": "indicator--d394ac04-df87-40bb-86f9-3a9fc26e3471", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa66bef-7413-4de5-878c-f595562a66ee", "sighting_of_ref": "indicator--d394ac04-df87-40bb-86f9-3a9fc26e3471", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0303177e-6b3b-4c13-b2f7-18cb5ab12082", "sighting_of_ref": "indicator--73d03928-4fe0-4d14-87a1-579232cdb3dc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c0de32-4e5c-4b04-9f25-3cd970740ceb", "sighting_of_ref": "indicator--8d436aa2-a898-4713-8097-beef134239fe", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6458acd9-1f0d-4a91-822f-b00bdf5e1bd9", "sighting_of_ref": "indicator--8d436aa2-a898-4713-8097-beef134239fe", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b911a2-59c7-43a8-8a38-50ce3aae7fa1", "sighting_of_ref": "indicator--8d436aa2-a898-4713-8097-beef134239fe", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2247ee1d-9a95-4696-b73b-399b6c36eaf1", "sighting_of_ref": "indicator--519cff95-56d6-4fe3-a3df-b0b4cab9406f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a369d076-1440-4af3-b22d-5ee5511e74bf", "sighting_of_ref": "indicator--029d49bc-9181-4d1d-acef-66a400471d21", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e862c0-e2ad-4005-94d5-66f6e01d96fc", "sighting_of_ref": "indicator--5d8327a7-85ad-4c33-9b1b-a5c6752201b6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f6b4fd-65dc-4d15-8428-f8d73223cde4", "sighting_of_ref": "indicator--f3d13b64-5465-4c37-a387-1b7a8e2541d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5820754-7acb-485e-a7eb-d60da827842c", "sighting_of_ref": "indicator--3497008f-8758-4817-9980-099281a0327d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbdb9c0-50c2-465e-8272-65ee9769f7fe", "sighting_of_ref": "indicator--3497008f-8758-4817-9980-099281a0327d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41553bbf-ebbb-4db7-9593-bd033fbdd102", "sighting_of_ref": "indicator--3497008f-8758-4817-9980-099281a0327d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf2a904-2db7-447d-ad44-7f03843798a0", "sighting_of_ref": "indicator--df13caf3-093b-48ef-b488-8e42e6f068a6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe96d2e8-f90b-4bd0-87ba-7b5f9f66e318", "sighting_of_ref": "indicator--df13caf3-093b-48ef-b488-8e42e6f068a6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7ebcab-fd8e-4aae-b44e-d57c36bb376b", "sighting_of_ref": "indicator--df13caf3-093b-48ef-b488-8e42e6f068a6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d8dc0f-b14f-40ff-a936-799dc2017d36", "sighting_of_ref": "indicator--f6772033-63f8-49c2-b760-4bcd0f27519b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408ef516-aa98-4eb0-843a-431d5b8eb012", "sighting_of_ref": "indicator--f6772033-63f8-49c2-b760-4bcd0f27519b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb58d1f-0798-433d-8bfb-5e4616f0b29e", "sighting_of_ref": "indicator--f6772033-63f8-49c2-b760-4bcd0f27519b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314296e8-ec5d-4fef-994e-16dd99995806", "sighting_of_ref": "indicator--1b9c353b-c158-405a-8951-a33217c11750", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda63091-9e72-4920-8dc3-64fbeb44035a", "sighting_of_ref": "indicator--1b9c353b-c158-405a-8951-a33217c11750", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5246186-cedc-4733-8ba8-03f8a931e927", "sighting_of_ref": "indicator--c9eaee68-5eba-4d74-b97f-91d26244f2ce", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7f2765-93e9-4493-b987-6c773db24348", "sighting_of_ref": "indicator--3e710db1-d718-4980-9e5e-be85cd2b3ccc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64d351f-d0e1-4012-8fd0-a8d991d5590f", "sighting_of_ref": "indicator--730df323-b5d8-4caf-8931-7c6a95e15697", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405cf1a4-c699-48a8-b181-54dfee2db12f", "sighting_of_ref": "indicator--ed2d4024-de1d-4b68-8395-bbee55e6136c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9d3e78-c6a6-42dc-9510-d740e5332b24", "sighting_of_ref": "indicator--505cbb9c-0863-40a0-ae9c-0e1fd0098b52", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f41bda-fb5f-48cb-ab79-948e6f43391f", "sighting_of_ref": "indicator--5210e8e0-1914-4439-8f1b-30edad9d9ee8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faea158d-4f58-4e89-85e4-0a7ac3d0e4a1", "sighting_of_ref": "indicator--55504596-911b-41b4-a9d3-36ca70ae735f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157a1262-55c4-47c6-acdd-d634ae8a28b9", "sighting_of_ref": "indicator--903c3aed-04cb-4764-8128-5b11f992609f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf0fc4a-12af-460a-9356-338c824b25a8", "sighting_of_ref": "indicator--903c3aed-04cb-4764-8128-5b11f992609f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8892cfd1-c04b-46e5-8db8-2a18bf9e1e18", "sighting_of_ref": "indicator--903c3aed-04cb-4764-8128-5b11f992609f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15dd461e-34a9-4875-93c4-a337942fcd1a", "sighting_of_ref": "indicator--0885fd37-1f37-4957-93d6-69ae888999de", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15ff381-8c5e-411d-90d7-99f45e168ad6", "sighting_of_ref": "indicator--d5220c8a-6000-4b35-9b34-50166192df2b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb294e8c-aabe-4787-993e-4b402161218e", "sighting_of_ref": "indicator--d5220c8a-6000-4b35-9b34-50166192df2b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb0d7f1-3f8e-4e78-b91a-632e8f2808e7", "sighting_of_ref": "indicator--b7f0ce9b-aba6-447e-b10c-fd73414ec742", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c18374-4ac6-42a6-a87c-20ebaf2339ca", "sighting_of_ref": "indicator--1fcc9731-6e96-42e1-b349-262eae14a78a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b90f60-06df-425f-a8b1-9a3ac431f044", "sighting_of_ref": "indicator--1fcc9731-6e96-42e1-b349-262eae14a78a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044d7c59-9bd6-496d-96df-fce324626b8e", "sighting_of_ref": "indicator--1fcc9731-6e96-42e1-b349-262eae14a78a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8e8465-370a-45b8-b137-f0550dae99d7", "sighting_of_ref": "indicator--c92def01-6c62-4dfc-a900-8020076ca7cf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b17881b-d1e6-465d-978c-4e840616d4b7", "sighting_of_ref": "indicator--1585d049-112a-456b-b136-8fba37db24e5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad44ee6d-beb7-486d-9df9-467f425351c0", "sighting_of_ref": "indicator--70ff574d-9122-4e3d-840b-4f9d2c6b39e1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7d462c-38a8-4008-951f-e16881e0893a", "sighting_of_ref": "indicator--70ff574d-9122-4e3d-840b-4f9d2c6b39e1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74475a1e-ec85-4190-adc1-d99ae5ef1cbf", "sighting_of_ref": "indicator--70ff574d-9122-4e3d-840b-4f9d2c6b39e1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69cf2fba-2f5e-493b-9e44-5f1d1919b642", "sighting_of_ref": "indicator--97b4e538-a08b-43e0-b311-69e530b55182", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9093f1-21c4-40ab-83bd-d4f3988511c9", "sighting_of_ref": "indicator--c22eb16b-ef78-4685-9c58-89df6698c138", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e0b3d0-95d1-4f90-a49b-1df5e47eeb74", "sighting_of_ref": "indicator--70a3c53b-269b-40c8-8de1-24a82ca72796", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b28b88-b75d-4d33-9db5-8a99fe6eb856", "sighting_of_ref": "indicator--4cb22a24-32c4-4e3d-9467-e1a7dbd953a1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f3b0b1-85ba-4480-9460-f2260bc57355", "sighting_of_ref": "indicator--4cb22a24-32c4-4e3d-9467-e1a7dbd953a1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78a8186-0a7e-40f5-9944-a8c020cd5dba", "sighting_of_ref": "indicator--ca278712-7bb2-4f6c-97cb-12f13a42d251", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f7dac2-8a7c-46a3-97f9-cb5cf8543598", "sighting_of_ref": "indicator--50f3940b-1a40-42d5-a982-182f6636db60", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dabe2c9-f7ea-4f47-baf1-b2fa8296f222", "sighting_of_ref": "indicator--806aa868-7073-4748-b1ce-d835f4843bf9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26524193-98dc-40a8-98de-d9e92d7ddfb9", "sighting_of_ref": "indicator--806aa868-7073-4748-b1ce-d835f4843bf9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7e153b-ff35-4b67-940a-550dff90779b", "sighting_of_ref": "indicator--45b40112-bf2b-4095-902a-3f7f5d00834b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7315f4a6-c6ff-4507-af36-f587773d3c23", "sighting_of_ref": "indicator--374dc958-7d23-42d8-b36b-35d937f965cd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52711274-2388-4b18-b61f-ce0b69eb42d3", "sighting_of_ref": "indicator--374dc958-7d23-42d8-b36b-35d937f965cd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8350dc12-ac80-47a4-92d5-f5d830104439", "sighting_of_ref": "indicator--374dc958-7d23-42d8-b36b-35d937f965cd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bbbf29f-24a0-4bfe-8668-066b2e6f10af", "sighting_of_ref": "indicator--f5bd4f4b-af19-4bed-968f-5c3228d28b27", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616b8635-b527-4013-9bf7-d8ec8af6fad7", "sighting_of_ref": "indicator--097ea5ab-38a5-4947-a671-4bcc25cd732c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3eef8d-92c6-4ebb-ab7c-b9325ecd1af6", "sighting_of_ref": "indicator--93933fed-5d64-47ae-90aa-70f1a0809a44", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22740fb0-0ad4-4e82-acf3-8f009fd55450", "sighting_of_ref": "indicator--14eb1978-23c6-4613-ac83-175c8f41de3f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25386c79-f6d4-4f73-8e3b-177a0ad9e60e", "sighting_of_ref": "indicator--f57b4e60-1e40-431f-bba3-de2fe9e78aeb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1214e3aa-9cef-47b6-812e-1fb7124da57b", "sighting_of_ref": "indicator--f57b4e60-1e40-431f-bba3-de2fe9e78aeb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2f2a58-83f5-46b5-aeb0-3d4c1a521a11", "sighting_of_ref": "indicator--4b25e182-01f6-49ce-8fab-186479d2d8c5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4364971a-a4e6-4484-a54d-0dc1519fc4aa", "sighting_of_ref": "indicator--7ab7a731-033c-444e-9a77-e06e59b9b437", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04deff3-bd1a-428b-8309-93925a1dfa44", "sighting_of_ref": "indicator--5bad2a54-ca6e-4c7e-9222-f5314d448995", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc13d86-c25f-4c67-955f-a9df49c64296", "sighting_of_ref": "indicator--9e8f521c-3f1c-4fb2-87c2-e6d441767882", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be170dc0-f59f-4f99-b0e7-63679e631f8c", "sighting_of_ref": "indicator--7b67df00-03af-4e4c-b127-e16c37c8a1e8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49da66b6-131b-4e9d-a05a-85fb73477bf8", "sighting_of_ref": "indicator--f00008b7-c52f-44a3-8a85-5e42e2bfc7a3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eeea7c4-9fcb-44c2-8a12-da0efaa22700", "sighting_of_ref": "indicator--f00008b7-c52f-44a3-8a85-5e42e2bfc7a3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27dd1515-ce84-464b-b75e-132514b58dd2", "sighting_of_ref": "indicator--f00008b7-c52f-44a3-8a85-5e42e2bfc7a3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ef10fa-a3a0-4565-b8f1-aa86d89489f8", "sighting_of_ref": "indicator--b4c42043-fb3d-4103-b9a7-83d98bda2ef4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81da940-c327-418d-81c4-80d8d08a447b", "sighting_of_ref": "indicator--4f7b5c39-6fd1-4918-9d81-e68ddfcf1144", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba87ce7-1b7f-4875-b290-2b063e81f12c", "sighting_of_ref": "indicator--925b7983-6e03-43f5-a512-fdb7e5e590b7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2773f6a6-f108-437a-8d66-22c461e38ee1", "sighting_of_ref": "indicator--9c131cc0-69d8-4414-b215-208b2e7d88d9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177a8cb7-00dc-421e-8143-d34f441a2a63", "sighting_of_ref": "indicator--2ff2b86d-7c8b-463d-9852-4b8ea37fc02c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56a3830-f371-4caf-a970-3685d977a650", "sighting_of_ref": "indicator--3220ca66-687f-44a4-8f8a-39effe1b857e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376c9168-4c0e-4815-a7c9-2e5059d5ad7a", "sighting_of_ref": "indicator--3111f7cb-98d2-4c6b-8543-79c741430442", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1f10f9-2b7e-4d7b-b3ff-9eaddb48de93", "sighting_of_ref": "indicator--3111f7cb-98d2-4c6b-8543-79c741430442", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e19f37-7d44-421b-9e5b-7bc69a94d586", "sighting_of_ref": "indicator--488beddb-61c5-41cc-ad24-92ea0452a448", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15016091-f0d5-4e86-918b-19e374d427be", "sighting_of_ref": "indicator--b4f9cd92-1c3e-4f59-9bbc-56b6b4e6eadc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b1f447-165a-410c-9626-9b74e3d64f38", "sighting_of_ref": "indicator--76a5dbf4-4c42-401e-9550-1c5f8b31d767", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f408db3-2a38-476c-8c18-eccb45745224", "sighting_of_ref": "indicator--74640ab3-9fc5-4278-8164-8180adbc17b1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e578fa0-44a1-4557-a63b-12223d48dfae", "sighting_of_ref": "indicator--74640ab3-9fc5-4278-8164-8180adbc17b1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6003eaa-5f7c-47c9-9e7f-0924a532d436", "sighting_of_ref": "indicator--74640ab3-9fc5-4278-8164-8180adbc17b1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6818060-7298-4916-b7a6-e68ddb0ba3f9", "sighting_of_ref": "indicator--0a69f3b1-320d-41ac-a780-c0152ba1cfcf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1c34af-56a1-4d67-9fad-c292e109a5be", "sighting_of_ref": "indicator--2b5b5682-95f1-4f35-8f57-a17ce16a764d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb56744e-ce38-4d06-a357-ba0e0d463afe", "sighting_of_ref": "indicator--2b5b5682-95f1-4f35-8f57-a17ce16a764d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d8d8b7-4530-4765-b897-ca03e165d895", "sighting_of_ref": "indicator--2b5b5682-95f1-4f35-8f57-a17ce16a764d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af462f13-2d6e-4717-bb99-4563bba51ee0", "sighting_of_ref": "indicator--bd80408f-a6b8-404d-8c3f-7751f62808b5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8d6042-aa8b-4e5e-bffc-50b880d56b9e", "sighting_of_ref": "indicator--fba0c57a-7a8a-4517-b46d-0839b157faa8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05166194-69d1-473d-a9c8-f6a0a5e12534", "sighting_of_ref": "indicator--fba0c57a-7a8a-4517-b46d-0839b157faa8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7adc04a4-921c-4ff7-9f0a-e2f48de5b7a4", "sighting_of_ref": "indicator--09641df2-8766-4a44-b80c-cc3d26ea6e0f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0488b04-0563-40cb-8f06-8ca84e51dc38", "sighting_of_ref": "indicator--4570d0af-5a27-404e-9311-4939f354cef7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e58bbb1-82fb-46f3-8e97-90766a898945", "sighting_of_ref": "indicator--4570d0af-5a27-404e-9311-4939f354cef7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74828291-b828-4cbb-9062-6120365bb6b4", "sighting_of_ref": "indicator--d66f97be-f717-4c8f-a362-d121a94a29cc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b31a88-57d9-4ba9-902a-9831d92f1eca", "sighting_of_ref": "indicator--ddad2071-e19c-4231-9b36-3c5999ee60b7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c453937f-6295-4b4a-b0de-962dc16aecdd", "sighting_of_ref": "indicator--7ecc202b-3689-49d0-b3ab-58b60f235cb6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043ac18a-8772-4747-9231-80abae673693", "sighting_of_ref": "indicator--7ecc202b-3689-49d0-b3ab-58b60f235cb6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a51d5a5-0c60-40ba-ae45-3033c944e869", "sighting_of_ref": "indicator--7ecc202b-3689-49d0-b3ab-58b60f235cb6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7972a6f-1b69-4db6-a2a0-796f806fa471", "sighting_of_ref": "indicator--c0f38d2f-1ed3-493f-926f-3db6134999f2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff753bf-06ed-4e95-92ed-2a76426b1660", "sighting_of_ref": "indicator--6ab8a0e7-21d7-4525-8695-45a8fef45d0b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f2d959-48b7-458b-9240-acc4e1e5d57a", "sighting_of_ref": "indicator--6ab8a0e7-21d7-4525-8695-45a8fef45d0b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c508cd0-4e47-4303-b227-49d24923d17e", "sighting_of_ref": "indicator--b8b1a6aa-b535-4266-a085-307b134b093e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e624fcc0-b87e-4964-b028-ae210aaa337f", "sighting_of_ref": "indicator--19990c6a-0a43-47cd-82b9-e8933c73ce4b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78afea9-9694-41dd-925a-5552c4e5e51e", "sighting_of_ref": "indicator--2e0f839d-4cd2-4cdb-b8b1-2280232ea40e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6010b6-432a-40e1-9a35-be0409cf5601", "sighting_of_ref": "indicator--9a264981-c38f-4482-9cac-4c64db0386f9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf0795d-65bf-46f7-96ff-7369a0d1b8bf", "sighting_of_ref": "indicator--acaf3842-c9f1-43c8-b170-b3fbc77ffab3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb31c588-522f-48d3-aa02-310bed2da07b", "sighting_of_ref": "indicator--acaf3842-c9f1-43c8-b170-b3fbc77ffab3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae4e57c-289e-4e5c-bcb1-4afc88ce77cf", "sighting_of_ref": "indicator--acaf3842-c9f1-43c8-b170-b3fbc77ffab3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d6e094-27c2-4ee9-a538-1e8537099571", "sighting_of_ref": "indicator--f0e3e5d8-859b-4679-995b-5168833e7427", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f87ce14b-8ddf-4fc8-9ada-2a881e857b78", "sighting_of_ref": "indicator--1c925245-91ee-4b78-ad0b-859b4a978609", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c674a9-3489-40d7-817a-9ece81da049b", "sighting_of_ref": "indicator--8559df6c-d0af-47a4-aa70-62a721145f96", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08beabd-e596-4032-bf40-45420ab63c21", "sighting_of_ref": "indicator--f0390df2-981d-42c8-b556-85dc774044c7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f9c142-ebba-4d91-be7d-3c7a8c616dba", "sighting_of_ref": "indicator--f0390df2-981d-42c8-b556-85dc774044c7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78dec324-45e1-4a09-9943-6ac6fde49650", "sighting_of_ref": "indicator--e416b65d-4a75-4c9e-917e-e4b2e5799f9f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3759d91-3080-424e-bb78-9b1ecfcc4abb", "sighting_of_ref": "indicator--e416b65d-4a75-4c9e-917e-e4b2e5799f9f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d85fb0a-d37c-49bc-81a0-93536eddf76a", "sighting_of_ref": "indicator--50b63ea8-1be7-4841-82b9-457eea52acbf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce052b01-7f8a-4c41-b47d-d78249b358d1", "sighting_of_ref": "indicator--50b63ea8-1be7-4841-82b9-457eea52acbf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f3ed7f-7bd8-4e73-b4b1-24e40f29fdc9", "sighting_of_ref": "indicator--50b63ea8-1be7-4841-82b9-457eea52acbf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8041e3ad-3972-478c-a548-01e6c98f4c86", "sighting_of_ref": "indicator--78907141-1c11-40bf-8df3-6c24c4f2ae82", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1633e8a6-91c7-4f29-9d9e-3d463e197a18", "sighting_of_ref": "indicator--78907141-1c11-40bf-8df3-6c24c4f2ae82", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1608c88-7b69-4e47-bb91-f4f789583383", "sighting_of_ref": "indicator--ba1f778e-1c3c-44e3-84e4-2b40bd09be98", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3860f95d-cddf-4d37-b969-f39c4ce09dc8", "sighting_of_ref": "indicator--ba1f778e-1c3c-44e3-84e4-2b40bd09be98", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8bea244-9fdf-4449-9087-3a2b224f0879", "sighting_of_ref": "indicator--ba1f778e-1c3c-44e3-84e4-2b40bd09be98", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e80669-b437-4832-b36a-3589a829e33a", "sighting_of_ref": "indicator--267b93ff-bbce-4f1e-a4bd-a8498a1e7fac", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4164b4-e2a8-48f7-8b5c-4902c97e9cae", "sighting_of_ref": "indicator--50c61ccb-7a9c-4896-bcf7-96075eb14e75", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c923a65-0f37-43db-8b2f-3d56b8508173", "sighting_of_ref": "indicator--50c61ccb-7a9c-4896-bcf7-96075eb14e75", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7712f0-a2ea-4f5a-8017-f49b32b57438", "sighting_of_ref": "indicator--1f55faad-d51c-4541-86f3-fc4fafe67d33", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883a15ee-4a32-4511-84e2-19f0ef2076a9", "sighting_of_ref": "indicator--51b32a75-1900-4c36-98a1-bc7cb1ed8bfc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32af8149-f7b7-4d2e-8fbd-9461fd84cedd", "sighting_of_ref": "indicator--b9e58123-1b5a-45de-aa28-0ac54c1fbfd4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fba9fcd-3c71-470e-ac4e-c253dd620685", "sighting_of_ref": "indicator--d320787a-5493-400e-96ae-b21b68f9cf8c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35a91ca-302e-41ee-9190-be7df9986b39", "sighting_of_ref": "indicator--bbda95bb-a255-4553-b18e-9dd66b0fa024", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b000a5-c32a-49d1-986f-88ef163c4260", "sighting_of_ref": "indicator--dd613429-360f-4dab-ad6c-d6588de0a0b1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451da973-9216-4b3d-8acc-d8fd4c0e44fe", "sighting_of_ref": "indicator--dd613429-360f-4dab-ad6c-d6588de0a0b1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd0a1ae-fe88-430f-a439-d92541ffc4b8", "sighting_of_ref": "indicator--c9eef5c7-affb-44e9-b9e8-d7b95eface4b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d316b77e-47b1-49cc-8f1a-ba933349e9f3", "sighting_of_ref": "indicator--d05c7512-7a17-49ab-8676-6b75fd7f52c8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449a96d0-9d40-415b-b15b-18484a603653", "sighting_of_ref": "indicator--83b8753e-c457-4717-975b-dfadbdbf74af", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a291173-6d61-474c-b0e8-e2e5391f6bab", "sighting_of_ref": "indicator--77b7e9d2-bc9d-4444-944f-47fa25303709", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24809248-2047-4727-a10a-3b7a1f1e6a43", "sighting_of_ref": "indicator--ee74a765-a36c-456c-9544-146602628ded", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ca7e3d-6eb4-417a-888a-55836a1cb116", "sighting_of_ref": "indicator--ee74a765-a36c-456c-9544-146602628ded", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef4dcc9-417c-46de-bfc1-ccf6b1ab7643", "sighting_of_ref": "indicator--ee74a765-a36c-456c-9544-146602628ded", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31498d99-3147-4176-9e2d-f0d368f9a56b", "sighting_of_ref": "indicator--8b8c2edd-1a7d-4bc0-84ae-013d778a0f35", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbaf7b5d-0d9d-4e4f-a083-4c00892d3036", "sighting_of_ref": "indicator--8b8c2edd-1a7d-4bc0-84ae-013d778a0f35", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd40732-8e84-4d8c-a9c8-3a924407a2d0", "sighting_of_ref": "indicator--84f51eb0-91e2-427c-90bc-562f1a853b04", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83edc920-8d6b-4056-a522-db41cda4a4ea", "sighting_of_ref": "indicator--a5c402fd-379a-4a72-8cfd-2f90ff506f73", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3e09a4-018e-4109-a6de-9aceb0171a82", "sighting_of_ref": "indicator--98102ba8-92a1-47ea-9dce-358a3e99bab3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5cd6d75-4005-4769-9a1a-63b9b103cc16", "sighting_of_ref": "indicator--98102ba8-92a1-47ea-9dce-358a3e99bab3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d6bb6e-3b1a-434b-a660-0c757ee81e0d", "sighting_of_ref": "indicator--b0ece9a4-e088-41ce-92da-a753828c35d8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7bf3d5-c98a-487f-8401-6ef332be733f", "sighting_of_ref": "indicator--0b982e97-8581-43d4-b97a-6d766b96ee4e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55c5265-761f-4438-9433-8d82a92ac48c", "sighting_of_ref": "indicator--61c38805-7fac-4ba5-9697-fe49bec1120b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b97542-bbcf-4cd8-b5f1-d488cb45bf86", "sighting_of_ref": "indicator--744d913a-678d-455f-8c2d-f6bf33ed8d91", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961904b6-dc2f-4471-869e-5fd64542bfce", "sighting_of_ref": "indicator--744d913a-678d-455f-8c2d-f6bf33ed8d91", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f35f56-5263-4cfc-83cd-93d73f619834", "sighting_of_ref": "indicator--2bc4c526-0d96-47ba-bf86-debc86979685", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ad08ef-0a2d-4deb-b6f0-cd4fc4039e22", "sighting_of_ref": "indicator--437742ab-26ab-42b8-bf07-e85d673218ee", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf09fee3-f773-47c4-8dd2-32f97c38163c", "sighting_of_ref": "indicator--437742ab-26ab-42b8-bf07-e85d673218ee", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976e921e-3201-41ad-b271-38ba846b487e", "sighting_of_ref": "indicator--d942e5eb-e16b-4d99-b66a-b7becbd3d1cd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94cbbb3e-3a95-4ad0-8454-58e0fa9754f6", "sighting_of_ref": "indicator--7853bc45-e744-47d4-9a25-9c92eb954006", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a8241a-5d63-4905-af21-01dbe10e0622", "sighting_of_ref": "indicator--7853bc45-e744-47d4-9a25-9c92eb954006", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0e096f-bac8-47f8-a963-8990cb8087aa", "sighting_of_ref": "indicator--d33fe9d0-7c25-404a-9a7b-91f9f3e0b0a8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b57872a-6a10-4d77-877f-201a41c1782e", "sighting_of_ref": "indicator--ac04851a-dd98-4227-a1cf-b41baf9843c2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ba6f57-9299-4157-9940-4dc02a408636", "sighting_of_ref": "indicator--ac04851a-dd98-4227-a1cf-b41baf9843c2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915effc0-9f83-4342-85cc-194b01514ff0", "sighting_of_ref": "indicator--796838ec-60fb-4f23-8ad8-31d025a3427b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13fcdf0-2891-46c6-ad45-ce01c1fb39f1", "sighting_of_ref": "indicator--a02384a6-e38f-423f-a87e-ad41b981f915", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64075480-4d44-4bfb-952b-a0ce06dad681", "sighting_of_ref": "indicator--a02384a6-e38f-423f-a87e-ad41b981f915", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e103ac37-7523-4d22-9881-e3de1a139536", "sighting_of_ref": "indicator--063428b3-4166-4745-bc48-c539908295cb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25e6a59-3bf4-4e47-a2f5-9ee28ea44df7", "sighting_of_ref": "indicator--063428b3-4166-4745-bc48-c539908295cb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47644158-a693-49eb-888e-f48977639649", "sighting_of_ref": "indicator--063428b3-4166-4745-bc48-c539908295cb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7724399a-cfba-4d6d-b0a5-d5d7962da62e", "sighting_of_ref": "indicator--e2d1ee96-fff3-4f6f-b652-1ddc3754f927", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0507989a-ef04-43ae-8e84-6de077059cf9", "sighting_of_ref": "indicator--e2d1ee96-fff3-4f6f-b652-1ddc3754f927", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7d181e-c490-4133-93a1-0c1ca28769ab", "sighting_of_ref": "indicator--2c089f1b-dd1a-47e5-899a-2f38d3848ba4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0495908-80aa-4907-afaf-458a47a97901", "sighting_of_ref": "indicator--2c089f1b-dd1a-47e5-899a-2f38d3848ba4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3466bad9-a781-46f5-8f87-97c99292ebda", "sighting_of_ref": "indicator--9f954fa1-14cd-4070-9cb3-19e0aa0f8ba7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b75a6c-7718-459e-a919-398332c05096", "sighting_of_ref": "indicator--9f954fa1-14cd-4070-9cb3-19e0aa0f8ba7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48edfad-684f-44f3-9ecb-b741c7904a99", "sighting_of_ref": "indicator--23569cce-2535-427f-be0a-1d3b5638ae6d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935e2e15-f267-4203-b000-1e7c8b00de07", "sighting_of_ref": "indicator--662d7c87-f661-4f9b-966f-33e19d382bdf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b54734-e348-43db-83f2-6c9ee45e3a37", "sighting_of_ref": "indicator--365ea3c9-e8ce-473d-9ac2-9bd6baf456bc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2a1224-f43b-46af-acf2-a2433d2bae50", "sighting_of_ref": "indicator--0bfd5eb1-dce1-4d94-8173-52e4aa6d5687", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f8f327-5283-44fa-991e-793baac227a2", "sighting_of_ref": "indicator--4615bc5f-b883-4ef7-a5cf-098a4c89c6f0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b67e0c-42c3-4141-a782-2f9f8901a240", "sighting_of_ref": "indicator--b2b973c3-226c-42ce-beec-e6c2a5b5c384", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43191e92-36d5-4cbc-8ad8-01360ac39b48", "sighting_of_ref": "indicator--7d689273-2d6b-4298-8dfb-0406c078de81", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc50e9e-0687-419a-8d80-aa39674f3d43", "sighting_of_ref": "indicator--8c39f43a-aacd-424f-812c-df123c9ca1bb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be965b7f-19d9-47d8-9a44-99ea89ca8b09", "sighting_of_ref": "indicator--8c39f43a-aacd-424f-812c-df123c9ca1bb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583c1ff1-37e2-49fb-a2ce-bc090d568bbc", "sighting_of_ref": "indicator--af80d806-eb72-4593-a409-db8e49eef1ce", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37005806-afed-4655-92f8-295a874e9295", "sighting_of_ref": "indicator--af80d806-eb72-4593-a409-db8e49eef1ce", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f3b852-3a86-4603-886d-218ee9a4d9e7", "sighting_of_ref": "indicator--b37ccade-f51b-46b3-a10f-c4ec4333b4a5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d02a85f-9573-4125-9513-da147a2afa7a", "sighting_of_ref": "indicator--b37ccade-f51b-46b3-a10f-c4ec4333b4a5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ec091f-a5bd-4e66-aa9f-a88b6f315770", "sighting_of_ref": "indicator--67a4326a-1cfc-4b59-9eb3-41334106617a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f19d8c-a8c8-46fd-9833-071c4eb2d869", "sighting_of_ref": "indicator--5b661c63-e98f-4ed9-ad56-02ce257b140a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80c6215-94ea-4130-b7f1-e090702c185b", "sighting_of_ref": "indicator--13e42fe8-800d-4962-b3bc-28acb5ef1af1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f8aa5f-ff1c-4548-bda7-2787b1d375c5", "sighting_of_ref": "indicator--13e42fe8-800d-4962-b3bc-28acb5ef1af1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b824991-9850-4a14-9487-faaae91c1c36", "sighting_of_ref": "indicator--3bbb30a0-2a29-4c1a-a450-361cd3dceed5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1735af10-c3ec-4540-a16a-87bb72d6f760", "sighting_of_ref": "indicator--3bbb30a0-2a29-4c1a-a450-361cd3dceed5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0211cdfa-23bd-4d95-b9c7-1bfae797b61d", "sighting_of_ref": "indicator--a1dbcc33-f4a6-4b54-adeb-71e53a95b5c0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c59ebd7-62a6-495b-ae55-b51862360f79", "sighting_of_ref": "indicator--aa8db9c7-bff3-44a5-b19c-3de719d6367c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4559c49-5bb0-455e-b42b-a5442941fbea", "sighting_of_ref": "indicator--4e26ee6f-a0de-4d61-a100-62da666c458c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac3a088-1242-4a3a-a49a-2eb2dbff9771", "sighting_of_ref": "indicator--4e26ee6f-a0de-4d61-a100-62da666c458c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f4332c3-4df7-446f-b1d1-0698ebef7d2b", "sighting_of_ref": "indicator--f0ed2f96-a7c3-4b28-a93c-4b69029cca01", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9038f83f-e9a2-4901-8aba-bb2cf4fa472b", "sighting_of_ref": "indicator--37ace95c-bd90-481f-bc94-4005084e734d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee050c7-7ab9-4d61-83eb-d75c8aa30a54", "sighting_of_ref": "indicator--37ace95c-bd90-481f-bc94-4005084e734d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34145294-5d37-4ac0-9acf-d368847b6fa6", "sighting_of_ref": "indicator--6b00e96d-3c4a-4e3f-9e83-3a55d7a830b6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37848745-03bd-4b46-9be2-66ba8ad9007d", "sighting_of_ref": "indicator--a85f2cbb-4506-44f8-add8-fdeeadd629c6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32749b9-d38f-4e88-9e17-4685e81a8b05", "sighting_of_ref": "indicator--a85f2cbb-4506-44f8-add8-fdeeadd629c6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce424df0-0f35-4f22-bf09-121ff35d148a", "sighting_of_ref": "indicator--ce260357-ad27-4f6b-ae41-f338322e1b39", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e42533-e47d-43ba-899a-2e7db1ea1100", "sighting_of_ref": "indicator--14e25ef6-ebed-4923-963b-166f739a4abb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa3e17f-5dec-4ef8-a098-441048096fe1", "sighting_of_ref": "indicator--b70a13e6-567c-41b6-abfb-6c171a09e574", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f0be31-0025-49cb-a5f7-564f493beb37", "sighting_of_ref": "indicator--b2791c76-9897-4355-b95c-2a7fcadf8649", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09c76e2-33d7-4e89-9b9e-a0760abdd4ee", "sighting_of_ref": "indicator--862de119-5f44-4124-bd99-62e4ab406ab0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c779497e-764a-4db6-9034-773760db08fb", "sighting_of_ref": "indicator--7bf65b4c-d27e-4ea5-a035-a5f0fec2880a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c79e0a-127a-458d-afdf-55049ba8cf65", "sighting_of_ref": "indicator--8e69f45b-7c8d-4093-bc62-8aa55d9fb3dd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c687470-c8d9-4d6c-a4af-15a47e26bf99", "sighting_of_ref": "indicator--8e69f45b-7c8d-4093-bc62-8aa55d9fb3dd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d230d239-0e0d-4e56-9fa7-14b0f8da0c54", "sighting_of_ref": "indicator--8e69f45b-7c8d-4093-bc62-8aa55d9fb3dd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848db5a1-e068-4fb7-9120-23c05c5de3b1", "sighting_of_ref": "indicator--afd73c16-1b19-4474-97f1-53e0992f07c9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3b1565-8498-4fe8-bb9c-b499f1241ebd", "sighting_of_ref": "indicator--35163c93-f0ad-4629-9572-a5eb2035dd7b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf7ea3e-a3c5-4abd-929a-43cfa5e27b84", "sighting_of_ref": "indicator--35163c93-f0ad-4629-9572-a5eb2035dd7b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52fd67d-a915-4803-acb2-b5f153667a6e", "sighting_of_ref": "indicator--35163c93-f0ad-4629-9572-a5eb2035dd7b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce65c51-33b6-4ff9-9fc3-0038641f5a6e", "sighting_of_ref": "indicator--d30d3a1a-3b29-4f88-b772-99843e69143a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1881f943-0ff4-4fe8-8aa7-0624f47eaff3", "sighting_of_ref": "indicator--bdc1e1dc-4506-43a4-b41d-87d7b96f7d1b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d87a0f-bf6b-41de-9290-401f5971b221", "sighting_of_ref": "indicator--bdc1e1dc-4506-43a4-b41d-87d7b96f7d1b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159e5556-e8fd-453a-8665-5e3bedcc7cd3", "sighting_of_ref": "indicator--059d800c-73c4-4a29-b4e7-2f831951e71d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbe6eb8-602c-4a41-8238-f6f73d4c2177", "sighting_of_ref": "indicator--059d800c-73c4-4a29-b4e7-2f831951e71d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514c8681-6f8b-4cdf-ad93-8223cdd06862", "sighting_of_ref": "indicator--059d800c-73c4-4a29-b4e7-2f831951e71d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9793d6ec-8830-4aad-88a6-4a20b42dcef8", "sighting_of_ref": "indicator--f37400f9-ca8d-4b28-9bda-a01b6d3e7a61", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b344f7cd-6742-41d1-8d5b-782b0848cfa6", "sighting_of_ref": "indicator--85c2ec8a-926e-4aae-bc3a-adeccb8d3491", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9141b5c8-37cc-4c4c-aa0f-f24c8a94d81d", "sighting_of_ref": "indicator--92e6723b-c9da-4c6e-946b-e8f054b8f800", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40207a4b-e175-4c78-bb82-4b664830e99a", "sighting_of_ref": "indicator--45be353d-d6d7-4735-9587-241b48ce82da", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c321294-21b6-4e1a-9fbc-ac2c22ee29e9", "sighting_of_ref": "indicator--f00ac8fc-0be2-46ef-8598-f33edaebc818", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8012ab20-e342-4dfa-adfd-0d324802c215", "sighting_of_ref": "indicator--f00ac8fc-0be2-46ef-8598-f33edaebc818", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2470823-9548-4f31-a0ef-da67f3223eb5", "sighting_of_ref": "indicator--0b4dee2b-d06a-4234-89d0-25bacd9c475d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13bd9ce-54e0-4b74-8bfe-7395bc446a04", "sighting_of_ref": "indicator--7a7fe167-9793-414c-83d9-693beab0f9f5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a037b7e-8428-4778-9550-54fa56a27e29", "sighting_of_ref": "indicator--7a7fe167-9793-414c-83d9-693beab0f9f5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0da615-455a-4586-ac7d-cd0c69e60f6d", "sighting_of_ref": "indicator--331aab98-f883-4150-9934-e6d51780c9fc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93060421-0842-4986-823d-fe4609a0edb2", "sighting_of_ref": "indicator--5a8b91bc-c2ac-4ba7-857f-2e366062488c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a681643-be71-46a2-8c91-b37013f11dea", "sighting_of_ref": "indicator--5a8b91bc-c2ac-4ba7-857f-2e366062488c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0392f528-b316-44bf-adb7-26ecfa7ceb45", "sighting_of_ref": "indicator--51f40d5f-a490-4003-b988-7a6dd9ff7ce3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc0f816-43d8-4cce-89b8-7d4fb740117c", "sighting_of_ref": "indicator--51f40d5f-a490-4003-b988-7a6dd9ff7ce3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f4828e-e5b3-44a5-8cf2-9c6f2223af2f", "sighting_of_ref": "indicator--cb81e389-985d-4902-b968-591ea8d027c1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee49427-022c-4192-b9bf-c1d47bf51736", "sighting_of_ref": "indicator--cb81e389-985d-4902-b968-591ea8d027c1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076b11b0-1b47-4429-b3e4-f12a04bf9d09", "sighting_of_ref": "indicator--cb81e389-985d-4902-b968-591ea8d027c1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02360fcc-7bdf-457b-823b-e8d86f4d2506", "sighting_of_ref": "indicator--10f3bf54-9371-4fe7-a3a3-ffbea4ebd1e4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82557c7-9898-4c2d-b01d-e77d24662b48", "sighting_of_ref": "indicator--10f3bf54-9371-4fe7-a3a3-ffbea4ebd1e4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55aa580-eedc-401c-a7d2-fb3918417757", "sighting_of_ref": "indicator--6661afd8-a5eb-4b69-a078-cc8bd738c2fb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c327802-eb17-45c6-b2c0-c889ecae9fa9", "sighting_of_ref": "indicator--ab424f89-a0ad-4f1f-811a-5e92e6811dc4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73dcbaae-5eaf-43ff-8ac7-17ecea3ecb03", "sighting_of_ref": "indicator--501f8ea9-e85d-4ca4-8d36-8a94c4204dcd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4ea607-cd95-4006-8f35-51a9604a0b4d", "sighting_of_ref": "indicator--501f8ea9-e85d-4ca4-8d36-8a94c4204dcd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29cd8cf7-0a26-4af5-a0f7-f4c63f195bdd", "sighting_of_ref": "indicator--656e2bc8-945d-460b-93bd-247013fc9103", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535a48f7-c555-4167-8930-268d847b6c3f", "sighting_of_ref": "indicator--656e2bc8-945d-460b-93bd-247013fc9103", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7718cf5-9088-419b-9b62-8a79c2c1f794", "sighting_of_ref": "indicator--f262b26f-5828-4731-a7df-c087196c8aae", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34529e5a-c18b-4df8-b954-2fd583caba55", "sighting_of_ref": "indicator--ad84735e-478b-4830-95cb-2ac85bc450a3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d960d306-2605-4a6d-b80c-44a5d37caf72", "sighting_of_ref": "indicator--ad84735e-478b-4830-95cb-2ac85bc450a3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79101f4-3258-4900-b42c-fc264e650674", "sighting_of_ref": "indicator--ebd57508-1127-4418-b0f5-3fcb62226972", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028208c6-6bc1-449f-838e-e8a7b71ea19f", "sighting_of_ref": "indicator--ebd57508-1127-4418-b0f5-3fcb62226972", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937bebc0-509b-44ed-beac-d7b5dc6f3ad3", "sighting_of_ref": "indicator--ebd57508-1127-4418-b0f5-3fcb62226972", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2fe475-ed14-4009-8581-705df086bb60", "sighting_of_ref": "indicator--ea4d8c72-3741-4475-9fd4-cdcf6c444a1f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e870b795-1e8f-465e-b4c4-d77d81b88d89", "sighting_of_ref": "indicator--5bb2e2cb-75f7-41e6-8f81-55d8e8b07892", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432ce9ef-d4ae-4db0-b127-f7c3b094e6ad", "sighting_of_ref": "indicator--5bb2e2cb-75f7-41e6-8f81-55d8e8b07892", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38b88be-c75d-4028-9e6c-5c583929947b", "sighting_of_ref": "indicator--381a734c-20b8-43c2-85b8-f0f807b6f178", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefe3702-d5fd-4516-a52d-948f350e6493", "sighting_of_ref": "indicator--381a734c-20b8-43c2-85b8-f0f807b6f178", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ecb4722-5558-4990-8779-e866afb8c7fa", "sighting_of_ref": "indicator--381a734c-20b8-43c2-85b8-f0f807b6f178", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc364e9-2131-4028-894c-6a115b2c63d6", "sighting_of_ref": "indicator--0eda7b81-16ce-4388-a94a-6d4fee8231dc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e2ab0d-93ec-442f-9ca2-3f583c923f7e", "sighting_of_ref": "indicator--9a4f3f3a-fc92-4b3d-a9bd-f9d327f1eefb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be4e199-6843-411c-9e73-5618a172a5da", "sighting_of_ref": "indicator--9a4f3f3a-fc92-4b3d-a9bd-f9d327f1eefb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e39afab-6b8a-48d8-b4a3-98a4d5a159bf", "sighting_of_ref": "indicator--9a4f3f3a-fc92-4b3d-a9bd-f9d327f1eefb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e737bbda-0764-4cc1-9b08-c84e27e54728", "sighting_of_ref": "indicator--325afe0d-528f-4ef9-8fad-07c8082f7717", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2b8f6b-fcd6-4725-8870-db49821f2872", "sighting_of_ref": "indicator--bb708a39-fc62-4502-8888-4c09449a5947", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156caff1-9049-410d-a3b2-71b741735bdc", "sighting_of_ref": "indicator--c7ba60c6-1a15-474f-a799-89d15beda0bf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8302f4-d37e-4065-b595-ba82689d4dd8", "sighting_of_ref": "indicator--c7ba60c6-1a15-474f-a799-89d15beda0bf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d841b34-b734-464e-80a1-9ca868f4cac3", "sighting_of_ref": "indicator--c7ba60c6-1a15-474f-a799-89d15beda0bf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--784a955a-98b6-4833-a247-c9bff879499b", "sighting_of_ref": "indicator--150b884e-3efe-4fcc-b031-b503c8da7551", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ace9b23-84ad-4d6c-ad58-0f6e9316cb7b", "sighting_of_ref": "indicator--150fc5fa-3bcb-4601-86d1-2be8b36a9f01", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cb068b-03ed-4c62-ab0a-099a5b59638d", "sighting_of_ref": "indicator--150fc5fa-3bcb-4601-86d1-2be8b36a9f01", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45000857-a747-4cd9-89d9-88fdb6254b88", "sighting_of_ref": "indicator--3766a41d-1988-4a4c-9ca6-550a51df9b84", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0357ae-2c71-4d97-8cf7-474368ab0062", "sighting_of_ref": "indicator--4067b447-3eee-48dd-851b-0615c5a38504", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a4d0dc-d8d1-4941-9dec-21084082342c", "sighting_of_ref": "indicator--d3990925-c227-473c-a16c-f9472073f7d3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec00dfe-ef45-4219-964e-5d9cbb64dbf7", "sighting_of_ref": "indicator--df359db9-b7da-488e-b920-dc25447020dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f98abbb-adae-4d6c-b019-bb48864d45ac", "sighting_of_ref": "indicator--0b4c28ca-e85b-4b06-88e7-ee2f9813d423", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1861baf-0262-40d4-9854-183ec9861ed8", "sighting_of_ref": "indicator--1a20ec75-a9a1-432a-9be4-3f1bcc0fa4d3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f84b106-28c7-4b7d-b977-d2555e3008c4", "sighting_of_ref": "indicator--1a20ec75-a9a1-432a-9be4-3f1bcc0fa4d3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6843460-ac19-48ab-a885-19d963dfed7a", "sighting_of_ref": "indicator--8185ee42-5cd6-485d-a02f-f51ea915b239", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d975ea-978f-4dc7-b59d-8b1b589c20f6", "sighting_of_ref": "indicator--1b13f84b-7d27-4f29-8d2e-fd1394fb5d54", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab7fc9d-3901-41b5-9a79-6e6b2de7e71c", "sighting_of_ref": "indicator--62a46909-c9aa-4a3d-90b2-c31014adbdd4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb64b4c-b321-4771-a63b-2dd1eabfe663", "sighting_of_ref": "indicator--62a46909-c9aa-4a3d-90b2-c31014adbdd4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902809e4-ac94-4773-971d-fd1d757d6a8b", "sighting_of_ref": "indicator--62a46909-c9aa-4a3d-90b2-c31014adbdd4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ca3a3e-aa4d-4803-b0ca-678aa64e6bda", "sighting_of_ref": "indicator--c7c91bf7-5196-4e8a-bb51-2b7f1ca8380e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7ba0cd-de4f-45dc-8a48-0cd28c009bac", "sighting_of_ref": "indicator--951e3ecf-a22f-412c-86d7-c42f2123f173", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74e8c0b-9cc1-4b71-9eb4-a0936db6d3ac", "sighting_of_ref": "indicator--951e3ecf-a22f-412c-86d7-c42f2123f173", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4230284f-4aa5-4bf7-85d5-3b7165a3a95f", "sighting_of_ref": "indicator--951e3ecf-a22f-412c-86d7-c42f2123f173", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6035f000-092d-40c7-9814-fa6c80de5d36", "sighting_of_ref": "indicator--e255f429-561a-4827-a8e7-a55ba2fd4504", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9595c06-d92c-472d-aaff-bdfa6a12f10e", "sighting_of_ref": "indicator--242588a5-b338-453e-a3c1-97b1eaebd503", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf41a21-a1f9-4f59-b9f6-a89c8169f460", "sighting_of_ref": "indicator--242588a5-b338-453e-a3c1-97b1eaebd503", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c31ef56-a123-4216-ab16-78bd6058ec09", "sighting_of_ref": "indicator--cef30e44-fc72-40f7-ab88-6c31a8e6084a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53274476-2423-41e2-8d51-5baa983d19a4", "sighting_of_ref": "indicator--69b82fed-82b9-4ea1-9a79-8c6eb5d86b11", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb891fe-1ea0-4fc7-acae-9ee1db65636a", "sighting_of_ref": "indicator--764c157c-c132-4cc7-b25e-62ed6af6b122", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbc1dd6-ba38-4b76-b292-dbb7c4e602d2", "sighting_of_ref": "indicator--764c157c-c132-4cc7-b25e-62ed6af6b122", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746b8a78-f9fd-4275-adce-16018e57af59", "sighting_of_ref": "indicator--658e7e7a-60a8-45aa-bc06-943c6da31ddc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3768ac71-4efc-42b6-b801-f3c3cfd06dd2", "sighting_of_ref": "indicator--f45c6a78-a1c7-43f6-bd3c-5da45d2ce3f2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84659cd3-3fa8-433f-867e-9049c4cd1884", "sighting_of_ref": "indicator--d090d57e-01f9-4936-a01a-3297fe79845a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2192130-48d3-4592-8be9-743fffdb3f4e", "sighting_of_ref": "indicator--79fb7cac-281f-4c54-8cee-1349e3fbce93", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6203a316-b514-49f1-907b-1965872807b5", "sighting_of_ref": "indicator--4a28184d-a09b-4117-a5c4-698610d90544", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cddeb57-1816-4575-8e7a-fb92fbd41d49", "sighting_of_ref": "indicator--5a47c80e-1756-4a96-82ae-f6abf371f38a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ccb5c55-322c-49bf-9512-1a18ea50bfe6", "sighting_of_ref": "indicator--7ef5f3f3-8c7c-4032-9954-3ff944f7de99", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb3c68f-f200-40ee-ab1e-aad702b8feee", "sighting_of_ref": "indicator--7b04770f-90da-414d-899e-091b7a04e882", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf5375e-aa14-4fdc-b6fa-4a6643eb8957", "sighting_of_ref": "indicator--9fe192e4-89e5-43c1-8935-5c1f3e868aca", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21163893-7e4f-4960-b376-9e9ce3478663", "sighting_of_ref": "indicator--f3aa7a26-202e-4868-80f1-384758ee54ab", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c054441-cfb1-47cb-95f3-c0ba9f12b7f8", "sighting_of_ref": "indicator--3a99a005-a954-4fdd-8ed4-22c563d5a2fa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f13a4886-f43b-4de3-bab9-7a10062ba257", "sighting_of_ref": "indicator--3a99a005-a954-4fdd-8ed4-22c563d5a2fa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a63fbb3-7c1a-4f65-a747-64d688bf3803", "sighting_of_ref": "indicator--9af5d873-b02a-4ab1-9d0b-e952883a2a39", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae6c502-398d-496c-bad7-f70eee3c80e2", "sighting_of_ref": "indicator--1059b803-18bf-4d49-b1b8-e5c22ca7b889", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4a13b8-c92d-4979-b083-f51c12a0e02e", "sighting_of_ref": "indicator--1059b803-18bf-4d49-b1b8-e5c22ca7b889", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511837a1-35c9-4b07-b4b7-1bc12c4630f0", "sighting_of_ref": "indicator--8de52ac6-d2cb-495d-b612-9187679bf833", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c373f3-8666-49cd-992b-4aca767070c2", "sighting_of_ref": "indicator--0bc9e643-17c8-422a-8062-e21e7309bfaf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f46121-5797-4da9-b8c6-4c592c43b714", "sighting_of_ref": "indicator--7936a492-a18d-485a-986f-74daa1071a59", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1bd9ec-311d-4c93-a4c3-cfc554a12140", "sighting_of_ref": "indicator--39483447-a034-4bf2-986d-50d8da9e7e8d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f757ae2-ea11-47a3-810a-ceb930a9240c", "sighting_of_ref": "indicator--7e3da04f-d678-4e4e-a972-df60316567dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7de96c5-a47c-491b-ae75-6ef451025faf", "sighting_of_ref": "indicator--89ed27e1-7291-409a-be74-0f5277bedd62", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38be24df-ca53-4f79-b168-a36e43c082a5", "sighting_of_ref": "indicator--ec914b83-9f9a-4bf9-92e3-61f5380445a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d25caf-bcd0-49e1-8ad9-9044114dfd99", "sighting_of_ref": "indicator--e222766d-959c-4cd9-9eb3-e506d18177a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1034e3-963c-47bd-942e-c6456e398132", "sighting_of_ref": "indicator--90cc969c-1f2a-4a83-b68b-1a158060b20e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1f9a14-9226-41f0-ad74-0f72d7c5bf88", "sighting_of_ref": "indicator--30bc3c7e-73cc-4841-a7bd-1e823cb40723", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1ad94b-0efb-4bee-9c3a-35bfdb2c6033", "sighting_of_ref": "indicator--471790a9-6389-4c2f-9ac0-a00d1f45463c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1754ec77-9de0-41b3-9bdd-360599fa42d5", "sighting_of_ref": "indicator--cd35c104-3423-4a6c-91f0-57a0c376d694", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c234072-766c-4bdc-b718-8d10067d85df", "sighting_of_ref": "indicator--e1316247-0dea-4ec4-858f-eb710590fa1d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bcdc399-d40b-4430-a7e4-98464efd2915", "sighting_of_ref": "indicator--adeeda33-0996-4812-9aaf-3e79e3470053", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93228d0f-bade-465e-a97d-96aa899c4a2c", "sighting_of_ref": "indicator--b117153b-1e92-4ec0-9ce9-13219672f945", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8eeca1-c7dd-43b5-aa90-480b9418bee9", "sighting_of_ref": "indicator--fff7c096-67e8-4825-8bdf-dbb9eade7519", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acab5309-3e39-43b4-b274-830170633da2", "sighting_of_ref": "indicator--c3080533-87d3-4b8b-9993-a75d91e87513", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3d2a16-1585-4ea8-89d1-70d162bd1696", "sighting_of_ref": "indicator--15ffc37b-aec0-4148-8f4b-a75a9587009d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00b080f-1b6c-4472-a6d3-60ee3acc8d77", "sighting_of_ref": "indicator--a7d6f431-01b7-4b29-ba45-2159088e02a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8607e40-c8ea-4191-af6b-f6ad651c5adb", "sighting_of_ref": "indicator--234a4b3f-a1ad-425b-baf7-d0a823cd1d67", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e950d6d-ea33-4ece-91e5-66d48df0b94d", "sighting_of_ref": "indicator--5cfce33b-08be-4ac1-b42a-4fb9bec62e99", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c891a07a-d567-4a4e-9c47-cc77fa5c130e", "sighting_of_ref": "indicator--4e6f37a9-c5d7-455d-a7fe-e5bd91f13235", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6735b586-495f-40fc-9bd9-7e33386cdc17", "sighting_of_ref": "indicator--7ff83fca-1943-4e37-9975-89b8eb6ecbb3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18ee129-c3cb-4d8b-8fd2-1c9526ead6bf", "sighting_of_ref": "indicator--88acaad6-ef6c-4ae2-9480-b18874026f1c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1fe377-2caa-44d4-a7d2-d31ca17cc842", "sighting_of_ref": "indicator--9c033eba-5dbb-4323-828b-0dfd04321340", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2588eb2-f19e-45d8-b2ad-794e7ae1ef2f", "sighting_of_ref": "indicator--06a8a7c1-296d-497a-ac9c-56bd1bd8a641", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177a5f0c-f8e5-44fd-8e0e-f0883dc801d3", "sighting_of_ref": "indicator--74240b48-9178-4457-acfa-1989ff968500", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f89eef20-2b97-4608-99bb-4f52d8cc938d", "sighting_of_ref": "indicator--92a26449-fbb4-43bb-bfef-ddf5650c54cc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff6359c-bc8b-4e7c-8c53-e9b658a1d246", "sighting_of_ref": "indicator--df76c06f-9ac6-4c8c-96a2-16818fb2393c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50303dc4-299c-47a4-bc38-09162d53a98e", "sighting_of_ref": "indicator--10e0ff1f-5446-4a0d-a6d2-d7a9769b4bcd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53ef8e3-fd8a-40b8-b48a-ea50c012583d", "sighting_of_ref": "indicator--61274ba3-9695-40f0-bf21-acb79b6cb814", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d01d3c-17fc-45aa-a1d8-efd7c61a4617", "sighting_of_ref": "indicator--1031c367-8b62-4941-9ea8-982c2ecfb90a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc975e96-421d-42d0-a0f4-fd348a6a26b7", "sighting_of_ref": "indicator--f6c02e87-4d34-4518-9336-99b34138c6b0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995d3f6d-f322-4c8c-9fd9-57506dcc8d22", "sighting_of_ref": "indicator--6fef5361-2a7e-487d-94a0-753dbe263961", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c717505-87b8-4408-9cfe-045e683ade91", "sighting_of_ref": "indicator--98fcca54-b431-48eb-93e8-5b9f6b08cd01", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237beab0-b3e5-4c42-bfc1-520058d57a48", "sighting_of_ref": "indicator--11eb881e-6242-4f5e-97a2-6bf30c0b0431", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f16744-244e-4f1b-b1b9-5f578d171d1e", "sighting_of_ref": "indicator--22fdedfc-e42c-4999-a021-0d86475351a8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb52cb1-a739-4e43-918e-d49785741316", "sighting_of_ref": "indicator--2c1926f8-2e58-453f-910f-dcd5b140260e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd349984-3174-4f60-aea0-456a72c038b9", "sighting_of_ref": "indicator--67ef6b64-9a17-46fe-beaa-45f30dd3676a", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ca06fd-f22c-400f-ac0c-7c2baf3cec63", "sighting_of_ref": "indicator--0252af57-b84a-490c-b4df-3c8bdb93017e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0b0a2d-18eb-4d49-9b8f-2dbde0dddc9c", "sighting_of_ref": "indicator--04ad68a8-ce1c-46a2-9a76-e4ad1bb613dc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae86e21-7d88-4d42-b24d-63abce023634", "sighting_of_ref": "indicator--8bf83d9d-4a65-4690-a002-dcbebc037b00", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea410830-6be7-4c40-9b74-05bc112194ab", "sighting_of_ref": "indicator--f1576379-11d3-44e2-bdb4-5b57263a202c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857b8747-8d52-4668-8cd7-0ac25154d9f1", "sighting_of_ref": "indicator--51653126-c5d3-4957-abab-29aec07fe7be", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0225f8a-d54e-4d88-82ae-4b46e370450a", "sighting_of_ref": "indicator--def63354-1b0c-41e3-b0ea-7665c35f9963", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683ec0d1-af0c-458f-a5c0-38caa7fb0f07", "sighting_of_ref": "indicator--9a8cfccb-71b1-4372-a69b-46d0b24b0e5b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15a7ccb-b2df-4f27-b616-83679734c4b9", "sighting_of_ref": "indicator--a0f8e742-fadf-42ee-b160-c61bf25f557d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11bb8eca-d14b-400c-a8d1-b3b2ce544b24", "sighting_of_ref": "indicator--3dca3630-cdf6-4504-8b06-a7981908a583", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734f7c02-8a47-4942-bc46-c8b2bc21cb73", "sighting_of_ref": "indicator--f39834a2-93b6-46b6-a310-ce87f98d6487", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079570a4-0336-4da0-8ea6-623dbbb5e416", "sighting_of_ref": "indicator--258b8d56-fe26-4069-8858-7b0785691a08", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673ad323-778f-417d-8044-c23ae2a6d339", "sighting_of_ref": "indicator--165a481b-a90f-4d81-af42-a7375bb5bd45", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355face6-5378-4261-82f1-468b8a5543b1", "sighting_of_ref": "indicator--be286448-12fe-4119-8b1c-22b94a55b212", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1313504e-1666-40f8-b66f-352111155e78", "sighting_of_ref": "indicator--1ea20d56-85f6-4541-96cf-ac3d903100e3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7956630-f2ed-4848-bb36-d6023de31f98", "sighting_of_ref": "indicator--2da2313a-97c0-4678-a05f-74c51da66184", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85202888-3f42-44e8-bea6-92d7538566a8", "sighting_of_ref": "indicator--d714871f-4154-4935-b867-a14c6b730476", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c2cc02-91fa-4f48-ac68-21726ca24a90", "sighting_of_ref": "indicator--eb048ae0-18f2-402a-8fe3-ab4f54b3eb1f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac65725-0d15-4852-a904-9575b62bac7e", "sighting_of_ref": "indicator--35868086-0571-43f0-99a9-8f4368b59002", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb634af-5e82-4a4e-8cf5-f938005abf5a", "sighting_of_ref": "indicator--e74e8829-6a59-4a90-998a-6c4d309818a2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f5a76b-5634-4bc4-9de1-66cd32d8220f", "sighting_of_ref": "indicator--15666c8b-87fe-4f95-938a-c3ef01f8c6cf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19822254-762e-4caa-89a2-fcf7ea4e1708", "sighting_of_ref": "indicator--e8c10164-ab40-4a00-8e9f-84f1bdbb29af", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf1f656-a36d-4cd9-82a3-3cacb91f16cf", "sighting_of_ref": "indicator--ff1614ae-3a75-4829-9083-8a3360deb72e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437a91bf-31fc-40f0-b057-710f37f3d325", "sighting_of_ref": "indicator--2cfdef79-fe0d-470e-b5ad-216dad59b872", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1d93a1-cf1e-4ccc-b350-913d25432b76", "sighting_of_ref": "indicator--8018b6d4-7399-4cb5-86d0-eb5e1d7db8d6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bebf1be5-1921-4e6b-ae44-6ff2c2c2b1cf", "sighting_of_ref": "indicator--34730557-4f9b-4f52-8bd0-54284eabac97", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e41cbce-19ca-4b1d-ad30-fb7877f02a2c", "sighting_of_ref": "indicator--3ce06340-66ac-46a7-8d46-49dba888037a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce7d884a-c725-44c6-8ae2-b90b91daa0b4", "sighting_of_ref": "indicator--b32832ed-3186-4d1f-bac5-383cfa8cbd9b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51fa4a9f-25e2-4037-8406-f6dcbb4f1a4f", "sighting_of_ref": "indicator--d468b1d8-a337-408b-90f4-c193a258d104", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8222d18-5174-4685-b714-ebed53000e04", "sighting_of_ref": "indicator--e844a853-ed14-42b4-a438-f2823ad2fe89", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4193a698-0c56-41ea-b28c-c8f2b62ce0c1", "sighting_of_ref": "indicator--1216bba7-60e7-4507-b6fd-151b966ed067", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d971c5f8-5020-48f4-9cb9-761d8da690d3", "sighting_of_ref": "indicator--1216bba7-60e7-4507-b6fd-151b966ed067", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c56dc0d-7a13-4422-b0b6-c9d7370af323", "sighting_of_ref": "indicator--956a9e51-f575-4b6f-848a-821a76f76163", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726c0c5e-66cc-4c29-a944-80d5c8b412f1", "sighting_of_ref": "indicator--54f5ec6f-f790-49a1-a06e-f7bb0605f89a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4ee7fd-1c95-4fea-b117-fe23935cfa20", "sighting_of_ref": "indicator--1a25d06f-18b7-4561-b57d-b97f3fccefaf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1b90ae-4802-4ddf-ba05-a08ad514495e", "sighting_of_ref": "indicator--9e244cbd-2849-483d-9f64-9af81b59363e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b6da41-03cc-425f-9ffb-292bed49d5c4", "sighting_of_ref": "indicator--c2839fab-afdd-4a9c-a861-7191b67bd39b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd70caf-472c-4259-9901-8fcbb70f73b8", "sighting_of_ref": "indicator--c2839fab-afdd-4a9c-a861-7191b67bd39b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857a8ace-9138-471e-913b-e067e79393b2", "sighting_of_ref": "indicator--07d2ce23-e404-428e-b0d3-3db988cad46d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff157a73-cd72-4647-a7b7-6338190f7ef9", "sighting_of_ref": "indicator--9a475f93-b4cf-48f1-a2b8-f6d6b9bf0d57", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc0706b-7f47-46d8-8c18-722df90243ef", "sighting_of_ref": "indicator--9a475f93-b4cf-48f1-a2b8-f6d6b9bf0d57", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb52c7b1-c109-419b-84a2-b4736a2a4149", "sighting_of_ref": "indicator--ea6041ca-d16c-4f52-9c39-f5adfc93a1bb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b4da73-7213-49c8-8642-74e73dbd1fea", "sighting_of_ref": "indicator--ea6041ca-d16c-4f52-9c39-f5adfc93a1bb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60bc0db-d9b4-46ec-a2c4-141a943b6cdf", "sighting_of_ref": "indicator--ea6041ca-d16c-4f52-9c39-f5adfc93a1bb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea16033-c2cb-4985-9ece-cff1b0f0b805", "sighting_of_ref": "indicator--b1556a24-fd17-40e7-ae42-e8717050c34c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c5d89d-1230-4450-b630-8b43f05730d6", "sighting_of_ref": "indicator--b1556a24-fd17-40e7-ae42-e8717050c34c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e0f55e-af4a-4d01-871d-370e8ab93d2b", "sighting_of_ref": "indicator--94b90612-35d2-4e1b-a433-5ec6502bd9eb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55578590-60a2-43ec-ad5e-30d7c888b164", "sighting_of_ref": "indicator--bf1827ed-7b59-4090-aae3-c6ecb4cef712", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16337a7-e907-4f3d-9879-ad34844a2d71", "sighting_of_ref": "indicator--ae32d281-4f4a-465c-8824-b46e1eaf3b17", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b45aba-e4d2-4b0c-961f-66999abb62b4", "sighting_of_ref": "indicator--9bc87859-70e5-4aed-9081-e8925b070325", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead08cd5-30bf-4da6-9478-a7b845726403", "sighting_of_ref": "indicator--5e0a1e0f-05e4-4bdb-978f-ac2f54f1810b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395c0020-a6d9-4ae1-8dd6-ea0f8ceee698", "sighting_of_ref": "indicator--356bd9eb-a63b-4e94-9197-408c925c28df", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6d65ea-c14c-4f70-84d6-63c1efaa20b1", "sighting_of_ref": "indicator--4dbd66e2-e916-4098-9f4d-7133f0792953", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add40c4f-a753-4ef4-99e9-4d780449b1e2", "sighting_of_ref": "indicator--5857ab4a-3669-48b3-a304-a4516b663831", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b68919-9a4f-4bc9-a747-0a8b5726dd30", "sighting_of_ref": "indicator--5857ab4a-3669-48b3-a304-a4516b663831", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca37d818-45f2-43c1-b04b-2bae961609d2", "sighting_of_ref": "indicator--5857ab4a-3669-48b3-a304-a4516b663831", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b230ad-b29d-46d5-b9ed-e2d9a6bf8e9f", "sighting_of_ref": "indicator--76319e19-cf1b-4f8e-a0fb-9115d054ca0c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f43638-a2db-4287-9ae6-2d42a41b2017", "sighting_of_ref": "indicator--76319e19-cf1b-4f8e-a0fb-9115d054ca0c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f82b74-1def-49e1-84af-b4ead6fd4fd5", "sighting_of_ref": "indicator--76319e19-cf1b-4f8e-a0fb-9115d054ca0c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ac1355-68c9-4e4b-a2ab-04121a291234", "sighting_of_ref": "indicator--afd56ac3-21c0-476c-812d-21ab7a481bef", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81dccb32-a3d1-4c46-b701-c8a67017fafd", "sighting_of_ref": "indicator--afd56ac3-21c0-476c-812d-21ab7a481bef", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d7faab-493d-41db-8baf-1dfa892090b6", "sighting_of_ref": "indicator--43c0d52d-5b4e-470a-872b-3d163bd061d5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80864f0-b57c-4ba7-95e4-e0deb736e48f", "sighting_of_ref": "indicator--7cb4ae61-cd60-4bc9-8d4a-ec376ae830e2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1718d7d1-a589-4536-9a5e-4d3812b16e59", "sighting_of_ref": "indicator--7cb4ae61-cd60-4bc9-8d4a-ec376ae830e2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ddead3-7fd6-457e-b0a9-bd1a9072d531", "sighting_of_ref": "indicator--7cb4ae61-cd60-4bc9-8d4a-ec376ae830e2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790566c9-f7ee-4308-b125-f1c613b5b135", "sighting_of_ref": "indicator--b9bdc7b2-d2ad-4bc9-8ae8-3dc54108b33f", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f441eed0-e414-47b8-820d-3edfc19fe374", "sighting_of_ref": "indicator--357e6a86-8218-4368-aedd-1fe19fafc2ea", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7a8961-1bff-41a0-bea0-338644c3fd21", "sighting_of_ref": "indicator--ae442b58-8604-4e4c-b1d1-48581c6ee489", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e84df6-66d9-4ea0-b603-a85acfa84982", "sighting_of_ref": "indicator--98417dd9-45b1-44b6-ab6c-9eace1a9d7b5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bfc20bc-063d-4030-8721-e022da0b541b", "sighting_of_ref": "indicator--89830652-91af-470d-8814-e69d129353a3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dff75f8-4329-40c7-a1f2-aeef11ab35e0", "sighting_of_ref": "indicator--19fde3d8-da25-40cd-aa8a-36330d542e6b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3887e82e-6ef8-45d9-a3ed-09adf6485277", "sighting_of_ref": "indicator--994681ec-d9e9-4dfc-8bf1-d55b5a0d838c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e7f6f4-c3c9-4c5f-a24c-f0144267fdab", "sighting_of_ref": "indicator--bdb39ea1-a477-4b91-b9e4-9211e5af6ebc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44b1966-39f4-4e00-b2ee-aa29e626c0cb", "sighting_of_ref": "indicator--5cb3b7d4-260f-47a3-8542-01b4695876d4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a35ae1-0306-407b-9a35-b2bd202bb36c", "sighting_of_ref": "indicator--5cb3b7d4-260f-47a3-8542-01b4695876d4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b440a3b-1067-4185-9235-c7395adba877", "sighting_of_ref": "indicator--5cb3b7d4-260f-47a3-8542-01b4695876d4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1cc9244-68d9-4eae-875c-e5e02a4f7487", "sighting_of_ref": "indicator--3b124fe6-2934-41de-a5ca-d2f0b49a17f3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8fddb1-a7aa-463c-87f6-ae96b7801aed", "sighting_of_ref": "indicator--3b124fe6-2934-41de-a5ca-d2f0b49a17f3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b34f82-0e86-4124-84b3-68fad28bd408", "sighting_of_ref": "indicator--3b124fe6-2934-41de-a5ca-d2f0b49a17f3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a194de03-72b6-486d-9782-af34e2d604df", "sighting_of_ref": "indicator--3e090ab8-7ac8-464b-95ae-3c53fe5564f3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2eb6ff-0d49-4d21-b0cf-e5df2f6ea2ea", "sighting_of_ref": "indicator--3e090ab8-7ac8-464b-95ae-3c53fe5564f3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d1040e-5056-4f83-bca1-01ae51a1a80f", "sighting_of_ref": "indicator--3e090ab8-7ac8-464b-95ae-3c53fe5564f3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988f403f-ef24-4f0b-ba9c-1eca91921c46", "sighting_of_ref": "indicator--8f56d292-450a-4077-ba56-26ea79b79e39", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811cf509-3d4a-4ff4-9258-08a82d279ab7", "sighting_of_ref": "indicator--8f56d292-450a-4077-ba56-26ea79b79e39", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55029b75-309c-4d01-a245-6e5ed742ce67", "sighting_of_ref": "indicator--8f56d292-450a-4077-ba56-26ea79b79e39", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a325c860-c41b-439b-b7cd-6b9e21765fdd", "sighting_of_ref": "indicator--7750ddfe-78df-469f-a7da-13d2e296c9ad", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a81ca0c-82bb-4e54-9031-b10052f8bc8c", "sighting_of_ref": "indicator--dccb1afd-78fc-4786-ab9e-9fc44305f3c9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5eda0db-bb17-49b5-8c6e-a4eaab811ee6", "sighting_of_ref": "indicator--c6ed61b2-b80c-4efe-bb64-4ea9bd155c18", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9588638d-04f6-4a15-b366-cc11325f745a", "sighting_of_ref": "indicator--c6ed61b2-b80c-4efe-bb64-4ea9bd155c18", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c156474-e675-4502-91aa-745acef02fd3", "sighting_of_ref": "indicator--c6ed61b2-b80c-4efe-bb64-4ea9bd155c18", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee00988-2431-44ad-944b-4f6eef14cdd9", "sighting_of_ref": "indicator--cc015345-a911-4a2f-af8a-ca65011dc1d3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32ac181-519e-47a1-9698-d6f6cd7fbf4c", "sighting_of_ref": "indicator--cc015345-a911-4a2f-af8a-ca65011dc1d3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47119dc4-3bd2-4494-a0d2-acca6471e2e7", "sighting_of_ref": "indicator--cc015345-a911-4a2f-af8a-ca65011dc1d3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd09787a-8f77-45eb-a3b9-a908736f5870", "sighting_of_ref": "indicator--4a59d912-9c7d-4b49-ba45-7ff8dd436f8f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918894e8-a2ca-47a0-a93e-fec4964c209e", "sighting_of_ref": "indicator--a8b2c5f9-bd25-4ebd-a910-d7c32ba6df21", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b3d1fc-631a-4b28-a930-f38dea07c429", "sighting_of_ref": "indicator--5c529cab-8079-418f-9eb4-62549361ea14", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d13094-a2ff-481f-a065-7c2fd8a04529", "sighting_of_ref": "indicator--595c3404-3d26-4bd8-8a05-5597a45c6a22", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77ee33e-ba32-4ea4-927a-bd6ddad5875c", "sighting_of_ref": "indicator--595c3404-3d26-4bd8-8a05-5597a45c6a22", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2234f36a-593d-4ae3-9ab4-cf9670abf15c", "sighting_of_ref": "indicator--595c3404-3d26-4bd8-8a05-5597a45c6a22", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b734129-b2a4-42ec-8ee9-0e98f2c8e617", "sighting_of_ref": "indicator--f9db8317-5254-4060-9b59-bf66bca1a0e1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bcf532-f293-4dbb-a061-d563bb8bb590", "sighting_of_ref": "indicator--a2ca5740-1b2b-49e1-9162-5a8c3abc1499", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057ced06-37d5-4e88-95b9-0951e3290698", "sighting_of_ref": "indicator--ba72124c-2440-443e-b1a4-d8e5bef0e8e9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5eb02d7-c407-42a6-af35-ebaf7c0748c8", "sighting_of_ref": "indicator--97143b74-00b4-4972-9fd2-108bb19f6a78", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746df95e-28c3-4104-a773-0e6166941d91", "sighting_of_ref": "indicator--d1b2bf6b-b3c4-42d2-82c5-de4dceebf000", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a180885d-2ef2-4bf8-8e99-bea8866c4231", "sighting_of_ref": "indicator--5a5fc684-a9cb-43f4-8f9b-ba9497c20c0f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ea2255-f3ae-465a-91d4-465e0ea65f06", "sighting_of_ref": "indicator--fab09855-0e1d-47e9-93e9-95a87da6b499", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75113c5d-66aa-4e6a-9c72-291e0b9bac3e", "sighting_of_ref": "indicator--fab09855-0e1d-47e9-93e9-95a87da6b499", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0f4bf7-ee13-482d-9d21-dcc518451fba", "sighting_of_ref": "indicator--fab09855-0e1d-47e9-93e9-95a87da6b499", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfaba23d-ca43-493f-b0a3-1f7d49f2750b", "sighting_of_ref": "indicator--b95ad690-7457-48b4-b69f-ba94d7c5105a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06bd523a-db72-4766-9288-0a0a4885f7fd", "sighting_of_ref": "indicator--b95ad690-7457-48b4-b69f-ba94d7c5105a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec54439-1879-410f-b720-14c1dc3cda32", "sighting_of_ref": "indicator--b95ad690-7457-48b4-b69f-ba94d7c5105a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252084a5-f095-4aad-b1cd-9fdd4980d1cd", "sighting_of_ref": "indicator--0d412dd1-52bb-429d-9b7f-0214450e7477", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e5d51f-de7c-4897-a877-c278d51eae33", "sighting_of_ref": "indicator--b935c31a-6641-4d52-9933-44ea7a1b8289", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb62bb2-c418-4018-b4ac-21926936d474", "sighting_of_ref": "indicator--d85cfb36-26e6-4db3-8e7d-739ce2646c94", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed6d40f-f8db-4642-8c44-e20adfd9e098", "sighting_of_ref": "indicator--d85cfb36-26e6-4db3-8e7d-739ce2646c94", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6b5a99-de84-4af3-bbe5-0141bf9e7dbd", "sighting_of_ref": "indicator--6ab2f689-6f55-4dc5-9e24-a133ae6ee6ab", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a44d043-7f57-45c3-ba81-f97b97496252", "sighting_of_ref": "indicator--5751c52b-884c-4313-9707-263b40a3e4e6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c8f4b0-55e3-4704-8928-975f61fcea21", "sighting_of_ref": "indicator--ca6421f5-a1d3-4a59-8f55-8c66bbbc841f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6680a81a-95cf-4055-a71f-4d78e25dd105", "sighting_of_ref": "indicator--c25b5d5f-ae01-4cb9-9054-7631fe0fd484", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9d804a-12ac-4bf6-aedb-90da734e4a4a", "sighting_of_ref": "indicator--cac0ca0b-957d-4eeb-b1f9-d8e971df0dcd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde735ee-ecd5-4510-a4ac-79f6943d0ae9", "sighting_of_ref": "indicator--7b9283bb-bf47-4a47-8c79-afd3769cd95b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de502e58-eb79-440e-bead-7036a81e3659", "sighting_of_ref": "indicator--294387e3-4337-4b64-bdb6-ed8add6e00a2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d668bafe-a0c2-415e-a1af-128570eb8dbd", "sighting_of_ref": "indicator--294387e3-4337-4b64-bdb6-ed8add6e00a2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81fb638-7f78-4852-b587-f4e0a4940747", "sighting_of_ref": "indicator--f49569f7-b6c5-4bb8-b14c-f5cfe42099ca", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b2bd83-6bf0-426d-8652-f644075535c0", "sighting_of_ref": "indicator--f49569f7-b6c5-4bb8-b14c-f5cfe42099ca", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e510be9a-fc23-4ba9-89a9-3ddeef34376b", "sighting_of_ref": "indicator--262f7f13-692f-4d72-90ae-8cfa9903e2ab", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984c5c30-9bb9-4f32-bdd2-f4c99c8a602e", "sighting_of_ref": "indicator--490a4856-d6ae-43b4-9c0f-07b38406c51a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04ef3aa-f3c5-4b9d-bf3f-0eb06e6a3c72", "sighting_of_ref": "indicator--490a4856-d6ae-43b4-9c0f-07b38406c51a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a1bbe4-a41e-4f2a-98d2-91d47bc383e9", "sighting_of_ref": "indicator--734f0cda-f1b5-4389-b2ec-5d978c1117bf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d619fc0e-29cb-4e0c-8961-e7e197fff553", "sighting_of_ref": "indicator--5266ebb3-be0d-4fe2-8ccf-23d463f66b43", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ef5188-cb0d-42c6-be59-253ac5c0a12e", "sighting_of_ref": "indicator--858964a4-6ce1-4935-b0ab-28ac0117d2a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19316c7c-b0e6-4eaa-926d-e1f33b94d44b", "sighting_of_ref": "indicator--0edbd4cf-bc47-4f04-ab97-88c88d9cda30", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1b7ae5-329e-4bca-891e-d4a45a84b794", "sighting_of_ref": "indicator--357764d1-b048-44fc-bbdd-9447d549ac0c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbeb11fe-267e-4eaf-a5b6-2183448255cf", "sighting_of_ref": "indicator--8d175645-0b34-4bef-8081-6e967bc81e1c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9255ff35-75d1-453f-ae67-1b11b90728d1", "sighting_of_ref": "indicator--8d175645-0b34-4bef-8081-6e967bc81e1c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0b6c16-938f-476e-979d-9473a589706d", "sighting_of_ref": "indicator--aea7714b-319b-45b9-b0b8-f1d46474a302", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279657e6-a00f-444c-8325-7e98f31b51fb", "sighting_of_ref": "indicator--a468dbfb-ec7f-4e05-8d95-68c6b69b1e5d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440e196d-f78a-4b90-b985-4c9ea392b84b", "sighting_of_ref": "indicator--63759053-b39f-43da-89c6-5e503d033e6d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4255ba70-1208-48a2-a6b7-0191b2859021", "sighting_of_ref": "indicator--ca776b56-2643-472b-a25b-ac51589f7944", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50823abf-08a3-4d94-8885-aab09214bc69", "sighting_of_ref": "indicator--57b1fdec-6fe5-415a-8a2f-10b5b107f33c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce4725f-629f-4156-827b-e966c59a3dee", "sighting_of_ref": "indicator--99796dd2-846c-4f31-abee-ad54eafe731a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa31319-d637-4307-98d3-445c46593331", "sighting_of_ref": "indicator--8843cb32-05dd-4d64-a37f-6524625c5fab", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1598ef21-6634-4d82-bc39-ce48ceddb422", "sighting_of_ref": "indicator--2137f9bb-c59a-4f54-bae5-989b6020ab48", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dde5947-5219-4557-ab91-8fd36f3e65d2", "sighting_of_ref": "indicator--9abcf6d8-c2fc-4da0-80bd-7b2dafa0bef0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cebf5aa-cb6f-4730-a4e7-a833cdf5c815", "sighting_of_ref": "indicator--aa961709-986c-47c4-9c4c-c15fe05d295c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f29ffe-eba6-472c-aa4a-dae458699174", "sighting_of_ref": "indicator--e5b0fd64-9351-4a62-ba38-3f3d1fd601e3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc16fa67-6c08-4493-83ba-288237d0c0fb", "sighting_of_ref": "indicator--e5b0fd64-9351-4a62-ba38-3f3d1fd601e3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5718775e-daac-4a30-b61d-b551885c01e3", "sighting_of_ref": "indicator--1abd4398-914e-40ca-b3e0-2037687085cf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e31267-f80c-4ae8-858c-225f1fbfc455", "sighting_of_ref": "indicator--1abd4398-914e-40ca-b3e0-2037687085cf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c2029c-1fcf-43d6-a0ac-68e7e8099497", "sighting_of_ref": "indicator--9755ac2d-a697-41a1-b1d0-30ffed83bf4f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307ab396-59db-40bf-8959-a9dbadec5c60", "sighting_of_ref": "indicator--9755ac2d-a697-41a1-b1d0-30ffed83bf4f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e72ccad-8c3a-4566-887c-f04db47b139f", "sighting_of_ref": "indicator--9755ac2d-a697-41a1-b1d0-30ffed83bf4f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0e28bd-2d1c-46f4-b9c1-b4ab6338fd9c", "sighting_of_ref": "indicator--f6471ec4-4d7e-41d9-9c74-626f9cac18f4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ea32da-873c-40c4-b79c-5e0ec4930c3e", "sighting_of_ref": "indicator--6b766cdb-9f5e-4bdd-b798-06d8b68bc92e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868b878f-5813-4033-9959-01a5bba4bf95", "sighting_of_ref": "indicator--6b766cdb-9f5e-4bdd-b798-06d8b68bc92e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40d2a60-de92-4f6a-b16e-46eeec3159ea", "sighting_of_ref": "indicator--6b766cdb-9f5e-4bdd-b798-06d8b68bc92e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958e5536-de29-4d84-b639-9d58e0fe8771", "sighting_of_ref": "indicator--48cfe8e7-e175-4ce3-a89b-4a1c3ca671c6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c63067e-db30-428c-a72d-044dc6bbd214", "sighting_of_ref": "indicator--48cfe8e7-e175-4ce3-a89b-4a1c3ca671c6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ee1179-bc59-4aa6-85af-92e89bf51461", "sighting_of_ref": "indicator--48cfe8e7-e175-4ce3-a89b-4a1c3ca671c6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3ea115-4f7c-4b1b-b1a5-93e8845d4fd8", "sighting_of_ref": "indicator--8c3e158b-b762-4190-a687-b858725c61b5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d971164-9387-4f1f-9f29-3c9832ad37eb", "sighting_of_ref": "indicator--65ec7975-8640-4e76-ae19-d25b142bacca", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d087a8cb-e0a0-407a-8100-96abecf07d8f", "sighting_of_ref": "indicator--65ec7975-8640-4e76-ae19-d25b142bacca", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3cf11ca-cb50-4a2e-9530-c5f371ca86d0", "sighting_of_ref": "indicator--65ec7975-8640-4e76-ae19-d25b142bacca", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f75f75-5104-41e6-8133-0c1e03a66bf6", "sighting_of_ref": "indicator--3797939b-aaa4-41e2-8dcb-942563793d67", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e8d27d-3c00-41fe-8ead-c22f23e88b1a", "sighting_of_ref": "indicator--3797939b-aaa4-41e2-8dcb-942563793d67", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecab32ed-07a7-49c6-a0e4-0be20efc2148", "sighting_of_ref": "indicator--24c9a9af-42b8-4df6-b27b-753d766d5073", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc3b5f2-3733-40ba-a235-300ed314e4f1", "sighting_of_ref": "indicator--96b8d8ac-201e-4db3-886d-b48059b0b0c2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f455b3d2-f08b-484a-937b-d20db63dd445", "sighting_of_ref": "indicator--96b8d8ac-201e-4db3-886d-b48059b0b0c2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763c363b-7d8e-4e1a-88ff-03f5b72da616", "sighting_of_ref": "indicator--7e9ce06a-52f6-4f8e-96f2-afc2cb9b720d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a748212-a863-4e60-befd-777ef4cc6b44", "sighting_of_ref": "indicator--7e9ce06a-52f6-4f8e-96f2-afc2cb9b720d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54309060-8bdb-4567-98ff-6fc4508acd3f", "sighting_of_ref": "indicator--fa78594b-ff6e-4f55-ac47-36a5e481665b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f907bbca-8dd5-4b2b-956f-f5ac071a4d9e", "sighting_of_ref": "indicator--9ea9517a-8eb3-4bb9-a207-6cb224777c0a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f720a47b-3f0e-49d3-abaf-92f1de5d443d", "sighting_of_ref": "indicator--9ea9517a-8eb3-4bb9-a207-6cb224777c0a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a4f23f-91bd-48b6-a89f-1f8295252e2f", "sighting_of_ref": "indicator--9ea9517a-8eb3-4bb9-a207-6cb224777c0a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec01a6b2-c806-4a87-bef9-b2859327866e", "sighting_of_ref": "indicator--af55781f-d55d-474a-afe9-afbbfe6c6e0f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca77d18-bfcc-4bba-9b70-3e963cb3eeff", "sighting_of_ref": "indicator--19c3006f-5e65-4ff4-b702-84a431b9fbc7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745ef7e7-d5dc-483b-a96d-69f3683ec618", "sighting_of_ref": "indicator--557d9ff8-ac56-4bb3-9412-37d435a5d883", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2336003a-dc27-4928-b962-ae22e8a2e9a1", "sighting_of_ref": "indicator--eab5aa06-a38c-4262-a1d8-8938cb6c0e6c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ad2693-3a84-4741-88e7-d049562b0e53", "sighting_of_ref": "indicator--0e34abc8-0bc3-4b23-aaa6-c1778094d7a4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1632261-f01e-4908-8435-b974881f2679", "sighting_of_ref": "indicator--2c150999-fe70-43a9-bf99-619725e8b381", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b88e20-63fb-4dd4-bc94-6d9a9b501fd1", "sighting_of_ref": "indicator--2c150999-fe70-43a9-bf99-619725e8b381", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670064a0-fff8-443d-9d42-1976f5847ee0", "sighting_of_ref": "indicator--c482840c-64b1-4e18-b914-9fc7d59ec083", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458a55f0-a9ce-4721-8dca-0a20da7a1c52", "sighting_of_ref": "indicator--a668bfad-9fb4-40cb-b73b-a61e246eb7db", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f84431f-f74f-4719-9369-13407210c200", "sighting_of_ref": "indicator--a668bfad-9fb4-40cb-b73b-a61e246eb7db", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd97a13b-7f2d-42a2-a8f5-dee42f129c59", "sighting_of_ref": "indicator--daa0a347-2f4f-46f2-b69b-1b70576c2fb8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4fb02a-8d48-49bf-a4c2-9c181bcdaade", "sighting_of_ref": "indicator--4f557302-60b3-4d6b-9fe6-b45021c51603", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbefbe7-ed68-44dd-8b2f-018b00e98b71", "sighting_of_ref": "indicator--02893086-7ef4-4611-bf0b-9d90f83f04a7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485e4128-3b27-45be-a673-4cdaeef85f80", "sighting_of_ref": "indicator--a3b341cf-bd94-4e57-aff5-cee65b2f7a7f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb40d05c-1867-44bf-beab-f1bb165d5d45", "sighting_of_ref": "indicator--4ef2e272-b11d-4a11-8385-26a23dfa292a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26c8426-22e0-4d6c-88ae-df6105586da5", "sighting_of_ref": "indicator--6ec6f90c-d656-45e7-93dd-8c1e2736633c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393d9e7f-627c-4e83-a104-da1b3d6bd890", "sighting_of_ref": "indicator--f7b0679c-74c8-4f81-b682-0e893c487ab0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7c12d7-361c-4709-ba12-e9db6ab5cd73", "sighting_of_ref": "indicator--f7b0679c-74c8-4f81-b682-0e893c487ab0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14367289-3ef8-484e-a460-f1787cd1e132", "sighting_of_ref": "indicator--7f2225b7-a567-478b-89b1-4a8c71c387a4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bea3ec2-5201-48bb-8526-a3284a0fe51f", "sighting_of_ref": "indicator--7f2225b7-a567-478b-89b1-4a8c71c387a4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c2aed4-1b68-4594-b185-73277108e5fb", "sighting_of_ref": "indicator--7f2225b7-a567-478b-89b1-4a8c71c387a4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22445e7d-5ec7-45f0-8996-8325df8363db", "sighting_of_ref": "indicator--c1f0b85d-3796-4f25-bfeb-87f639db13a7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aeaf610-93e8-4fb9-8b81-edca25a6e657", "sighting_of_ref": "indicator--c1f0b85d-3796-4f25-bfeb-87f639db13a7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2dea19-ec23-46a1-805d-f1e85b0360c5", "sighting_of_ref": "indicator--63796c7f-f8e8-4ecf-bb70-b54223e2d645", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3355eb-0db7-46b3-b9cb-46bcc3e2024d", "sighting_of_ref": "indicator--63796c7f-f8e8-4ecf-bb70-b54223e2d645", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2872ae08-d1eb-4437-8256-31d6b886498b", "sighting_of_ref": "indicator--63796c7f-f8e8-4ecf-bb70-b54223e2d645", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07cf50d-4ef4-4193-b349-d6e0cff22afe", "sighting_of_ref": "indicator--6ca0c4ee-d6b2-4a1a-8267-d9d24473a9bd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0117f8d7-b743-478a-ba70-92eb7c5eb39a", "sighting_of_ref": "indicator--6ca0c4ee-d6b2-4a1a-8267-d9d24473a9bd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b461d32-3ac5-48ec-9951-3d2aeced9ee4", "sighting_of_ref": "indicator--6ca0c4ee-d6b2-4a1a-8267-d9d24473a9bd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e47d6a-6231-4b61-85d1-d847b8fd9be7", "sighting_of_ref": "indicator--a8190a11-51f4-4fcd-bd49-3d4165b7f361", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2f3df2-0f01-49e0-ac4c-33775726d65a", "sighting_of_ref": "indicator--a8190a11-51f4-4fcd-bd49-3d4165b7f361", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d763d1ca-29bb-40db-8274-7a5415d8f98d", "sighting_of_ref": "indicator--a8190a11-51f4-4fcd-bd49-3d4165b7f361", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d829e130-dc44-476c-ad92-e728cac3e95b", "sighting_of_ref": "indicator--6434dced-641a-4638-8846-d5e82d9a1af9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d585394-1b21-4b73-96a0-5b27d8e2ca7c", "sighting_of_ref": "indicator--c1b4e83b-43b0-492b-9dfe-71dec4fd09c4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb64dfa-cac9-44ee-b819-c383eacc4abc", "sighting_of_ref": "indicator--3e9db281-3119-4d6d-92fc-6d3367b5ae32", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc94bf07-393a-4625-ae04-2f692aff3458", "sighting_of_ref": "indicator--3e9db281-3119-4d6d-92fc-6d3367b5ae32", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cc8c04-a7c8-4516-b6ee-b0ebade49bc4", "sighting_of_ref": "indicator--3e9db281-3119-4d6d-92fc-6d3367b5ae32", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69de8f23-b775-4a5a-8d8d-e6998f78d45e", "sighting_of_ref": "indicator--77778076-6d36-45b9-a73c-46dd3964bef4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88aae261-1209-479f-a5f6-2449e22ac902", "sighting_of_ref": "indicator--77778076-6d36-45b9-a73c-46dd3964bef4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1cc9393-e5a3-4669-b320-c5f2be206f2e", "sighting_of_ref": "indicator--8e0f11d9-b69f-4777-b0be-25eebf2b32f9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b289e52e-c4ee-46a6-8db3-ecd4da7ce03b", "sighting_of_ref": "indicator--8e0f11d9-b69f-4777-b0be-25eebf2b32f9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1ff932-18a8-4a91-9616-62637dd0f684", "sighting_of_ref": "indicator--8e0f11d9-b69f-4777-b0be-25eebf2b32f9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d55fb0-6a32-4296-9b0d-e40bbecb9aa4", "sighting_of_ref": "indicator--ea1ac32e-62cf-49ba-ae83-0e8d9e39e2f3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1af3cf-9d35-4189-8e93-e6de484153f0", "sighting_of_ref": "indicator--e130c44b-8f89-4137-a2f7-0fbb268a9833", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e206e4-0e9d-47f3-83d1-2a92a2155300", "sighting_of_ref": "indicator--e130c44b-8f89-4137-a2f7-0fbb268a9833", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a73298db-3b7b-43dd-aa72-f005e50696bf", "sighting_of_ref": "indicator--3f9cf245-1501-4170-bbe4-51575e101a98", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92eef28-ea76-4246-a66d-b5a4b6ce71a6", "sighting_of_ref": "indicator--3f9cf245-1501-4170-bbe4-51575e101a98", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28fe85fd-d11a-47b0-a2f5-c9c34b565c20", "sighting_of_ref": "indicator--3f9cf245-1501-4170-bbe4-51575e101a98", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53d2636-a65c-414a-a39c-f71543618b69", "sighting_of_ref": "indicator--971b769a-ed80-44c8-90ac-fc930807c9fd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34af8ea2-f9e5-47ec-b471-6d258debc022", "sighting_of_ref": "indicator--89d2d96f-ffd4-4b53-a54a-565d9fc5647c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795c5740-ca64-4d80-9e92-bf613cc2208b", "sighting_of_ref": "indicator--00f35122-49b0-4031-8a7e-058fdfa8575e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0312418a-5114-47de-b57b-d25568f18a10", "sighting_of_ref": "indicator--2c6e235b-2d7e-4523-870c-dd5cf5bd99da", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac8d888-915e-4275-a8f7-0b2dbc28254e", "sighting_of_ref": "indicator--2c6e235b-2d7e-4523-870c-dd5cf5bd99da", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f77597a-47df-4fe8-a46b-d60f4ff21ade", "sighting_of_ref": "indicator--ea384299-d7ad-4e07-bb7a-9ba5c673bc70", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885456fa-c222-43e9-af3c-01b5d92c285e", "sighting_of_ref": "indicator--ea384299-d7ad-4e07-bb7a-9ba5c673bc70", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f6d656-5c63-45e7-bef3-01e3f217878a", "sighting_of_ref": "indicator--ea01886d-4eb7-4bdd-a173-fed43a239355", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b858b2-2c7d-4be8-9271-ceb8b2922857", "sighting_of_ref": "indicator--ea01886d-4eb7-4bdd-a173-fed43a239355", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffed2a83-4145-480c-8242-14cd1870cd71", "sighting_of_ref": "indicator--f4157aae-50b1-4798-9ebc-d1b36ba802d9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b7bb8f-1bc5-41e3-b721-faabce91531e", "sighting_of_ref": "indicator--f4157aae-50b1-4798-9ebc-d1b36ba802d9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--addbe453-3f84-47ad-a5d6-5519dfcb2787", "sighting_of_ref": "indicator--f4157aae-50b1-4798-9ebc-d1b36ba802d9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b983619-18df-4e99-8ece-66136fcbd386", "sighting_of_ref": "indicator--7793125a-5767-458e-af57-645529c3481a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198917a6-1ad3-4712-8fcd-bd65e9eb5966", "sighting_of_ref": "indicator--8df50d95-90df-4d57-8911-f25681e7f1a8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a68e822-762e-4347-8507-93343a4297fd", "sighting_of_ref": "indicator--8df50d95-90df-4d57-8911-f25681e7f1a8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5331f73e-4dad-45c1-afdc-a8e28bd8da42", "sighting_of_ref": "indicator--e8fdc506-5cff-447b-88bc-6c393b7b2691", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c62b3f-5519-469b-a502-4ce90ec16e6a", "sighting_of_ref": "indicator--e8fdc506-5cff-447b-88bc-6c393b7b2691", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ea0664-7fea-42e2-8639-17433599f356", "sighting_of_ref": "indicator--865318cd-c1ea-4894-b708-d061d52ffac9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b94fed-6ad1-4a4f-8b37-9dcedc199a3f", "sighting_of_ref": "indicator--865318cd-c1ea-4894-b708-d061d52ffac9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--166aca7e-d337-4e36-803d-017aaa1525bf", "sighting_of_ref": "indicator--865318cd-c1ea-4894-b708-d061d52ffac9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca71eeff-3d02-4b88-8998-74e500528973", "sighting_of_ref": "indicator--e0e9b7ac-74c7-4b47-84fb-2d46a4a87b21", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9b5dce-70c3-485f-bd94-d1ec4b6a2b30", "sighting_of_ref": "indicator--47d1c5c2-95d2-4f93-a4fd-52a824a9bd4e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2acf6358-9c6f-4c9e-96e0-bc0fe5bd6fbf", "sighting_of_ref": "indicator--47d1c5c2-95d2-4f93-a4fd-52a824a9bd4e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7672ebf1-84f5-4613-b93e-27577ee1e17a", "sighting_of_ref": "indicator--7278963c-5e55-45c0-bdc8-1fe48fef4e88", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95dd4cd4-859f-4f73-89e1-144bd5acd443", "sighting_of_ref": "indicator--7278963c-5e55-45c0-bdc8-1fe48fef4e88", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846f4a73-0819-4cbd-be50-cb5d942128e8", "sighting_of_ref": "indicator--ab291ce1-fd3c-4f86-9356-a09d8842397f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500e31e5-cb69-4e3c-803f-06c76ccd1790", "sighting_of_ref": "indicator--ab291ce1-fd3c-4f86-9356-a09d8842397f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ef9a86-9443-45f5-b850-ffca0b8488fa", "sighting_of_ref": "indicator--ab291ce1-fd3c-4f86-9356-a09d8842397f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6229251a-6e0a-44a7-89b1-a1333b5e887e", "sighting_of_ref": "indicator--c9e1336a-649a-45c0-8eca-5f8098aff6d0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0dddba-4ddd-478f-acb3-f35e603e3470", "sighting_of_ref": "indicator--c9e1336a-649a-45c0-8eca-5f8098aff6d0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a21b05-00c7-4d7f-adf4-637599728c9b", "sighting_of_ref": "indicator--3334d89d-e4eb-42b1-980d-3bc6a05a3534", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95eb694d-e09f-4635-a654-5fc0489f7778", "sighting_of_ref": "indicator--3334d89d-e4eb-42b1-980d-3bc6a05a3534", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8b9019-9e42-49f2-aed8-6656969a4385", "sighting_of_ref": "indicator--3f2cd4a4-bde6-47ac-a292-6268f8be1bb8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d37e63-53ff-41eb-bfe5-f8ce23d80b33", "sighting_of_ref": "indicator--3f2cd4a4-bde6-47ac-a292-6268f8be1bb8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4923e03b-bd05-4c45-a460-986fa12593a1", "sighting_of_ref": "indicator--3f2cd4a4-bde6-47ac-a292-6268f8be1bb8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7501dd05-cb2f-45f5-8b8b-9a83891929da", "sighting_of_ref": "indicator--b3e0ba91-147b-4cd9-8b5f-022b93655c63", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6c6108-64a6-4738-ba91-e61c4099e382", "sighting_of_ref": "indicator--be604df5-bcba-4da5-99d3-6cc3f2a9bad8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15dd52ae-1cf5-4139-ba82-ee9a956edb40", "sighting_of_ref": "indicator--bc7b2970-acc2-4cb0-a1f9-1377ddd25930", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d2bb72-131c-4b33-8b23-b4474b958e4b", "sighting_of_ref": "indicator--6a634ee2-d8b0-464f-b291-3d072fc11615", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b06e225-2856-420e-b20e-ca36223d019d", "sighting_of_ref": "indicator--6a634ee2-d8b0-464f-b291-3d072fc11615", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e925cb56-e277-4350-a9c5-70009353b15c", "sighting_of_ref": "indicator--6a634ee2-d8b0-464f-b291-3d072fc11615", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5b99c8-bf4f-416a-ba6d-2e8972660dd2", "sighting_of_ref": "indicator--9e84c0fb-6898-41d5-afd0-e8c63599843d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f5d8b61-fab4-48d9-b3aa-c35793c6af89", "sighting_of_ref": "indicator--80f4bb48-45bd-49a1-b9b7-1f57de3b5a5c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6ce9fb-36e5-434c-870d-9dc18d1b36ed", "sighting_of_ref": "indicator--031ad503-bd2d-4d25-b3ed-203da5a6b28e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68cd733e-a3da-4719-aa97-07a097ee92b2", "sighting_of_ref": "indicator--031ad503-bd2d-4d25-b3ed-203da5a6b28e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2be889b-3063-45e3-9784-750898c41a11", "sighting_of_ref": "indicator--7dfe946f-84d3-4fc2-95d8-257a97e1a431", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f52517c-38ba-45d8-9e87-6454d3421d24", "sighting_of_ref": "indicator--7dfe946f-84d3-4fc2-95d8-257a97e1a431", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374d7fa9-c523-4275-9589-ccfac17177d0", "sighting_of_ref": "indicator--7dfe946f-84d3-4fc2-95d8-257a97e1a431", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ea861a-2d64-4a9a-b665-3ef49a6867f3", "sighting_of_ref": "indicator--5a4e31ae-1481-4a97-8027-d95f3ede51d0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6f6f21-6a72-4cb4-b4a0-156633b20aa0", "sighting_of_ref": "indicator--d172cd8d-e80a-4b0b-9fd3-fcc6e8fc3685", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2edeaab9-f2f0-428f-98cb-6174c7485071", "sighting_of_ref": "indicator--d172cd8d-e80a-4b0b-9fd3-fcc6e8fc3685", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26afb69a-de13-4880-8775-78ebf47c7f7f", "sighting_of_ref": "indicator--0c98b507-de23-4522-aeb9-91d8c033eb19", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37faaacc-0d6b-4d51-8a63-805e43175637", "sighting_of_ref": "indicator--0c98b507-de23-4522-aeb9-91d8c033eb19", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe269bc-545c-4446-ad40-fb80d84658ab", "sighting_of_ref": "indicator--0c98b507-de23-4522-aeb9-91d8c033eb19", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1d4bbc-9d21-49a9-a424-9f501848c547", "sighting_of_ref": "indicator--e78738f4-1508-47fe-8b54-8a1d9e2cc2b9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d9550c1-e837-4aa4-9624-00ab1fbb9fe1", "sighting_of_ref": "indicator--e78738f4-1508-47fe-8b54-8a1d9e2cc2b9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acea534a-4b29-4038-b934-71fed3645e42", "sighting_of_ref": "indicator--e78738f4-1508-47fe-8b54-8a1d9e2cc2b9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762e2826-243c-49e8-a697-2e5f33c2f7ba", "sighting_of_ref": "indicator--0c535963-cf2d-423a-9e7a-700209ea652c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb24019b-e449-4e8f-acf2-e71ea6ddcdaa", "sighting_of_ref": "indicator--0c535963-cf2d-423a-9e7a-700209ea652c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9feaf2e-4f53-4c1d-bbb7-f06319e29a45", "sighting_of_ref": "indicator--4a291552-6787-4c4f-a900-63c4863fd9a0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5392a4-8231-4c92-b7af-80d558b8dc10", "sighting_of_ref": "indicator--6e96b71f-26dd-4e59-a0de-07d2777878fd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e555d6-43a6-4fee-a796-86d9bee0d692", "sighting_of_ref": "indicator--659ad47a-7612-4e34-85bf-ef68a972b5a6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0351934-d000-427c-a725-218c02fcb137", "sighting_of_ref": "indicator--659ad47a-7612-4e34-85bf-ef68a972b5a6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4235a0e2-1ef3-484b-8325-25d8395307fd", "sighting_of_ref": "indicator--e793b448-5c25-4f6a-97af-9888be488522", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e3b2e7-4516-4aa4-8dbf-42b1c13936c4", "sighting_of_ref": "indicator--e793b448-5c25-4f6a-97af-9888be488522", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2493fee0-ef77-444d-a276-f4e2affd5385", "sighting_of_ref": "indicator--e793b448-5c25-4f6a-97af-9888be488522", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192a0f64-1dc3-40da-8071-10a40915ff95", "sighting_of_ref": "indicator--abd0380b-b261-43e8-9fa3-811f46bec1c5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7660c781-6363-476f-aef4-db6ee3d1a1ba", "sighting_of_ref": "indicator--8bb922cf-eb93-4128-9a8f-dd519a0a97fd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2dae39-ca89-4fe6-a0d1-8ce241ba6226", "sighting_of_ref": "indicator--8bb922cf-eb93-4128-9a8f-dd519a0a97fd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee12155-4bba-409d-9901-16ce4c35944c", "sighting_of_ref": "indicator--735d7b13-59c6-423a-9f7f-d35452ec0cac", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70539a8b-8451-48e9-a54f-2b71ce1efda5", "sighting_of_ref": "indicator--f265e9db-e5da-4897-ab3d-9a98e75ad2ce", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a294aaf8-661a-44d5-a568-03bae7c8ade9", "sighting_of_ref": "indicator--1a5f7e26-fb7a-4dda-89fa-ced352524845", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76730f63-6b7e-470e-9e2a-3e9d6c12e5a6", "sighting_of_ref": "indicator--1a5f7e26-fb7a-4dda-89fa-ced352524845", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86919bc-a724-4e17-83b1-8beab7ea548d", "sighting_of_ref": "indicator--2cae4be8-171e-4825-87a9-5507c4bc390c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7280e69a-5d87-4a28-985f-ac69c5afd9e0", "sighting_of_ref": "indicator--2cae4be8-171e-4825-87a9-5507c4bc390c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31a390a-71e5-42be-8387-62fab71f2174", "sighting_of_ref": "indicator--2cae4be8-171e-4825-87a9-5507c4bc390c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4290cf96-b32a-4b09-b2ba-e572ad6e7656", "sighting_of_ref": "indicator--16634b06-cf11-4371-9310-4b585e59a5cf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0d84f5-5583-4c2c-870e-e3418ea5e7ca", "sighting_of_ref": "indicator--9c02952c-17b3-48ec-be74-edaad392da9e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fcb5e9d-15b4-4c85-92e2-62a523a595f5", "sighting_of_ref": "indicator--53665a2a-a887-4b7b-bbef-cf3fd32033c0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e75fe69-d083-469f-aed4-a20819cc7403", "sighting_of_ref": "indicator--53665a2a-a887-4b7b-bbef-cf3fd32033c0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4990b665-ef3d-440d-9181-5a12f7ca157c", "sighting_of_ref": "indicator--53665a2a-a887-4b7b-bbef-cf3fd32033c0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe0750a-c3c9-4600-915c-05cf864af3dc", "sighting_of_ref": "indicator--9f9f5c52-6770-46f4-9844-1244636f3d08", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2100d0a0-8f87-4f8a-b50d-e6568e730950", "sighting_of_ref": "indicator--771553b8-2dbd-420b-8f26-fbd19d4828e3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b81cc8-abeb-455c-99f1-1b628a77196e", "sighting_of_ref": "indicator--625fe46c-16e0-4753-8d4c-035f073e9eef", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d1db61-d207-4fb0-8d8d-4c909cd1f83f", "sighting_of_ref": "indicator--625fe46c-16e0-4753-8d4c-035f073e9eef", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--841f7920-51fb-496c-80d4-5ccf27b059a4", "sighting_of_ref": "indicator--625fe46c-16e0-4753-8d4c-035f073e9eef", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d1f6a4-0a10-4a77-b032-75e818866843", "sighting_of_ref": "indicator--70a16ac0-2d1b-47de-ba38-220cc4e4bbc5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e0fc5e-c84c-4a73-a020-7303167e6ceb", "sighting_of_ref": "indicator--70a16ac0-2d1b-47de-ba38-220cc4e4bbc5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc54a1d-abc1-41c2-a661-26a5b422a8f2", "sighting_of_ref": "indicator--50862883-11bc-4626-b9a3-268dce9199f3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4698479-9897-48e1-bd9f-0c4550d01894", "sighting_of_ref": "indicator--435ef122-358b-4fe5-a333-d0d1212eeaa7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32dac7d0-c994-4e82-a8e6-4232fae4d6ed", "sighting_of_ref": "indicator--1ee0e8fe-8285-4a29-a6dd-bd4db32276ba", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4196e659-a87a-408c-befe-9888a7910009", "sighting_of_ref": "indicator--ebf89dd6-88fb-4f3a-acd8-5868fbd99fc0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff26d7a9-52cd-428c-a767-31d66574e0cc", "sighting_of_ref": "indicator--143aa5cb-54b7-4b53-ac9e-dab6e8df3e3f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49827310-bfe5-4072-8b34-7f1e0d2c698e", "sighting_of_ref": "indicator--143aa5cb-54b7-4b53-ac9e-dab6e8df3e3f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448e9895-f3da-4396-b9d3-84ff3dc43e94", "sighting_of_ref": "indicator--f46047de-3a44-4ea9-a202-501bece4d5ab", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21a98cb-871e-4076-ba24-b438e4f866e2", "sighting_of_ref": "indicator--f46047de-3a44-4ea9-a202-501bece4d5ab", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27164940-a567-4712-bc34-29b79ff9ad04", "sighting_of_ref": "indicator--b63eec96-3030-4360-95a4-474d53c52f4a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc52a9e-6122-4fb9-aadf-424ce0256a46", "sighting_of_ref": "indicator--daf6029d-e7a1-41e1-8e0a-adde61aead0e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776b9202-056e-47bb-a956-cb3bd1d592f2", "sighting_of_ref": "indicator--04affcd1-308f-40eb-9424-b0ac07c5708e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b212a84-3d0b-48ec-b820-e16523d7daf6", "sighting_of_ref": "indicator--4bafec05-5dfa-48c7-964e-c6e5224f84f3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b9f317-d8d5-42bc-bcbf-76b30ce7c1ab", "sighting_of_ref": "indicator--0d2b0387-d833-4f56-9aa6-fb37ee00aee7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de0c684-b7e4-4728-8588-62cd7260985a", "sighting_of_ref": "indicator--0d2b0387-d833-4f56-9aa6-fb37ee00aee7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc84b77-131f-4cf7-b047-7424f27bc335", "sighting_of_ref": "indicator--0d2b0387-d833-4f56-9aa6-fb37ee00aee7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26984484-8878-465b-a995-b98b97e75081", "sighting_of_ref": "indicator--003896c7-ddaf-4e0a-a860-990b997caa98", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05f7a7a-d110-4625-bf45-4c5bc6bc91b8", "sighting_of_ref": "indicator--003896c7-ddaf-4e0a-a860-990b997caa98", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33750c6e-c48a-43df-b764-712aa2e714d0", "sighting_of_ref": "indicator--003896c7-ddaf-4e0a-a860-990b997caa98", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe85420a-8237-4e02-b174-4075ee394eac", "sighting_of_ref": "indicator--2cdea82d-8e46-4247-b9f9-5e47d8ca859b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8941f1bb-cb60-4d7d-8948-5f82416a2c0a", "sighting_of_ref": "indicator--2cdea82d-8e46-4247-b9f9-5e47d8ca859b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b0c4b4-268f-45ce-9944-615e38901d74", "sighting_of_ref": "indicator--fd4f5de8-7d73-4625-ac69-66e88c707ec3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0210119-7c0f-4cd0-8e8c-c69b6b946363", "sighting_of_ref": "indicator--392c8509-d479-433c-97de-2c9ac15b5f27", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a5a1cd-d18f-4f83-883f-9198f1320295", "sighting_of_ref": "indicator--392c8509-d479-433c-97de-2c9ac15b5f27", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0ae42e-2c17-4315-8550-43196ea4a96e", "sighting_of_ref": "indicator--392c8509-d479-433c-97de-2c9ac15b5f27", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7b11a1-7e64-4664-a584-b8540ad97fa4", "sighting_of_ref": "indicator--d7a3cdf4-36b1-444a-95bb-4fb23ef0fb21", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f0027a-0d3b-408c-9a9b-57caabdbfb81", "sighting_of_ref": "indicator--b3c57424-1948-4371-a4e9-eeed7b107bc8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed303945-5eca-4f2f-bba7-29dab7c0da4e", "sighting_of_ref": "indicator--b3c57424-1948-4371-a4e9-eeed7b107bc8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88af931f-3502-4c77-86ef-4f9dda7adecb", "sighting_of_ref": "indicator--b3c57424-1948-4371-a4e9-eeed7b107bc8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff45c50-912e-4db4-8ae5-cc9103a31dd0", "sighting_of_ref": "indicator--eef92564-037e-4d1d-9b47-9ae97fa7f7c0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3bc15b-db45-45d9-bbef-d1febc5b566f", "sighting_of_ref": "indicator--d7af1282-249d-40f0-b619-5d31b14dcc78", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba1646d-be79-49e3-b8d6-cf69cda07217", "sighting_of_ref": "indicator--76af03e8-0c75-4fb5-8d3e-48e854404c64", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfba676-cf16-45aa-8261-ec784ed2ab98", "sighting_of_ref": "indicator--76af03e8-0c75-4fb5-8d3e-48e854404c64", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc64f79-1eec-47db-9198-f3feda3a986c", "sighting_of_ref": "indicator--76af03e8-0c75-4fb5-8d3e-48e854404c64", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ee129d-5ac4-489c-aafb-bcff746b8808", "sighting_of_ref": "indicator--a11dca26-8daf-47a4-b004-fecc4f6eeffd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422c7ce4-fbaf-4dd5-b3cb-e7f0caa37a5e", "sighting_of_ref": "indicator--a11dca26-8daf-47a4-b004-fecc4f6eeffd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865045a5-2dbd-44c2-9ea6-315eb77706cc", "sighting_of_ref": "indicator--b8637dcc-b23a-4db8-8a54-fc352bdae090", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91be4f33-90da-431c-b6b2-fb9333b85eaa", "sighting_of_ref": "indicator--b8637dcc-b23a-4db8-8a54-fc352bdae090", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969cb1cf-3505-40aa-97b0-2b7ca3782592", "sighting_of_ref": "indicator--b8637dcc-b23a-4db8-8a54-fc352bdae090", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5cf1864-e114-4b2c-a49b-450431e2c32c", "sighting_of_ref": "indicator--445f5a85-7c51-4c3a-a438-6ddd3f28adda", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81734860-6bf5-49a8-a8cf-a54e06300bd6", "sighting_of_ref": "indicator--445f5a85-7c51-4c3a-a438-6ddd3f28adda", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31974286-85a0-4ca1-af25-3337e3fc9c16", "sighting_of_ref": "indicator--6d617fa7-4461-468a-8e92-b2ef2bd49a11", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2735ba-cb1f-4c4e-8c60-0b05df762906", "sighting_of_ref": "indicator--6d617fa7-4461-468a-8e92-b2ef2bd49a11", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c5a2d6-8934-4c9d-87e3-09c988026f90", "sighting_of_ref": "indicator--6d617fa7-4461-468a-8e92-b2ef2bd49a11", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24bd7eee-2087-4789-bf64-2328d307b701", "sighting_of_ref": "indicator--923c9cc5-46be-422d-94e7-77101318d407", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c48d71a-bc95-41f9-a472-812a141b8d01", "sighting_of_ref": "indicator--f69c97ca-b860-43e4-a9da-ebd413bccb59", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76783d4-e1bf-4363-ab0e-11933af91cf4", "sighting_of_ref": "indicator--b543021b-2037-4544-8cab-34537fd6eef9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5323fb74-371b-48a9-a323-d1b4b0819aec", "sighting_of_ref": "indicator--1bc358ff-fc91-48b7-b021-d0b0d1bc996d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061798ec-c64e-474f-b71c-8cb7fb5e6d0a", "sighting_of_ref": "indicator--d7db5a9d-a1ea-4d47-acec-a30f0daf1258", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c481722e-a246-40e7-aab9-589510822341", "sighting_of_ref": "indicator--d7db5a9d-a1ea-4d47-acec-a30f0daf1258", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ee5bd5-acbd-4ff7-b4d6-1d48ecddd606", "sighting_of_ref": "indicator--d7db5a9d-a1ea-4d47-acec-a30f0daf1258", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b9062a-690e-4ab9-a94c-96fd9223e921", "sighting_of_ref": "indicator--90eb0005-7e9f-45c5-9a6d-d21f91220f67", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0770369b-19a4-447e-afa4-e6aa6bc9045b", "sighting_of_ref": "indicator--71490d89-8c9d-437d-954c-41d11c181222", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08bac10-4f6e-497f-a08d-e8ce24b77bff", "sighting_of_ref": "indicator--06e13275-8ca5-40a7-aec0-50fb47bc645a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4960acc4-98f9-4ea7-b831-30fad6c5bccf", "sighting_of_ref": "indicator--06e13275-8ca5-40a7-aec0-50fb47bc645a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab6d99c-9f64-46f1-86f8-898e21d0c240", "sighting_of_ref": "indicator--d0e28ecd-b3e1-4f6f-a9f0-125a8c766da7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d1ebd2-ef24-4188-acf0-182e49c4fe50", "sighting_of_ref": "indicator--d04fc28b-8caa-4d67-8488-80a842b11cde", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd3324e-a6a9-4413-8622-57942f0c25f3", "sighting_of_ref": "indicator--bb30fe1a-7ef1-4e77-80fd-88198da405d6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3a6c14-b8af-4a43-b67e-d15921b1ff59", "sighting_of_ref": "indicator--bb30fe1a-7ef1-4e77-80fd-88198da405d6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea3ccd5-35f1-481b-8f63-7c194163e2bf", "sighting_of_ref": "indicator--c8730c0c-4508-43a4-a37a-4e53ea4a9c8c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee11ff2-4eff-4ea8-894b-6a0d82077993", "sighting_of_ref": "indicator--c8730c0c-4508-43a4-a37a-4e53ea4a9c8c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04276fc2-e55f-4c92-9cd6-d584ab2a3a0c", "sighting_of_ref": "indicator--2a7893ef-d2c0-4e7f-ae08-93bad02f02ec", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249f0d7d-a039-44c4-860f-ba346917790e", "sighting_of_ref": "indicator--5ded8fc6-1898-4190-8b1b-1406d7245501", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055e4ffa-e324-43ae-8e41-63e316fa57e7", "sighting_of_ref": "indicator--5ded8fc6-1898-4190-8b1b-1406d7245501", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb28ff48-668d-493e-8120-047aeb547328", "sighting_of_ref": "indicator--cf330777-4ed0-4a90-bb8e-e4d68c24079c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9add16-d7a0-4c23-85b3-515029f723bb", "sighting_of_ref": "indicator--e06aac9d-ac2b-4543-b209-c146ab6b24f1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed5c322-b781-4a89-ae4c-000f2c7b01af", "sighting_of_ref": "indicator--4d47ea24-0139-4c5a-9f58-8e7d2b7cf4b5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4c9ad2-4299-4466-bb37-c7851b235adc", "sighting_of_ref": "indicator--4d47ea24-0139-4c5a-9f58-8e7d2b7cf4b5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d418f391-66e2-4775-acb1-9cf83c891177", "sighting_of_ref": "indicator--306943dd-d1f7-4b98-a0f9-f45d8386b4ba", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb9d141-d0f2-4667-a3d9-f9b21f2c7b85", "sighting_of_ref": "indicator--b6b3579a-894e-4f41-82b7-cb67dca6f13d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70593114-5483-4c2c-b4b0-22e8f83004af", "sighting_of_ref": "indicator--eb5b22e9-a818-4dde-8b99-32090b80ec63", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d084cc84-706c-438c-bd1b-2b12b279f334", "sighting_of_ref": "indicator--9a9e5b88-387a-4793-851e-19a8fe82439c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c612f8f-c794-4003-a7d9-e77938442f84", "sighting_of_ref": "indicator--a79f77d1-37a2-4c32-bba1-83192dcdbc03", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5035a0cf-53ca-41a1-af20-ac24d9cc1113", "sighting_of_ref": "indicator--60bcb858-3a75-4a14-a15d-aeba7ed63730", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e101441-a013-4d1e-8963-a3ae76b0b938", "sighting_of_ref": "indicator--685db06d-1342-4f2b-972e-635dbddfd295", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110d9346-8d84-491b-858f-81648faf3d74", "sighting_of_ref": "indicator--f4320067-5107-4aad-9b85-95bdeb6139f1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72176136-6d8b-42b3-a9eb-513a347de016", "sighting_of_ref": "indicator--6a779e4d-5c6b-4063-80e0-651b30997604", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8b07b2-a589-445d-8f0f-67cec1e95a8a", "sighting_of_ref": "indicator--bfc476dc-3899-4a45-8ef6-c6cc6672daeb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a9d92c-f60a-48df-8fb5-18f66d71d99a", "sighting_of_ref": "indicator--bfc476dc-3899-4a45-8ef6-c6cc6672daeb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4547791e-9491-4346-8e84-a75b1af38a55", "sighting_of_ref": "indicator--2492e36c-fa47-4795-9132-c7d25353c865", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0977416-8363-4c8f-a93c-28c5eccbc192", "sighting_of_ref": "indicator--76c811b8-4410-4475-934b-5db95c98360e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079c93cc-761a-4836-9255-ae83930e9694", "sighting_of_ref": "indicator--76c811b8-4410-4475-934b-5db95c98360e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ddaf1d7-ea8c-459e-868e-357c22589373", "sighting_of_ref": "indicator--6ac2f4f2-fe28-46e5-9da7-31c57a965222", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23bce0b1-55d2-4ce0-b834-d0e7501aea59", "sighting_of_ref": "indicator--051433a1-f953-436b-a491-8a6a03ade91c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9968fdef-de1f-4ddf-86a6-c8a651691b6b", "sighting_of_ref": "indicator--051433a1-f953-436b-a491-8a6a03ade91c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2513ed1b-aa89-4fbb-837f-7f82ebbfde8b", "sighting_of_ref": "indicator--d00a7054-445c-4cc5-ba8d-7a4a5f71043a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18636310-547d-4f1d-bd21-4ef82691414d", "sighting_of_ref": "indicator--33b48019-e55a-44a5-ba85-1ba164ec98f3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff5d673-06a0-41df-ab19-445cb7d7773b", "sighting_of_ref": "indicator--97a73af0-4486-4f52-a6f5-e84bf88dc201", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce2cb8b-9a71-4bdb-bc09-b65114863354", "sighting_of_ref": "indicator--d9c9fb11-5eb9-4ea8-88e1-129f978962b8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72df0880-823e-4c85-b207-f559ce113b56", "sighting_of_ref": "indicator--d9c9fb11-5eb9-4ea8-88e1-129f978962b8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83699004-1fd7-48cc-b043-0c43839cf0cd", "sighting_of_ref": "indicator--8fd5fa8c-ab5e-4c15-b97b-741f640d031e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ccf377-46d9-4853-8c98-96a3206a20f0", "sighting_of_ref": "indicator--8fd5fa8c-ab5e-4c15-b97b-741f640d031e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea964fe6-962b-47b8-99c1-36cfc5a2b732", "sighting_of_ref": "indicator--0fa344ea-e8db-46cc-8936-6b0b37ba4d4b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764239fc-3cb8-46ba-8763-d2a194fda4ff", "sighting_of_ref": "indicator--59b36c15-bda8-491c-a643-4dececbbe586", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525a1301-0dca-488e-856e-bb0698c1889f", "sighting_of_ref": "indicator--f7d15010-4598-4b9e-8690-328b29640a90", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec7bb48-2fd8-461d-b6a6-4d2cd0586496", "sighting_of_ref": "indicator--3f3910aa-69c8-458a-83f7-70411b893168", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8668ff7d-ae42-410e-8c5c-015f3a4a4497", "sighting_of_ref": "indicator--6b9d5320-7f31-4daf-aa61-e53408dafcfa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81304149-607a-47a4-935d-837d2fee69a4", "sighting_of_ref": "indicator--6b9d5320-7f31-4daf-aa61-e53408dafcfa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ef5fdd-c1ad-4791-be2e-dae1b6ac3bf9", "sighting_of_ref": "indicator--3c33cbc7-5072-4b6c-a7e7-97525a2cacf4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650a2fed-16b0-4576-8d2b-c5a3ccc64161", "sighting_of_ref": "indicator--3c33cbc7-5072-4b6c-a7e7-97525a2cacf4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72996c9-fc4d-4482-a755-973cfb34be83", "sighting_of_ref": "indicator--7c0e4f95-62e7-49ea-a5fe-9c1e5691a108", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b06a14a-4cc7-459b-b82d-7f8f5478da7d", "sighting_of_ref": "indicator--adfdb4d3-5847-49e5-8500-df57afe8c963", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26aa1f0-338a-4704-b0a2-0f76fcc6449a", "sighting_of_ref": "indicator--051ffd88-23e9-4b46-af0d-0f64e6e11065", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74c51f9-419e-4013-bf62-b7007374ae13", "sighting_of_ref": "indicator--d2339616-5750-4d98-9ecd-7764b7e48700", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16202d71-fe95-4738-a49d-cddc48c6a550", "sighting_of_ref": "indicator--d2339616-5750-4d98-9ecd-7764b7e48700", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df95d2cd-37f7-44b9-9a1d-de792067fa01", "sighting_of_ref": "indicator--f75f12ba-0a34-4717-93db-db58fc454e2b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98629bc5-f553-496a-9b6c-9b27f4773f73", "sighting_of_ref": "indicator--053aa64b-b785-44b7-b76a-14b227d607e1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04446348-8580-4f8a-8358-b20449f3896d", "sighting_of_ref": "indicator--053aa64b-b785-44b7-b76a-14b227d607e1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1da96d-9bd6-4f0b-8e1f-854c877f838a", "sighting_of_ref": "indicator--0cb01ef0-c001-40bc-a642-5b3b622018e1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12362f3-44a6-4b8c-a045-cc7512de2b20", "sighting_of_ref": "indicator--34e23b7e-4459-45bd-a7b7-6371705ab8cd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fdcea18-328d-4f4f-8e3a-c4400256a7e0", "sighting_of_ref": "indicator--71b1d8e1-08f7-415c-ba65-a7768e7fcd5a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd3d8c2-a187-455d-87ea-95463f222a74", "sighting_of_ref": "indicator--71b1d8e1-08f7-415c-ba65-a7768e7fcd5a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d4aa82-de6f-41ba-9e1c-938cb7103ffa", "sighting_of_ref": "indicator--88e63c23-1ffc-44e9-a3e8-b4917a4fc2c8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5116587-efcc-46a6-9180-4d0aee42ed74", "sighting_of_ref": "indicator--d6aab50d-0202-4842-81e2-a93374e2e4e2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ba9777-6d94-47a3-be0f-52f8527f59ef", "sighting_of_ref": "indicator--838c56e1-142d-48a2-a48a-7d7cc8ed8194", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8237f5fc-8f6f-4cb3-a8e7-6158850be0bc", "sighting_of_ref": "indicator--11a19580-582a-4240-ba20-58c955b25c17", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ca868b-769b-4e34-824b-41638e41d0db", "sighting_of_ref": "indicator--352b2ae9-40ba-44f2-90e1-ab210fff8fdd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187e6d94-3f56-4cc4-b5f5-6ef6fc411724", "sighting_of_ref": "indicator--352b2ae9-40ba-44f2-90e1-ab210fff8fdd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea6817d-1e35-430a-b8ea-41e6ab32fabd", "sighting_of_ref": "indicator--f796cf8d-f1e8-4820-9738-5a40249bfe0e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23418fb-5137-44d6-9572-8c5d48b0c2ed", "sighting_of_ref": "indicator--e7ef9c1e-acd4-42a6-a3e3-b7fe8ede0738", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1758033-7d9c-4d9f-9a74-50e1ff57c7ab", "sighting_of_ref": "indicator--0468f9e2-fd0a-4e6d-84cf-d0218072a96d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3791ce-d86d-43c0-b9f5-0f248955fb9e", "sighting_of_ref": "indicator--0468f9e2-fd0a-4e6d-84cf-d0218072a96d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f85d8bf-923c-481a-bb89-677b8079eb50", "sighting_of_ref": "indicator--0d5e9ffd-d934-487a-9058-0e3abfa97878", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b406fee-7ff0-43d3-85c2-10ffeb7d4047", "sighting_of_ref": "indicator--b0781ef1-6066-4abf-ac71-08834c3c9cbc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c77779-dffe-4f33-8415-fafeead2c3d9", "sighting_of_ref": "indicator--f497b11d-b387-4cb9-b82b-794a0cf36d77", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0e6f23-7a5c-45e7-a768-db5925a56425", "sighting_of_ref": "indicator--4e57588e-c35b-42ae-8517-701982c8e8aa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb47406a-37e7-46f4-a4aa-a9485060616f", "sighting_of_ref": "indicator--f4936aa6-20b5-439b-a656-b89de5838313", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4257e8c6-61a6-41e1-9ab1-dfb757108d08", "sighting_of_ref": "indicator--789d3a4f-6ac0-4cbd-8b6b-a0d311c2473c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64dbd6db-c2fc-45f1-8a5c-07dd0299b154", "sighting_of_ref": "indicator--e5879e32-2f2b-49d5-ac6e-06789b44c49b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0678a5-7a72-4180-b0c1-142875d631a9", "sighting_of_ref": "indicator--a1ac16c4-5491-4eae-b30b-f67dda75270d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b43491-60f5-454d-b6fc-06ba03ba9b7e", "sighting_of_ref": "indicator--2e8f87a5-d12d-4834-9555-0baf3f27f01b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3d2113-37b5-4490-bad4-ec628e03d287", "sighting_of_ref": "indicator--2e8f87a5-d12d-4834-9555-0baf3f27f01b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c318645b-7146-48de-91ff-a7bdea375ba8", "sighting_of_ref": "indicator--bc8aef93-a647-44dc-8eab-5b0deb4626c6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c442cf95-274e-4e45-87e4-08aef2ae1d60", "sighting_of_ref": "indicator--322cfd5c-d7ca-4a0d-b2b5-61ca54d883d4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d62bc8-0e39-414a-bca9-dd39429b5d83", "sighting_of_ref": "indicator--73d51a07-31da-4ea2-90b9-1d972ae95ce7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476e8b2b-dd67-4efc-a303-824808c56a85", "sighting_of_ref": "indicator--ec51dceb-0ab1-4b83-bbdc-e1adf943a472", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93989c5e-3ca1-4d7a-92ee-8492928a07da", "sighting_of_ref": "indicator--bbc5e6b4-7656-4d4e-b543-d49089573cde", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b07b3f-1d7b-4e30-8361-1fed8177fd37", "sighting_of_ref": "indicator--b08385fa-357d-4208-bb41-23ea3dfcd6cf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f7b556-dcdb-4807-a222-a0dd5efba4d5", "sighting_of_ref": "indicator--74c11394-4c47-4fcb-b6ca-a1e3b480f15d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335c6f4f-36b1-4f24-ad30-639c639e751f", "sighting_of_ref": "indicator--bc24278b-7acd-4edf-ad5d-33ab8a0f2b66", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b231639-8423-481f-96bb-b94a885dfae9", "sighting_of_ref": "indicator--5957d52c-6293-4b1f-bb29-f3a5b3ccc585", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60db6b3b-12fc-44e9-a256-9e85a148e1ad", "sighting_of_ref": "indicator--0abd490d-a5a3-4571-be4d-86a569d68212", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c446512-ece5-4c97-b5e1-bb539e1e628d", "sighting_of_ref": "indicator--0abd490d-a5a3-4571-be4d-86a569d68212", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9814d18-f9c5-428c-b675-28f70ddc71a3", "sighting_of_ref": "indicator--5a126a31-3e68-4518-8057-b348aed38472", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3e7945-7188-4f7c-a757-53e64d0a6d45", "sighting_of_ref": "indicator--5a126a31-3e68-4518-8057-b348aed38472", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef86ee7-5b4f-4e23-ba50-9d4d9555b677", "sighting_of_ref": "indicator--192c5699-56ff-4df7-b60e-3dbd96937df7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5370d41-a909-4232-a9fd-123b9e91292b", "sighting_of_ref": "indicator--5ee42a52-54e0-4076-b77f-fd70632dd2df", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b6bb5e-d4b7-4288-a38c-1dafd2412b63", "sighting_of_ref": "indicator--754dd20e-e472-46c6-959a-89816a399943", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2f30ec-0475-4ba8-b87c-e6e417260b04", "sighting_of_ref": "indicator--7101d106-9264-42ec-9d9e-881cd8c91fb8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a921ef2e-cd1f-430a-8afd-c9d644fd9230", "sighting_of_ref": "indicator--008db74a-f8af-4b43-a3d6-0453712bb40b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc598e9-f4ca-471b-ad50-6e59bcf6a8e2", "sighting_of_ref": "indicator--770a2d81-5cdf-4365-aa8a-9578f578f9f4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c53804-07a3-40ee-9ef5-b83de579cbbb", "sighting_of_ref": "indicator--44666584-4aa3-4f08-ab43-90e23e7d2c88", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb76416-ebe9-46b1-9979-1b455a138761", "sighting_of_ref": "indicator--44666584-4aa3-4f08-ab43-90e23e7d2c88", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a29fbf5-0b25-4d17-8455-4abfef7e334d", "sighting_of_ref": "indicator--958fecde-9f89-49f1-abc0-19a540f0cafc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca085b7-f25c-4e92-a38a-c47699febb26", "sighting_of_ref": "indicator--de7199ad-617a-470e-9f07-1ce81d08f3cd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b32e85-ad55-41b3-9519-9c370c388044", "sighting_of_ref": "indicator--e721b883-525b-420f-ac25-143b2938bf1c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78131aa1-b87a-45ce-b234-8bf0ea3dca7d", "sighting_of_ref": "indicator--f62e3103-0607-4be5-bdf0-8c508e3af7b1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a505d93-a788-4bbc-b81e-f7dc80c7df78", "sighting_of_ref": "indicator--f62e3103-0607-4be5-bdf0-8c508e3af7b1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b24953-648e-4303-ad3f-8acb588f54be", "sighting_of_ref": "indicator--c297ce76-cb87-4a1c-b159-fe903791f3d7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab358e2-4b4c-44d3-aee9-ca895ede07ba", "sighting_of_ref": "indicator--ae4e231c-8232-4446-958f-0d344f3df61a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee02eb4-4c63-4cf8-8b25-8b3a49c2171e", "sighting_of_ref": "indicator--b4d285e9-0124-4b37-870c-51e0a6c90673", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a3b35f-8216-425a-be93-49b7612f39af", "sighting_of_ref": "indicator--ebeba621-c9b6-4c9f-af5b-24cbbc98f40e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c67666c-1bb3-4b63-8c20-c495422eaba7", "sighting_of_ref": "indicator--c9b55898-2b19-4bc2-849a-c7f7d6fb9174", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a360070-2b50-434e-a43b-a6f3ccb307a0", "sighting_of_ref": "indicator--c9b55898-2b19-4bc2-849a-c7f7d6fb9174", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38416cb-a85d-49e9-8d70-2dd936aaee57", "sighting_of_ref": "indicator--99891014-8084-4541-8ce6-1b538b36d39a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0556763a-a603-4891-a8bd-e82723cf29d0", "sighting_of_ref": "indicator--9d4b17e1-1cea-438f-aff2-389a987c1814", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95371c5-2a7e-4f2b-b164-a75604de67ff", "sighting_of_ref": "indicator--ef5910c7-a069-4dd9-a5d8-040ca6806c7c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2245dcf9-2c07-4fcb-a984-fe5881ac338d", "sighting_of_ref": "indicator--ddf91a84-802d-4ecd-bb97-fb782e2e2880", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcae6e24-b958-43c6-8003-02b414fe5935", "sighting_of_ref": "indicator--ddf91a84-802d-4ecd-bb97-fb782e2e2880", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8574004-2c5a-4c1b-a226-0ebb35a0e943", "sighting_of_ref": "indicator--649583a5-5aea-4490-9f0a-97e39b72e99a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4e8dab-eff3-48dc-a476-01d9c4f64ffb", "sighting_of_ref": "indicator--f4df06cf-f0ea-4edc-91b0-000e761585ba", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea082193-83ee-462c-b022-8b1f72270c4c", "sighting_of_ref": "indicator--46b63ba9-a276-4a57-806e-0151db16470b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01168a4-0d01-4737-9bdf-eb5115d77fcc", "sighting_of_ref": "indicator--b0f235df-b161-4f9f-ab60-6d6bf7328620", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b365df-f2cb-4d9b-a74b-6859087a886e", "sighting_of_ref": "indicator--8d111219-dd32-4ad2-9482-1861d4954d40", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68fef677-e016-4cfd-a3f7-8e3162a68625", "sighting_of_ref": "indicator--8d111219-dd32-4ad2-9482-1861d4954d40", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2cf14a-28e5-4cad-871c-2139ef90fe3f", "sighting_of_ref": "indicator--8925ac29-5d13-4959-9894-5952b1d89003", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9623e6c8-4718-42f3-b725-f7a82cd9d0d7", "sighting_of_ref": "indicator--c3ebf45d-8c9a-4bed-ac74-9b02bf9d2afd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a98fbb-2a7c-48cf-ba5d-e842f765367e", "sighting_of_ref": "indicator--9886f28f-0343-4551-bb85-cc02e1244416", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96e119b-92a8-4893-8c93-5e43f91a903c", "sighting_of_ref": "indicator--9886f28f-0343-4551-bb85-cc02e1244416", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26563cd4-40b6-4a39-a2c4-5a0038ee36e0", "sighting_of_ref": "indicator--f95dfd34-3a02-4d8b-8830-038621e80421", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb9afbb-e0e1-495f-8ab2-71cacc00bc43", "sighting_of_ref": "indicator--f95dfd34-3a02-4d8b-8830-038621e80421", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a58f2e1-1bf2-4b81-8ad1-4de2d9cfb649", "sighting_of_ref": "indicator--f1748f44-4c61-40bd-9ea4-537ff9c0393f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7f31e0-e238-419e-ba27-b14823e5b27b", "sighting_of_ref": "indicator--f1748f44-4c61-40bd-9ea4-537ff9c0393f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cfeb65e-1ba7-4127-a90f-115aaf78f4c7", "sighting_of_ref": "indicator--d6d4311d-91d0-487f-8bc2-7160f6c5f5d8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc14b0f-4c0d-43f4-bf87-4233bff2000c", "sighting_of_ref": "indicator--d6d4311d-91d0-487f-8bc2-7160f6c5f5d8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7df76d6-bce6-4f52-9dc6-141950392c05", "sighting_of_ref": "indicator--2df6fe55-f7bb-4ea3-adeb-c32ff82d1292", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0192524-d224-4881-945a-0cae8a82fe0e", "sighting_of_ref": "indicator--5519e648-55d9-4551-b726-ed354ebcc833", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6e5597-8273-45b9-b55c-ed254ef1308f", "sighting_of_ref": "indicator--aa286cdc-543f-4313-84b3-9516214a2a10", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1bffa5b-abfa-48bb-9b5a-9abe9983ebf7", "sighting_of_ref": "indicator--95248cd7-77d1-4fa4-a1d5-85c35930314e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1a24ff-6ebf-416b-98fd-bf550775a3b9", "sighting_of_ref": "indicator--75d48ffc-749e-4572-ad66-3502ebcd1bdf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a6d92f-4f99-4e21-9074-a0fe0a4ef97c", "sighting_of_ref": "indicator--ca0ca66f-c176-4b3e-ac63-d60520c7daa3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a848577-4502-47ad-8b6b-ca3308aabaa1", "sighting_of_ref": "indicator--7dcb114f-c44c-4665-810c-38592d3cc23f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57667b40-1da9-4dfd-8484-d7c7064371db", "sighting_of_ref": "indicator--b90243b6-291c-4112-bdd0-e7086d3bb9b8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32235c8a-aaaa-42fc-89fa-99282cb6b217", "sighting_of_ref": "indicator--9185abe3-14cb-4961-8544-7acef56d4f79", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964cbd78-9995-4abc-97ad-4f4b338f602a", "sighting_of_ref": "indicator--9185abe3-14cb-4961-8544-7acef56d4f79", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12689134-d1cb-47bb-806f-82c49c368d85", "sighting_of_ref": "indicator--c223479f-ac1c-4868-b640-0343c65db4b7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82166b03-1f80-40c5-a491-eff5ded12c01", "sighting_of_ref": "indicator--46e0fcd8-6fc2-4749-bc11-5ed8dbcdee24", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831701e9-93a2-406f-bb23-a84684df7dd0", "sighting_of_ref": "indicator--e6dd5f14-1fa5-43aa-af6d-7ed6cc5ba269", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef0191f-e253-4161-8865-fbe5273d6b54", "sighting_of_ref": "indicator--d53d6552-3f45-40d1-98cc-ab2ed7479609", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1121350b-7602-41bf-a80d-0a79bff243ed", "sighting_of_ref": "indicator--351ee64c-3d38-48da-bb13-eef9678feced", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b222b657-98c0-46d4-add8-898f0bc8320b", "sighting_of_ref": "indicator--94f2924f-4276-4711-a654-3c227776a89d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c9b288-0bf7-437f-9b81-c436eca7dc4e", "sighting_of_ref": "indicator--ed78b960-446b-43dc-8b9c-824114f4d5dc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f90ec65-64cf-4463-8da5-97fd93fea052", "sighting_of_ref": "indicator--ebde6214-e8b4-44ef-a102-041c56731c53", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd65743-8ed3-4c77-a2cc-f0b374fe5937", "sighting_of_ref": "indicator--f3dd4d3c-9c19-4204-a182-db61fb5d33ac", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4344aef-8adf-40b8-ad0a-b53790ea585f", "sighting_of_ref": "indicator--c7bfb875-7ecf-4b23-a2c0-4295e58281a5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074f632f-b764-45e1-929d-c5fdced05d42", "sighting_of_ref": "indicator--8a93a367-f6dc-40cc-b7f2-1fc03dc93ace", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9c6ef4-c2a9-4517-b6f6-2fe4efc6cf56", "sighting_of_ref": "indicator--5e7cd2fc-efb0-483f-b71f-e1985725670f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5f1006-b56d-4130-899d-67e71dfc682a", "sighting_of_ref": "indicator--d17db057-28a0-4ba6-9036-08ca4badee00", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b817a01a-3658-4acf-9e7b-6ada814fcf63", "sighting_of_ref": "indicator--d17db057-28a0-4ba6-9036-08ca4badee00", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58dc612f-f647-40bb-985c-5085cdbe17fb", "sighting_of_ref": "indicator--0d611482-8e6b-4c46-9014-48ffb6d94fe9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fb4ffa-8e99-40a0-ba18-a8b07b46aef8", "sighting_of_ref": "indicator--0d611482-8e6b-4c46-9014-48ffb6d94fe9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294d2ad7-b13b-4bb9-9ce3-6fe1f400961f", "sighting_of_ref": "indicator--60cf65f1-9a22-4ed4-9d88-9c3212d457d1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9caaa80-fb2d-4091-854d-33290867140b", "sighting_of_ref": "indicator--55f2f162-8f00-4adf-9886-b4ad77636aaf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1db78b1-0218-401b-835e-19cf1fe37bd5", "sighting_of_ref": "indicator--55f2f162-8f00-4adf-9886-b4ad77636aaf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f13d52ec-9b8e-4dab-acf0-19a199eaaa45", "sighting_of_ref": "indicator--a16dbe05-adff-4b11-89d7-e87c65149a8d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e14a7bb-bba8-4a79-8866-ac0605bb0c88", "sighting_of_ref": "indicator--a7eda6f4-117e-489d-8ba1-a5ba32065e27", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae96e6b-d353-4bdb-b7e1-81da45fb9cbe", "sighting_of_ref": "indicator--8ebf8cda-a468-4378-8d8f-7f68042aab35", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f169dc74-6dc0-418f-a440-dacb75f3815d", "sighting_of_ref": "indicator--5873709d-377e-44e5-b33e-2b8e8dd3ac3b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636e2577-2c98-45cc-a1bb-47d0fca2965c", "sighting_of_ref": "indicator--d6a4e264-a78d-4826-8c8a-6d81580a7472", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14c7333-1861-4377-8a7a-4e1fb7880ae4", "sighting_of_ref": "indicator--120ad2ab-067e-40bf-9060-f7f35afb3293", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419f32be-5134-4156-a6c4-43463bfd8436", "sighting_of_ref": "indicator--f3132d31-6507-4953-8b66-1512d3b9416d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e173c5-576e-4780-a012-3da843138238", "sighting_of_ref": "indicator--7ff128fc-9e25-4114-be6f-e8b0d3e34ac2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8795da38-d8ef-413d-9366-2de37f5d40e7", "sighting_of_ref": "indicator--c5f7aa42-d0b7-4ed7-8f5a-112a2b887949", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6eb014-b1f3-444e-9f93-6de0b833f4c4", "sighting_of_ref": "indicator--95d19f90-f826-4a06-9956-1ba884cd9351", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4622399-aea7-4314-a7c2-8d4b6ae5c802", "sighting_of_ref": "indicator--d528d75f-d3ca-4cc5-9285-ea3ef312cf0f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d9fecf-6838-4ff4-8034-8f02ea53f746", "sighting_of_ref": "indicator--66151b42-06d3-49bf-b715-69f959e918af", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8603d5-7720-4066-a237-f820a6f24fa6", "sighting_of_ref": "indicator--7ce18a45-c3c4-426c-a969-ac93e8926056", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f1483a-1da2-4a8a-b9ca-31b758bae8e6", "sighting_of_ref": "indicator--3cf01254-c066-4a64-8ecf-3cde0d3cbd1b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c69f11b-72a8-42d2-a572-e3f8e5516acf", "sighting_of_ref": "indicator--09605799-7bc5-4ea5-8189-221bb82f1475", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2153ef41-e830-4019-ba61-3345d0967b8a", "sighting_of_ref": "indicator--7a6a5a72-b79c-461c-b47a-71f143bd19f4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63beed1e-83f4-491a-8076-2b06508d5560", "sighting_of_ref": "indicator--6109623f-eed7-4b31-9f5a-431694e266c0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e80d44-44fd-4ce0-b296-2acde5f0c203", "sighting_of_ref": "indicator--28a94316-0258-40c6-96d5-d49513df9c6e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386b850f-07e4-4e2e-97fe-b2573d0d6497", "sighting_of_ref": "indicator--49bd3012-a01f-4b89-9c6e-6c20fc47c024", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdade2d-fdbd-461c-a600-6254007f332b", "sighting_of_ref": "indicator--dd08fbce-b076-4666-abb4-6f4a0c7110c3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6d19b2-69a9-4893-9d11-a272b17b6c2b", "sighting_of_ref": "indicator--31f3282c-9ee4-46c1-b46a-6ad8a0922a10", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a51267-6096-4f9d-8f38-2e6da5265bf5", "sighting_of_ref": "indicator--31f3282c-9ee4-46c1-b46a-6ad8a0922a10", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5f74bf-cd8b-451c-bd49-72d464120625", "sighting_of_ref": "indicator--4db83cc3-4815-46f7-9dab-8882e06f2a7b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c5d87a-b402-40b0-85bf-065f730e96eb", "sighting_of_ref": "indicator--33d6ea48-ff7c-4cc5-82fc-5dab00c0c5a3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0843aa52-bb67-4bb8-8ac5-4bdf6fc9e143", "sighting_of_ref": "indicator--9aa2a9bf-5802-4695-b052-5d6b6a4473b0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617d9cac-7e56-4c82-97bb-b3482b1a1098", "sighting_of_ref": "indicator--7df46aa3-214a-458d-8bd4-f677f8f4e602", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e32541-8638-44e3-af7e-ac8713c1f1b2", "sighting_of_ref": "indicator--d9b3dc4e-2cd2-409c-8a0e-55e2531f29dd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68838428-a424-433f-a514-137a644f25cd", "sighting_of_ref": "indicator--d9b3dc4e-2cd2-409c-8a0e-55e2531f29dd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab43a1f-a43b-4e4a-af49-0cb6c0e1bd3c", "sighting_of_ref": "indicator--57c55f8d-770e-46e3-8a02-44be8babf12e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633e8639-622b-4420-8234-bb76163bb925", "sighting_of_ref": "indicator--45e914b5-e6e9-4c0d-bccc-e655443f21e2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424286fa-f3e5-4cc9-80e0-95e14ea2f85a", "sighting_of_ref": "indicator--2a2dcc8c-3463-4be8-b292-1fcc22152e32", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734199e2-ec45-4602-ae96-5debc76827b2", "sighting_of_ref": "indicator--92a20bf0-21d6-4525-81f7-4dd2ccdcfdef", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0923bf5-dd93-4de9-a983-dd01ebe04acb", "sighting_of_ref": "indicator--92a20bf0-21d6-4525-81f7-4dd2ccdcfdef", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea6fba6-bd7f-4c78-b7d2-3b33c757ca43", "sighting_of_ref": "indicator--cf524500-e16b-47df-b950-336d47afc536", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752be2eb-0425-4245-85b7-324eeba74f44", "sighting_of_ref": "indicator--56e7e1d8-8880-4aa6-8800-901db7dd9b4d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56308f53-4daf-470c-bd02-7772175f7001", "sighting_of_ref": "indicator--ad68bda5-2d44-4d90-93b0-221b36739fbf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c8a8bd-8df9-4442-ab2e-32e8c099a12f", "sighting_of_ref": "indicator--d0790e4a-690d-4102-bde6-e83678f9dc1b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df340a66-ca5a-4ae0-aaf1-65104b0b7670", "sighting_of_ref": "indicator--e2525e36-65e4-47e8-ac12-2160be9ea313", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d75c0ec-02db-4ca4-a7f1-77a72df73531", "sighting_of_ref": "indicator--92e9a245-edd6-4c74-a25d-50b2a934c2c4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7525b533-cabc-496c-a35d-5d50e605c235", "sighting_of_ref": "indicator--843e6479-7206-4bdb-8bd5-960a87576068", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f7cbd2-f8e9-40b3-bb3e-b0376d2469a7", "sighting_of_ref": "indicator--0c8415e4-04b4-495d-a9b3-2240c0c1ffb6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae3949d-369d-460b-a693-4830e3253a0d", "sighting_of_ref": "indicator--ece19b85-6c87-44be-80e4-2e42b39be357", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6c6f0d-824b-4637-89c0-0c442d5246a6", "sighting_of_ref": "indicator--ece19b85-6c87-44be-80e4-2e42b39be357", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ab7789-8dc4-464e-a431-3300d8deab22", "sighting_of_ref": "indicator--4785c588-47d4-49ee-8909-0c6ad1eef4fc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c44039a-9605-4d14-8044-75879d8b493d", "sighting_of_ref": "indicator--a351c140-a088-43a3-b0c9-8499fcb55f80", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736d02d9-b9e4-4a7b-bea4-0c28a6292d88", "sighting_of_ref": "indicator--619f3e9d-5d82-4698-beb6-ece5ea4a243d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70bf3082-a48c-4258-95b1-2cbfcf51d9c1", "sighting_of_ref": "indicator--99c160c5-3a04-4430-861e-b002accc1632", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9754cb2b-3da3-421f-abc9-b3c5d53be1c8", "sighting_of_ref": "indicator--a5e66405-3e4d-4329-9b02-e9458fc21c4d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91de58ac-c41c-4a67-836e-69aed164d64d", "sighting_of_ref": "indicator--a1317ace-ca00-47a0-be79-6c389c54ffb0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c2005f-4938-4451-a5d4-d62059c27560", "sighting_of_ref": "indicator--e9d79820-3a96-467e-aba9-4323739590d8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f5d440-8fd0-4638-a80b-29cd74559ead", "sighting_of_ref": "indicator--f45b33bf-703a-403f-a500-0e9b1b555a63", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37bf228-ce40-47ff-9aeb-309444166c78", "sighting_of_ref": "indicator--acdfb31d-c14e-4e8d-a4ff-6b183c88b45e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7335a8fb-5ba1-492e-b01d-08e36e7950bd", "sighting_of_ref": "indicator--fdf4c3ee-9499-4a36-b20d-d815c8297be1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b847db2a-8292-47a5-8cf5-f051c851ee47", "sighting_of_ref": "indicator--49796c45-9ab7-4014-9d70-29ae449a6b76", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244f95a0-5ce3-4a5f-8551-0923ad15b829", "sighting_of_ref": "indicator--49796c45-9ab7-4014-9d70-29ae449a6b76", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e205d61c-1e08-40c3-b12d-9113acdbe653", "sighting_of_ref": "indicator--5f47428f-3ef0-42d2-9047-4562a1944aab", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d726a616-ed44-4d98-aa5b-1688e64c75b8", "sighting_of_ref": "indicator--83a3d4b7-2439-4a17-a1ff-b3cc72b80789", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4798342a-e03f-4653-8451-902e7fdaa932", "sighting_of_ref": "indicator--ad42aaaf-9558-439b-a943-2e8c05299e0b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d83c2d0-e70c-4b7d-a8a6-1fe728aa1a96", "sighting_of_ref": "indicator--838043de-c0e8-44e4-9ec0-8440e85c8670", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37b11b7-c0ed-4d67-8fd1-7629bac9897c", "sighting_of_ref": "indicator--a043862f-2f5a-4fd3-8422-2dd5be421ee4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2c4fcb-5499-46ee-aadb-5d941da49340", "sighting_of_ref": "indicator--43a9315f-a5f9-45b5-8ae5-163e65815ffc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a731630b-0652-4998-8624-61b6641757be", "sighting_of_ref": "indicator--43a9315f-a5f9-45b5-8ae5-163e65815ffc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ac2dea-1d4b-4bd9-a82e-f3fe19f37881", "sighting_of_ref": "indicator--d32a013d-6580-463d-aed2-ca4cec054c5c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0ae4a7-3840-4655-b8ca-37e06e601f3c", "sighting_of_ref": "indicator--cc57a982-7aac-4703-9084-673944b34920", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3645ef7-fcd0-46fa-932e-d9f62ad6ff09", "sighting_of_ref": "indicator--cc57a982-7aac-4703-9084-673944b34920", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ed5990-d441-42ab-a50d-bf974e0ae238", "sighting_of_ref": "indicator--1a219d90-3c3c-421b-8d40-aa2a8481417b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca70ed0-73d2-43e5-a52c-6ebac7b4b8d3", "sighting_of_ref": "indicator--83da5060-ffb4-4d2d-bf7a-ec3e1aa640cb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2537fb-01ee-4aab-9720-5d1cb5c8e885", "sighting_of_ref": "indicator--039e6485-754d-4aa7-9949-84a357fa12df", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2cd8a1b-629e-403d-9670-51ef501867a4", "sighting_of_ref": "indicator--039e6485-754d-4aa7-9949-84a357fa12df", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eff118b-5f16-4a63-a7ca-790731a40451", "sighting_of_ref": "indicator--c3c89800-d67f-4a4d-8014-527768e9c85b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81304603-22db-4317-a439-06ae93e565a9", "sighting_of_ref": "indicator--80e1f447-e961-4620-b680-8eed0a035d2d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f4ce6b-4f44-4f44-9cff-6db8e2e716da", "sighting_of_ref": "indicator--80e1f447-e961-4620-b680-8eed0a035d2d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a333d1-d0f2-4e2e-a773-96ec21913a6d", "sighting_of_ref": "indicator--58625bad-1443-4d94-b9e4-db3de05d4e7f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65a6525-f5ed-4a0a-ad4e-47ce84bf5dfb", "sighting_of_ref": "indicator--1367a192-bc70-4f90-af3e-20dc85a70c0f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341c6f9e-af03-4579-b5a2-94f5e0753394", "sighting_of_ref": "indicator--edc4ed82-78e6-48e7-8064-e49bd3cc3b4d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08094546-2dc3-409a-8daa-b99f9193e116", "sighting_of_ref": "indicator--f99fa3ce-5612-44d1-bad2-d00d5f55e314", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2dfffb5-9d4b-4843-8fcb-faee289bc153", "sighting_of_ref": "indicator--0d328628-94a1-4e85-af1f-72f084ef1785", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a346693-ad9a-405f-83e6-9e6a42ad2ace", "sighting_of_ref": "indicator--9f27bd27-6119-4033-91b5-8ac2df4e84df", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750c032b-dd17-4583-80a9-61d6dd44bffb", "sighting_of_ref": "indicator--b1fd52f0-0541-4987-890d-e8d09888178b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb60aa35-81bf-4e37-956b-45e125792b16", "sighting_of_ref": "indicator--531099dd-4b9a-424f-b47f-7aa6ca48845b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdb84a7-1cb8-4cbd-ada5-b9a989488ce3", "sighting_of_ref": "indicator--a68e9674-6b18-4244-8867-e99a7e2b1f63", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b239705-e4de-4711-a973-3821e283a7d6", "sighting_of_ref": "indicator--310a6593-2990-4e45-92a8-d5742f2bfc07", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6957d53-3f0f-4ec6-a195-5a894170796d", "sighting_of_ref": "indicator--d7405983-0b12-41c3-a289-47d6abd15f34", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c8a326-1303-48fd-89cf-af39d33c71d8", "sighting_of_ref": "indicator--1e0b7c43-d0eb-456a-9f2e-aade4f77222e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3470bec9-a1ed-458a-97c6-477468255b9c", "sighting_of_ref": "indicator--01a27045-e9e3-4161-9ed1-c9adc7f6697f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278f1e52-89d0-4571-81d7-e0bb24e84e27", "sighting_of_ref": "indicator--01a27045-e9e3-4161-9ed1-c9adc7f6697f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c0768a-0224-448b-9d62-10cd43a55bb8", "sighting_of_ref": "indicator--a0b91aa2-423b-4b71-8c57-9a00599f8a5a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9f9c35-510d-4fd4-a3e4-0051e0d42832", "sighting_of_ref": "indicator--f98cca91-fcd9-4a76-a0dd-752a3f17ccd1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be325a92-77b7-4c58-b064-a3b7ec1e3955", "sighting_of_ref": "indicator--5728ce57-15c8-4c06-8d6a-6651806796d4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5cfc0fc-5cef-48a4-afba-0c52bf929371", "sighting_of_ref": "indicator--8f520b1c-0111-4890-a695-434c8f66be0f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24ef626-b993-4979-9b1f-c2a13618b569", "sighting_of_ref": "indicator--03f2736d-20db-465f-b668-cd97c2988d1a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612bef2f-e98f-4221-914b-8ab1e040196e", "sighting_of_ref": "indicator--03f2736d-20db-465f-b668-cd97c2988d1a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2335f945-a710-4ff9-af81-bb4f81cb950c", "sighting_of_ref": "indicator--6b54a706-fc71-4899-8cd1-36ab5cc30221", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3fa9db-65e0-441d-a400-66d69208fd8b", "sighting_of_ref": "indicator--34757738-39f2-4556-9a4b-7b4a9bfe1d7b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39fcfd5d-911d-4380-97ba-20fa8dccb703", "sighting_of_ref": "indicator--41e05748-4cbd-4bfc-8832-74ca8d47dedf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c36ee3-419e-4615-b811-94765f8dc14d", "sighting_of_ref": "indicator--d077bb3f-8fa0-4d30-8930-c04565b8aa7b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20640f98-f463-4f29-be4f-eaa67a6bb7f1", "sighting_of_ref": "indicator--7a138a3f-428a-49e0-8c99-095b4e4b9d99", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15abe76f-5bb5-49c5-ac8c-0b327530cdd3", "sighting_of_ref": "indicator--82afdc28-86a2-4265-b6d1-540198cc12e4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa4dba9-3e39-4e96-9aed-9c905bf20384", "sighting_of_ref": "indicator--ca3d7cc1-f005-448d-82a3-641261b0460b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24afa7e4-a827-43e5-ba33-c6db632a24b2", "sighting_of_ref": "indicator--5c8e98cf-1047-458b-8937-196efb1bc143", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a644185e-fb07-4ff7-a01e-45e3b253a5d2", "sighting_of_ref": "indicator--a685a79c-8a78-4daa-8f1d-5831643222e7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5694c4f4-c297-4824-894f-a08453dcd062", "sighting_of_ref": "indicator--f586b434-d476-4571-8c8e-4d6774febb45", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c382b76c-41cc-44bc-b204-3ec6bde32717", "sighting_of_ref": "indicator--f586b434-d476-4571-8c8e-4d6774febb45", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cab16fb-7312-4592-975c-6d6491c4e6a8", "sighting_of_ref": "indicator--fffd0ddb-0622-4fc6-965e-d3ad28547e3c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da81b4c-3051-4a19-8b16-30dcce24d372", "sighting_of_ref": "indicator--35dec8d5-b393-4eea-8d63-bec34551f54a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49444ec2-e8f6-4f23-aa0c-607ef54934e1", "sighting_of_ref": "indicator--04040448-1b6e-48db-b11e-31578fac73d0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e62d802-e396-4719-8b1f-275a7822f837", "sighting_of_ref": "indicator--04040448-1b6e-48db-b11e-31578fac73d0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f175f695-6945-4ae5-9af5-635af3cffad5", "sighting_of_ref": "indicator--b023a65a-85df-4354-86a2-a08526c4e6dd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a67d6d-0ab5-4886-ba3f-cf4cbcf76c8a", "sighting_of_ref": "indicator--2921a366-f175-4770-b2b0-db65b7451967", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d232a9a3-173a-4635-9114-b3ea66115128", "sighting_of_ref": "indicator--973d07ac-b35f-413a-84a9-7bc028e45c26", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee4baf4-1439-429a-baf3-e977b333ab9a", "sighting_of_ref": "indicator--973d07ac-b35f-413a-84a9-7bc028e45c26", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c3ea45-8b83-433c-bae3-18dadc636d16", "sighting_of_ref": "indicator--973d07ac-b35f-413a-84a9-7bc028e45c26", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9db0c09-854d-4ec4-bb52-87af965f67b7", "sighting_of_ref": "indicator--b099456e-ef48-42c4-9045-e8d66ca8572f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27220ef-2d6c-4cf2-8dce-4a1b588d576c", "sighting_of_ref": "indicator--7d38055c-3d79-40c6-97df-263abcaa536b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b286923-cca6-4c1f-9037-1a766d84d013", "sighting_of_ref": "indicator--7d38055c-3d79-40c6-97df-263abcaa536b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a161a28-9698-4eb4-91cb-458f802b39d9", "sighting_of_ref": "indicator--2a6753f4-6cef-4735-be52-758cb29d2e5e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16138a9-d383-4191-8287-b25caefdae46", "sighting_of_ref": "indicator--2a6753f4-6cef-4735-be52-758cb29d2e5e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d61fdf7-d23d-4e09-9dc3-c380b972900c", "sighting_of_ref": "indicator--2a6753f4-6cef-4735-be52-758cb29d2e5e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e7bcf1-8eb7-414c-823d-ae7257d2527a", "sighting_of_ref": "indicator--4d913271-e0e5-4840-8b4b-e7d22d6cd2e7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e0d7ee-7dc4-4803-9321-d5eb295102a4", "sighting_of_ref": "indicator--4d913271-e0e5-4840-8b4b-e7d22d6cd2e7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19340685-0821-40ab-81bb-5e25dea66ed7", "sighting_of_ref": "indicator--b5431db3-0df6-4fcf-9dfa-d78cee5533f5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1155cf05-7137-41fc-8a0b-d0ed4586f16e", "sighting_of_ref": "indicator--b5431db3-0df6-4fcf-9dfa-d78cee5533f5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5820273-11cc-4e44-af65-08fcfd88b659", "sighting_of_ref": "indicator--b5431db3-0df6-4fcf-9dfa-d78cee5533f5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ad6dd3-b1f2-495a-95ac-6e1eebfb2882", "sighting_of_ref": "indicator--5bcaae51-1c66-4097-9eed-f633d6e4831e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffbcd055-54fe-47f4-92b2-af4d0abbaed3", "sighting_of_ref": "indicator--ca7d76d2-b55e-4713-bc55-4e5ed709c3c4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2880ac-214e-4159-a564-6a6885153752", "sighting_of_ref": "indicator--ca7d76d2-b55e-4713-bc55-4e5ed709c3c4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18788cf0-ddb4-453d-9203-cc173305493f", "sighting_of_ref": "indicator--00e36003-d05a-468b-93e3-40a7cff8a777", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04da725-16c1-400e-98fb-ef5b4a48b80c", "sighting_of_ref": "indicator--f77261ec-0970-4865-8fac-f901665450de", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130cfcff-57cc-489c-b764-e2a77952f4b2", "sighting_of_ref": "indicator--951cacde-f41a-4544-8b12-b7b15fbc5182", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a4d98d-a2bb-4612-9033-d88e31cfecc0", "sighting_of_ref": "indicator--4229a07e-c4f9-4294-b363-75520ad9bb7e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90722133-a82e-4289-8f24-6c786abec18c", "sighting_of_ref": "indicator--ac5ce28c-29cb-4c3b-b496-1384116805f6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c45faca-d75b-4cbc-8f30-132bd2c1846e", "sighting_of_ref": "indicator--ac5ce28c-29cb-4c3b-b496-1384116805f6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbbe399-adc2-469f-a929-b126618af683", "sighting_of_ref": "indicator--d18a22d9-49d8-4e18-b032-13831de218e4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfc77cf-555c-4d99-a567-fce64a4baa83", "sighting_of_ref": "indicator--e295d7aa-2483-4a51-b1ff-0092301fdfe9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed2a433-ebdd-4140-8826-c839f93e5211", "sighting_of_ref": "indicator--49b12bd9-7fd7-4302-95df-b76975ad1b51", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9b5025-5872-42a1-a090-b8bcd55351cd", "sighting_of_ref": "indicator--0a099103-8d92-4d27-9595-f65a65db81aa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b04558-74ce-415b-9660-a4e24a02baa4", "sighting_of_ref": "indicator--4e52761c-fc3f-423e-ab2f-68662d3551da", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b982efa8-de18-4aa9-a61a-e173f49b1a86", "sighting_of_ref": "indicator--c9e77ef4-1dc0-450a-afa3-a58a13cf6abb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f23b99e-dc5a-4744-872c-1a37e8b47f64", "sighting_of_ref": "indicator--c9e77ef4-1dc0-450a-afa3-a58a13cf6abb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2adb77-a0e6-4801-ae70-40a5211e76db", "sighting_of_ref": "indicator--60e19685-f450-495d-b6d2-e8452e7fac84", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6733a8-e77a-4d01-b890-7565308388f5", "sighting_of_ref": "indicator--60e19685-f450-495d-b6d2-e8452e7fac84", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e239d32-e318-46e2-a64d-68710b81089d", "sighting_of_ref": "indicator--70d39cb9-dba1-417e-bf45-afb8e62ca166", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436b0dd7-6675-4ea2-9088-64d57b3bcfe4", "sighting_of_ref": "indicator--70d39cb9-dba1-417e-bf45-afb8e62ca166", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81c9227-b2da-4b40-ac37-b3ccc14db9b7", "sighting_of_ref": "indicator--b48d20d4-5491-40a4-81e7-0d561f73070f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95d7379-a47c-464c-9b71-473b62ab178d", "sighting_of_ref": "indicator--4179a5f7-20fb-486e-a147-b1358500ff26", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6547b5-8805-4af7-88ea-dafc9527f3bd", "sighting_of_ref": "indicator--dbd69ae9-11e5-497c-bb4f-6177f07cd850", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b083803f-9bb4-4383-943b-39e4fa5303fe", "sighting_of_ref": "indicator--578796cb-1c84-4435-bf80-f677668d5db7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc19e0d-3167-478e-97a3-15a13c7ffe7f", "sighting_of_ref": "indicator--922c976a-bd8a-4903-8e77-108ce09282ee", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda1b3eb-7f62-43f9-9a8c-63d7b6c62141", "sighting_of_ref": "indicator--8496c22b-5fa7-4462-b6e1-af130cfee244", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dfbbf6b-a556-4a39-8cad-76a20d8fefbe", "sighting_of_ref": "indicator--cb478826-abe1-4296-85a7-9b39fa56b388", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9d4a8d-941e-4281-8e49-96449b5e7ba4", "sighting_of_ref": "indicator--35856556-651a-4f59-919b-5dc7b9ac0590", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471216c7-c052-4ff7-8af2-019a7a6d0d13", "sighting_of_ref": "indicator--47923f85-a01a-466a-9c01-24e8a966f23d", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dece6f99-807a-4eab-9413-614041d42f4c", "sighting_of_ref": "indicator--6e6d7451-862c-410c-a9de-294bfdda84fd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75da88b-460f-407c-bc58-9f339606c90e", "sighting_of_ref": "indicator--f4ae66e1-b5e6-4850-8b79-5e3d88e329ed", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a6c173-3aed-4a8e-9187-5bf7c379beb2", "sighting_of_ref": "indicator--b5d98fb0-d871-40c3-8943-9aada3f399f4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c2615b-1bc2-49da-99c5-c7850fd95a44", "sighting_of_ref": "indicator--ee8d7552-753b-4101-ae9e-d2dd1f0949a8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc68bc4c-9ea7-4e42-b42a-c0735c13df1e", "sighting_of_ref": "indicator--7f45f60b-2016-4ef2-87fb-def1e2311e8d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a38d108-03e0-404c-8ff9-7605f7ce2d2e", "sighting_of_ref": "indicator--08634fb8-1937-489c-a7d7-8f20ed5beb62", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b036b6-dfaa-4bed-9c8c-9c70589ea95c", "sighting_of_ref": "indicator--43a6953c-b896-48b5-8112-720736d579a4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f1d115-7492-4f44-b544-c1284b0ba6a3", "sighting_of_ref": "indicator--9a414915-2659-4cc2-aa31-45b371c0de0a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7dc503d-69ac-4301-8b90-e1460bb5dbc1", "sighting_of_ref": "indicator--1c676d24-6e09-4e7d-b7c8-433e44f8c875", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6687a8-bdd0-41c8-8805-265199bbd5db", "sighting_of_ref": "indicator--1c676d24-6e09-4e7d-b7c8-433e44f8c875", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8a3260-8b6e-4f51-a136-cad10f1ee9eb", "sighting_of_ref": "indicator--242e6e60-3fd0-4f8e-820f-6b863d3a701a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1db79d5-4615-4dec-aa5f-293fe0b9a99b", "sighting_of_ref": "indicator--70323f90-c84e-49a4-b801-00df96626e15", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5135d5ba-f92d-44a6-b22a-2b3313fb81c2", "sighting_of_ref": "indicator--70323f90-c84e-49a4-b801-00df96626e15", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9229255-680f-45e3-99aa-576adc9cc476", "sighting_of_ref": "indicator--70323f90-c84e-49a4-b801-00df96626e15", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3cf67b7-1a44-46a4-afd2-8a3da598e2aa", "sighting_of_ref": "indicator--8f0bf6a4-38d5-41cf-9728-7bab28f88a49", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9fe756-a7f3-4e06-95e7-4b41e7f730fc", "sighting_of_ref": "indicator--8f0bf6a4-38d5-41cf-9728-7bab28f88a49", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a467e4d9-3fb1-4eaa-890d-1dd3fe068c00", "sighting_of_ref": "indicator--03256471-4df2-4dd6-be66-6c972710a5ce", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932ab7a2-6e68-444c-85ee-7fbd2b326b71", "sighting_of_ref": "indicator--2fad309d-ff21-47bb-998d-7960bed2307c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d40458-c113-4ee7-acba-53d9e6ec498b", "sighting_of_ref": "indicator--2fad309d-ff21-47bb-998d-7960bed2307c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4461fd6-b788-4f80-ad70-ea42c61ddc64", "sighting_of_ref": "indicator--aa56507e-6dcc-4870-b89d-472308bbb6c5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad917e3-e2ef-453d-a5ee-2e20e33d7c89", "sighting_of_ref": "indicator--aa56507e-6dcc-4870-b89d-472308bbb6c5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e13d893-5a7e-4242-ba53-70a3eb1b1c2c", "sighting_of_ref": "indicator--aa56507e-6dcc-4870-b89d-472308bbb6c5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b5aa5c-00d2-4e58-a5de-08f10ab49752", "sighting_of_ref": "indicator--41a5e75c-ec15-4903-a914-135dcd9e61a8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92206ea8-ed0a-45da-8094-3557573c778c", "sighting_of_ref": "indicator--41a5e75c-ec15-4903-a914-135dcd9e61a8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95faf39a-41c0-421c-a830-723a51979c3e", "sighting_of_ref": "indicator--41a5e75c-ec15-4903-a914-135dcd9e61a8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d4dac7-d68a-45de-bfb5-2a60bb304da6", "sighting_of_ref": "indicator--522859ce-442c-4aed-b195-a7cae64d5ee9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54190b5-f129-4e32-ab2d-10ffc80799fb", "sighting_of_ref": "indicator--33726176-6f89-414a-b8b2-d6bbbbdf013a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cbdbc44-eb59-4e92-9442-6583c3783a7a", "sighting_of_ref": "indicator--2c1344bb-f066-44ee-b682-a2f33e187ddb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79a2ff2-21d3-41ea-94cc-de35a9bc4158", "sighting_of_ref": "indicator--8b5b6276-d671-482d-95e3-aea5c1854d51", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09efd4ce-6802-4e89-ac19-49c7c383e94a", "sighting_of_ref": "indicator--ce8ed213-90b4-4f90-a9d0-1806177666d2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e98393b-36aa-48ac-8528-4269b2f85ded", "sighting_of_ref": "indicator--f7401e1e-ccce-42fc-9dda-5093f78e9206", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f229eeb7-9983-4bbd-801e-6b22e9bfe3b7", "sighting_of_ref": "indicator--f7401e1e-ccce-42fc-9dda-5093f78e9206", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d229cc44-1d86-4666-b5d1-ab95bf771c35", "sighting_of_ref": "indicator--f7401e1e-ccce-42fc-9dda-5093f78e9206", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c4b8ce-1b02-498e-a540-d0bae2727c13", "sighting_of_ref": "indicator--7c669f0d-b245-420d-bfc7-dbbbbf288460", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef2b374-364b-463c-a9ef-bc74cb5122d6", "sighting_of_ref": "indicator--58bc8899-2dac-4fce-87d4-7c5857a0928e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83b8ecc-2f1c-4d33-8fcd-0bd661c2c1f6", "sighting_of_ref": "indicator--51d72a83-da1a-4e7a-8b7f-c0735e84cedd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f81fd40-1939-4326-bde8-0e37f5891f12", "sighting_of_ref": "indicator--51d72a83-da1a-4e7a-8b7f-c0735e84cedd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d79bb5-016e-490a-8bb4-268de8f32f17", "sighting_of_ref": "indicator--4f77f0ba-81bf-4d51-9e6d-966b79de8e4e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016db02e-0a70-441d-9117-eebf163c1345", "sighting_of_ref": "indicator--4f77f0ba-81bf-4d51-9e6d-966b79de8e4e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75d77ef-9f64-40f0-a85f-f5bcfa16b6bc", "sighting_of_ref": "indicator--4f77f0ba-81bf-4d51-9e6d-966b79de8e4e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b80e43-582a-47ec-9608-a3e2803438c4", "sighting_of_ref": "indicator--3db5c268-bd28-45bf-91bb-eaa14e5cb085", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459f04ad-691f-40cf-90d9-e85f8fa6c9a8", "sighting_of_ref": "indicator--b667f755-e09f-4b5f-afd9-267eafefdad5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84550c22-6842-43d2-9488-4d757de4d683", "sighting_of_ref": "indicator--6d2353f7-4d6c-4dbe-93bc-aebdd1ff2b55", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540de2d5-dc5c-40d9-acd2-c88644392b17", "sighting_of_ref": "indicator--7d54b0dd-1064-40f9-a2ba-fb8e6c910345", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05f87c6-8443-449d-af63-2b554e3e837c", "sighting_of_ref": "indicator--2b3eb7cb-2215-4626-920b-0b49d68f589b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d49b42-d958-4128-84f0-0d2d5cb9ba53", "sighting_of_ref": "indicator--062306a4-6402-4e69-b2eb-84fb5b1330e9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09f063d-b5ae-4be7-9a88-9bcf60d4e56a", "sighting_of_ref": "indicator--062306a4-6402-4e69-b2eb-84fb5b1330e9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4441393-d924-4a75-8413-a78163b78dbe", "sighting_of_ref": "indicator--4ccf5641-50b5-42b2-ab11-78b6ccab8da9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e669701-9a77-427f-90da-623de881018f", "sighting_of_ref": "indicator--f8689097-128e-44ad-8dc4-61a7ecebed08", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b357d981-8472-47f8-86a5-adb748dcb9da", "sighting_of_ref": "indicator--1325928e-421f-4331-9c0e-84cb453fec2f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5ad9a0-8291-4055-b1b5-d7d6e8b81fdd", "sighting_of_ref": "indicator--23351dc9-e1de-42ac-b97f-d7f9cff67f51", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0fbf86-9c2d-49c4-b848-efef191eb5d0", "sighting_of_ref": "indicator--071b87c6-7fb8-42d0-88e1-e2f5c5ed2aa3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7418c6-0129-4688-b190-8c6be252313d", "sighting_of_ref": "indicator--f45fe391-3be1-472b-a4e9-2ae80d080ece", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2dad70-e6bf-4534-93b6-8461f5a12889", "sighting_of_ref": "indicator--f45fe391-3be1-472b-a4e9-2ae80d080ece", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f404a5ec-0c3f-4caa-b01c-038a9f2484ba", "sighting_of_ref": "indicator--ee11101a-be0a-416e-bbf5-02bccfc495e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ccbd02-9fb3-42af-b3ec-52c16c5bcb56", "sighting_of_ref": "indicator--f0df2aef-2ff7-424f-b43a-ce0077059d74", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b154c7f-1138-400a-b584-e2ed664ca736", "sighting_of_ref": "indicator--89f05709-2c59-4774-bcff-0c97f80df544", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b1469f-5ee0-4a75-8669-6de8611cbae7", "sighting_of_ref": "indicator--819aadb0-cb07-42ec-8bb7-9f5be8fe1fff", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089d548f-0417-409b-a2d3-9ad87fb47714", "sighting_of_ref": "indicator--cbcaf31c-133b-4339-9fc6-b4c3f44352aa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3f6846-c8e3-479c-b52c-d21b940734ff", "sighting_of_ref": "indicator--422353cc-4ce7-4fc3-b716-2998a3866124", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc41379-e6f9-4afd-ba9b-d375133e580d", "sighting_of_ref": "indicator--027433e3-eaea-4c12-8f8f-4e0ebf9eeb34", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75453495-a0cf-4b65-902e-e4d440e3b773", "sighting_of_ref": "indicator--e36d4232-fab2-4f07-ba0a-80c018dcb1d2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd497f77-e7d4-4ab2-8f6c-9e6cae94f5c2", "sighting_of_ref": "indicator--490cbcdf-6cf4-46e0-b36f-e80e8ca4bb8e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc295f53-29ec-450a-a4b0-00fe71268ebc", "sighting_of_ref": "indicator--cf3b3a06-f670-4d6e-97ad-95bdfc806f17", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753208d4-c578-4598-8400-8a293430f960", "sighting_of_ref": "indicator--fb21b9bc-4a95-4e10-ac17-b30cf0e13a49", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa42eeb7-1f1f-416b-909a-4b91a1b20a14", "sighting_of_ref": "indicator--8ef999f4-c26d-4699-96ca-d42d920c56d4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904c212a-0160-4382-ae5c-856679390663", "sighting_of_ref": "indicator--dbb5d6cf-9a93-4dea-8fca-707fa273c393", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ad1760-b65e-477b-bde2-79c07b5bc6e8", "sighting_of_ref": "indicator--dbb5d6cf-9a93-4dea-8fca-707fa273c393", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4905c2-6564-4278-8a62-c13791756628", "sighting_of_ref": "indicator--fdd4e8ca-251b-4186-bee0-4ca6ff7109f2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59561064-79da-4abd-8d57-a834f71ddb3f", "sighting_of_ref": "indicator--aa2f1882-b0ef-4aa0-ac81-46f207e03a46", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c58991b-0b92-4e94-961d-9cfc2747a5b8", "sighting_of_ref": "indicator--aa2f1882-b0ef-4aa0-ac81-46f207e03a46", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624ecb42-7818-44bc-a829-0265830d9c44", "sighting_of_ref": "indicator--fbc50e03-6fe2-48bc-8bde-e2e825d8cf68", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb7e319-3927-4eb8-ae1a-59798ff845cd", "sighting_of_ref": "indicator--fbc50e03-6fe2-48bc-8bde-e2e825d8cf68", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67fd2145-fba7-4665-a803-cc7211089aee", "sighting_of_ref": "indicator--f4258c6b-6355-45ad-949a-75a55c85db84", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df01a474-c453-4467-aa61-72eada387d0a", "sighting_of_ref": "indicator--f4258c6b-6355-45ad-949a-75a55c85db84", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9738acb3-f3c5-486a-9cdf-0ac31a05e43e", "sighting_of_ref": "indicator--e5f9d75d-cb75-4873-98c4-dd01d4f65506", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3708cf42-1d69-4536-86f9-97890d6e8e9f", "sighting_of_ref": "indicator--177d9a65-4573-41b1-96b4-c626f1d29b8e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1278c7bb-9cf4-4bc4-9a97-36134c3fde58", "sighting_of_ref": "indicator--943eadeb-94fb-4c7c-a2d4-eb9d5e2c0856", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b97ce2c-3189-4c9d-987f-bf3a18521738", "sighting_of_ref": "indicator--caa1fa3f-042a-45e6-ad12-a1d7257b8124", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86824f2c-abcd-4ced-ae43-219d67aaf933", "sighting_of_ref": "indicator--aa89512d-52df-42a5-bc52-11de36ee8525", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af444c1-3b1b-4f7e-a95a-783041976220", "sighting_of_ref": "indicator--a6a9d87f-9df6-4f1b-91da-c24df97bb94a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c64df41-1931-4464-957f-2ca11ad9ca9d", "sighting_of_ref": "indicator--2f3869ff-86b6-4a27-a5a4-c8efc5dea94f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd16872-2d27-4a78-8053-e348d0e39153", "sighting_of_ref": "indicator--8a19e7cb-8f85-4b90-9f61-8c90acadbae6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc34a824-0c3a-4c31-af93-020ae00f982d", "sighting_of_ref": "indicator--b060b53a-5af3-485e-893a-bafdf5cf3b2e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993830c8-4a02-4d32-b1aa-8bc68cbdf1a7", "sighting_of_ref": "indicator--b060b53a-5af3-485e-893a-bafdf5cf3b2e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f150a52-56a8-4a7e-a9de-32702b12963f", "sighting_of_ref": "indicator--fd5a9511-c2d4-42be-926d-f806f447095f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca70d6e-190b-4b31-af5d-de19dd8f23bd", "sighting_of_ref": "indicator--fd5a9511-c2d4-42be-926d-f806f447095f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a514e123-b849-46a7-afde-83eb6d0b60cd", "sighting_of_ref": "indicator--c392d89b-d2db-48d8-9330-7a7e0e725db7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5487b316-5f0d-4f3b-a03d-b07b9bc80a47", "sighting_of_ref": "indicator--0a88399f-c8cb-46ff-8baa-b3f349929aef", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd0dfcb-94ca-41a0-823f-cafb916051dc", "sighting_of_ref": "indicator--38c05e32-b60b-44ff-af72-4dc0b451f798", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d0e1be-9f87-48f7-be73-6262412367a7", "sighting_of_ref": "indicator--11b9a3ab-4e5a-4c72-83bc-6a8de1d470fe", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f623e9b-6285-4e73-9b5d-cb798cecda61", "sighting_of_ref": "indicator--943dd08b-7aa3-4895-8386-307d0b7a5b0f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610cfb08-266f-411a-afb8-88fa11971971", "sighting_of_ref": "indicator--62ce3768-cbbf-488e-b4b5-7330788cb04a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed3a5ab-b360-4ada-b21b-7a4196998bd6", "sighting_of_ref": "indicator--62ce3768-cbbf-488e-b4b5-7330788cb04a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b25f96-d4dc-45de-9962-15d45ffccb74", "sighting_of_ref": "indicator--9134cbf1-fd2c-406a-aa99-c846158dae34", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc1ebff-5e75-4f0c-92c9-babb9d253afb", "sighting_of_ref": "indicator--9134cbf1-fd2c-406a-aa99-c846158dae34", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db3e566-c3f3-4e45-ab25-43f26e2a37ce", "sighting_of_ref": "indicator--7fc3bea2-1bee-4611-b5a2-3475497449f5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ce1888-eb36-4beb-9229-630b06ac2a74", "sighting_of_ref": "indicator--17a960c0-cc75-4cec-88a4-212086ff0073", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8991a302-effd-4be9-b15d-b1ccf45a8d05", "sighting_of_ref": "indicator--b105f035-cc56-4a46-9508-a347f32b62a5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54fcf1d-5762-4e54-bd06-87e37a70dc98", "sighting_of_ref": "indicator--36a5ad48-8666-4a35-b705-925c34b2df16", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b957843f-bf66-4c92-ae9c-3853c8cfb23c", "sighting_of_ref": "indicator--26abf053-c3d1-431c-8b35-c2f1409ad653", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32eef8e-6973-4881-8fcd-d7472daaa5ba", "sighting_of_ref": "indicator--33eb4781-2ff6-48e1-ad77-493a30d97b4b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b4e21a-f714-47f5-82bc-2c25e07eeaa3", "sighting_of_ref": "indicator--58c0bec2-7159-441e-8822-67576bd34fea", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051e3078-110e-41c1-a12b-594e18dd38ce", "sighting_of_ref": "indicator--f301d1e7-d712-4385-a11e-0fb9ff770633", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9d7155-96df-4e2a-8feb-865f9543ae29", "sighting_of_ref": "indicator--866e72ce-cfe8-4952-ae8b-ce48ae48ea5f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec92b709-58cc-44f0-93fd-3cee6767cd72", "sighting_of_ref": "indicator--70d8fa90-dc50-427b-b2df-e0666ca26aa9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9191ff61-8a38-4cf4-9264-83e2d20a98ce", "sighting_of_ref": "indicator--bf8e78d7-9b88-40f1-8f4e-e8c35fcb7aa7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4e5e14-4b19-441c-8211-277a8af4a868", "sighting_of_ref": "indicator--bf8e78d7-9b88-40f1-8f4e-e8c35fcb7aa7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8cff9cb-e4b5-42f3-a0c7-49767300ed79", "sighting_of_ref": "indicator--081a0d6f-d43e-4938-867c-5fc442efd936", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1220f2e3-8b43-4f75-8c35-13e90bd61461", "sighting_of_ref": "indicator--bf3cd491-ba8a-41ea-b384-7af804e0354c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f423e24b-22b7-4e7c-a64a-b8aaa5f1cdf9", "sighting_of_ref": "indicator--bf3cd491-ba8a-41ea-b384-7af804e0354c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c589fb25-f1eb-489f-94c4-53bdaf07a255", "sighting_of_ref": "indicator--027aec15-b02d-424c-abad-cb6d678eb071", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be16b848-ff17-4c6f-9744-16e54d6c2b80", "sighting_of_ref": "indicator--27a361d7-d336-4b86-a647-fa551a5bf50e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2570638-08b1-46bc-9814-d12bf9e954c4", "sighting_of_ref": "indicator--8ae66deb-b6e3-43e8-8d56-995a99b914ae", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1850b78b-4077-484a-adbb-ce3184dbc5f7", "sighting_of_ref": "indicator--30d52c44-dfea-493c-999f-18652b991620", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f0ae9f-8f01-4705-ab57-f764d0645349", "sighting_of_ref": "indicator--7f9fc7e1-0c59-45d3-8acf-8c3af184ed41", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162b95c6-2fec-46ab-8ea1-c77ce262b66e", "sighting_of_ref": "indicator--296d7eb7-d0bf-405c-b678-379551badae5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2f7e92-4dce-439a-94ef-978f62404c50", "sighting_of_ref": "indicator--cbab52d5-1413-4af6-bf85-1c079cec0cd3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b99280f-1b89-4126-8da4-7daa3e7cbff0", "sighting_of_ref": "indicator--d537d1ae-c431-4a02-9e05-29bd46dfdbc4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f16ca3b-b735-4658-b1b6-01b1d386539a", "sighting_of_ref": "indicator--d1b3cd0e-1796-421e-864d-d5ad4641b506", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce22618b-526c-41ed-b4ea-70b7a6925a70", "sighting_of_ref": "indicator--8978dcd0-408b-4798-8c75-b43fd3aa380f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01fa207b-9c68-40fb-b8bb-6acb93286dc0", "sighting_of_ref": "indicator--10fc0e35-f6a9-4caa-ade7-18bf64e4b368", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb072cfd-64a8-4b32-a468-be1e43f6a2e8", "sighting_of_ref": "indicator--b463c56d-438b-44cc-9ab8-a2b72af82cd9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2b3d2d-9f05-4722-8a73-65a88a20bdd1", "sighting_of_ref": "indicator--23faebd6-4817-428a-b602-d217cbb34a31", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6533781-709d-43df-ab08-b2e5bb47904b", "sighting_of_ref": "indicator--398488d5-836f-4087-a903-6c235fa93b2e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba050f36-75d1-422b-8274-3ea37ff5db29", "sighting_of_ref": "indicator--7be53886-56e0-4b01-89bd-57353552b741", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886a0b63-a54e-465c-bb9a-8f74012de8a2", "sighting_of_ref": "indicator--92b70ce7-b02a-4ecc-94ce-049d9624a399", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfc9da6-5a5d-4085-9147-9106b17d36a5", "sighting_of_ref": "indicator--2f623bc8-14cf-4b7d-92d4-2c9cbbd7a4e3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471ac009-3a16-4c69-9a7d-9e86b4c9235c", "sighting_of_ref": "indicator--bf755d34-65bc-4113-8885-a7770b06b592", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70b0654-1fa1-4c84-8633-084b6015a98a", "sighting_of_ref": "indicator--9b5c9666-ea3a-4687-8322-d16ac3db74ce", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91870e2-6688-434d-b147-9d68d1efd0c2", "sighting_of_ref": "indicator--cafc16cb-82f6-44ff-b052-3c8cf9a8143e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2dec77-679d-4be2-a5b2-89633681c1fa", "sighting_of_ref": "indicator--0abec02c-3830-45a1-9d26-01f8af018451", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5de2d3-363b-4056-8632-cb2e456daee7", "sighting_of_ref": "indicator--97301ae5-e16f-44c6-978d-0d796da5ec5f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853d69e9-c65e-4d10-9081-275e101114cf", "sighting_of_ref": "indicator--74f856ca-3dbb-4c75-b160-73fbba784284", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11436937-29f2-4f8d-8539-934bfc3216ac", "sighting_of_ref": "indicator--43e5d18a-6201-4c08-869e-c71d89ba6b2c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f891f5-512e-4c93-b49d-e764c485e808", "sighting_of_ref": "indicator--63924214-b804-4adc-b564-df7baaf3fb7a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fc29ae-c3f1-43f5-878c-e6ee74118dfe", "sighting_of_ref": "indicator--77e37237-b9f8-49e9-8c14-c35961da9b95", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f8c98a-8343-42fe-b5f2-e7097ac186ef", "sighting_of_ref": "indicator--6944ed1c-5a96-40c7-9f70-05eb4ad51bfb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc6d0b6-54b0-4a5c-889a-f8fe738842a5", "sighting_of_ref": "indicator--88f4a887-1477-48c8-ab72-a2b77aec254c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09868e9-4bf3-48f9-a8a4-9a131cfb18a0", "sighting_of_ref": "indicator--03660cf0-71f1-40ff-83e4-b5862d7b0257", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304db4a1-87e5-471d-8a6e-fa2561786982", "sighting_of_ref": "indicator--d6e17607-a5ea-4ce7-bb73-1d1c0847a681", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abcee3a3-8fe9-4d63-abc8-9d293b82d28f", "sighting_of_ref": "indicator--694eb0aa-83d8-4de4-9be6-b88114d284d1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91fa2651-43ae-4730-b44e-7bdf7423d8e6", "sighting_of_ref": "indicator--666c34e6-2863-4a7a-9c9b-32343024674d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48630b82-0f06-4b38-8977-433d5d44419a", "sighting_of_ref": "indicator--043ad57a-3ebc-45a2-b800-22fc30327364", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd7df8a-671e-417e-90df-550838427083", "sighting_of_ref": "indicator--d047cefa-8047-42cf-bd37-fb0e5a542b17", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2046b0-a1b0-4026-a5e5-97120a6522ee", "sighting_of_ref": "indicator--8156827d-570e-4fe8-8b74-eb7020e7d4ba", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608d43ed-6e4b-41c7-bd5b-102dbd819ede", "sighting_of_ref": "indicator--ed1037bd-7b90-459e-a6cb-ab5b78eb5a50", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d6f34d8-6c8c-4af4-87ba-e2bf62812083", "sighting_of_ref": "indicator--23ac45a6-4f6a-42ee-9cff-4cae1a0c8cc8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4aebe7b-5a3f-4d24-8526-9cb3fa7ff489", "sighting_of_ref": "indicator--339383f9-74bd-4f1f-8e0e-ef844c5b7aff", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b4b6f6-f189-4eee-8731-45305c86f656", "sighting_of_ref": "indicator--ce65553d-8b95-4437-91a2-4abfa24d8c79", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93159be-ae98-4651-9f9f-a17ecdc6be1d", "sighting_of_ref": "indicator--ce65553d-8b95-4437-91a2-4abfa24d8c79", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01cf1ef1-2048-4814-b673-c7335e6a6fec", "sighting_of_ref": "indicator--c6754787-7742-417b-b080-fd462e4c2899", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25278071-3118-4c20-b2e6-67aa85132a55", "sighting_of_ref": "indicator--036d9527-474a-4617-b6cd-6f35bda51e15", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d80806b-ecf5-4878-966a-dfb87b8b99f4", "sighting_of_ref": "indicator--713f2258-82df-40f9-a46d-b689730fd169", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db28af64-9cda-4a49-938f-0b0164704e2a", "sighting_of_ref": "indicator--dd9b2d6a-47c7-4d30-aa49-a2e2af200f8a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b426c23-1b01-4085-82d7-d7f7924d6692", "sighting_of_ref": "indicator--185ec4e6-9a32-4342-b089-823f4ba3bf32", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3c4f73-00dc-41fc-8ed8-28164aa5e8ad", "sighting_of_ref": "indicator--37568e79-3012-48f0-8339-f0ff9c968107", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d92a6a-ebdd-4c7a-a25f-eabbe32f2452", "sighting_of_ref": "indicator--e6d1d763-030b-4114-8027-17697e553a84", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a43ac2-0639-42b8-971d-608e08a45091", "sighting_of_ref": "indicator--6eed654a-b38d-4fd7-b288-d8331f4ea82a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19ebe35-6cef-47dd-b63c-02938d7e25f5", "sighting_of_ref": "indicator--05c5bf12-0eea-4916-9939-2f997e15b729", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5525af1-c5f0-431d-bd9c-91c65da40b16", "sighting_of_ref": "indicator--8a86fb24-aae7-40c8-852c-ebfc52df705a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29836e7d-6b72-4238-aa7b-19f3d0fde119", "sighting_of_ref": "indicator--c2b08cd4-2581-4870-8dc0-66552eeb50ac", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119111b3-53eb-4b54-afec-e7b7a8f3993e", "sighting_of_ref": "indicator--4411d07b-b843-48c7-8f2a-162c4bb2bf0f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a439c11d-0041-4c68-ad5b-737825749252", "sighting_of_ref": "indicator--c13f8834-07ae-4b07-8977-e815c69276b9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834b3e78-3b9e-41c4-b048-092538136550", "sighting_of_ref": "indicator--c13f8834-07ae-4b07-8977-e815c69276b9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b25b5e-d1ac-403b-9a5a-8132da70c875", "sighting_of_ref": "indicator--0d0b2f1f-8c89-4bd0-80e9-5379ebe647fd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca85340-2299-44b3-93fa-30df9ce02f06", "sighting_of_ref": "indicator--2ae438a1-c511-4dab-a4ea-e62c9fa65391", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42580036-a7fe-4eed-9c4b-550efd35f195", "sighting_of_ref": "indicator--6d6cfb26-35cb-4ba8-acce-a000c20174c8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b39fdae-96aa-4666-a8df-ce8113d79b3a", "sighting_of_ref": "indicator--805a1f38-c31a-4b16-a424-f9a19bc3099f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6af2493-b31d-4fa7-8300-c9887dd48cf4", "sighting_of_ref": "indicator--8150469c-1eb9-46ad-b773-fdd160369cdb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d4f1c8-d39f-48e2-8a50-12ba720027b4", "sighting_of_ref": "indicator--8150469c-1eb9-46ad-b773-fdd160369cdb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6408046-ec26-44d6-bba6-397e47318d61", "sighting_of_ref": "indicator--10723e2b-25f5-4d8f-afa3-83714e4e961f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b379b8d1-34c9-4d55-8b84-f0fcede653c8", "sighting_of_ref": "indicator--a280b1b8-2a2d-4326-9de5-e9bf0950836d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7665fb90-7efd-4e91-bb3a-2fc3501b5eb5", "sighting_of_ref": "indicator--666ab1c2-f9b3-4f01-be75-f2f33f6a645a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f032cbe-4c14-410b-a226-a42dd58143d9", "sighting_of_ref": "indicator--cbda7fc3-6cc9-49d6-845d-8b404309b462", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6111396-02f4-4836-bdb6-c9774c6ff100", "sighting_of_ref": "indicator--c6f0ba61-6c27-488f-9940-475c615ea0b1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94b5ec4-dabb-4b95-b87f-be83bf37e077", "sighting_of_ref": "indicator--88c46c12-bd18-442c-bcbb-4014036a8a4a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1310ca-57c5-48e4-aace-1f081af0d9df", "sighting_of_ref": "indicator--489e2bd4-75af-4922-a97c-db2ccd217f87", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad10feb5-a3d1-48fb-b7fb-e96b379df257", "sighting_of_ref": "indicator--ebce07a4-62a9-4343-a29e-1821080ceca8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a51e2ab-e9b1-46e9-97a7-facb5eb0d9b1", "sighting_of_ref": "indicator--3acb64f4-e921-43a0-b398-f4e37675f118", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9500dc2f-aa13-485d-97a5-d65f9d60029b", "sighting_of_ref": "indicator--b524b8cd-f718-40d8-b465-f1d40dd9db36", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81fb8a51-9413-402c-b6da-13381765a0cf", "sighting_of_ref": "indicator--85659bd0-ec17-47f7-aa44-59dc91645e61", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082fe7ad-3b92-46f4-9521-eb12ed91c1ee", "sighting_of_ref": "indicator--89fdee5b-dce6-4570-84cc-6f4837e91f69", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9253292b-697b-40be-90bc-62f03262e934", "sighting_of_ref": "indicator--1c3dfc4e-57c1-4793-ae1a-ee76cb9d9de9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6cc864-d26d-432a-8e5f-05da2de431fb", "sighting_of_ref": "indicator--15a56428-de26-4def-8379-e388f6240785", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd38a25-81b9-45a6-98ce-03ed35b85a8c", "sighting_of_ref": "indicator--a82a7870-060e-4229-895e-411711222697", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139c0c23-5c9b-4352-8bfd-539d19e43c28", "sighting_of_ref": "indicator--a8066da7-f9a1-4f0a-a979-59ff75bd4867", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0063e55f-a78c-441a-ac57-3ff475c8865c", "sighting_of_ref": "indicator--ca506dc0-a70e-48f7-9f7a-6c0626bd4c2e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c94bf66-c8a0-4aeb-a32f-9ddf289b3b1d", "sighting_of_ref": "indicator--b5f41f68-628f-475e-9c80-ee8862200970", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94144935-d9a6-4c67-a49b-dfbc651811a1", "sighting_of_ref": "indicator--ab448534-d5ce-488e-b103-e435ed670df8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494aaee4-ad17-4375-bac8-86a55bab9b2c", "sighting_of_ref": "indicator--a19a59f1-686f-4323-b537-3fb1baa0e9c5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921238f0-95cd-450b-bb67-13692224c458", "sighting_of_ref": "indicator--53046224-5586-49ae-adba-34d6fda9417a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db56b92b-6da1-4fd9-aeea-1f053176e34f", "sighting_of_ref": "indicator--72edb373-ecbf-44a9-abbf-fdda67ca9e3f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ecfbf7-5f9e-4d12-ae42-f9533845910e", "sighting_of_ref": "indicator--39bb7329-09f0-4aac-84de-4aa40ef8f407", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab56d582-a67a-4004-8925-b4df65075064", "sighting_of_ref": "indicator--e74cbe27-2518-4067-ad71-4c01757b9351", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca02274-b514-4ea6-995f-1b43414fe6ac", "sighting_of_ref": "indicator--c34fad47-a12c-4438-b4eb-f624cebd2586", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea86b809-d414-451c-890a-d068d59dfbc9", "sighting_of_ref": "indicator--4f52a881-c713-43dd-bbee-4deb041e8548", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5562b8c-569e-4784-94c7-81acebb20f90", "sighting_of_ref": "indicator--3d79ed53-e42b-404d-ba04-7ba8f2b9504b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5149bbeb-68ce-4bd9-bee5-9219ae0c3842", "sighting_of_ref": "indicator--5628086d-95b5-4d19-8824-25adc85a6bd7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78411b3-a35e-4356-9694-53a11c840ea7", "sighting_of_ref": "indicator--7b6926e1-5653-4f38-88e9-bd3533303e0f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2ca8c7-c7ac-4d40-a1cf-751ff4452a6e", "sighting_of_ref": "indicator--4ffd1052-52db-4f46-8f23-79563dc39b46", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da758ac5-f585-4e53-9d40-0b89e9d7339a", "sighting_of_ref": "indicator--ff707add-a1b9-4187-9709-52457cdcd621", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622f666f-7866-44c8-a4ce-e1dde9303bcb", "sighting_of_ref": "indicator--ff707add-a1b9-4187-9709-52457cdcd621", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39633ed-c2e8-41ae-9e8a-39722d7c1532", "sighting_of_ref": "indicator--0d0e0cc0-86dd-4cfb-9ed7-f425e009cac2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff42d899-aae7-4464-bf9a-d90702dd89fd", "sighting_of_ref": "indicator--fa48ca70-6483-40c3-a651-24bdaeb2159a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce99fc9-e7a4-48bf-b003-dd5d6e9c638f", "sighting_of_ref": "indicator--3e340692-5742-490b-8c84-5e267ebd6656", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddaf50b7-f071-4fcb-bd6e-f04ccc527a8e", "sighting_of_ref": "indicator--3e340692-5742-490b-8c84-5e267ebd6656", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba3d7a2-02e5-40eb-889a-f713fb64698e", "sighting_of_ref": "indicator--023e887f-b61a-4f85-9ccd-c433a360d27f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e2a0be-9b51-481d-b5b7-7d0bae9af80e", "sighting_of_ref": "indicator--e5794e6b-81d3-4d18-ba8b-c004f2ad1478", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ec28e6-844e-493e-b06f-1389d9eeb7db", "sighting_of_ref": "indicator--2d4ae62a-cd01-4ac0-af2f-55cd8d761696", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6ccdfd-a5b8-4fc3-bf3f-29ff401a93a6", "sighting_of_ref": "indicator--f3791de7-03ea-44c9-88c6-1f0b93e8ca35", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25ccb72-8386-4c5e-aa86-02703b38736f", "sighting_of_ref": "indicator--9e89723d-1a63-4d81-aa17-02c0fd367b9a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86a3c62-5aca-4022-ae67-5119f4cfc4d8", "sighting_of_ref": "indicator--121537b0-f2ed-4807-b844-15eef6aa48b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21cb3de-05c0-4db0-9fa5-9fd8b767d9d6", "sighting_of_ref": "indicator--f3d25a39-f852-4c38-82b3-460b57d6e09c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d22c5a-12c0-403b-8edb-0eba72d10c40", "sighting_of_ref": "indicator--e418507e-3d04-476b-bc65-623dd27bd193", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e89be7-1393-42c4-b3c5-ec5099fec82f", "sighting_of_ref": "indicator--b3fd2d8f-0dde-4a5b-96c4-5c2e40f1abc1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe5e226-70e1-4810-be5d-792fbf6b9fca", "sighting_of_ref": "indicator--f39dde2a-f1c1-4432-ae2c-78f69526bfc3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8f045c-859a-4618-9c24-5264af23ed7b", "sighting_of_ref": "indicator--9a86127b-fece-43f8-8c7f-64bd880c498f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac64afd-c565-4635-9b2d-f0fc72761e95", "sighting_of_ref": "indicator--9a86127b-fece-43f8-8c7f-64bd880c498f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121543c7-4d5f-482e-a659-7611ce057b87", "sighting_of_ref": "indicator--9a86127b-fece-43f8-8c7f-64bd880c498f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff93e056-08ac-465f-a4d7-f4f9713e0813", "sighting_of_ref": "indicator--a21c29c8-36fa-47ce-91b0-cd5a5eec2d7f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10031fee-6e62-4da0-851b-2dbb478ee4df", "sighting_of_ref": "indicator--a21c29c8-36fa-47ce-91b0-cd5a5eec2d7f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7b8207-be27-4d85-99e7-b2160e505647", "sighting_of_ref": "indicator--a21c29c8-36fa-47ce-91b0-cd5a5eec2d7f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599c00c5-5846-43e7-b752-86520b34a8d9", "sighting_of_ref": "indicator--9e574a39-a103-4152-addd-4e96103cbc85", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8dc946-7080-4460-8ca1-3f5509b3e2e9", "sighting_of_ref": "indicator--9e574a39-a103-4152-addd-4e96103cbc85", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71280bd5-698c-40db-8930-6a75fe3d691f", "sighting_of_ref": "indicator--9e574a39-a103-4152-addd-4e96103cbc85", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374bde1d-b842-4964-84e0-79a78846322f", "sighting_of_ref": "indicator--69134a6d-d19f-4d05-9044-411fb2ea8161", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae149d0-8677-4e7d-bbbc-3997aff09b30", "sighting_of_ref": "indicator--0e3a7889-5fdb-476e-b6ce-471c7d1d3d9f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95dbb829-afad-413e-b2b9-041bef606fe0", "sighting_of_ref": "indicator--b2c6b3bb-efea-4dc0-9a3c-3df33437a27a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5034626a-b16c-45a3-8753-e04d8e510d1c", "sighting_of_ref": "indicator--6653e7f3-f4f9-4390-9e9f-62c8b5b9098b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a58d2f7-761c-4cbc-a30b-8e2e54bea814", "sighting_of_ref": "indicator--1785b410-2466-417e-9b25-5cf1e094f37a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65aa915-b173-48eb-9d71-6c05fb898fc1", "sighting_of_ref": "indicator--6889584d-dc7e-4e89-a7a1-ebbb02addaaf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a00b7b2-673f-4ebf-84ae-e7862f931905", "sighting_of_ref": "indicator--b42d4c4b-f5d2-46a4-852b-a503c231e892", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22103e5e-8872-4e10-8065-96babeca9ac4", "sighting_of_ref": "indicator--b42d4c4b-f5d2-46a4-852b-a503c231e892", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e4bc37-093f-4ab8-89b5-6958e557c10c", "sighting_of_ref": "indicator--e0c93a26-4166-495e-b64a-a060ff7b8a1a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a906baf-3554-48f2-84c8-15ccf6a896b6", "sighting_of_ref": "indicator--e0c93a26-4166-495e-b64a-a060ff7b8a1a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987b2d04-fe06-4975-9f16-48795f5e4859", "sighting_of_ref": "indicator--d338df00-db0d-4a3f-a849-f9fd29195e34", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a0b06d-cc0b-469e-b7f1-737c81f3e068", "sighting_of_ref": "indicator--d338df00-db0d-4a3f-a849-f9fd29195e34", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e4c2b6-6979-42f5-ae13-bdb2f23542f6", "sighting_of_ref": "indicator--1f097880-49ec-43c2-b9b2-4c8b85426006", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3b720e-2ba8-444a-87fd-080b78bc7880", "sighting_of_ref": "indicator--9150bac3-0f68-4578-9ffa-dfc82b3ae7a9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35ca30f-4999-4ade-bd74-02fc737c4fe4", "sighting_of_ref": "indicator--d2b5ceca-83dc-403c-939d-712fa2ee2bcf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cabfaa6-0f99-46db-ac72-775686be7d8e", "sighting_of_ref": "indicator--70134bfb-6b2e-4ffe-b802-1bd4148b4f79", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd35f85-5ee8-48aa-bac9-e87d8c5da679", "sighting_of_ref": "indicator--5b8a7d93-34fe-493d-be9a-b3db17d1d887", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b50018b-a7fe-4b4e-be70-8b61fb75f112", "sighting_of_ref": "indicator--4e2622a7-69cb-4cd8-b660-9248a308231a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5638e9c-db21-44b0-b729-4168d36504b7", "sighting_of_ref": "indicator--1f80311e-e6ca-4ed3-b5c0-643d59b9331f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--101aa01d-687c-4f44-9cf5-8ab0b85923ba", "sighting_of_ref": "indicator--b0bf3ba5-1206-4ab7-8143-59ec196c624e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac25637-8236-4d77-9cf5-0f5bac3a2fdc", "sighting_of_ref": "indicator--fffd6f5d-2a82-43b4-8dad-48386e2c8e92", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4bc1a9-4222-4ff0-8c40-48cb8d38a8b8", "sighting_of_ref": "indicator--c3d5538e-8eee-4a9e-a2a3-29774c5edfaf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ee40d0-4997-4c2e-83d8-07243d30b91b", "sighting_of_ref": "indicator--0047757d-47b9-4c2e-a3ba-2d0c7777d27e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0cd6fb-7698-4215-9e3c-48ad79451b11", "sighting_of_ref": "indicator--0047757d-47b9-4c2e-a3ba-2d0c7777d27e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79951e2c-986d-4eae-a1ea-0ca215127322", "sighting_of_ref": "indicator--e2e07f9a-66ed-45b0-adcc-7519c5ad4eb7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677821b3-4801-43ce-b604-05000070d1e7", "sighting_of_ref": "indicator--e2e07f9a-66ed-45b0-adcc-7519c5ad4eb7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef614f2-b58f-4b96-92c1-492869efa9c6", "sighting_of_ref": "indicator--e2e07f9a-66ed-45b0-adcc-7519c5ad4eb7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da23edc3-3a8a-4332-84ed-fb066b233c33", "sighting_of_ref": "indicator--a56ab24e-1014-4f81-97ea-575c0a3f58af", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d858d9d0-1663-4d8f-995c-1125cd9389d4", "sighting_of_ref": "indicator--a56ab24e-1014-4f81-97ea-575c0a3f58af", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567a8f5b-be35-4ac6-898c-8850472bbc73", "sighting_of_ref": "indicator--a56ab24e-1014-4f81-97ea-575c0a3f58af", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4f277b-b412-4035-b4c7-7dc31ca95059", "sighting_of_ref": "indicator--1500235d-335a-4357-8e60-50cca0e2aa8f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9589a37a-9221-4b2d-83de-d993d8ba5c40", "sighting_of_ref": "indicator--1500235d-335a-4357-8e60-50cca0e2aa8f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbcbba2c-1b0b-449c-bbe1-7135dcd34422", "sighting_of_ref": "indicator--63b522f7-6977-41ba-bcf1-44caaa0fd6b2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1164255-269a-42b1-a611-950522439b8c", "sighting_of_ref": "indicator--63b522f7-6977-41ba-bcf1-44caaa0fd6b2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02aa237-6551-4e5f-a7f7-dad4844b82f1", "sighting_of_ref": "indicator--63b522f7-6977-41ba-bcf1-44caaa0fd6b2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62eea720-9790-48d7-935d-e18c33ee85a1", "sighting_of_ref": "indicator--6f559a5b-383b-4fa5-96ab-74dfeb448241", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb69d53-f529-4c9f-9b7f-ab08e8567a32", "sighting_of_ref": "indicator--6f559a5b-383b-4fa5-96ab-74dfeb448241", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e56ad2e-afde-41b0-944f-6f7fa197ae5f", "sighting_of_ref": "indicator--6f559a5b-383b-4fa5-96ab-74dfeb448241", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458ca553-ea7a-4bc6-a4eb-827cc3a4f9a6", "sighting_of_ref": "indicator--69a6ef75-c0ba-4c62-b9a5-8b7fb273e98e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bf7ada-2005-4c05-9301-25f282443d60", "sighting_of_ref": "indicator--c8272f7c-f548-428a-b5df-0d176aa95697", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bde7ca-28d7-41b8-a452-a9486dfe1412", "sighting_of_ref": "indicator--c8272f7c-f548-428a-b5df-0d176aa95697", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f2f4a7-233b-4e6c-b64b-75e9b41c8355", "sighting_of_ref": "indicator--c8272f7c-f548-428a-b5df-0d176aa95697", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb52ccd-68d9-4aec-851b-aa884b0e5c30", "sighting_of_ref": "indicator--cb545459-c77b-4230-a9bb-0468dc0db6fa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1efa8d5-9942-4fd3-90d9-d5b35997db20", "sighting_of_ref": "indicator--cb545459-c77b-4230-a9bb-0468dc0db6fa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac5d3b1-5e26-44a5-85aa-7f6e0790b1bd", "sighting_of_ref": "indicator--cb545459-c77b-4230-a9bb-0468dc0db6fa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29a8e6f-68f1-48cc-99b9-d829ccef34b1", "sighting_of_ref": "indicator--df0febdb-463c-4414-95b6-aec122f27063", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e000282-6f34-489f-a9bd-8f6fe10a758e", "sighting_of_ref": "indicator--8a479ef7-9083-4afd-80fb-f7789b0a8a96", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e794fc-1ea0-46ec-9eb5-4292ec7db001", "sighting_of_ref": "indicator--078d9e99-2a20-41a8-8f4e-af8f52dcd747", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005dc59c-f609-4234-a88a-c5ef6579da60", "sighting_of_ref": "indicator--addbc968-dc11-4c3c-86a4-3bf8c79bc86a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25724941-9a89-4de6-a53e-7082613207bc", "sighting_of_ref": "indicator--addbc968-dc11-4c3c-86a4-3bf8c79bc86a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1299654c-8026-4c34-97b9-2c365e3de196", "sighting_of_ref": "indicator--addbc968-dc11-4c3c-86a4-3bf8c79bc86a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98fff056-647e-44c5-8d8a-8276183bc9ce", "sighting_of_ref": "indicator--683d4381-ee58-4d83-a803-f61044473d65", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d080774a-11b8-43c4-a03a-b2329af477f3", "sighting_of_ref": "indicator--683d4381-ee58-4d83-a803-f61044473d65", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7beed17-1959-4b70-9def-33d1ed15601f", "sighting_of_ref": "indicator--683d4381-ee58-4d83-a803-f61044473d65", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8206f2-5a44-41ef-8e56-48e7ef24fe45", "sighting_of_ref": "indicator--7ecb640a-dc08-450b-9479-2a5faea2d4ff", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e353ae6-7a51-4fb3-a396-bce0be069de2", "sighting_of_ref": "indicator--7ecb640a-dc08-450b-9479-2a5faea2d4ff", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a35b4a-309f-42c5-bbd3-bf6ff6863bd2", "sighting_of_ref": "indicator--7ecb640a-dc08-450b-9479-2a5faea2d4ff", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ef1f11-a5c8-46c5-841f-a0ecbfac54e8", "sighting_of_ref": "indicator--dbbe40d2-05b2-4bdb-a79d-0eaea3925e4f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5c615a-b28d-4665-968c-e2fbe2491244", "sighting_of_ref": "indicator--dbbe40d2-05b2-4bdb-a79d-0eaea3925e4f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc1b580-be25-4daa-8af5-26dd28155340", "sighting_of_ref": "indicator--dbbe40d2-05b2-4bdb-a79d-0eaea3925e4f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2123f3-aeb7-4848-b23d-e3750d9d4d75", "sighting_of_ref": "indicator--a29cee3c-ddee-493b-8643-fcc119865edd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e592c2-0904-4c39-80a8-0d741294f394", "sighting_of_ref": "indicator--a29cee3c-ddee-493b-8643-fcc119865edd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db910f51-01c3-4e1c-bf53-693f5be509c1", "sighting_of_ref": "indicator--a29cee3c-ddee-493b-8643-fcc119865edd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01aff4b5-4ad4-495d-b631-280ada03e23a", "sighting_of_ref": "indicator--de8b30e4-c550-4e78-9c55-4f6e378e6b3f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff4eea9-2bee-4c3c-9c92-08f688541d92", "sighting_of_ref": "indicator--de8b30e4-c550-4e78-9c55-4f6e378e6b3f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe177c1-0be9-4429-b453-326640254683", "sighting_of_ref": "indicator--de8b30e4-c550-4e78-9c55-4f6e378e6b3f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa15c47-fa69-4cec-91f8-2de5cada4757", "sighting_of_ref": "indicator--de7f7fee-8a07-475f-9860-c0f301580d69", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdb8d69-e65d-498d-855b-5531fd270bd8", "sighting_of_ref": "indicator--de7f7fee-8a07-475f-9860-c0f301580d69", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac05b95-0498-47d3-ab09-e20501bdba56", "sighting_of_ref": "indicator--de7f7fee-8a07-475f-9860-c0f301580d69", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93530fd-b42b-4969-9e83-891ebf13b0ee", "sighting_of_ref": "indicator--35bcc9f7-833d-427a-8e5d-9d172adb9137", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7458dd-ad2e-49ca-bafc-7eb04c92b911", "sighting_of_ref": "indicator--35bcc9f7-833d-427a-8e5d-9d172adb9137", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c3a2d6-4fb7-4230-bdbf-ea6e95ac9961", "sighting_of_ref": "indicator--35bcc9f7-833d-427a-8e5d-9d172adb9137", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1201ed-de79-4ee5-9e73-ac48e511d3de", "sighting_of_ref": "indicator--ffbbbc6c-6446-487f-847c-747d6b715951", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94107308-327f-4707-8394-3f1830848efe", "sighting_of_ref": "indicator--ffbbbc6c-6446-487f-847c-747d6b715951", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce69d1a-100b-4268-9714-e2062c8596b5", "sighting_of_ref": "indicator--ffbbbc6c-6446-487f-847c-747d6b715951", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af21593d-854b-4608-9caf-421ab24316ba", "sighting_of_ref": "indicator--3cc92905-6dba-4233-811e-f706f41b07c3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87df8060-5dd8-4a39-a127-5119f3abb730", "sighting_of_ref": "indicator--3cc92905-6dba-4233-811e-f706f41b07c3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5f230c-9d6c-4f0a-9692-e124f96b8a4b", "sighting_of_ref": "indicator--3cc92905-6dba-4233-811e-f706f41b07c3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17aa78af-7331-4051-b1a3-0713a9149ada", "sighting_of_ref": "indicator--19859cf4-3861-4c57-abf8-77b1da76f967", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddba71d3-be1f-4c09-a342-3dcf2dce805c", "sighting_of_ref": "indicator--192eb94d-ab14-405e-b8a8-3dbaaa330928", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cddfcfdb-3c95-41c5-a6b9-a28d9db17457", "sighting_of_ref": "indicator--192eb94d-ab14-405e-b8a8-3dbaaa330928", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a9b1e5-5db4-45be-94fe-c7df246f2bb0", "sighting_of_ref": "indicator--192eb94d-ab14-405e-b8a8-3dbaaa330928", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606c2ac6-8de6-4ce5-bb6a-8099b33f7cf5", "sighting_of_ref": "indicator--192eb94d-ab14-405e-b8a8-3dbaaa330928", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6485e9-d520-4892-a7a9-aa8276c80b2b", "sighting_of_ref": "indicator--32a406c6-76d6-48a3-8feb-28db74f1ffce", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92589784-899c-481b-b014-133f0d16faed", "sighting_of_ref": "indicator--32a406c6-76d6-48a3-8feb-28db74f1ffce", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33b2553-b1a9-44b7-b300-d57287619d8f", "sighting_of_ref": "indicator--32a406c6-76d6-48a3-8feb-28db74f1ffce", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f1ccde-f902-4c16-90a8-64089aa7863c", "sighting_of_ref": "indicator--32a406c6-76d6-48a3-8feb-28db74f1ffce", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b295420-39ef-4868-ac4d-d249c48e045a", "sighting_of_ref": "indicator--4f9a608f-df53-47a6-b438-e15190f31ebd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc5e53f-2cf0-48a9-bf43-96baed90d403", "sighting_of_ref": "indicator--4f9a608f-df53-47a6-b438-e15190f31ebd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14810908-2e8f-4a28-8819-cdf39e79701b", "sighting_of_ref": "indicator--4f9a608f-df53-47a6-b438-e15190f31ebd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ee7941-0cde-4b58-ad16-522297660778", "sighting_of_ref": "indicator--4f9a608f-df53-47a6-b438-e15190f31ebd", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8edc3b-e6b5-4b47-87a6-d2a4b722dfda", "sighting_of_ref": "indicator--9c174497-0f1a-4c07-b6b5-ac74cddd101d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c872e4-827a-478f-810e-42eba69938f4", "sighting_of_ref": "indicator--9c174497-0f1a-4c07-b6b5-ac74cddd101d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c631fa6-3bff-4f10-a54b-871327849c69", "sighting_of_ref": "indicator--9c174497-0f1a-4c07-b6b5-ac74cddd101d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27188ab8-f4a3-4ca4-b87e-edd9f1e4ebc7", "sighting_of_ref": "indicator--9c174497-0f1a-4c07-b6b5-ac74cddd101d", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab27e1b-40ea-41d2-8d5d-01ee5740e757", "sighting_of_ref": "indicator--f904eb28-0535-4c36-bc6d-3d60bbf18ccc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401d2fcf-fe23-46ee-bf93-6f185e8a07e6", "sighting_of_ref": "indicator--f904eb28-0535-4c36-bc6d-3d60bbf18ccc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4bfb86-e21b-46d9-b2fb-6f662e2e4a78", "sighting_of_ref": "indicator--f904eb28-0535-4c36-bc6d-3d60bbf18ccc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11a6298-5be2-4a9f-b4e5-adc33ce32a32", "sighting_of_ref": "indicator--f904eb28-0535-4c36-bc6d-3d60bbf18ccc", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1212d173-dfda-4d4f-87a1-ff811b938e89", "sighting_of_ref": "indicator--fb0a9dd5-1c70-4f76-9d8c-0732a90528d2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eeb65f4-650b-45d7-80d2-87766264567e", "sighting_of_ref": "indicator--fb0a9dd5-1c70-4f76-9d8c-0732a90528d2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ca7965-7f15-4b98-bf3d-770ac724bdd0", "sighting_of_ref": "indicator--fb0a9dd5-1c70-4f76-9d8c-0732a90528d2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84288397-eaae-415a-a93e-34c5436e6d84", "sighting_of_ref": "indicator--fb0a9dd5-1c70-4f76-9d8c-0732a90528d2", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a113406-a992-4eb0-9d00-d17d1b835ac7", "sighting_of_ref": "indicator--31b5f33e-7e9b-482c-b8ab-78fc48664206", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9038b646-0119-4d1a-9b77-c755b448a922", "sighting_of_ref": "indicator--31b5f33e-7e9b-482c-b8ab-78fc48664206", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd22b4de-6714-4393-8e76-85935d609629", "sighting_of_ref": "indicator--31b5f33e-7e9b-482c-b8ab-78fc48664206", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37374606-d552-4659-8662-bb6deabebe59", "sighting_of_ref": "indicator--0e02b332-596d-4709-9cec-c20a9a58e515", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f3e428-4a14-4e8e-bb57-e226520beb0a", "sighting_of_ref": "indicator--0e02b332-596d-4709-9cec-c20a9a58e515", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad27e671-3f5a-4805-8060-610efe3de689", "sighting_of_ref": "indicator--0e02b332-596d-4709-9cec-c20a9a58e515", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1c9964-9c54-4593-9d96-660abc506271", "sighting_of_ref": "indicator--1a938b58-cda3-48a3-bcf3-10126f7e6632", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09b731b-333d-48b8-a73f-a5c8cb131931", "sighting_of_ref": "indicator--96a93f81-6656-4d48-8d2a-dec17aa5eee0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890f716f-2673-48f2-ac4f-fb6df029bc51", "sighting_of_ref": "indicator--cf5f37e2-6024-49e8-a193-ede9b984a9b9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1327373c-e8d9-494a-bdf6-abe22be07b5a", "sighting_of_ref": "indicator--50f2f95b-9ac7-4882-b63b-87f63f2cc112", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0160fd-252f-4dbe-a3f9-8ae0ad73248a", "sighting_of_ref": "indicator--19e444dc-11f7-4a90-a11e-b8e10d0add50", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdddd5b-5eb4-4a28-8068-8864931d8887", "sighting_of_ref": "indicator--19e444dc-11f7-4a90-a11e-b8e10d0add50", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9b4165-1e94-413b-b3ba-867ea0cf59f2", "sighting_of_ref": "indicator--88e94ec0-fd40-434c-94a1-6d0b9e43664a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b161c6c9-358d-4717-8913-d5cc50505e24", "sighting_of_ref": "indicator--7bc62548-9542-4f7d-a21a-fa646c7905c3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114863af-baea-4dba-8f32-7afe21d90bb1", "sighting_of_ref": "indicator--e10203e2-5b6c-4499-b647-df01039a5d52", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fff377-3cc2-4834-9cbe-112a257d6670", "sighting_of_ref": "indicator--7a417c1e-0447-429d-befd-55f3b312b39f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f505fb56-029f-4023-ab39-5050f7865c47", "sighting_of_ref": "indicator--c064a955-a95f-4210-a90c-e29c4c6a199a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92efb71d-7287-4e9d-92d8-bc0cca2204e4", "sighting_of_ref": "indicator--c064a955-a95f-4210-a90c-e29c4c6a199a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83574a8-a983-4613-94e7-835f154ce7e1", "sighting_of_ref": "indicator--c064a955-a95f-4210-a90c-e29c4c6a199a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c084dab-c50a-4f66-9e9b-0ba4276a8ae4", "sighting_of_ref": "indicator--e7bef8df-2282-4566-b9d7-de767e466559", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f2cc81-670d-4fba-a1bd-f6b8b2744f6b", "sighting_of_ref": "indicator--e7bef8df-2282-4566-b9d7-de767e466559", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afeaa4b0-2bd4-4cd7-a28c-363e89d0893a", "sighting_of_ref": "indicator--60555601-442e-4631-b5c9-25c870709ced", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d2ae18-1b5b-4ab9-bcd6-95d5abe2397e", "sighting_of_ref": "indicator--60555601-442e-4631-b5c9-25c870709ced", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d47bf15-b299-4af8-be26-6a2646423fa2", "sighting_of_ref": "indicator--bb48e614-706c-494d-97a9-5ae51b962e96", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0211d7-2db1-47b2-b2b2-9d5f2b2c3770", "sighting_of_ref": "indicator--543624e7-bf25-42b4-a186-4b0d3a3353df", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b003cbfc-2756-41dc-8278-24e8a26bc82d", "sighting_of_ref": "indicator--543624e7-bf25-42b4-a186-4b0d3a3353df", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3b97b9-7833-4ed2-ab0e-01ac5d4fa2b3", "sighting_of_ref": "indicator--0280b77b-2c15-4354-8d21-236eeb6dc3f2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d85f1c-4667-4653-9dd6-a58fb015ad30", "sighting_of_ref": "indicator--89272661-68ad-41a6-980a-7ba961784fea", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c9dd68-d946-4255-9ba7-d59abb73d61e", "sighting_of_ref": "indicator--1f291a98-2521-44fb-91f2-18502b48417d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e206f87a-d2cf-4f74-8859-18b4dd55a0c9", "sighting_of_ref": "indicator--c385de12-466a-4fb6-aa33-991a1aff7b55", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba3f372-676f-4710-931a-92db303e21cb", "sighting_of_ref": "indicator--22aa3ebc-a69f-44e7-bcc0-ca2cbe5c7766", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9215f058-24e7-4b7b-9acf-700a5a149f09", "sighting_of_ref": "indicator--22aa3ebc-a69f-44e7-bcc0-ca2cbe5c7766", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7650de5-df8e-4057-919a-5033df6f360f", "sighting_of_ref": "indicator--b9e4734b-4c5a-43cb-bdc5-4ca5d37e84ab", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6069bb7f-ce8b-4519-b78f-eaea45830cbe", "sighting_of_ref": "indicator--f6a24ac7-3e78-47b4-8563-2322110ca32a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d218db-6e81-44ea-94ad-5d363f3b0ad2", "sighting_of_ref": "indicator--f6a24ac7-3e78-47b4-8563-2322110ca32a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8b3ee4-e455-4ffc-8de9-f40b2333acc0", "sighting_of_ref": "indicator--f6a24ac7-3e78-47b4-8563-2322110ca32a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5679030a-5b3d-4d40-af4b-329841c29178", "sighting_of_ref": "indicator--6de477c4-2812-43a1-9cd5-1bee41b94ab5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99073b84-e342-40de-a509-8ec8eb08d13e", "sighting_of_ref": "indicator--3a356aa5-d025-4e6d-b6c7-3b1180c2b124", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c879503-f04b-4357-a098-9ee777475db4", "sighting_of_ref": "indicator--acb7ed2e-05c5-4e22-bbe5-5f105e220d53", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f7fdcb-a7c3-42e2-ab6b-3c6b09375314", "sighting_of_ref": "indicator--3f2fbe04-03a0-4e88-8fc4-af2213ae7fe5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad7a615-69fa-4f69-ab76-f64d39281ef3", "sighting_of_ref": "indicator--1f852d41-6927-4fa3-a1af-95d4ac9a35a6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05702b0b-720f-4375-9b9e-0fc63d543661", "sighting_of_ref": "indicator--c2850215-8d98-4892-ab20-9ed8f4edc4fc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412e7d87-e3f6-4ab3-968d-5f9863de6f0d", "sighting_of_ref": "indicator--1783d082-6cae-4d06-9f79-538f7363571e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef0fcd6-322e-45ef-bbf6-9d8b1c94e2b7", "sighting_of_ref": "indicator--87f4b0ce-eb1d-4497-9d69-0488a8336c45", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad7d8ec-e1dc-4097-a94f-31e32647d48e", "sighting_of_ref": "indicator--c4032d8a-1ea1-48ce-a45d-3f453d9b8c41", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94f6eb0-2acb-42ec-8280-0d6fdbc1f1b4", "sighting_of_ref": "indicator--df669f2e-b166-4faf-97e7-4f909e063161", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4cb070a-2500-48be-925e-d47e7f328820", "sighting_of_ref": "indicator--9887cd07-a391-4fa4-b019-f6442dfb15a8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ce0765-c733-415b-8981-7375498bb293", "sighting_of_ref": "indicator--e0706267-9373-4a1c-a201-3679016bdfbd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed63705a-8b3f-4078-ac1f-b28837767ee8", "sighting_of_ref": "indicator--a769e030-4a2d-4bba-8c84-0d111d2d46bb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af29e75-2d54-4dcd-a7b1-412e84a04552", "sighting_of_ref": "indicator--cc47ae62-0ef0-44b5-8248-c5575c761dfa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af5d4a46-3ee7-44e0-8209-ab1e9866b9eb", "sighting_of_ref": "indicator--65bde4f0-8f2c-42d4-bd08-6d34d42d8d65", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c27bd80-08c1-493e-8a2e-91f3344e79e3", "sighting_of_ref": "indicator--e4e8e3a8-6edb-4435-9641-b5da89372426", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a842a739-52a0-47cf-aa59-a6c2ccb0a875", "sighting_of_ref": "indicator--b253e6f6-ee75-46bb-8444-a154464790a5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665e00f4-fa1b-4099-a59a-5b24bfdb85dd", "sighting_of_ref": "indicator--a2513519-eb22-40db-92c6-d7096b917dd1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d449c79f-d2a9-445f-8427-8941e04930da", "sighting_of_ref": "indicator--19d35f44-4bf6-4cee-b3d0-eda5e70b2912", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e707fad1-b942-43a8-bf62-5ac204cb8f90", "sighting_of_ref": "indicator--91467332-c884-487f-a505-b3d0c056e7d9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48ec7e4-c88c-44dc-8acb-6dbb11680224", "sighting_of_ref": "indicator--91467332-c884-487f-a505-b3d0c056e7d9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b82c09-da30-48f2-ac07-d4427b11c7dc", "sighting_of_ref": "indicator--c654c6cc-3258-462e-acc5-097a01815e98", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700c1da5-ebe1-434d-a92e-098cd87d0366", "sighting_of_ref": "indicator--7af175c8-2f60-447c-a60d-20aef37bffc6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e630af53-ff12-4793-ae37-3557d131a4b5", "sighting_of_ref": "indicator--7af175c8-2f60-447c-a60d-20aef37bffc6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75d2936-0b38-4d2f-8705-747ca970d6a6", "sighting_of_ref": "indicator--7448f384-498c-4a1d-8e40-5c84325bdc5a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e825bf-75f9-4d42-aad0-32f0bbe79f0a", "sighting_of_ref": "indicator--72d852b1-8e92-4382-a6e0-b5b7a639eaeb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dafd8b24-d2ab-494f-86c7-b15535301414", "sighting_of_ref": "indicator--f84d95ae-ac62-4496-9cbd-8fe865f2a09e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edeb596c-8d98-4937-a32b-0f344d7e1561", "sighting_of_ref": "indicator--bf5058d4-7661-460d-b613-9d673426807b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbba2309-6575-4844-a3cb-b904a607b372", "sighting_of_ref": "indicator--72fd6827-848f-4c03-b051-425f5d0ee675", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565a962c-5d51-43bd-98f0-7b440f72b523", "sighting_of_ref": "indicator--c3103b8d-99b8-4e37-82a6-53c2e1a8a75a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ff0dd4-f330-4b16-94cf-5c31674427d6", "sighting_of_ref": "indicator--9ce9dc2d-c60e-4289-8441-f8e431ee5daf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47aecc6-3450-47d1-af74-149ea24d9f62", "sighting_of_ref": "indicator--b50cc9c3-17d8-47f5-bb8d-353566e0be14", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d129713e-f971-4d23-b22f-03fd8e1656da", "sighting_of_ref": "indicator--bff7c5c6-04dd-4b81-aa40-7916b0a9c60c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a09af3a-2f90-4d31-aab5-daf187815186", "sighting_of_ref": "indicator--d87629fc-3836-42e8-a8ff-6ed5fba8b111", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf77ed51-3578-4bb1-93d2-24579e8ca9b8", "sighting_of_ref": "indicator--382cf588-da79-4f14-b13b-df253f479270", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e36b9a-0bb8-4b8a-97db-3ac46ed4779b", "sighting_of_ref": "indicator--764bdc83-8fd8-415c-ad68-749ea4fbbbc9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1bf1f8-7f01-4bff-9913-2600072c89ec", "sighting_of_ref": "indicator--f8c12c23-bb0e-4e55-b393-c2285b5c2754", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83c03f5-0fba-4a4c-b595-bf20e72acbdb", "sighting_of_ref": "indicator--e0ab4476-6645-48ab-9b1f-d1af7faab538", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b063f736-f5f3-4107-8011-1db98e06a1d7", "sighting_of_ref": "indicator--e0ab4476-6645-48ab-9b1f-d1af7faab538", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729c778e-27e4-45c9-bc96-628f38602cb9", "sighting_of_ref": "indicator--ed17e8e6-dc4c-4c29-8461-6ef1a417d177", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1cdf694-303d-4631-960a-e8752e78c3ea", "sighting_of_ref": "indicator--d8941242-2bf0-4bb7-a387-10b2da9a3b88", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d05c9f-9c6e-4828-8b97-34ff147acad1", "sighting_of_ref": "indicator--d8941242-2bf0-4bb7-a387-10b2da9a3b88", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d190d25f-5ce8-4ad9-8bcd-7aa0896c2a25", "sighting_of_ref": "indicator--75026729-fcb1-4a80-a1e5-7c354efdc662", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c2b8a9-220b-40e1-80b8-376bd30a4559", "sighting_of_ref": "indicator--75026729-fcb1-4a80-a1e5-7c354efdc662", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4202eb6e-aa94-447e-8a3e-8eb294b4b4de", "sighting_of_ref": "indicator--75026729-fcb1-4a80-a1e5-7c354efdc662", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e8bf72-96a2-4efd-89da-d40927049610", "sighting_of_ref": "indicator--dbf45718-260b-4431-a9fb-88ebfcf67792", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0067f2b-cbe9-4d5a-a058-b79846bd85f7", "sighting_of_ref": "indicator--9af330c5-7a8e-4bd3-8d85-665beacf2ec2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc81874-bcba-4cf9-8fbc-4a7bc809c133", "sighting_of_ref": "indicator--9c6f89bc-c908-40f1-96b0-cb27abaed408", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fdccf7-da2a-4191-ad0a-7d9b1acb4060", "sighting_of_ref": "indicator--9c6f89bc-c908-40f1-96b0-cb27abaed408", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470b2ae3-e61a-48bd-a927-59cfd4edfba7", "sighting_of_ref": "indicator--c12452b6-e6f8-40fc-84c1-8ec73d845725", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f211f456-adde-49a8-b284-bcc32aa9c0bc", "sighting_of_ref": "indicator--59907a89-912e-45f8-8b47-b0facf9b3407", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5083df-653f-4e16-9061-e31dab2f9deb", "sighting_of_ref": "indicator--c2a80311-e464-4972-9274-339220b5392b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597f176a-af68-4f25-9fcf-c53c01ad028f", "sighting_of_ref": "indicator--c2a80311-e464-4972-9274-339220b5392b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2fec2ea-637a-4396-b8a3-5c83b8d3368c", "sighting_of_ref": "indicator--7ccc07b1-463e-4099-b674-9fcafe6630a2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23aa3fd-9109-4fff-8195-7de8c885857f", "sighting_of_ref": "indicator--593ef7a7-143f-4ed7-9bbb-31e336f173d0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e7c9a4-66f5-402f-81e1-bf53b3d48bf5", "sighting_of_ref": "indicator--2a8aae7c-d828-468a-be9a-71b804941914", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b7675e-d0e4-4523-8263-9582cd91d00a", "sighting_of_ref": "indicator--85029cb6-b59e-4172-b710-13eceb4d5e07", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b36fbfe-bc40-4cc8-97c5-0e4135c380e0", "sighting_of_ref": "indicator--e76946d6-e174-4f8b-a5de-c5268a8ebfd7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2f82bd-e7c6-4a34-825a-957cadacb841", "sighting_of_ref": "indicator--d95d410d-721b-4c6d-88c9-a39475eae168", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b823f5-b133-47f6-a818-4ce3a40e0437", "sighting_of_ref": "indicator--356477cf-0b9e-4f21-b2d4-154e9f1f8405", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d054d892-26e4-41c0-b5bc-88e0b9d8a0f2", "sighting_of_ref": "indicator--356477cf-0b9e-4f21-b2d4-154e9f1f8405", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e044a7-cd0d-48a4-b0c0-5fb15efb4112", "sighting_of_ref": "indicator--356477cf-0b9e-4f21-b2d4-154e9f1f8405", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6a2c08-1a8a-4167-9b61-0f129d744c22", "sighting_of_ref": "indicator--8af53309-a3fd-45f2-b6dd-10af00ea5616", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759eb2cd-475c-4f85-a2cd-c876a36cef99", "sighting_of_ref": "indicator--8af53309-a3fd-45f2-b6dd-10af00ea5616", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462a1200-d49d-45c4-b0d2-a02525cb85c2", "sighting_of_ref": "indicator--8af53309-a3fd-45f2-b6dd-10af00ea5616", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d555c7-a733-47ae-b1dc-0f9659cfa24c", "sighting_of_ref": "indicator--87cb50f8-1c23-4304-acb5-a08c80bdc0ba", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9133ebe-8654-48f3-bc1c-6b72160f778d", "sighting_of_ref": "indicator--87cb50f8-1c23-4304-acb5-a08c80bdc0ba", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d39c9d-ed94-49e2-b76a-2924099377ad", "sighting_of_ref": "indicator--87cb50f8-1c23-4304-acb5-a08c80bdc0ba", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73e66c3-5c95-45ad-a1a8-d7aa5c09a4be", "sighting_of_ref": "indicator--94610b96-999d-4edb-8b13-72f349e42051", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec680fcf-f072-4baf-9503-726837eccff8", "sighting_of_ref": "indicator--94610b96-999d-4edb-8b13-72f349e42051", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0ad379-62e2-436e-8fe2-404fde51206a", "sighting_of_ref": "indicator--de717e05-feee-478f-b3fb-a8022cae11cb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca53bca3-b767-4229-b399-b06a8f0b48be", "sighting_of_ref": "indicator--de717e05-feee-478f-b3fb-a8022cae11cb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e39b47-8d98-4522-86f0-3b8afda8920a", "sighting_of_ref": "indicator--06b26d21-ad61-46c2-a531-580bc31ed8e2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360da316-c3ef-419a-a76b-a0ce3f9b992d", "sighting_of_ref": "indicator--90825ee2-beb4-47be-ba35-c72d6d97d732", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97255ca6-f32f-4603-b6c5-e39bc2a2eed6", "sighting_of_ref": "indicator--f98c7af6-b28c-4378-afdc-a5f5e2a36b4f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0bb69c-f5d3-4ae6-9016-970cf05c3987", "sighting_of_ref": "indicator--5bdc90bf-de42-4b0e-9202-3d20c7926b95", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebef0b1a-1544-4609-b438-bcbbf60a7bd1", "sighting_of_ref": "indicator--5bdc90bf-de42-4b0e-9202-3d20c7926b95", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4929d92a-ae78-4277-a922-5b8376a91740", "sighting_of_ref": "indicator--5bdc90bf-de42-4b0e-9202-3d20c7926b95", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc535d26-9caa-4c4a-9659-21ec82ef33b6", "sighting_of_ref": "indicator--6097c672-186c-4e2f-a0e6-e81cdb49e210", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--183fc955-10e5-4a1b-8f31-0cb9724a1909", "sighting_of_ref": "indicator--6097c672-186c-4e2f-a0e6-e81cdb49e210", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ced256-e7ed-49ed-9828-42b63bf0c376", "sighting_of_ref": "indicator--6097c672-186c-4e2f-a0e6-e81cdb49e210", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d420dfd-cf06-43e0-b953-8cbce66fddea", "sighting_of_ref": "indicator--e88e224b-0b59-4f28-a8c4-98c403b0b000", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08536b0b-5b41-42cb-b922-607241a9bce7", "sighting_of_ref": "indicator--e88e224b-0b59-4f28-a8c4-98c403b0b000", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c966ff3-18b1-4652-96e7-25ce79c8c1f8", "sighting_of_ref": "indicator--e88e224b-0b59-4f28-a8c4-98c403b0b000", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511028eb-c064-49d5-8566-9bbd3c6deb5c", "sighting_of_ref": "indicator--ba8f0adc-5717-4e2d-9e62-df7d8143c289", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba375757-19b0-4426-b510-0ae12f435900", "sighting_of_ref": "indicator--a4b87e9b-aa1b-432a-8531-e1dc863e43ec", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef12038-f773-4b41-aeca-e491c5180caa", "sighting_of_ref": "indicator--c18b24fa-0086-4242-8078-5de77dd881a5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958acbcd-e6d2-42ec-ad1c-03c804df7c73", "sighting_of_ref": "indicator--62ceb34b-de13-4921-ae35-93dd21f0bfa8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010cfff8-3f00-4374-8f75-b2428808911b", "sighting_of_ref": "indicator--62ceb34b-de13-4921-ae35-93dd21f0bfa8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bdc1fb1-da2d-41c0-bb06-dcf0d53e247a", "sighting_of_ref": "indicator--62ceb34b-de13-4921-ae35-93dd21f0bfa8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8c8a6b-321e-41cc-8e4f-a123acfa48e0", "sighting_of_ref": "indicator--ed6621af-f48e-43f0-bf47-4d82b7dafa4c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bfebf8d-664d-478f-abbb-35514f5f3537", "sighting_of_ref": "indicator--ed6621af-f48e-43f0-bf47-4d82b7dafa4c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca685e5-baa3-4582-97e3-a0f80e48469c", "sighting_of_ref": "indicator--ed6621af-f48e-43f0-bf47-4d82b7dafa4c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c68e07-8b1a-435d-80b6-ce018d1a97d2", "sighting_of_ref": "indicator--e22232de-dadd-427a-8cc9-3ce7dffd6031", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b99f10-aed2-470a-89c4-01d1bead36be", "sighting_of_ref": "indicator--e22232de-dadd-427a-8cc9-3ce7dffd6031", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f358de96-0721-445f-b9cd-965f66074231", "sighting_of_ref": "indicator--e22232de-dadd-427a-8cc9-3ce7dffd6031", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01032d2e-19fc-4cbc-b66f-b9030b0f391e", "sighting_of_ref": "indicator--8c690070-6a01-4a61-b049-08a06d313f24", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9cfe01f-2468-486a-9665-e6cfce9ded2e", "sighting_of_ref": "indicator--8b8550dd-3d07-4377-baf0-0ac2942c839a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f351219-69c3-4d4b-a95e-e7a7b9d826ad", "sighting_of_ref": "indicator--a71b2116-f16c-4d27-a924-f1bcf9630d58", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a35e74-312f-4063-b02d-929830f61ae4", "sighting_of_ref": "indicator--7f02c230-bd7c-4f33-8f2e-da8e47d42916", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6200a71c-f17b-40aa-b067-d7493bc786fe", "sighting_of_ref": "indicator--a2b67fbb-6ce3-4bcf-a3ef-c5ac43ee7ebe", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43165f36-73d7-4147-aeb6-9f007d9229b2", "sighting_of_ref": "indicator--a2b67fbb-6ce3-4bcf-a3ef-c5ac43ee7ebe", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbd927f-7cdc-4001-9bb9-4d999cabe618", "sighting_of_ref": "indicator--a2b67fbb-6ce3-4bcf-a3ef-c5ac43ee7ebe", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79376a21-eab9-426b-a5b6-29221ff18ec4", "sighting_of_ref": "indicator--a2b67fbb-6ce3-4bcf-a3ef-c5ac43ee7ebe", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72207cd4-d90b-4907-93e0-5f60a89baa1d", "sighting_of_ref": "indicator--2690f9f7-45a0-4daa-b0ef-1d8bf6c23929", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d26c6c-9c08-466d-8d77-c7b9cfd34c1d", "sighting_of_ref": "indicator--93fd974b-c723-465d-ae2d-64246a35c106", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e060b70-a02a-4f88-9cd2-e6544d0c29c2", "sighting_of_ref": "indicator--93fd974b-c723-465d-ae2d-64246a35c106", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2244d4ae-704d-4dac-90cb-026c9b11a566", "sighting_of_ref": "indicator--93fd974b-c723-465d-ae2d-64246a35c106", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5ecec1-f604-4638-80a7-e2a97ee2e006", "sighting_of_ref": "indicator--55e7a00e-3b82-4610-bbc0-760ec3945dc1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4722e01-f3b3-4e34-8ede-5c841286f786", "sighting_of_ref": "indicator--c68c68db-61c7-43ef-889b-69de0d3b77a3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65812f9f-9d8d-431a-a2e7-81ddb30f1cf1", "sighting_of_ref": "indicator--c68c68db-61c7-43ef-889b-69de0d3b77a3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--facd7c54-b2e5-45db-aa52-4f4508dce1e5", "sighting_of_ref": "indicator--c68babdf-75c3-411f-b3b9-a891567b8f18", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543afcb0-54a3-41fd-b315-1eea03dcdce0", "sighting_of_ref": "indicator--c68babdf-75c3-411f-b3b9-a891567b8f18", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059dabda-c0e2-42d1-a9ec-a35c481171c9", "sighting_of_ref": "indicator--c68babdf-75c3-411f-b3b9-a891567b8f18", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9fea95-a02f-4ef9-83f7-bb93cb38d218", "sighting_of_ref": "indicator--fcaaf5dd-56f7-433c-80b8-9bec763d6271", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d707f4d4-edd2-4ba7-ae97-e18755091305", "sighting_of_ref": "indicator--fcaaf5dd-56f7-433c-80b8-9bec763d6271", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d2b044-17ee-4654-9eab-3cbf140dce89", "sighting_of_ref": "indicator--fcaaf5dd-56f7-433c-80b8-9bec763d6271", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560c9f2f-53b5-4b79-8231-f75b1cf1074b", "sighting_of_ref": "indicator--fd00cc54-3f8e-4f40-adf0-1a87d7cc1f82", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6345761e-e8f8-4782-8a1f-defbe0fa98e7", "sighting_of_ref": "indicator--fd00cc54-3f8e-4f40-adf0-1a87d7cc1f82", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bcc9e4-3fd9-4dfb-b20f-d621dcf4b68c", "sighting_of_ref": "indicator--fd00cc54-3f8e-4f40-adf0-1a87d7cc1f82", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f32ee3e-ebcb-4df4-902e-09985860cf67", "sighting_of_ref": "indicator--2d92aef5-c3c4-4783-8c19-c584efe4da87", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f478fd05-8502-4d9c-83cf-b678b1aa9063", "sighting_of_ref": "indicator--34eda9b6-62de-475a-8b69-f3b7a2c6248c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5134ed66-6d59-4f3f-8b99-bed4f18a2c6c", "sighting_of_ref": "indicator--8d9ca47e-ec7e-4922-b60a-85ee6136f7c8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--084e0426-22bf-43f7-a1ef-b70233ba9673", "sighting_of_ref": "indicator--1c1cb618-ec06-44e5-963e-f63b3439b892", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ee365a-8712-41e5-ae17-e21be810cb56", "sighting_of_ref": "indicator--1c1cb618-ec06-44e5-963e-f63b3439b892", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58f86e9-6efa-49d2-b8be-941bccb41074", "sighting_of_ref": "indicator--66086747-0397-48dd-adfe-64d750c14ec1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39643516-3aa3-4f56-af5d-0ed52800626b", "sighting_of_ref": "indicator--de7e547f-3478-4e08-8161-e434dc08e572", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e2e632-8f99-480a-9f67-63a5f172b2df", "sighting_of_ref": "indicator--082d1d14-7767-48fe-a542-649f0945728b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c178e94a-ab17-4699-86e8-e91055da99ad", "sighting_of_ref": "indicator--fef16167-8077-452d-948e-e79580a66c39", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d775b1c6-1ce6-4ff2-b045-e2779e343b62", "sighting_of_ref": "indicator--d82d98f6-a2e0-4a71-a4ae-39bd47155078", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dace1447-69e6-46cf-8dce-7ca0d6912aad", "sighting_of_ref": "indicator--d82d98f6-a2e0-4a71-a4ae-39bd47155078", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f49ff1d-29b5-451e-a882-f005be6f51f4", "sighting_of_ref": "indicator--d82d98f6-a2e0-4a71-a4ae-39bd47155078", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6177fabd-2d84-4177-947e-ed1b896cc8bd", "sighting_of_ref": "indicator--5405b903-7257-4707-80f1-e4e1144df850", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc924ca-fa25-4df0-83c6-b9d30b6a11f0", "sighting_of_ref": "indicator--5405b903-7257-4707-80f1-e4e1144df850", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8628f365-cfa8-4dc7-be39-8c136e2f89e1", "sighting_of_ref": "indicator--5405b903-7257-4707-80f1-e4e1144df850", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1b1f9e-244b-4600-9112-0ea889e0ffa9", "sighting_of_ref": "indicator--0f75a97d-deb8-4771-94cc-f43ea78c5d08", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2b7343-0266-44ab-ae28-72fce890edf9", "sighting_of_ref": "indicator--0f75a97d-deb8-4771-94cc-f43ea78c5d08", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634cb2ff-3a90-4745-b4f1-66ef46ed80f6", "sighting_of_ref": "indicator--0f75a97d-deb8-4771-94cc-f43ea78c5d08", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a02f19-de0b-4dfe-aa87-c8052b47207f", "sighting_of_ref": "indicator--2fef512c-2e24-4bb2-9388-639111eb4bf0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8c7c80-d348-43f5-92c7-848ad779d032", "sighting_of_ref": "indicator--2fef512c-2e24-4bb2-9388-639111eb4bf0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30449a5d-20e8-4da5-b0ec-2fdc072bbbab", "sighting_of_ref": "indicator--2fef512c-2e24-4bb2-9388-639111eb4bf0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4032fb84-fe70-4911-b0a2-29c03496aa49", "sighting_of_ref": "indicator--26211130-66c0-4b3a-8ca4-9430cae5dbca", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f316ce83-1ac4-449f-bc7b-d2c6dc7d1123", "sighting_of_ref": "indicator--37af6146-0d3f-4a3d-bd68-e15937004ce2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b635df0-3d19-4542-8421-f73775b53817", "sighting_of_ref": "indicator--3dc3db4d-c238-4093-9146-df40876bb8ce", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beaa4536-43f3-4911-97f4-88c8484c57a6", "sighting_of_ref": "indicator--146d5869-5669-4e9c-9418-6eb8c4405917", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04421a77-6141-4bd8-acbb-fd3a2799a428", "sighting_of_ref": "indicator--146d5869-5669-4e9c-9418-6eb8c4405917", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d7f314-caf7-40a8-9f41-2eb4a84aed92", "sighting_of_ref": "indicator--146d5869-5669-4e9c-9418-6eb8c4405917", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7175a7f-ae51-4573-a600-faea8f9ebba7", "sighting_of_ref": "indicator--e1372cad-6c66-446f-b207-19f763077991", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce11241d-7b78-4da3-b6df-4b73c08f2a76", "sighting_of_ref": "indicator--e1372cad-6c66-446f-b207-19f763077991", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce21914-f7a3-4795-807f-05a1040dccfe", "sighting_of_ref": "indicator--b73a8b55-fcf7-46bd-9374-dfeb0e41ca96", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0025f245-0a41-4675-a086-9a5c9763ca62", "sighting_of_ref": "indicator--90ce9c72-6139-4d26-89e3-056cf9af78c9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb52280b-2fd5-4f27-a1c8-720afe5748a4", "sighting_of_ref": "indicator--90ce9c72-6139-4d26-89e3-056cf9af78c9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358ee31b-17ee-4297-bbb5-d171312101c4", "sighting_of_ref": "indicator--90ce9c72-6139-4d26-89e3-056cf9af78c9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68c7edf-6630-4b38-921e-88c6989fe600", "sighting_of_ref": "indicator--20f8ceae-544b-4be2-873b-97f4e59b2a7c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16c1e66-dac3-4a12-b91d-e3ae708995c6", "sighting_of_ref": "indicator--20f8ceae-544b-4be2-873b-97f4e59b2a7c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12d63c7-e2f3-408a-9633-e05f3d323697", "sighting_of_ref": "indicator--37286cb9-5fbc-44f5-af8f-bd92af005cfd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4f7ece-5460-4dc2-a94e-959eea86456d", "sighting_of_ref": "indicator--a85a4096-a5b6-4378-986b-a6e1effc55f7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83399249-d7dc-43a3-877e-7282fcd115ec", "sighting_of_ref": "indicator--a85a4096-a5b6-4378-986b-a6e1effc55f7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c13998-2ae5-44b6-bc62-167d128116cd", "sighting_of_ref": "indicator--a85a4096-a5b6-4378-986b-a6e1effc55f7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12658ea9-f825-4a58-b0f4-6804b6557f46", "sighting_of_ref": "indicator--cfebbce6-c6ff-4be5-97e1-68dd7a94ee00", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9521e6b-1856-4a91-a019-1ddc0a090bd2", "sighting_of_ref": "indicator--cfebbce6-c6ff-4be5-97e1-68dd7a94ee00", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781a6d98-6f6f-4d0f-b863-98f7a5dca44d", "sighting_of_ref": "indicator--ddea4d50-5d87-4c6d-bc8b-399259cc1b56", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c00ed5e-8177-4741-a381-72865acbcab7", "sighting_of_ref": "indicator--ddea4d50-5d87-4c6d-bc8b-399259cc1b56", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74098c02-37a8-4f4b-a7df-c3402cc409d0", "sighting_of_ref": "indicator--ddea4d50-5d87-4c6d-bc8b-399259cc1b56", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c5bd0e-3856-4c15-80d1-97c726d19afe", "sighting_of_ref": "indicator--d49a6bbd-0a77-4e3d-a3c6-6b7a0ccdcc76", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78eef445-13f4-4095-9c45-36f7cc331bea", "sighting_of_ref": "indicator--deadcc4c-46c0-4ba4-a13e-da7ecf4dff49", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49375f0d-b13f-4faa-8cf5-c920fb78fe6d", "sighting_of_ref": "indicator--deadcc4c-46c0-4ba4-a13e-da7ecf4dff49", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9fe2f75-3a8f-407c-a707-5d137d3847cd", "sighting_of_ref": "indicator--deadcc4c-46c0-4ba4-a13e-da7ecf4dff49", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c01635-91dd-4da0-a2ee-3ca3f42e5a31", "sighting_of_ref": "indicator--ad5bd86c-2543-42d9-bcca-4bffeb6dd08d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d60923-024d-4455-bbc6-b79e2fe7ebcd", "sighting_of_ref": "indicator--b2438676-2e0c-42d1-b367-95a7a7712e95", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b41551-02df-472f-85f3-c2afeea71b75", "sighting_of_ref": "indicator--f19b1a45-9803-4e16-8b8a-2b6d497fd6af", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7054d0-6678-4163-b0e3-518d9ee34185", "sighting_of_ref": "indicator--f19b1a45-9803-4e16-8b8a-2b6d497fd6af", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc8e4bd-7e1f-4729-b217-7a203be68246", "sighting_of_ref": "indicator--f19b1a45-9803-4e16-8b8a-2b6d497fd6af", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f966b8c-e361-4781-ac4f-969e975e6200", "sighting_of_ref": "indicator--2b67af66-0267-4664-a564-310c40d3d28d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be41dce-e654-4f3b-9ba1-218e33c8859d", "sighting_of_ref": "indicator--2b67af66-0267-4664-a564-310c40d3d28d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4736ae22-2a1a-4e1a-93cf-97046ffd1831", "sighting_of_ref": "indicator--2b67af66-0267-4664-a564-310c40d3d28d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390b72b5-e264-4dfc-8952-a62f6b019e20", "sighting_of_ref": "indicator--9d396ad9-d27b-4132-b09f-f68c7836aac4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32c4a97-c523-4901-b4e4-11a99f10ac11", "sighting_of_ref": "indicator--9d396ad9-d27b-4132-b09f-f68c7836aac4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375448b6-b863-4c71-996f-9ff330c251bb", "sighting_of_ref": "indicator--9d396ad9-d27b-4132-b09f-f68c7836aac4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d7f1fc-dab8-48f3-84c4-80ed05894685", "sighting_of_ref": "indicator--0de8b9c2-8beb-45fe-aa73-1baedc857265", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca15c58f-619b-4e0b-a875-1cd1a0465fe9", "sighting_of_ref": "indicator--25afe080-fd3b-40f4-a9a6-a929fe7eaafd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b426c3b1-db80-4510-a924-cbb4573f112b", "sighting_of_ref": "indicator--69ed2577-71ff-4c90-b950-e8a08478aa5c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97fa01d0-7fa7-4b30-80d0-682b9a53f479", "sighting_of_ref": "indicator--69ed2577-71ff-4c90-b950-e8a08478aa5c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b062df9-453c-456e-b8a0-ed65b2abdfc2", "sighting_of_ref": "indicator--69ed2577-71ff-4c90-b950-e8a08478aa5c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9907307-f791-4f09-b9d3-a0f5807eee45", "sighting_of_ref": "indicator--18690bb1-0bf5-4b23-8e41-4fdb3b85e8fb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63ace4f-70cb-4d7e-80ab-66cd0d567e71", "sighting_of_ref": "indicator--18690bb1-0bf5-4b23-8e41-4fdb3b85e8fb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ac928f-a856-482d-a5a4-5d08dc5ad1bf", "sighting_of_ref": "indicator--18690bb1-0bf5-4b23-8e41-4fdb3b85e8fb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605ac0af-5b99-44bb-87f1-4d512261a209", "sighting_of_ref": "indicator--592630f3-3dd9-48de-9bd1-6a569ce9d6b6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34f1784-b2e2-45fc-a7c2-6b0bef5a1d00", "sighting_of_ref": "indicator--c2442172-588b-40ff-ae2f-c9df27ff9555", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13a40d0-a113-4efc-939b-f635e8cd75bc", "sighting_of_ref": "indicator--d1c03942-c1cf-494f-bb28-12ca7a88ba8c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8156f5ef-f9a7-4bf9-8966-a72e1bd61fdc", "sighting_of_ref": "indicator--d2aa91b9-12ca-4c22-afc5-895c3a9a8304", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9368f664-2429-4df3-8380-b56377c75921", "sighting_of_ref": "indicator--0ac4bb4d-f6f2-4091-8043-964239875e46", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ab8b22-b8b0-41e7-a5de-fe7a5e307b37", "sighting_of_ref": "indicator--0ac4bb4d-f6f2-4091-8043-964239875e46", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720b0292-c70f-47db-847d-2f093f108f37", "sighting_of_ref": "indicator--0ac4bb4d-f6f2-4091-8043-964239875e46", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698e43a5-2d62-49c1-a49a-c5d0ed706e9c", "sighting_of_ref": "indicator--4eded2d6-1f0e-43b3-9b85-f67cc1122f4a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cae1551-f513-4ccc-8a18-34f3be35c11f", "sighting_of_ref": "indicator--50bbc922-6c8b-4ad5-b386-bedae2c6125c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b86d8e-345c-4eda-a008-6e2d73785e9a", "sighting_of_ref": "indicator--52d62d19-610f-49be-91e2-94beda056ab9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382aed13-6ab3-42fd-861b-058954ebda21", "sighting_of_ref": "indicator--7fa90ee1-e766-4457-b191-17dbe60a3f9d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182546eb-393f-4088-a9ce-1318ac29ee16", "sighting_of_ref": "indicator--7fa90ee1-e766-4457-b191-17dbe60a3f9d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d918c113-a3da-46d0-a4f0-f824a454f490", "sighting_of_ref": "indicator--7fa90ee1-e766-4457-b191-17dbe60a3f9d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a6aef3-a74c-4f18-b351-2ceccab00765", "sighting_of_ref": "indicator--97d9ecfb-8b95-4055-95d0-1d12f3f969e8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3a5989-eedd-4d12-8c1b-f571691830ac", "sighting_of_ref": "indicator--97d9ecfb-8b95-4055-95d0-1d12f3f969e8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bcdb215-0d81-40ab-9eb8-32785feedde5", "sighting_of_ref": "indicator--97d9ecfb-8b95-4055-95d0-1d12f3f969e8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08c9785-1c5b-45eb-9222-9e73972beb9c", "sighting_of_ref": "indicator--5dc25105-0740-4ba8-80af-3534b50cf887", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9feb3bf1-5b45-44b7-b6a0-d6f6766cf6b3", "sighting_of_ref": "indicator--5dc25105-0740-4ba8-80af-3534b50cf887", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5a6572-520d-4252-bf17-ccd0014d2875", "sighting_of_ref": "indicator--5dc25105-0740-4ba8-80af-3534b50cf887", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a164e55-bfc0-4b9f-a538-a73a73b97312", "sighting_of_ref": "indicator--a9e3d419-3f89-4f71-9b4b-d0a0e35d8e70", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f6be4f-074f-4eaf-84df-936cd62561d0", "sighting_of_ref": "indicator--a9e3d419-3f89-4f71-9b4b-d0a0e35d8e70", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872b53ea-c152-49f3-acaa-628bc48440b4", "sighting_of_ref": "indicator--a9e3d419-3f89-4f71-9b4b-d0a0e35d8e70", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2ab53c-6d14-4103-bd1b-4fce5553f1f8", "sighting_of_ref": "indicator--cae52474-883b-4971-8ce7-f1906309458a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa64c4ea-0080-48ff-a22e-c7c97f8a3177", "sighting_of_ref": "indicator--cae52474-883b-4971-8ce7-f1906309458a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74ecc1f-0954-4f09-8276-75adc4bcf60f", "sighting_of_ref": "indicator--cae52474-883b-4971-8ce7-f1906309458a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb8bf31-e9b8-45e9-9db3-983c5d7506c8", "sighting_of_ref": "indicator--d39ace7d-e13f-4a00-8b03-3455895e56d9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f48bca5-4660-444b-a89e-b158553bfb38", "sighting_of_ref": "indicator--9419b217-9979-4bbf-9c7e-f58918ef6cf5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1019b447-bc8c-4fc9-a681-b31dd06c4db3", "sighting_of_ref": "indicator--f47c99b0-035c-4812-8379-ff22d8d0e886", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05809054-68f0-4c77-a9fc-3073582f837d", "sighting_of_ref": "indicator--0cec2760-0fb1-4d6f-ae4a-5cafdfc4176b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba911d4d-9ebc-41a5-829c-eb53bc537366", "sighting_of_ref": "indicator--c07f78bd-006a-420b-9e49-5ad2e378a4c8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d09fff-8c13-433a-b297-33fee74168d6", "sighting_of_ref": "indicator--80d9f431-8f75-4114-a08f-355c35b2b166", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0caee3cd-4d4c-414b-ab49-399f05d7e7b6", "sighting_of_ref": "indicator--80d9f431-8f75-4114-a08f-355c35b2b166", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d800a05e-3b01-490c-beec-e878690312bb", "sighting_of_ref": "indicator--5652df3d-77ca-4078-b4c8-b140f05bbaa7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0b3ba7-2b1b-4f41-9014-402bc9ada9f4", "sighting_of_ref": "indicator--5652df3d-77ca-4078-b4c8-b140f05bbaa7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c61b6ac-b054-41b6-9600-9dd67cb386b7", "sighting_of_ref": "indicator--5652df3d-77ca-4078-b4c8-b140f05bbaa7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba299c5-a8b8-4a19-8528-c6f32810e527", "sighting_of_ref": "indicator--caf64614-3d9f-4453-b757-9c1a3a79256f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d832ff-815e-4695-96fa-fb84cd6c103f", "sighting_of_ref": "indicator--caf64614-3d9f-4453-b757-9c1a3a79256f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c3e08b-4b6d-494f-b404-9ec60fce6412", "sighting_of_ref": "indicator--caf64614-3d9f-4453-b757-9c1a3a79256f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7978d289-36c0-4b26-a7c4-59892cc81c0a", "sighting_of_ref": "indicator--204482aa-bb3a-4fd2-8331-93ed8967ff21", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6dd5b1-47cd-443d-9ec8-7f36e3adb784", "sighting_of_ref": "indicator--204482aa-bb3a-4fd2-8331-93ed8967ff21", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f42f14a-4fd4-4e35-8780-908e80fe7458", "sighting_of_ref": "indicator--204482aa-bb3a-4fd2-8331-93ed8967ff21", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7d784d-5a4f-4277-a195-89031ace9aeb", "sighting_of_ref": "indicator--5bfa7354-5499-44ee-b888-23cdb16f10df", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d3f0c3-bc2b-483c-a68b-f9318cada69f", "sighting_of_ref": "indicator--5bfa7354-5499-44ee-b888-23cdb16f10df", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8042d664-ffed-43d3-b49e-8be546a6883b", "sighting_of_ref": "indicator--5bfa7354-5499-44ee-b888-23cdb16f10df", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdccd3a6-5b85-47f3-9eef-1ab938cf3135", "sighting_of_ref": "indicator--9a30c9a5-0379-4eb8-b898-6070d4a6c750", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6a5435-94d6-4cef-b07c-d2e470120f59", "sighting_of_ref": "indicator--9a30c9a5-0379-4eb8-b898-6070d4a6c750", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2b7f18-b234-4c4e-a95e-e02ac8c04a96", "sighting_of_ref": "indicator--9a30c9a5-0379-4eb8-b898-6070d4a6c750", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec17f92f-8cd5-4a75-bdd3-f5b284518332", "sighting_of_ref": "indicator--8b8269bb-6f92-4fb3-bc8d-7a267722a994", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7dbd38e-729a-45a4-92e0-7b8a1378f186", "sighting_of_ref": "indicator--e2fececc-c875-4073-9b98-2d4ef20fd6e8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85bc64f-ad95-45da-91a2-43b053ffb9d3", "sighting_of_ref": "indicator--e2fececc-c875-4073-9b98-2d4ef20fd6e8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b79097-fca8-432c-816b-7acf5a22b43e", "sighting_of_ref": "indicator--e2fececc-c875-4073-9b98-2d4ef20fd6e8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08578ee4-5c2f-4637-979d-312e821454be", "sighting_of_ref": "indicator--be4046a3-c5a4-438b-b1ec-43fe712b9961", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ccfa4ef-7b57-4046-bae7-48316b22a74a", "sighting_of_ref": "indicator--07a808a3-31d5-4c4c-8741-b043d4df9c18", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd089bf3-ce0b-42e5-8ab3-639edd136f6a", "sighting_of_ref": "indicator--19ec1fc4-e871-4ba5-80ce-dc1df4775c15", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b1c8d0-0d40-4cd9-837e-074fe58b1de3", "sighting_of_ref": "indicator--cea499e9-81eb-4f25-98b8-053a839f19bb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1157998c-936e-415f-9669-93f1b79ad932", "sighting_of_ref": "indicator--cea499e9-81eb-4f25-98b8-053a839f19bb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500d8768-26c7-4768-bc24-aac018611917", "sighting_of_ref": "indicator--cea499e9-81eb-4f25-98b8-053a839f19bb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9691ec6e-6c83-4d19-a3c7-8769cc46a758", "sighting_of_ref": "indicator--b72da0cd-b04d-4f7a-9440-fb49092b2cc6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1df9d61-4634-48b8-9680-e45562030c6e", "sighting_of_ref": "indicator--69a141b9-6b0a-4161-aa54-50736d0e97a9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d42e5c-9eb8-4932-a8e9-9af60d9bcb92", "sighting_of_ref": "indicator--69a141b9-6b0a-4161-aa54-50736d0e97a9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5705c37c-444d-4bd7-8a5a-c32c052df4b8", "sighting_of_ref": "indicator--672fcca1-aeb0-4b30-930c-b77cf3eafdb9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a4e495-8ade-43d2-a9c0-95679f21f8c8", "sighting_of_ref": "indicator--672fcca1-aeb0-4b30-930c-b77cf3eafdb9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4677526a-c40b-453a-b27f-a56089ea511d", "sighting_of_ref": "indicator--10435c81-0f3d-4e53-ab2b-867c57bf90ce", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1700088-0c4d-449d-8279-1fc1595d7409", "sighting_of_ref": "indicator--1f78b6db-cc50-4c19-ae81-76fd7c96a48b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697df82a-f29e-44de-adf0-48d07e17d7b5", "sighting_of_ref": "indicator--1f78b6db-cc50-4c19-ae81-76fd7c96a48b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9959db-fd6e-4538-b800-b283adae57f9", "sighting_of_ref": "indicator--1f78b6db-cc50-4c19-ae81-76fd7c96a48b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01535259-ad1f-4101-bd6e-ba5ea8d93911", "sighting_of_ref": "indicator--6cd27682-daad-4056-a25d-f771be8b69bb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053ef19b-14f5-4fd3-ac2a-ec0316e96f31", "sighting_of_ref": "indicator--6cd27682-daad-4056-a25d-f771be8b69bb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2208631-2c5a-486d-8158-a98e51857175", "sighting_of_ref": "indicator--6cd27682-daad-4056-a25d-f771be8b69bb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e99d93-f1d9-43fb-9ee3-7efe5fba406a", "sighting_of_ref": "indicator--a964f90e-d96a-41d2-8839-f52c43df8b7e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc4c3a6-fadc-4d25-9d45-286773bd59f3", "sighting_of_ref": "indicator--b19eb35f-5fbc-4475-9545-43ffc725ac97", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e277f184-d1a7-4e3c-ac9e-cee5c54261ed", "sighting_of_ref": "indicator--7e53afd1-8dd3-4937-9293-3009b59efbe9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cdea256-f4a8-4180-a812-98cc3b4dc4e9", "sighting_of_ref": "indicator--a53a0258-c373-4ac6-a666-530ee300e19a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78fe13e-6f44-4b04-a762-07d51b1da0ea", "sighting_of_ref": "indicator--a53a0258-c373-4ac6-a666-530ee300e19a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6594c351-15ed-4a09-b1ef-35cf29059b3b", "sighting_of_ref": "indicator--8c6b03f4-9b60-4ad7-af0a-3493516ec8a3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0110d9-1ee2-418b-b9d0-442885fcd138", "sighting_of_ref": "indicator--4ffe9e83-41d2-4cc5-b269-64be3f6f34a0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04482d39-ebf9-4cb9-b6c6-7727dfb1d829", "sighting_of_ref": "indicator--4ffe9e83-41d2-4cc5-b269-64be3f6f34a0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e565bfd-fda1-49d2-a221-3f812790ab10", "sighting_of_ref": "indicator--2dc53ee6-e35f-4ad5-96c2-840ac5b39343", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b0a251-bedc-4eee-87d9-4c72bcf46d3e", "sighting_of_ref": "indicator--1feb931a-05f0-4cef-b0c7-6decb4d2e303", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4df534-3150-427d-94af-156c4848c35c", "sighting_of_ref": "indicator--1feb931a-05f0-4cef-b0c7-6decb4d2e303", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c13e4f-d150-48fd-957d-dd5b7fd2296c", "sighting_of_ref": "indicator--92c761b9-cd04-4958-9077-94f34d113244", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9acd98c1-6b44-42a8-a5f3-cd4ff10531c6", "sighting_of_ref": "indicator--8fe162b1-5356-4248-9da0-88800391d0b8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d599e58-9567-4c8d-a463-38f4b54edd88", "sighting_of_ref": "indicator--5d744bc9-284e-41bf-a37d-3d9cc13a4acd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153de721-e94e-4107-960d-9b3f23ccee9c", "sighting_of_ref": "indicator--f7b4e08f-c62c-48c1-8a71-1cc92e11a65c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942c0d9a-0498-4866-9283-564343f35662", "sighting_of_ref": "indicator--7e024299-3f75-4cb6-b79e-3d41c9a512d0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b43517-2a43-4e64-8e5f-13647d81a39e", "sighting_of_ref": "indicator--7e024299-3f75-4cb6-b79e-3d41c9a512d0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a03edd2-5c86-41ab-b87c-be98087a4827", "sighting_of_ref": "indicator--9fe75c47-e444-4b01-8134-93db19029e76", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b280a013-7cb5-45ce-be79-4558e87a038d", "sighting_of_ref": "indicator--7c0ba2f1-6a96-4ef5-a840-5520af70be58", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ce48b3-5916-44fb-86ac-1006a9c13e63", "sighting_of_ref": "indicator--7c0ba2f1-6a96-4ef5-a840-5520af70be58", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de099973-10a7-4a6e-8b5b-5e4fcfe4d20e", "sighting_of_ref": "indicator--0ff447a7-e1cc-424d-9b0f-e2e9951b779a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a0228ec-2521-4108-baaf-cbce7d9bd084", "sighting_of_ref": "indicator--a83e0414-2784-4f70-b846-7787b69cb2a5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b525c965-4218-438d-8183-71d2ecf578ed", "sighting_of_ref": "indicator--31369681-a895-49cd-b7ab-22380033acc9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18bcdc88-6d26-4f9b-83f1-8559206d6c40", "sighting_of_ref": "indicator--5b2f77c2-0005-488e-81db-18b8a175e8a8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959748b7-02c5-4f0d-8fc4-58a8e88eb6f5", "sighting_of_ref": "indicator--5b2f77c2-0005-488e-81db-18b8a175e8a8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33fde8c-36bb-442f-a0ba-4f6b2bda4b41", "sighting_of_ref": "indicator--5b2f77c2-0005-488e-81db-18b8a175e8a8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01ffa6c-ee38-45b6-bc62-07bf28b3a447", "sighting_of_ref": "indicator--4c436702-1e21-4c18-92d1-da90e0d9a267", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad1927c-af84-43ae-88e2-8516c8dd0848", "sighting_of_ref": "indicator--5b0fbeb7-f687-44f3-abd4-a1d22afdb9bb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6c67a6-5295-468c-8a11-873c1375a1a8", "sighting_of_ref": "indicator--9a1e0375-ab89-4a5e-bbef-7aac11775cfa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b540ed-418c-466e-bd85-48f3cb5c7f0b", "sighting_of_ref": "indicator--dd484e7d-0c79-4b37-8a67-c98ca598be39", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30c185d-9da8-4b1f-bfd9-598159e9ab65", "sighting_of_ref": "indicator--fdcf3f38-ed11-48a0-9d78-125b357ccc56", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcb0deb-19c7-4256-b764-3ac4bfadcc1d", "sighting_of_ref": "indicator--fdcf3f38-ed11-48a0-9d78-125b357ccc56", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1ee075-be9f-4442-8394-7a7c6e18199c", "sighting_of_ref": "indicator--fdcf3f38-ed11-48a0-9d78-125b357ccc56", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f12677-e542-45cb-9217-c8a404132490", "sighting_of_ref": "indicator--f170f976-4839-4b79-b95e-ac2fe1b9c3f3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfa4cae-824a-45c4-9947-56e18d27bfe6", "sighting_of_ref": "indicator--48f11e4a-fa58-4fd8-9fd7-3439524d4da6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4565ca79-1d75-42d4-9ec7-2a974be3e0b9", "sighting_of_ref": "indicator--48f11e4a-fa58-4fd8-9fd7-3439524d4da6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b281ff-50e0-405e-b424-5e8b48b8eb81", "sighting_of_ref": "indicator--bf98c85b-9e2d-4aaa-b0fa-5a5c3f0a21cc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9cfed21-ccd7-4211-9d5c-ed23a87c2046", "sighting_of_ref": "indicator--bf98c85b-9e2d-4aaa-b0fa-5a5c3f0a21cc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f435dbd-f79d-43e5-9cfd-c6e4453c8536", "sighting_of_ref": "indicator--fdb44aea-d0c9-49be-bd94-cddea44b93a4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57259a94-a711-4fb4-b127-eb0d08e3bc4a", "sighting_of_ref": "indicator--02565d6d-9d38-46ea-b7ad-2832666bdfba", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226dbc8b-7191-4613-ab5d-427b63596ed3", "sighting_of_ref": "indicator--02565d6d-9d38-46ea-b7ad-2832666bdfba", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15307df2-c646-4fdd-bf79-9acf5f5dfbde", "sighting_of_ref": "indicator--02565d6d-9d38-46ea-b7ad-2832666bdfba", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49c1248-3766-4536-a13d-1facdc6468df", "sighting_of_ref": "indicator--fe69b881-6260-4537-b921-c83beb203f55", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25094762-dc51-4c37-a0f2-375cabbb3cbc", "sighting_of_ref": "indicator--c2154b6a-4697-4ea9-a263-6544d645654f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8dbf81e-bd35-4367-b631-f290f06b86f5", "sighting_of_ref": "indicator--edd592d8-7983-4373-b101-5b8122e8a0c5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69906dbe-eb21-43f3-9c6c-29bbec15a0c7", "sighting_of_ref": "indicator--2de8ffef-531a-486b-8728-24f774171d3a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8ab96d-6084-4cd8-84c2-6dff6b3af2be", "sighting_of_ref": "indicator--da5ced98-91a7-4d8c-ac8b-96ecd1aa14f0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e26cb6-feb8-46da-a1f2-2c063c0a0a2a", "sighting_of_ref": "indicator--da5ced98-91a7-4d8c-ac8b-96ecd1aa14f0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94f86d6-70e6-4801-b0ba-dc8f7c6d109b", "sighting_of_ref": "indicator--116e6a54-c3ca-43da-8c86-2674a5f58542", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137b7c66-29d3-4f8c-8bfe-505476c6074b", "sighting_of_ref": "indicator--116e6a54-c3ca-43da-8c86-2674a5f58542", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0885b38-aff7-4146-829a-957653ee92a7", "sighting_of_ref": "indicator--e01d670c-022a-4886-befd-5b941255aa1e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d89c111-a728-477f-bc99-21cd17eb150d", "sighting_of_ref": "indicator--717531b0-14e3-4bf0-8fb6-337c0d93a9f3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a29b72-ab17-4c6f-9b8e-bd21875664ca", "sighting_of_ref": "indicator--13245b0d-37a8-4c58-a219-345ca086e080", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601141d0-3973-4c9f-ba8d-a5347b4e2f11", "sighting_of_ref": "indicator--13245b0d-37a8-4c58-a219-345ca086e080", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbabdd7f-c77b-4905-932e-b25e0ecba43c", "sighting_of_ref": "indicator--13245b0d-37a8-4c58-a219-345ca086e080", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af515a5d-a9a5-4095-a214-7fd912d94f2f", "sighting_of_ref": "indicator--1f84a06d-d284-4e79-a253-2ff76ca6d7aa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a774b73-df87-459e-af35-dd35524ce14d", "sighting_of_ref": "indicator--24738b79-5763-4653-89be-b1bf52bd42c8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016a3240-f3a4-4313-9014-e15b243241c7", "sighting_of_ref": "indicator--7a69587e-d0a8-454e-b690-5034c8bb5aaa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc5b63a-e876-410b-91db-ae864c6648e3", "sighting_of_ref": "indicator--7a69587e-d0a8-454e-b690-5034c8bb5aaa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c134443-ddfd-44fc-9c3f-dcf70ee55712", "sighting_of_ref": "indicator--7a69587e-d0a8-454e-b690-5034c8bb5aaa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40edf07-4ac2-4479-ae9f-559c59ab2e8d", "sighting_of_ref": "indicator--f84d0e99-b5b7-48e5-bda9-9ffd90724b1d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a8961a-d907-48e6-b9bb-fb33f59d5ad9", "sighting_of_ref": "indicator--f84d0e99-b5b7-48e5-bda9-9ffd90724b1d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b7532b-39a6-43dd-864f-06f6ccce5e82", "sighting_of_ref": "indicator--f84d0e99-b5b7-48e5-bda9-9ffd90724b1d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa19038-a4a8-4f0e-87cf-4b77fa9bdd38", "sighting_of_ref": "indicator--55acefd9-78b7-4a33-9e59-389355741a15", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec83172-1a32-4851-94a4-4af2e9c53c7b", "sighting_of_ref": "indicator--55acefd9-78b7-4a33-9e59-389355741a15", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2165f9-4516-4642-8ea7-d207876e6e36", "sighting_of_ref": "indicator--55acefd9-78b7-4a33-9e59-389355741a15", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cce97cf-01f4-4315-bd8f-cc190fdd566a", "sighting_of_ref": "indicator--5683f770-9dff-47f5-aa0e-64cf4271dc58", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5d19b3-0046-4041-8141-68cc6ba86f6a", "sighting_of_ref": "indicator--5683f770-9dff-47f5-aa0e-64cf4271dc58", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8fbfae8-a88b-4825-960e-6d257a4fa3eb", "sighting_of_ref": "indicator--205a0562-0869-4e23-8593-d2a088dec0b4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676f8f6d-75d1-435b-a170-86ad233f053a", "sighting_of_ref": "indicator--203ea74f-b986-4006-9c4b-190b1899fd47", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bca925-e65d-4d7f-bcc5-25938e2a0ed8", "sighting_of_ref": "indicator--203ea74f-b986-4006-9c4b-190b1899fd47", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1548b04-357e-4aa0-9dbd-22a78d637b31", "sighting_of_ref": "indicator--1f9c20e6-282a-413e-be90-393ead517615", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a950697a-1ece-4e48-a499-0ca432b41d71", "sighting_of_ref": "indicator--f469b060-b147-4323-9c9c-35d20e8f7051", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebbe0408-c864-4dcc-bab6-636c712b1cff", "sighting_of_ref": "indicator--f469b060-b147-4323-9c9c-35d20e8f7051", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a60ad4d-9b96-4499-8f84-bd09a8a65ea2", "sighting_of_ref": "indicator--f469b060-b147-4323-9c9c-35d20e8f7051", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1077f966-bc45-4b79-ace9-ec21328218cd", "sighting_of_ref": "indicator--e600e7c8-edee-4703-b248-ddd4fedb2bea", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5de362-dc0b-4012-a425-2336f1cb6bec", "sighting_of_ref": "indicator--e600e7c8-edee-4703-b248-ddd4fedb2bea", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01798f08-fcf7-49e9-be70-a13b309a2603", "sighting_of_ref": "indicator--0df5175f-547e-4449-967d-7b41c13de441", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a050351-a9b1-4f4b-99f2-3a6b0df30f11", "sighting_of_ref": "indicator--0df5175f-547e-4449-967d-7b41c13de441", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ee520e-f389-4450-ad7b-366deb0a04d8", "sighting_of_ref": "indicator--0df5175f-547e-4449-967d-7b41c13de441", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2afecb-ee53-4e01-9dfa-1335dff9cf9a", "sighting_of_ref": "indicator--0b5b59dc-8460-4504-beb2-b1a92ddb4d6c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846ec512-5177-4954-bd5b-f0d5bf4c9bf2", "sighting_of_ref": "indicator--0b5b59dc-8460-4504-beb2-b1a92ddb4d6c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f822c8-02ee-4368-ba05-298d1ded84fb", "sighting_of_ref": "indicator--0b5b59dc-8460-4504-beb2-b1a92ddb4d6c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1872393a-f37a-47a2-8856-2c327cf991ad", "sighting_of_ref": "indicator--e3ef16c5-e2ea-4555-8f31-212975736cd3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816dd01d-545f-4aa8-b4ef-89456743727b", "sighting_of_ref": "indicator--e3ef16c5-e2ea-4555-8f31-212975736cd3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d464fba3-9ae0-4a70-9bb2-9f5b229c6750", "sighting_of_ref": "indicator--e3ef16c5-e2ea-4555-8f31-212975736cd3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a93d5d-1ee4-42e6-a3a8-937ab51e4c2a", "sighting_of_ref": "indicator--fa196b76-4acc-425d-973e-49dbd316bb22", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8d04ef-1151-48af-b913-bdadde8f77d1", "sighting_of_ref": "indicator--fa196b76-4acc-425d-973e-49dbd316bb22", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8840a021-6f8d-4215-bae0-66ac23671445", "sighting_of_ref": "indicator--fa196b76-4acc-425d-973e-49dbd316bb22", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5342cf4-e1ba-427a-ba8c-496feca193f8", "sighting_of_ref": "indicator--7a338838-f68b-46ac-8005-d5617fbb6273", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f73f7f-bfb4-49d9-96b4-38dc5bc57e3e", "sighting_of_ref": "indicator--7a338838-f68b-46ac-8005-d5617fbb6273", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30736ed2-06ef-49fc-b2b5-6ce8d584de59", "sighting_of_ref": "indicator--7a338838-f68b-46ac-8005-d5617fbb6273", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1eec36-b7c4-4723-a068-23a43d0dbd1b", "sighting_of_ref": "indicator--925ed4ac-7cc3-4f28-961d-7a85936f938f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7743b8f9-cb95-4203-9a60-e7cac0426b42", "sighting_of_ref": "indicator--925ed4ac-7cc3-4f28-961d-7a85936f938f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953811ea-f9b3-4441-afd4-9f9ce801b18c", "sighting_of_ref": "indicator--925ed4ac-7cc3-4f28-961d-7a85936f938f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16d53cd-9925-4ae3-b8d8-9db7cfe7cb93", "sighting_of_ref": "indicator--be3e281d-e12e-4700-ae6c-abbae5a3771d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246d79ca-3fba-4cab-9e3c-4c02b5afc097", "sighting_of_ref": "indicator--be3e281d-e12e-4700-ae6c-abbae5a3771d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b858b275-0dcc-4c6a-9889-888fa46c9c31", "sighting_of_ref": "indicator--8e7ba49f-4a10-4a66-9b1b-279e7781ffb4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e58e46a-d2a9-48da-b2bf-b880ee1b4f4e", "sighting_of_ref": "indicator--8e7ba49f-4a10-4a66-9b1b-279e7781ffb4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08219b0-c90e-473c-94e1-18a7fa2ba14a", "sighting_of_ref": "indicator--8e7ba49f-4a10-4a66-9b1b-279e7781ffb4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad93b66c-3f86-4cb0-a613-23e157fa0023", "sighting_of_ref": "indicator--47278c95-0bf4-4008-b684-0d4a7050a892", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fbbdf57-43fe-4a99-98be-1e72a8f0c2f2", "sighting_of_ref": "indicator--91bd35f7-250d-47c2-8636-5df33f8f59b1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b85ed65-d7b0-4a9a-aeec-47b231a2d408", "sighting_of_ref": "indicator--91bd35f7-250d-47c2-8636-5df33f8f59b1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--284e50bd-c253-4803-8c27-ca8db5edd606", "sighting_of_ref": "indicator--2c6e7ced-a2ce-42f9-9794-7508b1311c8b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c200f8-9fb5-47c9-9f8a-22bae6f4f9c5", "sighting_of_ref": "indicator--3695ab8e-0c4b-409f-9b46-0d67c482f317", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efaf1b14-bdef-4b4c-a583-c0f63c11ecdf", "sighting_of_ref": "indicator--3695ab8e-0c4b-409f-9b46-0d67c482f317", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4add4a54-b412-4715-b9cf-322145e4ca63", "sighting_of_ref": "indicator--3695ab8e-0c4b-409f-9b46-0d67c482f317", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d303153-96db-4f7b-bc78-5e490d9029fd", "sighting_of_ref": "indicator--1c58c7b9-9794-4eb8-ac8e-1c6ee581bf8b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6373b5-959e-48e9-9dbb-d32a37ecbfac", "sighting_of_ref": "indicator--bc4862bc-ecd1-4bb6-944e-c5a7544ca886", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf02fbc-a5f8-43a2-99fd-fb6e2abb02b2", "sighting_of_ref": "indicator--bc4862bc-ecd1-4bb6-944e-c5a7544ca886", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a24bcb0-3f08-41ac-9dc2-30ab7858567f", "sighting_of_ref": "indicator--ad3797b1-4883-4380-b2c4-b1192eebbd28", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a204c0de-3dfa-4053-b312-66c96886c33e", "sighting_of_ref": "indicator--ad3797b1-4883-4380-b2c4-b1192eebbd28", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f80e88-ba2e-495f-8e37-caa16362be06", "sighting_of_ref": "indicator--51cbf560-e292-461e-a79a-184ae98403c9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99bf5067-45bc-47d1-a0bd-8b526fcf7eb0", "sighting_of_ref": "indicator--51cbf560-e292-461e-a79a-184ae98403c9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3e042e-9c9f-4586-841a-0dc872a69254", "sighting_of_ref": "indicator--9cadccdb-6a05-4899-b3e8-2d5e9482bde9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdbf29fd-18bb-4b40-9084-5f49bb167402", "sighting_of_ref": "indicator--9cadccdb-6a05-4899-b3e8-2d5e9482bde9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b1a185-3723-42fb-9d75-6e22af7ce0b2", "sighting_of_ref": "indicator--9cadccdb-6a05-4899-b3e8-2d5e9482bde9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8e082d-d855-4405-973b-b9c1e48658d5", "sighting_of_ref": "indicator--7ecd860a-4df4-4b04-9241-b2f437e63938", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e4a604-41fa-43c0-a408-5c82821ac980", "sighting_of_ref": "indicator--7ecd860a-4df4-4b04-9241-b2f437e63938", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b9d067-cb99-4de3-bc7e-92e2493d3608", "sighting_of_ref": "indicator--bc4b515d-d743-4a38-bd91-1b2bcc3f5179", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a3c8f0-94a5-4a29-81c5-be0d17df043c", "sighting_of_ref": "indicator--bc4b515d-d743-4a38-bd91-1b2bcc3f5179", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d711f3-d303-46c1-bf7a-7d9ff9739bcc", "sighting_of_ref": "indicator--c811909d-8f39-401e-9073-f4fc6751b7b1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2dabf09-a4f1-48d6-ba65-9d6a1d1a6fca", "sighting_of_ref": "indicator--c811909d-8f39-401e-9073-f4fc6751b7b1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002ec129-4bce-4bd3-a1ff-e9d8b93a8284", "sighting_of_ref": "indicator--c811909d-8f39-401e-9073-f4fc6751b7b1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aeedf8f-10c2-4d7e-b658-619ac2a258e9", "sighting_of_ref": "indicator--cacbffca-86a0-40cb-8298-f260d5d3594d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48579ce-155a-482d-89ca-0bfa3fdacb63", "sighting_of_ref": "indicator--cacbffca-86a0-40cb-8298-f260d5d3594d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8450b590-6c0b-460c-b7e9-eff0b4f96fb7", "sighting_of_ref": "indicator--273474f3-f5ef-4e80-8f20-fd1c9033bdbf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4971a21e-fe63-4160-9343-51445f59f2ea", "sighting_of_ref": "indicator--273474f3-f5ef-4e80-8f20-fd1c9033bdbf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131dae3f-a8b7-409a-9fa8-cf6a09362f09", "sighting_of_ref": "indicator--c6a63d65-7b6b-46e2-b906-de47ae77c700", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7c9c04-3e1a-4d91-b888-f94792531526", "sighting_of_ref": "indicator--c6a63d65-7b6b-46e2-b906-de47ae77c700", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ad865f-5b42-4c57-a918-c30ee23618be", "sighting_of_ref": "indicator--be14ca92-7b35-4aac-b930-e60d6c9c2f1f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11797eb0-0a2e-4f17-ae05-51833803997b", "sighting_of_ref": "indicator--be14ca92-7b35-4aac-b930-e60d6c9c2f1f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e029f6-93cf-4dec-8e32-8faaac21ad9c", "sighting_of_ref": "indicator--ae10f767-77c1-4a25-a198-0b6a7d28b15a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8baa7f-07b6-43a8-bb17-f39c488505fc", "sighting_of_ref": "indicator--ae10f767-77c1-4a25-a198-0b6a7d28b15a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738ef2ea-4051-4cc4-b260-51680a314661", "sighting_of_ref": "indicator--a507fbc0-4e04-4457-b804-f71ae9ed0ba1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b54c002-38a5-45ec-907b-cd50ef860bfe", "sighting_of_ref": "indicator--a507fbc0-4e04-4457-b804-f71ae9ed0ba1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52168ff3-aaac-42ed-af81-4927b7a6f1a9", "sighting_of_ref": "indicator--3ae6433b-c3ab-4726-be58-afd9780a991b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea36a09a-6718-4414-baae-b8cb8cf152e0", "sighting_of_ref": "indicator--f6f43979-8baa-403c-83fd-543658def126", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d88befe-ff81-4397-955a-1bb30a6102a1", "sighting_of_ref": "indicator--f6f43979-8baa-403c-83fd-543658def126", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e988276-1f17-437d-bc51-7cbf2632d13b", "sighting_of_ref": "indicator--9ee198a5-8dce-498b-9557-7ae664900a7b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035d1efd-78f3-4a98-9377-259662cf16e6", "sighting_of_ref": "indicator--9ee198a5-8dce-498b-9557-7ae664900a7b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa43c45f-36e5-4753-b41d-29b74a44d327", "sighting_of_ref": "indicator--3d79a033-98ea-4465-a9ff-565898d2ec9f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811af1f1-a518-4cb3-acb7-4a798976860a", "sighting_of_ref": "indicator--3d79a033-98ea-4465-a9ff-565898d2ec9f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8765c89-a9a0-4c78-88e5-73ef8c45f4a9", "sighting_of_ref": "indicator--09ecb9c6-e64c-40ab-98e8-aae14b3e081f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de31532-9963-4da4-a7c9-e4fd8cb745a8", "sighting_of_ref": "indicator--fa152d28-28e1-42de-bfc2-fe0023bfb8be", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66ad4d3-12d9-49dc-b615-872b1f781376", "sighting_of_ref": "indicator--fa152d28-28e1-42de-bfc2-fe0023bfb8be", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bdbdcde-b57b-4065-9514-cf79a2c2ebd3", "sighting_of_ref": "indicator--b8b795a0-6e19-4550-aafe-eb4688676f49", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17aba07e-15d6-49ec-bf07-6993516a5be7", "sighting_of_ref": "indicator--b8b795a0-6e19-4550-aafe-eb4688676f49", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca47e178-1222-4c1d-b3a1-45513112a014", "sighting_of_ref": "indicator--46d676fd-0722-4bba-b53a-daecb3e1cd9a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939a37fe-974e-4505-9d61-a8c7a9d9b592", "sighting_of_ref": "indicator--46d676fd-0722-4bba-b53a-daecb3e1cd9a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636ddfb3-cc24-4b80-9310-5318ead0c0b6", "sighting_of_ref": "indicator--46d676fd-0722-4bba-b53a-daecb3e1cd9a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931f55f9-982a-4601-a7db-eb19f8bc6a7f", "sighting_of_ref": "indicator--4efff3d9-1d58-4d6b-9ea1-a0d9178c2ea6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21674b82-fa17-4d32-abdf-f4a78ee01939", "sighting_of_ref": "indicator--8a4a29e3-2896-4ade-9072-d82aa8c2b37d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ba545a-8e01-47ce-a4da-22ce34b59c4a", "sighting_of_ref": "indicator--8a4a29e3-2896-4ade-9072-d82aa8c2b37d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e240eb-bf78-4a36-b51a-c255313dc9ac", "sighting_of_ref": "indicator--49dce0f4-cb57-44ce-bfa1-1a84bdb21916", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ec1e47-1d14-4956-8b85-93560989754b", "sighting_of_ref": "indicator--5ae401ae-d567-43c8-8841-f444f153e855", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed3e482-0a8b-41e5-9d08-bea1abe499a4", "sighting_of_ref": "indicator--12b76fcb-799d-4a02-8c30-b10cf50abec3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c784fe9d-137d-49ff-bcb5-a60aa9835a35", "sighting_of_ref": "indicator--58d764bd-f757-40a8-a6fe-a79716faacd5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98ee816-52e2-4367-b995-111b03af0a8b", "sighting_of_ref": "indicator--2c6d4330-aceb-414a-897b-a12067c08c81", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07ab76b-457d-4d16-b8f9-f945b4021f7a", "sighting_of_ref": "indicator--2c6d4330-aceb-414a-897b-a12067c08c81", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdc8664-7ff6-4264-96f4-fca13f5febbb", "sighting_of_ref": "indicator--2c6d4330-aceb-414a-897b-a12067c08c81", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9999332f-09ed-4793-8ce8-6849b8f1f394", "sighting_of_ref": "indicator--bcc2be56-f0d8-4733-83f9-6147ece1e423", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b56824e-f71b-4520-ba26-532fdd0271a6", "sighting_of_ref": "indicator--d3dc53f6-534d-430d-9af5-2260c28585a2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669536b8-1780-4b40-8922-059bb3476848", "sighting_of_ref": "indicator--d3dc53f6-534d-430d-9af5-2260c28585a2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ac32d1-3972-4893-80a8-382c809f7733", "sighting_of_ref": "indicator--c551de43-546e-48a1-bbff-678e82f18284", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4737141-7279-4821-ae54-7560cc1aa72b", "sighting_of_ref": "indicator--a87fb6b2-08ba-418d-97e5-cb03f4810ec8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9bca33-7209-4ae0-a51f-96d75c4cf330", "sighting_of_ref": "indicator--a87fb6b2-08ba-418d-97e5-cb03f4810ec8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b47a1e7-8b8e-4beb-a2ca-24a083d3fd12", "sighting_of_ref": "indicator--a87fb6b2-08ba-418d-97e5-cb03f4810ec8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3952695c-0b2e-4ecb-a4c1-df5ec568fac5", "sighting_of_ref": "indicator--10141722-e09b-405a-a537-8bef363961f8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7bfb5f-5d38-4e10-80b8-917d9b4b2642", "sighting_of_ref": "indicator--10141722-e09b-405a-a537-8bef363961f8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83dcbb3e-7307-45f5-8d9c-223fc7279e10", "sighting_of_ref": "indicator--be8d4a7c-dbd7-489e-9f0e-a1d0f9b302cc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a27764-813c-4abd-9c69-c67d10ff48c6", "sighting_of_ref": "indicator--ba5ebb49-6c58-4656-8d6e-fa3047883568", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aee7592-5d8a-4490-9cd8-fb31a760b108", "sighting_of_ref": "indicator--cb3c5693-f902-4eea-8c4e-d8b920b0284b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1428a4ee-6df4-45e1-95c7-1fb4f43079ec", "sighting_of_ref": "indicator--cb3c5693-f902-4eea-8c4e-d8b920b0284b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114403fd-44c9-4f56-ae83-0d47aec70127", "sighting_of_ref": "indicator--cb3c5693-f902-4eea-8c4e-d8b920b0284b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3954d0f2-eeb2-47d9-8b78-d45239151309", "sighting_of_ref": "indicator--26c0c2fa-8175-40ef-bd26-5a4c4c172b86", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce982cf-a41c-4a5a-baa2-7aaff6883319", "sighting_of_ref": "indicator--6ac4b32b-222b-43bd-9c5b-96144d9c12ab", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d349cdb-0cd5-445d-8030-c649b8f91b17", "sighting_of_ref": "indicator--18b77861-d489-41bd-a447-05b3a0358e9e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90af404-403f-4d15-87d1-4c794975abbc", "sighting_of_ref": "indicator--6ac52762-57e2-44b0-b97e-1e3b09812c3a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ecf34f2-47b9-4bd0-a9a4-c83c02663623", "sighting_of_ref": "indicator--6ac52762-57e2-44b0-b97e-1e3b09812c3a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7565b387-4259-4095-8423-118ac217ef86", "sighting_of_ref": "indicator--6ac52762-57e2-44b0-b97e-1e3b09812c3a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f8b9c7-634c-47b8-b33e-65df6310f58d", "sighting_of_ref": "indicator--1b9c213c-f9c9-462e-b44a-531ec486b9be", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f33858-32a4-4172-a86f-ee8e012e3672", "sighting_of_ref": "indicator--dfa603a9-820e-4e42-9e60-6cb9abb5995e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4c4c9d-83be-4760-8613-f307953c7407", "sighting_of_ref": "indicator--0da37b52-6f90-42cb-9bac-0ae666a110bc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2c7228-1b26-4be2-be10-21e668b915d4", "sighting_of_ref": "indicator--0da37b52-6f90-42cb-9bac-0ae666a110bc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68bd4066-8584-45c9-addf-9f00e92017fe", "sighting_of_ref": "indicator--6a66eadb-af6a-487a-87bb-c30599fdb334", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e20fa4-a0ff-40b9-be08-e0250758b85a", "sighting_of_ref": "indicator--2c3875f8-ec94-4269-97a3-104dd42ecc90", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17659327-ee7b-4be5-9dc9-9b1a3c38c0be", "sighting_of_ref": "indicator--2c3875f8-ec94-4269-97a3-104dd42ecc90", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a585046c-e51e-4936-abf6-e43356590848", "sighting_of_ref": "indicator--5004a680-3a08-4a46-95e0-de2b971825b1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f057820a-f212-4528-8a73-8af41ed9b018", "sighting_of_ref": "indicator--844026d0-1a99-481d-ba63-5dc7a30e9982", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5d2758-fd32-46a4-bf4a-5723d5e30c0f", "sighting_of_ref": "indicator--8ea4bae3-3ea0-4aa3-a65b-382e9363c7f4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd2efca-2bdf-42cc-947f-da7a8da4f238", "sighting_of_ref": "indicator--3e1c8ac0-cf38-4e29-9f2b-e84d8708a7a4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec36963-ade1-4b66-8470-2b98577c5521", "sighting_of_ref": "indicator--579c6b15-85b9-4938-9bfa-59904ab0e709", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf431a0-58fa-40b9-94b4-9ab6faa25c94", "sighting_of_ref": "indicator--fa89b340-0a06-4082-a44a-5c87a3dd0e47", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9300cce-6289-48bf-9412-acdcbcc34f99", "sighting_of_ref": "indicator--fbb0fc0d-45fc-472c-86e0-df21bf1540fc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7eba72-2ffb-4bd1-9d07-e138b603bb99", "sighting_of_ref": "indicator--951034ec-8e1a-4f40-b34c-d9cf4eeb8e3a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9abdb8-28e9-4889-a33a-d61fe383f941", "sighting_of_ref": "indicator--e728c2a1-b1f2-45af-9fbb-6f8b0ead29bb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4a7226-1436-4480-a557-7a276953a6d4", "sighting_of_ref": "indicator--f6891525-f69e-49d6-9b0b-5838cb5ae32a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952b651c-988a-439d-a4ec-a08ca3aeceb0", "sighting_of_ref": "indicator--dfe0c338-89d7-414e-95c7-f7c8685167eb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ef62cd-f6a9-46bd-b24d-f3c92cea93aa", "sighting_of_ref": "indicator--e9cb050b-ecfd-4ec7-be7e-324be5314183", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ecd377-98a3-4e84-9795-97b560aa7dba", "sighting_of_ref": "indicator--f9535aaf-82b1-4869-a17a-cc6bfad6f3d2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a4d6ab-7d04-4dd5-9d48-e50e421794c5", "sighting_of_ref": "indicator--64e7e660-9d40-44da-988d-a8c2b94754a3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0d5511-9103-44b2-bcc2-a6846bea385a", "sighting_of_ref": "indicator--4b180d35-6369-4dfe-bf92-3c7d91ebb9fa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e11aab2-03c2-48a6-b733-728c61bd8896", "sighting_of_ref": "indicator--176f2904-3ee5-40d2-80da-467e65d035fe", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f2f513-427b-4522-bf08-c9f57fa79763", "sighting_of_ref": "indicator--13cf9e7a-5c8a-467c-bf68-f29de36da445", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd673c3-34b8-4293-8955-043c9b99d7fc", "sighting_of_ref": "indicator--0c9ff901-f39a-4dcd-942e-6f1e6fb75d75", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12caff5b-300e-4be3-be4d-84df2da56f62", "sighting_of_ref": "indicator--8863a0c8-5c6a-400f-a844-9ac81c8aff89", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11e0ecd-efba-4919-a382-9551fe4087c6", "sighting_of_ref": "indicator--f3b59517-7b60-4bb9-ae1b-958d39874f5c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5815e0b1-c1b6-451c-93a7-1ed3602a53e4", "sighting_of_ref": "indicator--7f9213df-24f7-403d-89fd-a7ea343e5bc8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6754971c-ffc0-4f68-997d-9a632d9d180f", "sighting_of_ref": "indicator--c92dca9d-61a5-43b1-93d8-fe1f1780184b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f85dc4-df3c-4ea4-b738-f4e919a0eac6", "sighting_of_ref": "indicator--27b678a5-cec5-467a-bb7e-c354c5bfb372", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9e4e64-54a1-405f-ad99-6933864982d7", "sighting_of_ref": "indicator--4e4aa1bb-591c-466c-84e3-fc58fbe0bc6a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823939cb-4333-4265-bcc4-09727c0ce2a0", "sighting_of_ref": "indicator--f9e1faa6-f0b2-49db-abf3-6669c2e59e00", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4dbca6-3b93-4198-9cef-2fd0ee9a9e3a", "sighting_of_ref": "indicator--370f1643-5fcb-43b3-801d-e61998e4d253", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26234386-da41-47c1-a4ad-0d8271ff1669", "sighting_of_ref": "indicator--20c00575-4522-46e5-9771-fc400ed0395c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4b0798-4939-4e55-bb43-48c55db52403", "sighting_of_ref": "indicator--a6a23d6f-d136-4306-a0d1-30773678b87d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746b62eb-2b49-4b69-a37b-0bda27523c27", "sighting_of_ref": "indicator--86236ed2-8b2c-4b94-ae4b-48745fc0cca2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddcce392-0d3f-4435-a50d-1e597a52cd7f", "sighting_of_ref": "indicator--969bde14-85d8-48c8-9339-78f58cb3ab4f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dda053a-3aab-43ee-908a-dd22c72ef93e", "sighting_of_ref": "indicator--1e2c3ab9-0400-4f7d-800f-6332b155bea6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e70b3d0-e63b-4ed8-b00c-65e397860e58", "sighting_of_ref": "indicator--4467de19-d511-4179-8176-06be28d1c709", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3044f7a-471f-47ee-b233-0dae8a8bdfcc", "sighting_of_ref": "indicator--274d2e87-4a30-4629-bac7-93a47ba43cb0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a18329-d63c-42ed-be77-c89d25e91c81", "sighting_of_ref": "indicator--1c9fc122-98bc-4846-ad3e-e530b3ba546c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb29fa7d-8c81-47c9-9ed3-46e16e2061f2", "sighting_of_ref": "indicator--367f3328-6049-409c-aaad-189b3436fb41", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab38a1cf-b025-42bf-bfb2-a135e51f7698", "sighting_of_ref": "indicator--45779070-9aab-44c6-b027-c645ef765dc8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1881fc9-5a7e-4928-9125-f8133394d798", "sighting_of_ref": "indicator--5f9f314f-d1ae-43c3-aa84-1e5a24c7fb18", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456fd62d-1fac-4969-b3a6-80b756399169", "sighting_of_ref": "indicator--42c730e6-12e5-4f21-8aa5-06087780c756", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a4c20d-5a0b-444a-b4d3-b086af137668", "sighting_of_ref": "indicator--89a4fdb4-879e-41f3-aeca-3b30409f31bf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff437ebe-9b69-454a-a37e-5451e497e4f5", "sighting_of_ref": "indicator--d209a486-3eb1-4f84-bacb-d3e0c2e64cf5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7436636d-3cda-49a4-abdf-f0e3c9205307", "sighting_of_ref": "indicator--49bb0e9b-28c7-4b25-8c4a-8a99398885b3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5976dbd4-cb92-4dea-b6b3-67d2694fd334", "sighting_of_ref": "indicator--5207b567-54b2-499a-9aa5-36f2ac373faa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7a4718-5287-4d81-966f-62c8fa855ac9", "sighting_of_ref": "indicator--f29cb71d-e69f-4022-bc07-dbd1ab477dad", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c30bc8-68c0-4b78-a995-d4dddc1322db", "sighting_of_ref": "indicator--9f105c3f-c29e-4b76-bc48-6e64cd7289ad", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e53b234-eb81-4b62-8577-a46e339dcfba", "sighting_of_ref": "indicator--5ef7bff5-f9a9-4bb5-9e58-3447790885d2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae995dc-a1f8-43e2-8ebb-782ecd8891ea", "sighting_of_ref": "indicator--ad188ad0-ad53-4ba5-9130-155930121207", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56fdfb89-8484-4d69-9d98-a5c4a7a5c26f", "sighting_of_ref": "indicator--5b99c574-506c-4e6c-bbe9-168b3bd8c551", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ec4d78-3f39-4f23-b478-c1f74c58a510", "sighting_of_ref": "indicator--bd5a9956-7bb2-4c29-bf54-ee944f981f57", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be30aa8f-670b-4b1b-9a3b-c99349904c4d", "sighting_of_ref": "indicator--10dbdcc4-ccef-4c3e-ae70-1517d80bc4df", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc183cac-8cce-4cb6-bd73-f3ee151c1f98", "sighting_of_ref": "indicator--ef0e76d7-b2dd-4d7e-9013-8188db17c60c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995bd5e8-b0ca-4fa0-9aec-407b65674f98", "sighting_of_ref": "indicator--ab0344d8-412b-4bf1-9db8-828542156b35", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0314200-7632-4acc-9cb9-1180009f528f", "sighting_of_ref": "indicator--9a6c1c8b-ab95-454e-9594-f2f6f4e1eac5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4435da-392a-43ef-85f6-821012b08194", "sighting_of_ref": "indicator--7e9c4642-6c09-4090-8256-731f7fb9692f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28cde1e9-8e25-422e-b0d6-dc635a470e87", "sighting_of_ref": "indicator--7e9c4642-6c09-4090-8256-731f7fb9692f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5941c0-f7b0-4912-891d-5b696e54bdc6", "sighting_of_ref": "indicator--ab15f42e-293b-4406-9b7a-90ae6dd0f53e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c955466d-59fd-4ef8-8bdc-ef33a97b1708", "sighting_of_ref": "indicator--1c64f22f-065d-4a33-a668-954fd91f5bac", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177e894e-a7d4-4c04-92cf-4f16d4451000", "sighting_of_ref": "indicator--3a3095eb-c073-4fbc-858e-498ec26f9ec6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69dd4149-1dc7-4da4-b8da-9379bc812cdb", "sighting_of_ref": "indicator--9d89678e-6b49-422e-9500-a8dfc25d4654", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e78936f-3101-43ca-b124-dc88df09159d", "sighting_of_ref": "indicator--547dcffb-beaf-4cf9-bf16-867a27b5694c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--889c151c-7a1f-4229-b369-8a9bbd38f459", "sighting_of_ref": "indicator--09d0812d-3318-42b9-a480-eb78f3c8137f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8ec13b-bda0-4dfe-97a2-e0c44d100a49", "sighting_of_ref": "indicator--75046d66-96e8-4622-80c8-90ac61aa903f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e13d5d3-0714-4ef1-a193-ba0e255037b3", "sighting_of_ref": "indicator--271f6eda-e610-4988-81e1-af494fe29049", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ff0f44-d3de-423b-8668-b8c14188cf68", "sighting_of_ref": "indicator--6ef9b75a-06b8-4195-9ffd-f6b762629aee", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be35e36c-6f54-41ec-9438-7dadb16d12b7", "sighting_of_ref": "indicator--4fbf63da-c412-4b7e-aec4-3518e2326774", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77095ca9-0321-452d-930d-3f20cbf464a2", "sighting_of_ref": "indicator--5ca1b867-6b32-4df3-8047-468d81c00793", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6235a52b-dd8e-4ae9-ab78-1c72156ee63a", "sighting_of_ref": "indicator--5ca1b867-6b32-4df3-8047-468d81c00793", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551a031b-5935-4f93-87a3-94cc827d3223", "sighting_of_ref": "indicator--70c0712e-35a1-4155-b68a-83760db88c2f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96fa38aa-c1db-467f-9be9-2859a63cefb9", "sighting_of_ref": "indicator--91a45d9c-f721-4a50-92ad-3e727a92be96", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bc1eb4-98e8-4d25-bfe6-cd5377589ac0", "sighting_of_ref": "indicator--c97ccb13-46b0-4ca6-80fa-afc0b9557958", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac49cf2c-dbd9-46eb-8902-e4e74eb8ab2e", "sighting_of_ref": "indicator--a330aee4-b687-49e0-bc97-a4434d1d7b79", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cdf7f10-b090-44cc-994a-503a47240ebe", "sighting_of_ref": "indicator--53fb9c18-b8ff-4b75-96d0-f3ea6c39e185", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f7b004-d72d-4b72-9454-717b12b5de24", "sighting_of_ref": "indicator--7f82fbe5-cb3d-4252-954e-367151230ef7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3334fc2f-5b43-4f9d-91b2-18db5c342bfb", "sighting_of_ref": "indicator--74cc039c-46bb-4e62-ae5d-de231b1b9a03", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f08c4bf-bcd5-4fc4-9922-ea9e48090bca", "sighting_of_ref": "indicator--523f2e98-2e10-475b-a08e-18a7ded69d50", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180da3a1-1b94-4702-a332-c1c80636fed8", "sighting_of_ref": "indicator--2e67d134-7d69-446f-b662-82935f90bbe3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f85b9c-fab5-49a8-9f94-79e67a0818b6", "sighting_of_ref": "indicator--363f63f4-eb1b-49d0-97f0-961295c78f2d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b8eeb8-9ab0-45b4-8398-caf2aa2d2a94", "sighting_of_ref": "indicator--36f30a8c-d85e-4a67-a978-7df493dc14b6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c86ac69-fcf0-4c58-8e81-260f38736f7e", "sighting_of_ref": "indicator--18da5341-90a2-4213-8aa1-c6b28a866dbf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a6613b-c98a-41c2-ad47-e02f50c4189d", "sighting_of_ref": "indicator--e138f350-c8ff-4f18-9bf6-5b170c535f14", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369a4a8e-6217-408e-9eed-9145a375925a", "sighting_of_ref": "indicator--7f75df6c-f06b-48d2-9f17-51cf4ca4ba4a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c64c4bd-ea66-4ec5-9448-b594d7717666", "sighting_of_ref": "indicator--1e6e1a05-77b7-42fa-a3fe-bd5d08a6e8a2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f595cb-3be7-4ea4-a1be-804295b51770", "sighting_of_ref": "indicator--0f99af5e-25c7-489e-a451-486378abff9b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9046dbe1-b099-471d-9867-1ec5a5be9130", "sighting_of_ref": "indicator--78646fc5-808f-4eaa-ba22-c897bc8f70a2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afe5e97-bd0b-41fa-b0cf-013b3b546d24", "sighting_of_ref": "indicator--75268629-36bb-41ac-ac26-9a94d3656757", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfde7479-8df5-40e7-af75-91c0eb6926c1", "sighting_of_ref": "indicator--0a17ba50-4cab-45fb-b926-34592327b62c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b53a13-ffd7-4c98-8e60-486a661004d6", "sighting_of_ref": "indicator--46db12ca-dc6e-4a89-8f64-a164f021157a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b6c0a0-bdd8-4978-9f46-773f333a7cc1", "sighting_of_ref": "indicator--240485ae-81fd-45b0-a440-4fb519389207", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6d94c2-f82a-4c78-b89e-de76fc717b5c", "sighting_of_ref": "indicator--04289ac1-833b-4cfe-81c7-be268caa9f35", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53bd9cb-6e1b-45c6-ae50-73dd1b17b7ef", "sighting_of_ref": "indicator--e419c906-4a74-4b48-8743-d7a8ddc9cb53", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25988b7a-b3b8-4c5a-b524-a50198eac1a6", "sighting_of_ref": "indicator--f88562c2-942f-4266-b23e-57ec46085df7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99321add-5c9b-4294-96ea-48d11362b35c", "sighting_of_ref": "indicator--c18fc1f3-f1fe-4357-99d2-3983fd690e3f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df4dfbf-4836-4632-ad70-b1b554b3c6bf", "sighting_of_ref": "indicator--0d2cf8d8-b802-4255-8784-35161902edfb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9821116e-a994-4172-b881-13038750fc69", "sighting_of_ref": "indicator--d25e9b8d-a2e0-4f49-89a9-4ec17f94c6db", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423c46c1-4fbd-443f-89e6-dd48f60433da", "sighting_of_ref": "indicator--ac110322-d634-4f50-bd1e-656d9fb33c97", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663f3387-655e-4dfb-91de-1c054dc03ebb", "sighting_of_ref": "indicator--218dee0d-743e-4e77-b21c-a9889b9a7ed0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97aaeff-4add-4264-a9e7-b5e58df223d5", "sighting_of_ref": "indicator--f8cbfc95-512d-491f-a933-7ab8340daae1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab1552a-53d9-4998-8375-1a332d3aa346", "sighting_of_ref": "indicator--55f2e41c-eeaa-4dfa-a6bd-5e0e06a74669", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91debe73-82d4-482f-9e48-dddea7e4818b", "sighting_of_ref": "indicator--4ad493ed-52c8-430a-be60-c364dfd00dec", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3d7457-7793-460d-b2e2-5af9bc85f3d0", "sighting_of_ref": "indicator--80b52e5c-3573-4df3-99af-95a5a4fe4f46", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5239576-6edc-48aa-b7e8-430806d2c769", "sighting_of_ref": "indicator--4d024022-e62c-418f-b239-172981516675", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403c4248-20b8-41a8-b523-09de99c0b775", "sighting_of_ref": "indicator--e10c527e-e7ee-4c69-8a64-923a16a32503", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff9b290-caa0-45a6-89ce-7ab55261e115", "sighting_of_ref": "indicator--9bc92cd7-9142-4823-908d-f27dbdb2d0d1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d94e59-5a11-4164-84c0-bbd162f4d28d", "sighting_of_ref": "indicator--3c6ee45d-6e69-46fc-8066-0c3e59e85a11", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32704695-3e00-4661-bdf0-de11ecd7982a", "sighting_of_ref": "indicator--18f41b90-1fa0-4a5e-9cfd-5fa80b3e1f08", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4d0f62-f2f6-4ddd-aef6-241d5335c2da", "sighting_of_ref": "indicator--2f4be429-f7cd-4809-a124-1afb05d79ab5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495e6553-f814-402b-a3da-e2c77f44efa7", "sighting_of_ref": "indicator--40569a49-1b7f-4c49-9a94-9051d83792b5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90146216-72c2-4732-99d6-d27f9e33bcaf", "sighting_of_ref": "indicator--78b5d9be-957b-4e0c-a3e7-0559456b1dd9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb65d76-aba5-41a8-a87f-ee9b75fe51d0", "sighting_of_ref": "indicator--d2df8f89-aa96-49d8-8266-665f39a12c33", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca990f7d-6a8b-4ea4-9d3a-68fccf810703", "sighting_of_ref": "indicator--e11fd6e0-3d3d-403b-866f-a8c7397e3aec", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f519666-7e4b-4f37-b03c-30f55456bb34", "sighting_of_ref": "indicator--eb09946a-79bf-4c03-b71f-06fb9bd07b0d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b0db32-83d4-44d2-b8d3-b8ffa4e81511", "sighting_of_ref": "indicator--32bacea3-0d03-4e0b-981e-48ac5c72cd0c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074afa26-1d4c-4037-b196-ae28849e39bf", "sighting_of_ref": "indicator--962e76f8-2025-49cf-a6e2-e11ffbfaaeb2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57fdd07b-a13e-4175-8f5e-6f18c1764ed5", "sighting_of_ref": "indicator--b35a657f-05e3-4ebd-ad44-54c44318b952", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fafd9ae-77f5-4c1f-90dd-56b05389d7be", "sighting_of_ref": "indicator--eaa2e0de-908c-4d03-8b90-ad8aef05aa13", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54617305-5d00-47dd-82a7-496d3d9f6ec8", "sighting_of_ref": "indicator--6f177374-4fed-42aa-ae19-b037c60555d1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73825c2c-7757-4221-84b6-0a562ae22889", "sighting_of_ref": "indicator--f35e667f-649b-4aec-960d-d7053b98fbd1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc30e5c-2791-47c8-8718-eccf726e0b80", "sighting_of_ref": "indicator--b95802dd-0131-48c0-81c3-bc0fd6482849", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0e20b7-2752-430c-9b27-fddcc76570b7", "sighting_of_ref": "indicator--6af0e42a-08d6-4289-9ce9-04109f921184", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f5e070-f724-498e-8034-8226e0d50de7", "sighting_of_ref": "indicator--8b6163da-46f2-4e44-b5e5-f297106958c0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394d1d78-7ba7-4fbb-a697-46887d0dca0b", "sighting_of_ref": "indicator--3f82c385-32ec-493a-8d2b-58e9ffe456a2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce215fa-7c78-4582-8c82-51a32594f174", "sighting_of_ref": "indicator--f174cd60-97fb-4a65-8dfc-72f5e3495857", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b68f05b-83b6-462c-9c31-365f94137c19", "sighting_of_ref": "indicator--002f7b6e-53c1-40df-b440-3ebb2df0c639", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a6fa14-bc30-4146-b41b-e34aa42e3928", "sighting_of_ref": "indicator--e14cb727-d6a8-4e16-9c58-dd9eba39ea5e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bee0d65-fc50-47de-bf50-43e48ffd2cc4", "sighting_of_ref": "indicator--2faebac5-d445-4eb6-a55a-e7698bdca7d9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d43b881-e4a3-40bd-8357-b16c1cd33c12", "sighting_of_ref": "indicator--cc9cada0-466d-4482-be72-9538fc6d83ff", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f043fd4f-ec1f-4c35-8005-07872b3722fa", "sighting_of_ref": "indicator--f9531643-bf48-4319-8f65-9a676156abf8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff11f023-55da-4fab-8641-5e0e6dd362f5", "sighting_of_ref": "indicator--14a5becc-9b9d-4f8a-8148-c48ea9bd861f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce2538c-0648-42f8-9ee9-b5a20f31b885", "sighting_of_ref": "indicator--d9d54a06-0a04-4fb7-a9c4-52e01aee3ac1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b59b74-ea7b-40ff-94c3-81dc828da6ab", "sighting_of_ref": "indicator--c2fd6bd4-56cd-4329-9eee-47b29d012185", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5cd3fb6-4f41-45a5-8f62-26ef2f1ed6c6", "sighting_of_ref": "indicator--5d2bec9d-8395-4518-869b-67c5866b55f2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff45ea0-d96d-487c-97e3-e109102e0f71", "sighting_of_ref": "indicator--507d5a60-31eb-4ab1-a32f-0ce56079a81f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b78245-252a-4767-bd45-4c48743287b4", "sighting_of_ref": "indicator--2347d7ca-cde6-4436-bb59-2f3d90fb63bc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc74b2e-a557-4a77-a87b-7ef587108ef7", "sighting_of_ref": "indicator--55fc9444-69ad-493e-97f6-ac7753253e25", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8679563f-10df-40ef-bb9e-e3acaae716d1", "sighting_of_ref": "indicator--87b55dc4-56f4-4d46-85ae-99cc8f723d6a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d63b168-963e-48de-9421-6d9514527f6e", "sighting_of_ref": "indicator--4497e8de-b7d4-433a-b232-cfc0ba9055da", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfef6537-2171-4ad3-b689-42c9ce7dea97", "sighting_of_ref": "indicator--4497e8de-b7d4-433a-b232-cfc0ba9055da", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac892ddd-4c22-48ad-a27d-b17da456a160", "sighting_of_ref": "indicator--fde5e403-90aa-4516-883b-b085e821bab4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a865fc5d-5d21-4af3-9c35-2d395661bb2b", "sighting_of_ref": "indicator--b2b0d21b-f364-4513-a55e-905217e9d8a9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdd5839-1ea2-451c-add4-cb92dae27018", "sighting_of_ref": "indicator--745b3278-46a0-4113-9201-7dbe76e7c869", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35115155-45b4-4288-a107-0a06ad516f30", "sighting_of_ref": "indicator--609c33c4-4226-490a-9f6a-413189a46132", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a01cb12-1109-4426-bb53-0a5c7f098de5", "sighting_of_ref": "indicator--b077defb-3bd0-4095-b2ac-66f68c203634", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0652151c-12ee-44a0-bc50-2db9b4143ee3", "sighting_of_ref": "indicator--36257302-0152-452b-9e64-6677aad74429", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635f99f9-b519-49ce-8c10-82f4e775b10a", "sighting_of_ref": "indicator--2eb7d786-f662-4e5e-9657-77f2c3f7f613", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb3d31d-a2b0-4bac-a382-e7499f278e21", "sighting_of_ref": "indicator--116f3b95-c28d-4c3f-9a18-76fc151c6c65", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4729cd-5811-4b0d-abf4-ac9332ff24de", "sighting_of_ref": "indicator--d4a25689-2bc6-46fb-9865-4223d4b5482b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02292899-61d2-4c50-8fd8-2c2234bc3f1a", "sighting_of_ref": "indicator--d13d26aa-d1d9-4252-8163-bc2d4e2b408d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76af8040-1f01-4a93-9701-0b173d41945d", "sighting_of_ref": "indicator--310a374d-c586-4a3c-bbfa-b4804ddb0df5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372d7fc1-fc5a-42aa-8151-227325b3d23a", "sighting_of_ref": "indicator--41433b80-aa6d-4408-99ab-6e247525f4ed", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45158378-163c-441f-97ef-43420b87c17d", "sighting_of_ref": "indicator--4412bb0c-0199-4d7f-bb1c-aabfef0cd899", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0deecd5-846a-45d9-b090-93bbbbcc5b7c", "sighting_of_ref": "indicator--aa99d605-34a0-4f7c-affc-7e2e41a25d8c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ce2736-57f9-43e3-8e56-a248d0305cf4", "sighting_of_ref": "indicator--a3845294-93dd-480d-9f8b-7e72951231dd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9459bce9-bd19-41c9-84e6-45f122cde0d3", "sighting_of_ref": "indicator--a3845294-93dd-480d-9f8b-7e72951231dd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce8ab22-4a68-4f3d-94cc-1814268f39b0", "sighting_of_ref": "indicator--358750cc-7884-485d-b3ed-a678eaaf2bd9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b50c82b-5f01-4c49-a099-14500da1e3c6", "sighting_of_ref": "indicator--a127da55-f33f-4934-8eae-adb48e4dff68", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a5158c-905e-4bd6-b0e7-d020279f6096", "sighting_of_ref": "indicator--12ea68b5-933c-4313-8b72-6ef41a4ddc64", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e6be61-7f30-4ac1-8557-b3d35c374461", "sighting_of_ref": "indicator--f07bbf72-0a72-45a8-825e-0b3a1adaa877", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1285efad-418e-4f00-b74e-4762af85ca22", "sighting_of_ref": "indicator--f2931625-b251-4972-b913-1d3aa8a39159", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c63587d-fd26-465e-a5bf-3572de37e43b", "sighting_of_ref": "indicator--2a24ba6a-6130-4eee-8b7c-a6953f07688d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f71525d-7e5e-429d-a16f-ce21f1c6d6c2", "sighting_of_ref": "indicator--a60cd368-529e-4b36-b3dd-8a89d514d1c2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb027b8-f1a4-493c-984e-6b2431ca679c", "sighting_of_ref": "indicator--42913602-4728-4b26-89b4-b62a7efcadbe", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765599c4-00ba-49a7-94a9-cdc12dc31536", "sighting_of_ref": "indicator--13f261db-90c4-4be5-8587-175050dc447a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0846266-7149-419e-a165-0af37fc6e6f5", "sighting_of_ref": "indicator--7552ca3a-bd86-4b12-9b1b-0382ad82f38b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1240b543-9cec-410d-8586-f36d470e82df", "sighting_of_ref": "indicator--dc308b06-7a05-42bc-acfe-eac42a018135", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be88aae7-5c4a-43c6-83e4-bc49537bfbe3", "sighting_of_ref": "indicator--44a3dbc3-d0f7-4d85-bd36-3a0fc4f82320", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09adadcb-e70c-4610-b2d2-b6af0550c162", "sighting_of_ref": "indicator--8b2b8fc2-2680-45ba-9fe0-51a94215647b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598f81f1-6429-4be8-872f-6a6568df4fc6", "sighting_of_ref": "indicator--67b220e5-bac8-4f1d-8748-891f989fe582", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f478ce-192e-4720-b573-61f15a733f56", "sighting_of_ref": "indicator--654683f8-1f5f-487d-8440-efaee0a029d5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c06502a-8640-4076-8d3f-4495b0121ab6", "sighting_of_ref": "indicator--f567be89-2055-4e77-ac1e-06c369002fcc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4fa768-b1ec-4111-87c0-8126c8d382cd", "sighting_of_ref": "indicator--f567be89-2055-4e77-ac1e-06c369002fcc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc566ad8-3472-4b02-be67-208b784b6532", "sighting_of_ref": "indicator--660aa3b2-ee4e-4df2-98dc-e5a1ee955853", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cad1852-20c7-4a9a-a1d4-e4acf342245b", "sighting_of_ref": "indicator--e8d7b722-a84c-436b-8995-d315cd4ad103", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6fce72-a44a-40af-b3a5-0c3503ce940d", "sighting_of_ref": "indicator--52732208-f628-4d6d-869b-a2b0b5557cd1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af628bbf-a734-4d62-a9cf-c24d1b775041", "sighting_of_ref": "indicator--52732208-f628-4d6d-869b-a2b0b5557cd1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3975c506-3cbf-4139-b96f-78913f4e2b35", "sighting_of_ref": "indicator--8d7e64be-0364-4c4b-8e57-b05e704c3d2c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53d1c65-e9db-47cb-979d-b466c6d032bf", "sighting_of_ref": "indicator--5b611334-5407-4715-ac4f-fdcaf216ea90", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06248fa4-da8f-4fcc-a683-aa91da15aee1", "sighting_of_ref": "indicator--cf338588-ecc3-4942-9531-401a281621ef", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1df25c4-d92d-4c0d-88e6-c473f7d15993", "sighting_of_ref": "indicator--d9f678a0-c392-407a-b813-c3ebc338dcc0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef82317c-b999-4107-9785-aee65d29da7c", "sighting_of_ref": "indicator--a1947fbe-178b-48ee-9035-860f9eb6e223", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54ec8ed-ec73-4620-9798-62a8c82d2950", "sighting_of_ref": "indicator--5a9bd8b7-329e-4b4b-a3f4-0da8ce4e77cd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5696dc-f594-4f5a-a157-e2638f4a062c", "sighting_of_ref": "indicator--68afb57c-77fb-4921-9905-d6c71d7aec15", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9f43cd-fcb2-488a-80ea-34ccaaf67f84", "sighting_of_ref": "indicator--15d6ed4d-4233-4a47-8a95-afe140569f28", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83670673-156b-4051-a0fb-dacbda337d2c", "sighting_of_ref": "indicator--e5cdb05b-1c4b-40d2-8468-bab8bcee8b97", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9a7825-a773-42a7-ae98-4db14eaad527", "sighting_of_ref": "indicator--e5cdb05b-1c4b-40d2-8468-bab8bcee8b97", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aad5cd4-6dcb-40db-9e71-e898cd0f2afe", "sighting_of_ref": "indicator--7c2a3b60-7cae-4830-b807-75134d71a4d5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef04aef-73f7-4792-914d-aac07d82a7b2", "sighting_of_ref": "indicator--7c2a3b60-7cae-4830-b807-75134d71a4d5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0edf17b9-1f73-43e7-b6ea-1f77e945d853", "sighting_of_ref": "indicator--fb8f97db-aeda-42a6-b948-6400e58c7b42", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90838da-b783-4a24-9630-dce2d089e717", "sighting_of_ref": "indicator--02b2e0ed-b880-45a1-9c08-4525f64dbb59", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a021a6-c7a0-499d-9b0b-707dab681e08", "sighting_of_ref": "indicator--855c8a48-1463-4c2e-bfbe-2b0deafd0394", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db89acd-e840-4c9c-948c-d0246a6392ac", "sighting_of_ref": "indicator--6d296bd1-2772-4a5a-89a0-105b95514584", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7f5c97-eaf0-4620-978f-49762f5e010e", "sighting_of_ref": "indicator--7e8b8e27-41bc-4adc-b97b-bb27d3ebcfd7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2045fb-7afd-42f8-96dc-aa630c7b9fe6", "sighting_of_ref": "indicator--5156fc45-26c3-433a-b374-e57c64be7e0b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b114aa3-8bfd-4e6b-ab6a-b0a847734879", "sighting_of_ref": "indicator--20aa7367-f77a-4f3d-8c61-49831dd49646", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6002549-b141-46d2-95f0-e2fd3c13d06f", "sighting_of_ref": "indicator--d6aa7ba4-aae5-47d1-b621-3bbd0c190e70", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc017f0d-f885-41b7-92bb-22364f3ff201", "sighting_of_ref": "indicator--5b180103-7c3d-4452-826f-459d359bf4af", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832b0ccd-3dce-4d40-adc4-065a3f4c6167", "sighting_of_ref": "indicator--f07c808b-9656-4c37-b52f-7b4c10ef68d2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557eafe7-dd5e-43f1-a868-93785a36057b", "sighting_of_ref": "indicator--acf80e05-344a-45c4-8536-914857ee7364", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de39b41-700c-4128-b752-eb43142391a5", "sighting_of_ref": "indicator--c937e42e-32b5-4701-8d2b-cc5a9f7cefda", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0e523c-6bd6-491c-bf99-08bfc6231d9a", "sighting_of_ref": "indicator--cc4746b9-5299-454b-9e9e-355ba15d0063", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996ecaa6-9b96-41a6-bce3-54f0ef482caf", "sighting_of_ref": "indicator--0dd54b0d-cbc2-4947-8039-a0ab7833fe94", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a3bf51-045f-4c1d-8813-6dceef104cdc", "sighting_of_ref": "indicator--7cadeddd-532a-4bde-b05d-0d0a424a199c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795cd685-8972-48ac-9d15-7ba92e8fbfc9", "sighting_of_ref": "indicator--c1263b6d-400e-4f8a-b66d-97619b531b72", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fdecb4d-dce6-419d-99e4-0924e796c95e", "sighting_of_ref": "indicator--b9cc9eab-1923-4a0d-a49a-fd028d9cd98e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb848bc-9198-4e5f-9530-88722e69aa0e", "sighting_of_ref": "indicator--aa42266a-fcc4-450f-88fb-7bcfd2edb38b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78050b5f-a925-42dc-bf3f-701d8286fdff", "sighting_of_ref": "indicator--7b88ba51-bf0b-4119-a76f-764a390a955f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094b2d44-bcb8-4f0a-a660-cbb32e84368c", "sighting_of_ref": "indicator--59be9a97-d0dc-486e-a33a-e4bbcd17a349", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ebf2c6-dfe8-4a8e-b96e-1e55a4b1adf8", "sighting_of_ref": "indicator--b0777695-395f-4fd1-abf6-0f32694f2e03", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb2b8cf-58bb-43c1-bc4c-e39f34179240", "sighting_of_ref": "indicator--3288cdce-0138-40bc-b25a-f8bcf75b71ec", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac008c0-d834-4da4-bba5-33415cd03556", "sighting_of_ref": "indicator--63d3c611-f0e7-432d-8d2c-741326726e36", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44dbc9a-35da-4b92-805f-5e08cd34a75c", "sighting_of_ref": "indicator--304aa8f2-cf09-497a-b8bc-fe30a27e1f40", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b3d4cb-7120-49f0-ab78-1b7955efacdc", "sighting_of_ref": "indicator--2957d1b4-475a-4fc8-a25a-30529f21f51a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43732c45-6cd5-4ad8-8d16-ba112ed5f223", "sighting_of_ref": "indicator--0cc3a016-2213-4ca1-826c-a8bd45a2e6dd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff31d36-9781-4dc1-b732-f420410d146a", "sighting_of_ref": "indicator--f1f91b17-e9c4-4aab-9028-751309e1d688", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb67b2c-a7ae-4825-afdf-bf3c750398f9", "sighting_of_ref": "indicator--6494ce39-5952-4d14-bb52-72dfe3d37965", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd6b28e-0f6b-419f-97fb-4e811a2c9bb9", "sighting_of_ref": "indicator--423db0d1-d8dc-45f4-8ade-4686737c4e1d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790b696e-8e53-4bb6-a068-57d4a392314d", "sighting_of_ref": "indicator--d3793887-b9b4-4ad6-b6f3-16dc4419986b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032ce66d-f556-440b-9723-7244a0e4db62", "sighting_of_ref": "indicator--1475bdbc-98d6-4e55-b02b-39052ba6f476", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8209c9-696b-4c03-b12f-716003f00696", "sighting_of_ref": "indicator--8e7d7637-6f80-497e-85ce-5aceea624d1b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e4b402-a817-477e-837f-1286adad6a24", "sighting_of_ref": "indicator--b2b262f8-75e3-421a-9650-67d4dad8ec35", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9479ab1-96c8-4c54-86f6-bf0730643c9a", "sighting_of_ref": "indicator--fd6907eb-959f-4bad-a457-e450b3254526", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ed874f-b50d-45a4-9e3b-fca6cdf3a8c8", "sighting_of_ref": "indicator--c775e561-c8b8-4571-aa5e-6c26c111bd09", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffce2fa8-dd5b-4c66-8f2d-8d72a92749ce", "sighting_of_ref": "indicator--167d25d9-0b15-47ec-bdf2-e797d9244bca", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c667e6-f4ec-48b5-b914-bc84e66a3fcd", "sighting_of_ref": "indicator--05b4e464-ab75-40a8-a5e4-77aabe103c5e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a20fb09-6400-4ac9-82ab-0e4f6a1f77f6", "sighting_of_ref": "indicator--24616493-561c-4e97-942b-59d1ac50e981", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d2c872-a7b2-485f-9f8f-e2095b652f38", "sighting_of_ref": "indicator--24616493-561c-4e97-942b-59d1ac50e981", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19ddea0-0490-422f-8b82-ac786d546dce", "sighting_of_ref": "indicator--01a59a5c-8ad1-428f-a6d8-376b9c785ec3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b0654c-c4b4-4c43-8ee1-4fdd6f1b4a37", "sighting_of_ref": "indicator--ca3bb2ea-c4c4-4c33-b178-2a05b1fbbd87", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a09fee5-6060-414e-bf86-855cb0a4cbf2", "sighting_of_ref": "indicator--ba4ee2a6-bb2d-4653-80e9-85c9bd5fde24", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817377bb-d793-4969-9028-fb4b63c67d93", "sighting_of_ref": "indicator--f3398e9d-08ed-449f-bc9d-1839de0307a4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53486f2-cd74-4568-a021-8636319a5c46", "sighting_of_ref": "indicator--2d3c0fb8-8dda-4694-aa19-b19a391b56c4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6678b0-938b-464d-ba94-081ef6bbd08b", "sighting_of_ref": "indicator--7ba079e5-5588-4637-ac5e-2849c9c9951d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0493ee-8bb4-4fed-b437-a613e9538acd", "sighting_of_ref": "indicator--dcb7945b-6116-41ec-8b46-63419643e088", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe703bd-e9ad-4b57-b376-6f1fa02257a0", "sighting_of_ref": "indicator--88ce3350-069c-4a01-9e45-4f9badd75c03", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b77e004-a3f0-4b6a-a632-d28573bef3dc", "sighting_of_ref": "indicator--88ce3350-069c-4a01-9e45-4f9badd75c03", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a686df2-6bba-4855-8bf8-16d8b5808400", "sighting_of_ref": "indicator--508f7e5c-4b56-4f63-b7f8-409208b93907", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8504664-dc7b-41f0-a7ea-5761955c1c2a", "sighting_of_ref": "indicator--73f6817e-9334-4fef-9d43-64e13acb65d1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13dc57d9-56a9-41f6-b98e-fe85de44e79e", "sighting_of_ref": "indicator--4fd5961c-51ed-423b-9666-63087d6ce32a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6fcc9c-7360-4fb4-967d-b1968d5ac902", "sighting_of_ref": "indicator--351da9fa-5c96-425e-8a3c-6a3eeba4dd55", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b051a5b-a514-4fc9-ad0c-646524f99c8e", "sighting_of_ref": "indicator--fb940907-9920-4c29-b315-02d6d12d2ece", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e91224e-3863-4a4e-a7eb-2b49d4c7d76f", "sighting_of_ref": "indicator--e5e5b14e-1f02-46b5-97fb-1479c88f52b0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5c3d4d-a746-423d-bb23-befc3a313c9e", "sighting_of_ref": "indicator--414c384e-a65e-4f81-8357-bfb4d1dd9ac0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4511bb16-14a6-4589-a20f-f6e01a9a618c", "sighting_of_ref": "indicator--4b410d96-0dba-4087-955f-524548f3bda4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c74bb4e-4049-4764-8fd4-c23f9289f1ca", "sighting_of_ref": "indicator--04fb76b7-0244-4188-8d3c-2f2a50c49b06", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91ce9ad-7bea-466d-8703-db8914f54e59", "sighting_of_ref": "indicator--7e342250-475f-42da-8a54-3d1730a69aae", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d466db-a0be-4e9b-9c1e-71a5304c0bfe", "sighting_of_ref": "indicator--9cf867d1-154f-4c01-923e-82179e02fc82", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d953032e-bdfe-4b09-b6fe-6913b7c4042b", "sighting_of_ref": "indicator--57e3fbf7-96d8-45f9-bf9a-b3754f98a41a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176b12f5-c1e8-4d4e-a076-406545b2939a", "sighting_of_ref": "indicator--972f7725-3a5b-4a4e-bd19-0afbfa153ee4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf18a173-d244-4d8b-823d-939d1cccc2a6", "sighting_of_ref": "indicator--7c8ebf43-0c1e-4bbb-bda3-320297de760d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48fd81a9-4d0e-4af9-abda-4d22a6bf8809", "sighting_of_ref": "indicator--c709e7af-b0e1-4bb5-bb57-3ae9b58570f7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069daafa-56e1-4255-9fe8-c6c8214d2ae9", "sighting_of_ref": "indicator--e86b8fb7-6ee3-4f05-bd99-7b70bcf60d0d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd256b4-06b8-4cb0-9848-63e8674b1ed3", "sighting_of_ref": "indicator--338c65fd-0157-4d65-8a95-2e9f85452d60", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a43725-8404-40f5-9052-cbe293ad2d98", "sighting_of_ref": "indicator--63b7f374-8e09-4aa9-82ba-167ac439aa7e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11785aec-481a-443b-8377-837f788f75b3", "sighting_of_ref": "indicator--cd795e27-d64f-4b25-a607-5343b79227f7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a601766-aa65-47a2-867f-b64ca66377b2", "sighting_of_ref": "indicator--ac89b032-1535-4096-8e57-098e6ade70f6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db34258-0ed3-4f69-8379-9455a9e16c33", "sighting_of_ref": "indicator--cb390187-3555-4093-922c-4701323a7ad0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5c30e6-51e3-44c2-a603-05448cf5e146", "sighting_of_ref": "indicator--c78b9b89-b7a1-428f-865b-8a6f18724b5e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e64e8c-05ee-4cad-a6f7-1726a3dd5739", "sighting_of_ref": "indicator--54f4413d-1d5f-4b31-9122-2c5b4c5fe53f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb86828-965e-42ba-97ea-4ee0b1f76524", "sighting_of_ref": "indicator--92c6867c-46c1-47a7-a5e7-1d4ffa211f41", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11df6e9d-c6d2-4a34-85e3-731f4fdb66da", "sighting_of_ref": "indicator--92c6867c-46c1-47a7-a5e7-1d4ffa211f41", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1fb9c0a-5e2c-4010-9e94-a82a04b2e14f", "sighting_of_ref": "indicator--be79f584-f917-4045-b8c5-87a0573c3c52", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030d32fc-1cd3-40f7-bef2-28361b1525e1", "sighting_of_ref": "indicator--eeaae519-2c7d-48c5-b0b9-826cdf63df8f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a930847-b52f-4da5-b5e4-3d982b339e77", "sighting_of_ref": "indicator--30c0cb8f-cc15-4454-b44c-6b48990b6e31", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273d85b0-cf40-4180-b613-9aaa63e04421", "sighting_of_ref": "indicator--30c0cb8f-cc15-4454-b44c-6b48990b6e31", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f506e2f-a2ef-49ca-9239-45f85d0082d0", "sighting_of_ref": "indicator--de01e6b4-976e-43d2-80a6-cf918e46180d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6849e46-f92f-44b9-b0ab-7416238b8d17", "sighting_of_ref": "indicator--d54157fb-a455-4c26-8498-483eabf0b2c2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d496738-afb1-4c68-b937-19fa0dda877b", "sighting_of_ref": "indicator--bfa24abd-b2be-409a-8e84-08f7bc905528", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e626e260-2b13-4f6d-9991-a2d9f3d02978", "sighting_of_ref": "indicator--22761774-b9cf-4d7e-b014-83fce114a3e9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45ec012-a1c3-45d5-bc24-10f0e0302ea3", "sighting_of_ref": "indicator--a4c1a03f-63bc-40b6-8f83-5f4b71055fcb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc5fa4c-9186-486d-9826-936df55d0404", "sighting_of_ref": "indicator--5a749033-7c2d-43e6-9414-9f374f2ab941", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a134d5-f652-4176-bb1e-dfce5a75b006", "sighting_of_ref": "indicator--7be63190-c783-48e5-a1b1-fe308963d6fc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acb7a87-6edf-4d3f-97bd-8a49abca1eb9", "sighting_of_ref": "indicator--190bdc28-2443-40f8-b1f0-579684de57d4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb44480-a515-43ca-9ccb-2042d714fb91", "sighting_of_ref": "indicator--7ba9ac6f-9e50-45d2-88b5-c48929ea2062", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9a1922-c29f-4bd2-915b-2b51f910028e", "sighting_of_ref": "indicator--dc5f61ef-37f6-4204-9c7d-d11556cf3818", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f28230-fd5c-4fc5-a470-c0d17556610f", "sighting_of_ref": "indicator--ec2a8f1a-95c1-42db-897a-509a950ce86a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5cf940d-9b7a-4aae-a939-5e2d2d69873a", "sighting_of_ref": "indicator--0ef499da-c6a9-4ec7-8535-c65dce924dd7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3c98ca-620d-40e3-b344-05bb82a64545", "sighting_of_ref": "indicator--0ef499da-c6a9-4ec7-8535-c65dce924dd7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c976a74-308e-4eaa-9c04-30f95cc6c024", "sighting_of_ref": "indicator--b2b92473-eb20-41d2-a40d-01b67cadf621", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42e0a5a-2545-4cd8-929d-fac5e53b02ca", "sighting_of_ref": "indicator--b31cc541-ff3f-4ae9-b185-fc07d00af0f3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fceaa87-7f6a-4290-8e6d-f148f927f4d5", "sighting_of_ref": "indicator--06a1b3e5-01bd-4ed8-acf9-9288492cc4db", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70fc7377-bfe6-4ee5-9c82-7ddef5234bb8", "sighting_of_ref": "indicator--707ffce4-0df2-4666-b88c-1a83425e400c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc33f4e8-2dc5-4ab7-bb0f-b9ce747a6639", "sighting_of_ref": "indicator--ccdd4cee-3c14-4f44-878f-d74aecffd7a0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c04e95-9b79-4671-8049-6ecea4189aba", "sighting_of_ref": "indicator--ed0830db-ec85-47f3-a594-eaff08376959", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818ef569-01dc-4f03-9cf5-9b01931e0b45", "sighting_of_ref": "indicator--438d84f1-e2d4-498e-ac23-683d3b00bb48", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6915a6c7-cae5-4d44-a1f4-8cbb23034174", "sighting_of_ref": "indicator--f477936e-0b35-440a-8ccd-bab1a67b4320", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beeee296-940d-411e-b705-0294d95727d9", "sighting_of_ref": "indicator--231c9736-9286-439f-9a30-3470e0c6afff", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29cbc099-b666-4fb6-9a38-05bc06e12138", "sighting_of_ref": "indicator--aa127bed-fc9c-4c81-976d-1d7bdfb37734", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf37446-a97e-4f7c-b9f0-9be893e71ab2", "sighting_of_ref": "indicator--abae8adf-9970-44ee-9344-fdaa8c580553", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e94c00-ab8d-4531-8b48-1edad28a743a", "sighting_of_ref": "indicator--9bc8032d-6ff3-4bf2-b6d2-a64ad9907e37", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586d7b94-f44b-4a48-85a5-d766b9efb2a3", "sighting_of_ref": "indicator--7a3fd2d7-a278-4129-99db-c03f59afc9f7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b3ae2c-a98b-45c8-8ab7-5b6eca5c84af", "sighting_of_ref": "indicator--275cf9d7-f3f8-4d72-a029-56e18a310d46", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf93461f-bcbe-4dc6-ab5f-90a459f57141", "sighting_of_ref": "indicator--bee05833-0daa-4d22-a5f5-517493938150", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e5acc2-b27d-458d-928d-0f28fe25ea99", "sighting_of_ref": "indicator--e634963c-d46c-44b8-999b-b95e1b21e160", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f35716-2909-4c92-86fd-f734cea8c9ca", "sighting_of_ref": "indicator--5064c125-de0d-4d46-acc6-f64209439295", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a313082-d355-4922-b5f3-e936604dee2a", "sighting_of_ref": "indicator--b79eb6b5-b314-4fae-b7d9-dcc81e057af4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8727ad46-64b6-43ff-b214-ef4b47d6dd09", "sighting_of_ref": "indicator--8fefacba-afde-48d8-b9ab-f67de76ad709", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009728df-f962-4b46-84d6-f723e9b36df7", "sighting_of_ref": "indicator--dade2375-0c96-4af6-bd2c-cea646989b65", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3758911-9eb0-467a-989d-f02436e78431", "sighting_of_ref": "indicator--9a085b62-bba0-4487-9cec-1a40626539fb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c828442b-5ac1-41ea-9f70-79af762f3507", "sighting_of_ref": "indicator--9a085b62-bba0-4487-9cec-1a40626539fb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617c8afa-c75e-4b3a-9ca9-171fd3b355cf", "sighting_of_ref": "indicator--72c4f655-ecc2-481b-8b3c-89750fa93527", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf0eee0-72b9-4508-90e0-45f37208d253", "sighting_of_ref": "indicator--add02c07-02fd-4627-b4ac-2a75a3694553", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da7537f-7717-4785-b114-faac47a196e2", "sighting_of_ref": "indicator--c8ce1579-e21c-4f06-befd-0e5c13e2bef4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac11f344-9504-445e-8aca-516da0205204", "sighting_of_ref": "indicator--9bc73d2a-9146-494f-a6f0-e0458baea83d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c475c5ae-41d6-48b8-84b3-c90aeae2f15e", "sighting_of_ref": "indicator--06e7f17f-724a-437f-b0a9-8f019d4b0407", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bfffa6-366f-4d33-886d-b91fc6c9f145", "sighting_of_ref": "indicator--908053ae-7e01-4b90-9554-11b8df81f170", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a34baf-46ea-452f-9914-44fd0916b23c", "sighting_of_ref": "indicator--f805b407-7d0d-41b7-bc08-27a0fb11a600", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b1ff82-78fb-4b18-bddc-b4320d7581ce", "sighting_of_ref": "indicator--fa2a2c86-1eee-4a52-8483-716452036b2b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3e04d5-5e1a-4df6-9266-2d827c7fbc13", "sighting_of_ref": "indicator--51f58cd6-0585-430e-ba9a-a49d4d2bb36d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70978756-f9d8-4d4f-949f-419cdd89cd55", "sighting_of_ref": "indicator--2446aab0-5794-424e-a4c7-5ca33b7f096b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4c905b-6061-4179-9449-b7a1823bec63", "sighting_of_ref": "indicator--afd991c8-52e6-4d79-9a94-b010275a4719", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a347a0c6-fc5a-4b3b-bfa0-5433242ad981", "sighting_of_ref": "indicator--792bf532-6955-41d9-9926-6519c48ff637", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f84ead-3ec4-4e73-ad4a-155e55bc5e4f", "sighting_of_ref": "indicator--9aad2317-22eb-4257-a00e-0e20b1276693", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9593b2ad-4363-4be5-979e-5bee553f6d9f", "sighting_of_ref": "indicator--3f1a5167-7cf1-417d-9f47-4a66b3a5abcc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d36b576-5195-42cc-a691-d7f121f45a3e", "sighting_of_ref": "indicator--a5d96547-82ac-457c-8f84-f016f56cce65", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9fe489-4d3a-4be7-8e4c-31c3f904dae9", "sighting_of_ref": "indicator--435f0e46-b4f1-4203-90c3-68c658b3ccbc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a9efcf-1ca0-4023-9b02-ddbd99b992e5", "sighting_of_ref": "indicator--9bf79251-1d6e-4ede-ae60-6ea3a3752fda", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11584cef-7744-4353-bf7e-437207154335", "sighting_of_ref": "indicator--43372f5c-5dc8-45df-9761-69f6234a4000", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59e611d-0005-4586-b82c-17c77461576e", "sighting_of_ref": "indicator--70866504-3ccf-45b0-a2ac-d8b9ce9fe7b4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817fea91-ffe7-4c34-a9f1-3506f3b24638", "sighting_of_ref": "indicator--70866504-3ccf-45b0-a2ac-d8b9ce9fe7b4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c89c24-20d3-4d8d-9609-b103767fa53a", "sighting_of_ref": "indicator--7de698a9-e712-4163-92a7-0f06ee0e4c82", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84745cc-ef94-4756-8a63-e80da392a58f", "sighting_of_ref": "indicator--5f2d37e9-ea78-4043-9c88-f80084b8bbe8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e5123d-2c7e-41ad-85de-97991c17557a", "sighting_of_ref": "indicator--6f3acadb-6cfa-4ec5-a1bf-1e9a750499bd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8357a12b-f835-4506-8d9e-2f1178025f17", "sighting_of_ref": "indicator--fd57c241-67f4-402c-9741-59cda85924f2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d429e3b2-e3bb-4104-ae6d-c9ab75f9a6e5", "sighting_of_ref": "indicator--21f195c7-baa3-4b42-9acd-70d94af23bc7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd547366-5d88-4ee9-a4a9-2c499fca5838", "sighting_of_ref": "indicator--18ee6700-7a79-4bca-8482-ea2defe2dbb3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f2df17-b263-4061-9f87-31dce7505739", "sighting_of_ref": "indicator--aeed1bb0-06f9-40b9-8fe9-fa470e13794b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3ae95a-bf35-488a-863e-c6bfc1305f2e", "sighting_of_ref": "indicator--e9ad7d5a-d263-4d77-b8ed-92dc95636aa1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66961369-5324-4f67-ba40-53191f71a428", "sighting_of_ref": "indicator--c74ef262-b15f-42d3-83fd-d2ef14d2b4b9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6f7371-1265-4b1d-82a5-66aaab5c03ed", "sighting_of_ref": "indicator--37f96a84-0a70-444c-8c5b-3379ed5a6f06", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a52cb0f-ace6-45ea-8e7b-d7676432fe15", "sighting_of_ref": "indicator--8dc0d332-2021-45aa-96a5-90b5307ac873", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d53b537-4b4f-48a7-9fe7-bd08715a519b", "sighting_of_ref": "indicator--0e0f15b3-b828-496a-948b-c21570183706", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac954d6-60ad-4d24-905a-260ff4fc6a16", "sighting_of_ref": "indicator--a94281a6-73cb-4504-92f9-41471f5afec7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1709d8b0-0243-4d1e-9289-13d49b10da31", "sighting_of_ref": "indicator--d31e334d-cadb-4f78-ae0e-d6072cc9f403", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184e8efd-b68e-49a7-bb5e-18bdadbb8b7d", "sighting_of_ref": "indicator--0b81ad64-3460-431e-8d34-35a63f843cbc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b891826-fc8b-4638-a0f7-d6366b4b3f31", "sighting_of_ref": "indicator--648b0bf3-1df4-4127-8e5f-53e37dc0e644", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd7bc69-8114-4f24-8b73-7280d1f531ca", "sighting_of_ref": "indicator--9ac5c8db-ccb8-4806-9a43-acb781aa5691", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb76da8-3ab9-4aa9-bbe4-421f6f1b29bd", "sighting_of_ref": "indicator--d4fcbc37-33eb-4725-bc06-559380105c7b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285c858a-a5ab-4311-a936-fb7cf3b11dba", "sighting_of_ref": "indicator--4d08a427-59d6-4278-8fc1-b36c83f987a9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5af75c-45c9-4223-a02e-2252cb0d9820", "sighting_of_ref": "indicator--b5fc5f1c-e15a-4229-b09c-3d22ab86c722", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00214c98-ac97-4e1c-894a-becb506757e0", "sighting_of_ref": "indicator--3b514889-bf78-4068-977e-0ef29a3dd98a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fca561b-b622-45b4-9882-a46193a3dbda", "sighting_of_ref": "indicator--5a175cd9-b3c7-416e-92e1-3575316bc129", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0687bf7e-2aa3-4b9a-bbb0-ea988bc3a47e", "sighting_of_ref": "indicator--6bd8c242-b3fc-4c25-83ba-d2de9b7bec24", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af36e383-d217-4a25-9e33-3d857ced3310", "sighting_of_ref": "indicator--3a647d7a-8903-4ea6-99ed-8e3b6e484567", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d662d5cb-61be-4d19-adce-badeb7b902a7", "sighting_of_ref": "indicator--97f3a1ad-1313-404e-9027-6542d3cf5298", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b0bc7b-f550-4d49-aa37-5a86359f11c9", "sighting_of_ref": "indicator--97f3a1ad-1313-404e-9027-6542d3cf5298", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d3a742-5d65-4f69-ab0d-739da3ae2fe6", "sighting_of_ref": "indicator--37c67c54-6d96-485a-983d-afb001fc1dac", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0982538-37ae-47b8-8976-55ae729a22d2", "sighting_of_ref": "indicator--fbaa6187-5390-4c7e-8bfc-7872691b09a1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2521158-25f0-4bc1-b9f6-244711f4df32", "sighting_of_ref": "indicator--ee915be5-0be8-4abd-a250-1146d05653ee", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92dabfbe-1e41-4f4d-be47-b9b5ab2c8cea", "sighting_of_ref": "indicator--97b91b92-f9e6-400d-8c17-c3ec41358f24", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165bbb1e-1a69-4414-87cb-9b3691b1a969", "sighting_of_ref": "indicator--65d9b6ec-1242-49a6-8a19-8d16f0285770", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f7230a-4a0e-4717-9406-83e6ed6c1528", "sighting_of_ref": "indicator--85a04a5d-f977-4c99-a579-52d6c05fb816", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93367e3-c22e-4bb2-aa13-c1563f7cebc8", "sighting_of_ref": "indicator--cb28f135-d403-4261-98d6-0d9d22d1300d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71aaef82-2683-448b-a67d-88942e9c3ced", "sighting_of_ref": "indicator--4d31204b-4baa-48ef-b90d-c5445b43dab0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d6a4bc-050b-44a5-93d0-f34501079a66", "sighting_of_ref": "indicator--bebed85c-d1a0-4bf7-b674-25bb68501bed", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5330e0d-5f29-4a2e-b81d-0fc24e42d519", "sighting_of_ref": "indicator--7e045b89-5470-4bf2-9023-21ec0b0fbf31", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c03ab5a-b365-4e81-80c9-e5c5a1e29a79", "sighting_of_ref": "indicator--b65fedb6-2430-4cbf-b132-bf6aec20f589", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90661dc8-e111-4bb5-8c12-2aeca56bdd0a", "sighting_of_ref": "indicator--44c724fe-a5ec-4d7e-9d4e-b5b19bda4a8d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75339d0-f22d-4982-8b2e-12945649afa8", "sighting_of_ref": "indicator--55744184-26b6-450a-824c-d1b02f99071e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b51178f-25dc-43c7-8416-26bf1d1111b6", "sighting_of_ref": "indicator--38843b0a-bc3f-4a14-a662-9c3037ba4d06", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b531ada9-e55e-4f75-8678-fbe5d1c19599", "sighting_of_ref": "indicator--dd6574a0-1267-4b6a-8e33-643b8b3adde4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b179dab4-8891-4bc8-a28c-f6b7817a2a58", "sighting_of_ref": "indicator--b8972012-d42e-44d7-892b-e1c7e1b8b483", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ea74da-e5ec-4fab-a44d-e2b82bc24aa0", "sighting_of_ref": "indicator--52c5456d-39db-43df-9bc1-247bd521ca27", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8acbb50-9911-4314-a6cc-243882f07cb1", "sighting_of_ref": "indicator--ada12daf-967d-4901-96ec-00af5ed8b46b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70c9991-4a3f-45a0-a3aa-7e1dd660be75", "sighting_of_ref": "indicator--619d9eaf-2517-469e-beac-291cc2ea1310", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e25a30-7009-4098-b43e-9bd8eecf75f8", "sighting_of_ref": "indicator--08e072ba-af95-4218-928e-f06f33e85012", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afa5a8e-7abc-4f4b-b688-aae59fad55e6", "sighting_of_ref": "indicator--b680f9ef-67de-4972-9e41-f0d527a60e57", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf2186d-e8d1-4c4d-a499-a27248dbfc34", "sighting_of_ref": "indicator--8423ec2e-e23f-4814-82ea-8f4c6a46f184", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e267b2b3-b10e-4e0d-b4ed-c86cb9f7b4d3", "sighting_of_ref": "indicator--daac1c64-e436-4e41-83b3-8f9b980fe570", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba0770b5-d040-4199-898c-7e0758c5d58d", "sighting_of_ref": "indicator--d72688fa-2a1f-4e92-801c-2c921ef70eb9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5993da55-445a-4ec4-8aa3-aab8bc0b9975", "sighting_of_ref": "indicator--34de70bc-6565-4608-a247-8e46e696e59e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abb29d3-065a-4c3a-88fb-a093ba7c0da8", "sighting_of_ref": "indicator--ce1e328e-2c4c-4c46-83d4-a476406be5b0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0442d2f2-a2f7-4858-b82a-195819aba9f1", "sighting_of_ref": "indicator--1ea9c6ef-d2b7-427f-bb49-64acaa3e0a87", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fabe2f-5ce4-4cd8-80c0-0f82962c5704", "sighting_of_ref": "indicator--f7a04505-099b-47d9-90c0-b3b02aef2c87", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4032993-a909-49c1-b75e-449924a17c5a", "sighting_of_ref": "indicator--aadcba7b-938a-4087-accc-a010f49ffcb6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789c0e5c-7cdf-4b7b-946b-11e8ee7f111e", "sighting_of_ref": "indicator--89e9d1ad-5b6a-4a85-a2f2-32e3eb45347f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b305430-7f8f-44fb-85bf-0b835a31203a", "sighting_of_ref": "indicator--ef239c62-3bb7-40e9-bf79-606774e3a3c4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f367c7fa-df78-4e8b-b468-6f77af347349", "sighting_of_ref": "indicator--6442bff9-2668-4062-922e-b7f76909cc1e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32eb3503-1a94-4025-92cc-bd692f777636", "sighting_of_ref": "indicator--4b95ff47-ed90-4490-afb4-420a0a6537d5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20152aa6-46cd-4bd4-a4e6-209664bce941", "sighting_of_ref": "indicator--a965091b-9dcf-4881-9914-9382736f0b5f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34c71ff-a40b-4ede-b20e-07f094da09b3", "sighting_of_ref": "indicator--e7d631fa-211b-4bf2-ad5a-aff0e4865b9a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b5427c-e948-491f-a5d0-656626fcc71b", "sighting_of_ref": "indicator--c113bb8b-91f6-43d4-af87-37f5c87825c1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f89262-c554-4371-a68c-8e48d6d40c2b", "sighting_of_ref": "indicator--326e2cf3-1778-498c-9062-7032b9a207ff", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7880701d-424c-4b64-92be-b920547e77b2", "sighting_of_ref": "indicator--cc963f56-595f-4635-a1e0-fac1295567f6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7215e7af-e4b4-4227-a1bd-5b33283e506c", "sighting_of_ref": "indicator--bda7e57a-c00a-441b-9bc7-3c6e877b38dd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5bd45f8-2ae1-46a2-8008-f7401be876eb", "sighting_of_ref": "indicator--408f1f6b-36ca-4303-a3b4-b0fdf8ea2592", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18b58c7-d16d-4034-a706-bd2471f4ef76", "sighting_of_ref": "indicator--f95fdddc-093a-4880-a83c-1ec0e5ae9327", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdef56f6-d6b7-4766-8383-a1c39b4bf9f3", "sighting_of_ref": "indicator--b1ef2800-d9d2-4865-a1cd-46cc39291202", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d715bb-1356-424f-bb4a-0c94cbb7ae7f", "sighting_of_ref": "indicator--57dd10d8-fc49-4c37-b55a-0a2874977d9c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479b82ed-fb15-4e7c-a123-d67f5a63e6be", "sighting_of_ref": "indicator--c41f788a-d006-43a9-9f73-b5c0aabec90f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23802a1-3e14-4104-88ca-60d229728402", "sighting_of_ref": "indicator--3a32d209-329c-484b-a00f-7a5b3fb1ffcc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6a2e57-42d8-4827-8029-33a7f2144c1a", "sighting_of_ref": "indicator--db75a878-41f7-4eca-883f-e42e8c6f88c2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfbfb4b-b847-4f1b-a31d-5d86acdf8710", "sighting_of_ref": "indicator--fd3c420f-e167-424f-8dd2-87d3d74588aa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a351fa5c-dc68-431e-9052-2cc5bd2b30fb", "sighting_of_ref": "indicator--fd3c420f-e167-424f-8dd2-87d3d74588aa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a10638a-20d6-4ac2-a3b9-ca3523d8b6a3", "sighting_of_ref": "indicator--79bbcd93-bc18-4973-adaf-5accdbe9b838", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3dd1cde-21a5-4772-bbe2-69ffd036d59a", "sighting_of_ref": "indicator--88b51175-241d-46cb-850c-915d32ca7849", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47cbe7b1-88d0-4e71-9ce4-902318b996db", "sighting_of_ref": "indicator--5ac2c2ac-8b97-42ab-93f0-b66250f14723", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228d98ef-3954-454e-877f-f4e93335e3aa", "sighting_of_ref": "indicator--fd0848d9-3a3c-46b1-abef-ebb81d2edce6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336a281f-7667-4c4c-9bd6-acc14a2a2c84", "sighting_of_ref": "indicator--f00148b0-b044-4914-924e-48f37f219848", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b55503bc-5b87-49b7-a084-0c5a1f2a3606", "sighting_of_ref": "indicator--afee6d64-f362-448c-9090-c6141286e2b8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a7540e-3ed7-4841-9fed-12aba157d83b", "sighting_of_ref": "indicator--3b2b764d-ec27-4346-bfca-f889d68ebdd7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feea00e0-7617-4bc9-9e4e-64d91a85f978", "sighting_of_ref": "indicator--baff0d2b-eff6-412e-b051-39327b594f53", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07dd215a-8021-458b-ae11-7c227d2cdba4", "sighting_of_ref": "indicator--649ebf7d-a21f-4102-80ea-a14f0f4bb688", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e61ffa-117c-4a28-a751-a0332a439519", "sighting_of_ref": "indicator--1b4a6988-e54c-46d7-b6fa-3d5df7e8db76", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ddcc2cd-0bef-4f76-892f-7693ac8d4c6b", "sighting_of_ref": "indicator--0f1c43c8-451c-4b76-8d1d-c6e63d15956d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97c4045-5256-409b-805f-357c140cbb9c", "sighting_of_ref": "indicator--24493d98-e2a9-48c2-ad6c-7adfb2963a07", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751b56bf-1a6d-4840-9335-39eac7b99d1d", "sighting_of_ref": "indicator--db363f15-bd20-4638-b342-9310d58f6e23", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419b0b65-fe11-4ee5-9280-f8b75afb1890", "sighting_of_ref": "indicator--aa6b09ec-1947-4c0e-9349-456625af44bf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2443b536-9fe2-49ef-b44f-9bf3ea1005a3", "sighting_of_ref": "indicator--60e485a0-a389-449a-8062-9017baf841e6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63f87da-f40c-4245-9d51-73a3317da4c4", "sighting_of_ref": "indicator--af14ae0c-e881-48f8-8030-a3e5ccddf0e2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf15afd-9002-49c3-9b9f-bc488a8e5289", "sighting_of_ref": "indicator--fbb61a7d-8e9c-4660-b1a5-bac64b31ddc8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d140b67-4053-449d-931c-a8cfcc47ad11", "sighting_of_ref": "indicator--4ae72264-4861-4fc6-8eb3-f56ef6e9aeac", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece14482-ca86-453b-8bb8-619150829be2", "sighting_of_ref": "indicator--f28694e2-6dad-46f1-bb0a-1d78678e419a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683ed3ee-3695-4ed1-a0ec-da2397a9aa0b", "sighting_of_ref": "indicator--f28694e2-6dad-46f1-bb0a-1d78678e419a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb9046f-a815-4c99-a797-a9bb6bb63dd8", "sighting_of_ref": "indicator--f28694e2-6dad-46f1-bb0a-1d78678e419a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066e0007-4984-40e6-b5fe-e3b5f2caa819", "sighting_of_ref": "indicator--bcef6f16-4968-4232-8059-e21ad83825b2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35409894-8521-4bc0-852b-1e4382a70f80", "sighting_of_ref": "indicator--1bea2680-b8db-4fa1-bbab-eae84629d273", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb75a298-da04-4996-a5a5-b33697e23167", "sighting_of_ref": "indicator--ad6a092e-5b33-4751-b3b2-51203d93ab5f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f785fcc-1bb8-485e-8062-42a4b5922c2c", "sighting_of_ref": "indicator--202ea6f9-4c5d-480c-8755-d11df1a44d4d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10eedc7d-b5d1-47da-9858-3fa8ec833056", "sighting_of_ref": "indicator--23ed28bc-ecaa-4ff9-a351-2b8d2a85e90a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c70501-4df2-4b5d-8e84-ab051c408b04", "sighting_of_ref": "indicator--7049ea9f-ab85-4ccd-b84c-c1fdd4859552", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee4913a-2d1b-47bf-ac06-e7c5203c0284", "sighting_of_ref": "indicator--0a9c713c-4ffb-4c28-9c20-9342d066b9ee", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b1f460-5408-44a7-80a7-0174548f2363", "sighting_of_ref": "indicator--9d822381-b600-4c57-a9c0-e7174d0bf6a8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7705a57d-c661-4b6e-a18d-a8034800281a", "sighting_of_ref": "indicator--e19d9270-0d82-4095-9a6f-5e1fe10d07e3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7a6764-5b6d-4ff5-9d7b-8c98ef4a9c35", "sighting_of_ref": "indicator--0b56b816-dd7f-4ae2-9ce9-efbbc6c03431", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f8568f-a1a4-41f7-940d-ab0c79e4788f", "sighting_of_ref": "indicator--0d3b0a8d-b9e3-490c-9d6a-3ce938720ca9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db4b995-7c32-4053-82c2-3209a6fdd20c", "sighting_of_ref": "indicator--b2d8a6c8-7d40-483f-b1b4-569076a01c5c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b793bf-8c71-4745-aac5-61a52aac1113", "sighting_of_ref": "indicator--e2d70368-5dcd-4c0c-831d-6129eb86e026", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8131981c-a1b5-4fe9-8bae-943a715267f4", "sighting_of_ref": "indicator--8454accc-23bb-44c8-a9c5-49a6d3001049", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2422fc3-52f2-4ee4-a2c0-18dac235380f", "sighting_of_ref": "indicator--5db93c4b-758a-4754-aaa1-cd319b443d2c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137d9872-d596-42e5-bd5e-4bc21bc72fc7", "sighting_of_ref": "indicator--f5190381-9c19-449e-8211-8ec6b55dc9aa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360400ab-9bd1-4f15-8050-5f856f2f673c", "sighting_of_ref": "indicator--89bc93b2-94ae-4e80-85a8-212ec4eff977", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0863a54e-ae9c-47e8-93df-fa47a09fa696", "sighting_of_ref": "indicator--ab1687ae-063b-4844-9517-76698dada7bc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a178ab4f-2563-4870-b159-e35fb854bee0", "sighting_of_ref": "indicator--197af5cd-1a2a-4dad-bdc2-f3e6624060b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4db8f6-43b7-4e4a-8e8e-f3119b62c7ec", "sighting_of_ref": "indicator--e5406388-b73e-4621-b086-4738d495adf2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3268b6a-0f9b-4f35-9db9-1a4a19b58347", "sighting_of_ref": "indicator--c2948043-c2b3-4ed5-9432-377300a1b0dd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ac338a-e8fa-4a93-bc4c-d13506031143", "sighting_of_ref": "indicator--7b594764-d6ab-49d3-8a4c-4a29ee0cc2b8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54299db4-dc13-480f-bebd-a50bfa658fd9", "sighting_of_ref": "indicator--90f87bfb-12d0-4b08-80c8-91955575535b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0637b85-ae58-48e6-a5c8-9d5d69f4a08f", "sighting_of_ref": "indicator--366d2f54-0663-48db-864e-89b61dd7a38c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98d3750-a741-49b0-ae28-9ee64ffb3c4a", "sighting_of_ref": "indicator--d2b91cbe-7493-424e-a643-e85618d54b0b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6995e9-5981-4fc5-8d57-296660f54d3a", "sighting_of_ref": "indicator--d2b91cbe-7493-424e-a643-e85618d54b0b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9b01ae-51df-4b31-8aab-f301e01705c8", "sighting_of_ref": "indicator--8149cc44-f5e8-4e2b-998e-b1ce15e65216", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91b2e0b-7873-4963-9821-8acaf8c00fb2", "sighting_of_ref": "indicator--da07cda3-5261-40c9-81a7-9206212064cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4acd51-dcc0-4b90-b36c-709c7ca06094", "sighting_of_ref": "indicator--d88dd83b-abe4-4a3f-8f67-b306c44dd04c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c5788a-9336-48bd-9d40-9af7e35d102b", "sighting_of_ref": "indicator--42d5df2b-1d68-4f3c-898a-e62670d173b0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21cdec7b-8813-4d20-ab09-2a7e446f9cf0", "sighting_of_ref": "indicator--67eb2213-8f4a-4ba0-ab63-0940aa1ff118", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a4383a-d3e4-442d-87d7-fd3a6a3f20c1", "sighting_of_ref": "indicator--99c3b7fb-e240-4915-be86-ee2cf9ca1d9a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ec6f51-23ea-4e31-896d-4fd087ffb226", "sighting_of_ref": "indicator--02507644-d970-48ca-a490-c55271746801", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27194cd-087b-4726-837b-4f6d7f5e9f37", "sighting_of_ref": "indicator--c723753e-2699-4e7d-86f9-c8e0ac49a1f5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172895af-ab8d-4c0f-b22e-123e1195131d", "sighting_of_ref": "indicator--bcb3389d-0716-4f1f-8079-485ef603d3ec", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f87be3-d599-4125-9ac5-570bcf4fd7b4", "sighting_of_ref": "indicator--6e62eb4c-a9e6-4daf-b571-f05ca9e8d33c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bfbacd2-0efd-4abc-abe4-3e4b247cc43a", "sighting_of_ref": "indicator--6e62eb4c-a9e6-4daf-b571-f05ca9e8d33c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f347ff4-c17a-4a57-8b71-ae8f3915d34d", "sighting_of_ref": "indicator--6e62eb4c-a9e6-4daf-b571-f05ca9e8d33c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84547435-6dd5-4dda-8868-7cc6a36c1617", "sighting_of_ref": "indicator--18b0a74d-c0d3-493d-a9dd-30448fa3ac4e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6449fa-15a7-4915-973b-7d5bae302c5c", "sighting_of_ref": "indicator--18b0a74d-c0d3-493d-a9dd-30448fa3ac4e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43acd4fb-d98f-4ba9-80b3-63fc27bb6b07", "sighting_of_ref": "indicator--18b0a74d-c0d3-493d-a9dd-30448fa3ac4e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd490e13-43d6-477f-a538-69d987bf43f5", "sighting_of_ref": "indicator--a5fa0b2d-3952-43f1-8bdd-b41862942726", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8d052a-361e-4aa5-93c9-13411b4ea084", "sighting_of_ref": "indicator--a5fa0b2d-3952-43f1-8bdd-b41862942726", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07b3a43-09e5-465b-b30b-77e08e1449c3", "sighting_of_ref": "indicator--a7ca1992-b41f-4f0f-a2e0-ffffffefc996", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d84ed38-d58c-44ce-815f-26fe7d4a037c", "sighting_of_ref": "indicator--432d4458-a556-4190-a400-a4f1f8de7dc7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48f7445-9e62-4910-a8f0-598426ec0a4a", "sighting_of_ref": "indicator--a5a36894-fdee-45be-bd29-5d770cd17910", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0760d735-bcab-4f9f-80ce-ac2350b65306", "sighting_of_ref": "indicator--be0878c0-3875-4c6f-9d32-6e7331d5b900", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0c5927-a710-4562-b07b-1cc8a6c44cb8", "sighting_of_ref": "indicator--8403b82e-2b47-40c0-9cb5-007e5dae16a2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e9d656-8497-4c95-b27f-fd4250fde50d", "sighting_of_ref": "indicator--a72a92d4-19f4-46f3-a3a9-3e752424ad03", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd461ce-fa9d-432a-aa78-84eaa80b7144", "sighting_of_ref": "indicator--71d0b0b6-7956-41e8-ad5b-b15bdbb28959", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b00c3b-3e68-41d6-9c8d-f44ce14b4c6c", "sighting_of_ref": "indicator--7ffaa7eb-20a6-4ca8-ba44-21c8310112d0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329abe87-0f6d-4fc5-a3a1-58dd3f7c33f6", "sighting_of_ref": "indicator--e85a5e93-2ca3-4b11-8a28-fd632c3e9614", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4fc6124-2a47-479f-955a-e602c6217e27", "sighting_of_ref": "indicator--e85a5e93-2ca3-4b11-8a28-fd632c3e9614", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28ee217-565c-47b5-b281-45b794488162", "sighting_of_ref": "indicator--e85a5e93-2ca3-4b11-8a28-fd632c3e9614", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0496fb2c-1316-4d4c-bb6f-8d7be06369cf", "sighting_of_ref": "indicator--7f0f9d72-2754-457b-87cd-b60eb0a832d3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d0eac0-7fb3-488c-b240-03354be08217", "sighting_of_ref": "indicator--d72d3eb4-470a-4947-86cd-513dac0bf283", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7b3286-b615-49cf-8062-a3713128a3f7", "sighting_of_ref": "indicator--a14cd323-4281-4160-8027-fd1d9c4d8717", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17de0994-0c24-4c04-9438-2215ce1aed06", "sighting_of_ref": "indicator--41649a54-c04a-4660-b8bf-0a749c172299", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e37ba10-6d94-42f6-ade5-d61a9a486ac6", "sighting_of_ref": "indicator--41649a54-c04a-4660-b8bf-0a749c172299", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12549a31-8f6e-4a7b-98eb-0e4d81525ca7", "sighting_of_ref": "indicator--41649a54-c04a-4660-b8bf-0a749c172299", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbb99ad-483f-46e1-88c7-fd5c4214a51c", "sighting_of_ref": "indicator--88cc3fa4-d744-492f-99ba-85defc57bb23", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a62285e-b5e8-43c8-a62e-d1f9c9d61a55", "sighting_of_ref": "indicator--88cc3fa4-d744-492f-99ba-85defc57bb23", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ade2b5-bc66-4e3e-948e-91252ccda41d", "sighting_of_ref": "indicator--88cc3fa4-d744-492f-99ba-85defc57bb23", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18af74c3-7e1a-459e-8b36-68b72917335e", "sighting_of_ref": "indicator--7cb6d8cc-badf-4015-8ceb-24e988c16b65", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4ae549-e834-498a-941a-5cd1fb367b58", "sighting_of_ref": "indicator--7cb6d8cc-badf-4015-8ceb-24e988c16b65", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c033598-d4ba-4f12-9b8f-758f131e8cbc", "sighting_of_ref": "indicator--7cb6d8cc-badf-4015-8ceb-24e988c16b65", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceca4fcb-8af9-496f-a2a9-ff29c4512675", "sighting_of_ref": "indicator--8db9a2a0-133d-4b96-a4f6-4063d2df18f9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df925364-a5b4-4d6d-b8b5-a2948c7ce248", "sighting_of_ref": "indicator--3e9ec03c-f259-4354-8144-8f772218ed23", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1930af62-9838-4969-ae9c-7afea7cbac71", "sighting_of_ref": "indicator--cd1acc51-6cc8-49da-956c-f45cbd3df6e3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f92a6e4-693e-4b4a-8a9a-f7b014c80e89", "sighting_of_ref": "indicator--cd1acc51-6cc8-49da-956c-f45cbd3df6e3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb3c4d5-0287-4133-b1dc-f078f53ee79d", "sighting_of_ref": "indicator--175e5fdc-a2c6-4cb1-8b1d-83d0feac2082", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78bd739-5aec-4f77-95c4-83fb601fe415", "sighting_of_ref": "indicator--bdcf7179-33d2-4125-8274-c7077fca549b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c11f9db-fed9-42f0-a0c1-c2ef390fc766", "sighting_of_ref": "indicator--45d70640-5efd-41d3-84e6-0be8b1c207ac", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1da913f-f607-431c-9a53-a54e0ef13891", "sighting_of_ref": "indicator--45d70640-5efd-41d3-84e6-0be8b1c207ac", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d46f0e9-2f22-431b-aabc-49605c89f1fd", "sighting_of_ref": "indicator--b4b6356c-62e0-4445-85dd-479c1cb85b9a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99ae761-a8fc-4814-9360-b7cd812b0834", "sighting_of_ref": "indicator--7b71329c-c5a4-4d16-a0f2-f08a104107e6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dbb08b7-c1f1-4fd0-98de-6570c072028a", "sighting_of_ref": "indicator--75a4dd9d-b35d-4061-a4e4-22927b87ab75", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03164df-a3ba-4d9d-848c-696a23508238", "sighting_of_ref": "indicator--75a4dd9d-b35d-4061-a4e4-22927b87ab75", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf084cd-6b06-4b83-97f2-3c689db94a34", "sighting_of_ref": "indicator--19680648-cfce-495e-a425-f8c7028186e6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda13e47-6fb6-47b2-bd6c-3a5e95f42ae4", "sighting_of_ref": "indicator--19680648-cfce-495e-a425-f8c7028186e6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d55988-7749-4d54-9efb-c8b94885d24a", "sighting_of_ref": "indicator--30db1647-75b1-4c23-90d7-04c8fd35cc69", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48cc796-392a-41f0-81f0-4e3f728aa56c", "sighting_of_ref": "indicator--58377282-1979-49e3-96b1-330b9c14d851", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8cfec1d-8f2e-401b-9948-7d30612d3620", "sighting_of_ref": "indicator--be91e3c6-9aa6-4ba5-bcd8-d544ae71cfa0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12efddb-13d8-4319-ac7b-afb05c3890f8", "sighting_of_ref": "indicator--be91e3c6-9aa6-4ba5-bcd8-d544ae71cfa0", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fad133f-3d31-446d-9edc-14e9dea34520", "sighting_of_ref": "indicator--7e065e71-14ed-4809-9345-b296855193a1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53668aa2-e35e-472f-a2be-530e02cca85c", "sighting_of_ref": "indicator--7e065e71-14ed-4809-9345-b296855193a1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6670b248-a644-40d5-9296-d0569eada03d", "sighting_of_ref": "indicator--580bfd29-aa94-4676-b8d5-b8690a80f09f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--addc1b78-5fac-40e6-bb58-5350abd9c375", "sighting_of_ref": "indicator--33dc9a61-4de5-44cd-9ec6-5f107bdea959", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844d034c-86ca-41af-a2a1-1ea49559ff82", "sighting_of_ref": "indicator--c0af1943-eb81-4ac1-9094-65658fff4219", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d1e324-5812-4077-9777-727275f38fcc", "sighting_of_ref": "indicator--c0af1943-eb81-4ac1-9094-65658fff4219", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0d281f-d654-4c45-8ed6-48b86df229a6", "sighting_of_ref": "indicator--15e1e099-b8ec-4b7c-b981-0311d5f17715", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e2f07a-11a9-4ec2-bf15-48be46bf237e", "sighting_of_ref": "indicator--b2e0479f-cdcf-4a99-bcdf-4a40a75eb149", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070ace85-bfc1-4db1-bff4-4b2a872768b4", "sighting_of_ref": "indicator--1f3fcc7f-b592-4311-9c20-cc2ebee5a5dd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694864df-b7ff-4504-833e-52bf9616c561", "sighting_of_ref": "indicator--1f3fcc7f-b592-4311-9c20-cc2ebee5a5dd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b369339-5376-4424-b3f7-c914f4e4f940", "sighting_of_ref": "indicator--c7d83ff0-0b24-47bc-8b66-3045ef13dff6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b9ebb9-e16a-4d2f-b7f0-489efaf76a7c", "sighting_of_ref": "indicator--3e7667b3-e279-4102-ac3e-adbf9e2d5005", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6608cd70-d1d7-48a2-9706-8147a58c3cf3", "sighting_of_ref": "indicator--3e7667b3-e279-4102-ac3e-adbf9e2d5005", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e5580f-1a1b-4abe-8701-b1ad86eecd75", "sighting_of_ref": "indicator--3e7667b3-e279-4102-ac3e-adbf9e2d5005", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfe5585-02d8-4969-b2ec-812ba8e4c1c0", "sighting_of_ref": "indicator--79ac3d8c-f317-4009-92f5-1d2bfcb3ac76", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45b671c-37d1-4ee5-b4bb-f0a23fa0dfa9", "sighting_of_ref": "indicator--79ac3d8c-f317-4009-92f5-1d2bfcb3ac76", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e54f6f-4473-4eef-8b7f-06f1d0af021a", "sighting_of_ref": "indicator--79ac3d8c-f317-4009-92f5-1d2bfcb3ac76", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ba9a9b-1b28-4443-be3b-dd5055bbc8f3", "sighting_of_ref": "indicator--3091ab3a-ae1d-4d42-8056-73de357bfc78", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1588dc-2153-4aa2-b88b-b9ef5400206f", "sighting_of_ref": "indicator--3091ab3a-ae1d-4d42-8056-73de357bfc78", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b057ed-fb9a-4235-be4c-28d555031ac3", "sighting_of_ref": "indicator--3091ab3a-ae1d-4d42-8056-73de357bfc78", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8a95b3-aec0-446b-9cc9-f32e63360984", "sighting_of_ref": "indicator--224cb946-dd68-48e3-aac9-dc72b5d80e2f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd14f2a-7f4b-453f-9c4b-50f126cc2b85", "sighting_of_ref": "indicator--224cb946-dd68-48e3-aac9-dc72b5d80e2f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e189575-715b-496e-867f-df3a6dbcc69d", "sighting_of_ref": "indicator--224cb946-dd68-48e3-aac9-dc72b5d80e2f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e176c830-9dc3-4570-b3e9-667cea6ed336", "sighting_of_ref": "indicator--22936848-c2b5-411f-8e8d-23af4f984d9a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7100cf50-9dc6-481e-a162-b7281e4dc796", "sighting_of_ref": "indicator--22936848-c2b5-411f-8e8d-23af4f984d9a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52dae5c8-ebc9-4d26-bdf1-5772b06c4995", "sighting_of_ref": "indicator--22936848-c2b5-411f-8e8d-23af4f984d9a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58a0b55-3604-4533-a012-7a47b012069f", "sighting_of_ref": "indicator--52267c6e-b356-41c1-8050-0e94ed8058a5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7fa2cad-018f-4cf1-803e-639bac7cdec3", "sighting_of_ref": "indicator--67d4be63-3664-48c0-990a-6e8a68200e0d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c772226-2efa-4d42-8aeb-163e350c7e3e", "sighting_of_ref": "indicator--63b294fe-a1e8-48ad-bfe1-18d287e0315a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad111b0f-cc51-436e-b6ec-a9e069f88d87", "sighting_of_ref": "indicator--b4b7d45c-1a49-4cd4-ae70-22a5d480c53d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27e1448-ed1a-4eca-8b60-4ff1e533543d", "sighting_of_ref": "indicator--0e2d2eec-db66-4e16-af28-16bc095e2fb2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235ce37e-a114-4800-976b-02d9b5b979c8", "sighting_of_ref": "indicator--0e2d2eec-db66-4e16-af28-16bc095e2fb2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c972b1-bd1c-43a7-880d-e05f4366de58", "sighting_of_ref": "indicator--cbf30996-1f58-48b3-9f61-48de049cf42b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6999017e-cd78-4c4b-82e4-381fceb5ab86", "sighting_of_ref": "indicator--e1986773-eecf-4312-8d87-4fa6448f9869", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d4530b-432c-44ed-9760-52de3de436fe", "sighting_of_ref": "indicator--e1986773-eecf-4312-8d87-4fa6448f9869", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91423a87-9445-4847-802a-a29c4186fabc", "sighting_of_ref": "indicator--e1986773-eecf-4312-8d87-4fa6448f9869", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ef330e-cf68-4b25-a557-2c756030a881", "sighting_of_ref": "indicator--f2bcb4c9-0f93-4fff-8e85-df6202f52eab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e1b8df-1329-4e8b-828b-53132bf31923", "sighting_of_ref": "indicator--4dbb2ec3-e91b-4ace-b811-cda04e42904c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee9aa50-f2e4-483a-a82a-fab091cbc0ea", "sighting_of_ref": "indicator--b1bb3b16-520d-4379-b44c-b8d000a5efd7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63b6b5f-5c7a-45b2-b001-953ca0f5baa7", "sighting_of_ref": "indicator--3bd0bb67-6007-43d6-ac8b-a99986310d3a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c857689-949e-4edb-9e44-788832ad4199", "sighting_of_ref": "indicator--8d7a4b96-23c0-4f0a-a11e-002121aa8c8f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b0fc76-11ed-4fee-a1db-542f434592d2", "sighting_of_ref": "indicator--8d7a4b96-23c0-4f0a-a11e-002121aa8c8f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b404f86-efaf-4f6f-9771-d79dc8f5f413", "sighting_of_ref": "indicator--63c45919-7ca7-4366-96ac-8eb312a417f7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02ef1a8-7322-48fc-9cbe-e1347777eb0e", "sighting_of_ref": "indicator--014d67ef-50fc-4724-b3a5-0fba7398b8d6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b30c81-cf7b-4416-8a89-8392ac831293", "sighting_of_ref": "indicator--014d67ef-50fc-4724-b3a5-0fba7398b8d6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d37f66-b1c1-4170-9a68-76280e319c86", "sighting_of_ref": "indicator--014d67ef-50fc-4724-b3a5-0fba7398b8d6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e94d7dc-80e6-458b-8209-fcbcf7671a2b", "sighting_of_ref": "indicator--99d6e3b4-4c35-48fa-b767-8279b5e5c09b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79a1a31-b746-4898-a3f1-d572a458e76d", "sighting_of_ref": "indicator--401c2857-8571-4b25-b1fc-e3405556e60e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad3f347-ee0e-4d4e-b7a3-c78f0e873578", "sighting_of_ref": "indicator--aec31017-b2af-4b68-af6f-bf51894de7a8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec1eeab-25b3-4e99-ba89-0a5e0ef646d6", "sighting_of_ref": "indicator--a4fcd997-30a2-43d0-b07a-2975020ef878", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf82e4b-5cf9-42a2-8c73-0a02988eb86d", "sighting_of_ref": "indicator--4885ecd3-5979-4edf-9be4-4f2bba1b2237", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f3418a-f57b-4547-aac2-21463e509458", "sighting_of_ref": "indicator--66968b49-55a1-4bd9-92bc-70ced5b29b8b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b23361e-a6bc-41ae-a86f-96908203c387", "sighting_of_ref": "indicator--08a28be0-483f-414d-b82a-8be29c363610", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c7e1c2-f6c7-41c3-840b-fb91942b16d0", "sighting_of_ref": "indicator--932d3305-7dee-4994-96eb-1324174a856f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a40d11-d3f5-4def-8a86-b3d0a1cf5651", "sighting_of_ref": "indicator--7cc3f946-9535-4493-a65f-ba77e48bf81b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b6f8b9-80bd-41fb-bf6a-ea99445b89e4", "sighting_of_ref": "indicator--2adf4242-f481-436f-9ea8-4209bfe67aeb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5163854b-2e01-4f08-8480-33c2008b7361", "sighting_of_ref": "indicator--26eef5a3-a0b6-47ad-91a0-65788d50c956", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c44e28b-de73-4f95-99cd-d03289e4e1e4", "sighting_of_ref": "indicator--0617493b-3842-4ea6-a2af-edfe6936dedd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db0d92c-2625-4393-a45d-c267bd44ed8f", "sighting_of_ref": "indicator--9c3342dc-189c-4cd2-902f-3861b4fc6408", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a2ff4f9-8588-4fb0-9921-0f954ce469a6", "sighting_of_ref": "indicator--fa5f56a6-b20b-4bdf-a09a-51983fca09f5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885ca8b9-08c8-4baa-a6bd-0438ea6b24f2", "sighting_of_ref": "indicator--2a66ceaf-3488-4c4b-8c10-3ba7a01e5d4d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a72af7-a1c3-414d-8b8e-6f32145e1157", "sighting_of_ref": "indicator--a7d3f97c-78bb-4e23-8c5f-f1b6ec7dd935", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e26deb4e-ea24-4f78-ab69-2a77dfdc43d5", "sighting_of_ref": "indicator--01748bcb-4c24-4634-ac31-bd05f76c2358", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc116dd7-8813-45cb-884f-9b9bfa5a290a", "sighting_of_ref": "indicator--a2dfa54a-21b3-40fc-af92-f466b5dc717d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afcf2747-1e9a-404e-a3a3-11b339096421", "sighting_of_ref": "indicator--5e812454-4358-4953-b773-e6cf16b4a724", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea27080-2dae-4aee-9033-7c4a8a68428f", "sighting_of_ref": "indicator--f0cebb23-39cd-4848-84e7-e7b03c485f2a", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8add874c-78a3-4c35-bf93-d9d3cf6f4375", "sighting_of_ref": "indicator--b083426b-a7ff-4f6c-9175-4199a3c869db", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068fdbf0-5b6c-4460-9468-71d55ef4b0ab", "sighting_of_ref": "indicator--62e014a0-cd1f-4f5a-8aa4-80e9517766c5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6adc302d-8853-4830-881b-a7f698a71f39", "sighting_of_ref": "indicator--a3df6ba8-1b90-45d5-bc40-11eb29b3aee4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1789b2f6-b66b-429f-89ca-77bb8056fcbe", "sighting_of_ref": "indicator--9a0ec6ce-16cd-4f8f-a774-bcc5fdf351c7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5721c8cc-c95e-487f-980e-246f613fd950", "sighting_of_ref": "indicator--2895160f-b44b-4cc8-ae35-1a39c7571610", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307cecbc-bef0-4dc0-90ee-f12010c21755", "sighting_of_ref": "indicator--946d25f5-8281-47ca-a47c-3abe4a88d61b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa646a41-e0b8-4a6e-841b-ca15ccb28c4e", "sighting_of_ref": "indicator--0c14c48b-66cc-493b-926d-9cc004ade805", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7353f9-8594-4b67-9948-cef5cb50aeb7", "sighting_of_ref": "indicator--8355c775-182e-4fb0-98c8-03cacc0ee305", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405e2ebd-ed16-4eeb-ac5b-86c2147dffca", "sighting_of_ref": "indicator--905accd0-d9e5-4230-900a-b64cbcdea541", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae2f6fd-21d0-4247-8fac-e1dd2dffc122", "sighting_of_ref": "indicator--1c72e724-91d0-45e4-9e67-4b0dbc9900b6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9baf4be-dab1-46e1-b615-010e1e06c6ef", "sighting_of_ref": "indicator--ae2e05f6-aafa-400c-bef7-0f80a1ac78ae", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23f2a9d-50ae-45dd-b89b-3804d1a80034", "sighting_of_ref": "indicator--c689d262-8cf2-4b6b-824d-7f247ff7199c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ab14fa-565c-47dd-a084-e4f371973d24", "sighting_of_ref": "indicator--6ffbc2cf-411d-435b-95ea-08ab6684ae3a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf837112-4186-4a2b-9322-5bcb7c33a831", "sighting_of_ref": "indicator--8e728c9d-32df-41a5-9ae0-8bb0a7ef5303", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97735718-9ab0-4db2-82e7-644f9628bc74", "sighting_of_ref": "indicator--62975add-f3d2-4327-82fa-9e0ce56de1c3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b13570-2850-4168-acf3-4375c5457ad7", "sighting_of_ref": "indicator--ff9bdc2a-f71a-4e00-a7a4-07b3dab9ce29", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a1ec5a-ef64-4a2b-86cd-c76a3209f967", "sighting_of_ref": "indicator--ff9bdc2a-f71a-4e00-a7a4-07b3dab9ce29", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d027d8-c061-445d-bd6e-94121d5dd337", "sighting_of_ref": "indicator--ff9bdc2a-f71a-4e00-a7a4-07b3dab9ce29", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141571a7-ba06-4c81-aebe-9a68696944b4", "sighting_of_ref": "indicator--e2aa8458-85aa-471a-9432-38cb4a72a777", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3614eea-87ff-4e5a-bb60-55ea69554739", "sighting_of_ref": "indicator--014b0b1a-a78a-4fbd-8159-59dbb361d162", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef0b915-5622-4098-8ffd-6871eb93fcad", "sighting_of_ref": "indicator--78d44d8b-d6e9-4bcb-943d-52eadc33f921", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5768051-c452-4860-8ec5-d8b1bfd03453", "sighting_of_ref": "indicator--484c4019-bf2b-409f-8075-f4f008c2380c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c91638b-1063-4668-9e30-fb554a8c3763", "sighting_of_ref": "indicator--dab2f303-109c-4c62-b19a-ce6bdab23ea2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98cdd1ef-69fd-4b7e-a6c2-7b7d670150c5", "sighting_of_ref": "indicator--260639f4-79e7-4dbe-9012-87639c90d662", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c37115-bb67-458e-9f51-86ecae37cb2e", "sighting_of_ref": "indicator--2a748152-00c4-413b-97d2-42920308a22a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e907e07-9ef2-4fee-855f-b6ce525f3a9f", "sighting_of_ref": "indicator--e07685ec-317c-4b88-9128-4175aa81cf2d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e908c6c-02c2-4683-a5ad-cd855925b667", "sighting_of_ref": "indicator--4e3c3618-a37a-4559-bdca-9d4c26e61c97", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e528e18-6022-460b-a23b-9a5b905dbe6d", "sighting_of_ref": "indicator--69104c0f-f213-4fa7-a96a-7c9dc6c6483b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6cbd36-9c3b-456e-bd2a-da8b6081a5cd", "sighting_of_ref": "indicator--064ee0f8-551b-4809-966a-07b427641123", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5f4be5-ee3d-4a65-87c0-015d672d3b93", "sighting_of_ref": "indicator--507a6848-2ca3-4766-ac47-1772b53cbfae", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248eb83a-50ef-44d6-9428-858f30dbc88a", "sighting_of_ref": "indicator--ef979544-0757-42cf-85f8-7d47e8adac54", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16445a13-c449-499a-bd33-a5d73d895c1d", "sighting_of_ref": "indicator--ef979544-0757-42cf-85f8-7d47e8adac54", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b93c0fa-e69c-4b6f-8a99-dbb58d043945", "sighting_of_ref": "indicator--09d5b334-487d-4ac4-9eb0-f607c07bf59d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1819cc37-a084-4f24-a30b-dd29be1477a3", "sighting_of_ref": "indicator--893072d1-a72b-417b-a04a-bf29fe2b3a02", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741e088b-edc9-4444-88f6-55e5e7188a18", "sighting_of_ref": "indicator--764bc87e-e70a-4507-bdff-f328540cd28c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745a8f94-9685-4a41-abf4-a4c189a47b7d", "sighting_of_ref": "indicator--5d4484f7-1ef4-4b84-af78-0a7c6f33a9bd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bebe5a03-18bf-49d0-ad45-24e25074ae9c", "sighting_of_ref": "indicator--3a3c416f-a2c7-43b3-acf0-bc605eebc495", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9dd535-92a8-4d90-b5d4-35e662d1c9e6", "sighting_of_ref": "indicator--3a3c416f-a2c7-43b3-acf0-bc605eebc495", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e732a3-765c-4132-a610-a59e5d099045", "sighting_of_ref": "indicator--c6dc5778-b512-41c4-84b3-929e3f258753", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a212b6-2f12-420d-9c78-718fd1b5e9af", "sighting_of_ref": "indicator--01ea85a4-683d-445e-a115-6c17ae2bf78a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db2f4cc-3b42-47d2-baa6-e150745a4016", "sighting_of_ref": "indicator--2d2da861-4634-4847-b58f-80ad9d9cd1e6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf7499a-070b-4864-b7d3-6dcff20c8c37", "sighting_of_ref": "indicator--3e6d0588-e5ae-430e-be76-2ac31442728f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a21484d-70a6-407d-a96b-6e91b5de2207", "sighting_of_ref": "indicator--39e5ad1a-9837-4c37-8343-53561ab8d83a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ce1fa8-7041-45ce-a71f-3ed9b092c825", "sighting_of_ref": "indicator--059ca122-2c96-4ef8-9819-c7231010be4e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac69eaca-5b2a-44fb-bb8d-411b8d9721f1", "sighting_of_ref": "indicator--37d8166b-d3cf-41ae-9e5b-ed7b1f64985a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd14de0-3763-4e61-8769-cace440197d1", "sighting_of_ref": "indicator--be293a84-912d-4734-9773-00cd4b218761", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de9026f-e93d-4dfc-b706-6483c4ec4a2b", "sighting_of_ref": "indicator--e5ed2af1-cdcd-4da7-8249-f14f56e4dd72", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e37dce7-9d4a-488d-a815-e7cae7312af7", "sighting_of_ref": "indicator--bc368368-6584-45c2-b3b7-2cecce9b0554", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315319be-56bf-438b-8299-22863ac84a37", "sighting_of_ref": "indicator--3c5a5548-e3f4-41b1-ace0-c5175cd50436", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1eb192-6990-4be1-90db-3902670810c2", "sighting_of_ref": "indicator--f15c3c1c-4354-49c2-97fe-9899a6a84b5f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d2b20d-6ad1-4219-affe-f80916faefbf", "sighting_of_ref": "indicator--a0301e50-ffb0-4bbb-a043-84705794ab01", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d97b4c1-ae62-44cf-969f-835116ecffea", "sighting_of_ref": "indicator--862be353-2ee0-4b1a-b318-69707123670b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4096d21b-a974-44bd-8011-725d691d65de", "sighting_of_ref": "indicator--7f72eab3-489a-424d-b089-7690e5a1f62c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b07befe-3ca8-4180-8c2b-7eb7757c9ff5", "sighting_of_ref": "indicator--3db90bb4-c91c-47bd-b5aa-0880cdeebb1f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24092c01-ec79-4c2a-bfd0-1fc508a78804", "sighting_of_ref": "indicator--16e8a64d-9065-44ac-b967-0638ea5dd11b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d46c205-f3cb-4258-a1a4-8c6bea9298d6", "sighting_of_ref": "indicator--cb5250f5-a33e-4279-aad2-c651fb771c22", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1cb8798-e71b-445a-913e-628f47ae4623", "sighting_of_ref": "indicator--eab1e223-ff4f-409c-a877-7dfc8fbdc0a6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23db63d8-9e05-47f6-804f-ba43a2f48a26", "sighting_of_ref": "indicator--ae1fb215-70ca-4c95-9270-7cd8fa058b6a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909b8c04-5079-4974-bdfd-a7e6351f8aaa", "sighting_of_ref": "indicator--d7d3ce14-931e-468b-b77a-fbd50dce2849", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130abc0e-b2cf-4b49-b2df-41b375b5c3cb", "sighting_of_ref": "indicator--d7d3ce14-931e-468b-b77a-fbd50dce2849", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4567208a-0049-4b78-b893-56905247d5e7", "sighting_of_ref": "indicator--d7d3ce14-931e-468b-b77a-fbd50dce2849", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac1b6f2-e4a9-4c56-ad98-d96c63809cae", "sighting_of_ref": "indicator--e6230ec9-81b6-42f1-946e-a60b66b930eb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b180cd84-a895-47bb-b6cc-8591753f776d", "sighting_of_ref": "indicator--e6230ec9-81b6-42f1-946e-a60b66b930eb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7d77d4-4574-4885-99e1-a8fbb7a433ce", "sighting_of_ref": "indicator--e6230ec9-81b6-42f1-946e-a60b66b930eb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0ec17a-7286-43a2-a831-555ae6a4ca5b", "sighting_of_ref": "indicator--791200d5-034e-46a0-8349-108f8da045e2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a871473f-bc03-4abb-93f3-8de00cd74ef1", "sighting_of_ref": "indicator--f4a27671-2740-4435-b370-b37f437d3a17", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41242f04-b0b6-4cbd-a4b9-808f50eb30c4", "sighting_of_ref": "indicator--78f365fd-b93a-43fa-9d82-bcf2959dbb7d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128939b5-aa80-45b1-bc10-526f2fb54f8b", "sighting_of_ref": "indicator--106a0f2f-8682-4165-a36c-aef7afbd6794", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27294eee-f85e-4204-8c32-2b377fafdf39", "sighting_of_ref": "indicator--e4a08ca1-5bfe-4b6d-87be-0fe12345c981", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d39bac-925b-45e4-8f29-360ab17eb04e", "sighting_of_ref": "indicator--ed021504-1e3b-4f9b-872c-a24b3cc74a46", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce64072f-7b3f-4807-a7fb-fdf8b52b4e04", "sighting_of_ref": "indicator--7dffe3a5-d626-4d3e-9be2-069508a0058d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f73aac-17bb-41e6-be77-5f395f22a7b7", "sighting_of_ref": "indicator--7dffe3a5-d626-4d3e-9be2-069508a0058d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5394f2c2-e0fb-43ee-99c5-6382b2c214f9", "sighting_of_ref": "indicator--7dffe3a5-d626-4d3e-9be2-069508a0058d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5193a6-0150-43b6-9621-73f150213307", "sighting_of_ref": "indicator--4ffb66ed-713b-4f30-bdec-686099ad4830", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad4b48f-b790-46ed-8dc1-8209f3ba381c", "sighting_of_ref": "indicator--b9a15eb9-5aa1-4f2d-9d6c-efad2ef4fb4d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ce776b-6520-4eb4-ade6-8d393e03b8bd", "sighting_of_ref": "indicator--d97abe81-7eca-4222-98d2-ae2b1d56b054", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27091663-3b3e-467b-848b-4af1ac8749ae", "sighting_of_ref": "indicator--dd62a4a8-abea-44c6-822e-a1c1b45ce1e6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9828a9a9-c1fb-400b-bc27-2af90fe0562c", "sighting_of_ref": "indicator--3a7d7a2e-6b28-4ea2-ba00-3b6eb19b6d76", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c7887c-3c2b-4195-acaa-ee06951dfb78", "sighting_of_ref": "indicator--b2c0f98a-f377-4b50-8768-6d46f90e845d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637b4dc5-9a06-43e9-bde1-a374110d1956", "sighting_of_ref": "indicator--612b70a3-b2d6-477b-9999-96499249e3cf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c18cdc7-46b1-47aa-8e08-c70064546ba4", "sighting_of_ref": "indicator--e05d754e-892b-4a6b-b63e-670a48f45dcf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144a9be8-071a-4c83-9f65-bd3ab3f6ba6e", "sighting_of_ref": "indicator--f58fd22c-9c32-4243-8f69-37ca806b1cce", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372f2b07-ac10-4229-a5fc-cdec2e9eada6", "sighting_of_ref": "indicator--f58fd22c-9c32-4243-8f69-37ca806b1cce", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ceca0d-7c71-48e8-ac43-b2eb501cbacf", "sighting_of_ref": "indicator--5425fe5d-9bd1-4302-937e-7e1966acecbe", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397f4a0d-e19c-4cd7-bfba-a2db8ae2ae5b", "sighting_of_ref": "indicator--5425fe5d-9bd1-4302-937e-7e1966acecbe", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec606aa4-934c-4e3c-a242-247fc7f189ae", "sighting_of_ref": "indicator--5425fe5d-9bd1-4302-937e-7e1966acecbe", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f400c28-dbd0-4c64-b4da-1868cca6d39e", "sighting_of_ref": "indicator--b260897a-6f4d-485a-b9eb-b8fa5defbb64", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5f95a9-ec4a-4b12-80ec-75483116d505", "sighting_of_ref": "indicator--19c59767-f841-4c05-9ff7-e67e85e69e78", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37724812-6a29-4345-bb9c-ba8a2f49020f", "sighting_of_ref": "indicator--bd2b4749-df0f-40a9-ba43-8094e7f800bb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f267eeba-dd54-41fb-9950-897f02b85dfd", "sighting_of_ref": "indicator--bd2b4749-df0f-40a9-ba43-8094e7f800bb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d8376e-19b3-4f39-bb89-6e65ad2a1abc", "sighting_of_ref": "indicator--85c4ee7b-bb9d-4af7-a153-187c964a111f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecba1e13-51c8-4ed6-98d5-dac23014dccd", "sighting_of_ref": "indicator--85c4ee7b-bb9d-4af7-a153-187c964a111f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa55021e-ad4f-4afc-afec-64aac95c431b", "sighting_of_ref": "indicator--26b1367c-d8e0-4f7f-807a-22906d2d4b9b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ed429f-dd76-4272-a009-3ae3b81463e7", "sighting_of_ref": "indicator--0a47b4d1-394a-44e4-b27a-e0c978a64175", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e95f20-4852-4339-bc38-12aa9a879d4d", "sighting_of_ref": "indicator--0a47b4d1-394a-44e4-b27a-e0c978a64175", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847036dc-26a9-485c-91cf-8d567eec3d6b", "sighting_of_ref": "indicator--96bae403-ab5c-45ff-9152-65cd5766a762", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5055b1e-0c72-4d4e-a8d5-43bdf74154ca", "sighting_of_ref": "indicator--96bae403-ab5c-45ff-9152-65cd5766a762", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32a3475-6646-49e1-bdb1-43d7c30a958c", "sighting_of_ref": "indicator--9ab5629e-1cc2-4405-a146-458c087281bf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed76a2a-10b5-4546-9f03-71aca0346ce2", "sighting_of_ref": "indicator--658620c6-0107-4f59-ac4e-5d59d2261b00", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4910117-c0b3-4573-8fdf-751c67418720", "sighting_of_ref": "indicator--89c95995-1296-4215-88c1-030e428623ef", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042fffae-e03d-4b8a-a6ee-cc44d54a19ec", "sighting_of_ref": "indicator--1f2a6bf6-07d1-469d-92c6-0e65378c219e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31857b7c-e389-4e90-850c-2102befa7e97", "sighting_of_ref": "indicator--4e6a2149-ca67-4190-b7d0-7a1e5653f70b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a276f2a2-fcc5-4ecc-b9c9-bbc57b2f8977", "sighting_of_ref": "indicator--c00048d2-eaf7-4607-bcb7-19fdbc8dcbc4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576f89ed-7ee7-4b66-960f-8286b05c4182", "sighting_of_ref": "indicator--c00048d2-eaf7-4607-bcb7-19fdbc8dcbc4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc18e2e-5c15-4fce-8c11-83e883c13219", "sighting_of_ref": "indicator--88c81a44-596f-4f9c-a3a1-f60e3270bbf5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1752e02f-fd6c-4fd8-a47a-d1873186e596", "sighting_of_ref": "indicator--5f8a3542-49e6-4d48-9b6c-2b2b43612e85", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139b6ec6-0086-4a85-9741-0302b5673cab", "sighting_of_ref": "indicator--5f8a3542-49e6-4d48-9b6c-2b2b43612e85", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777a058f-615e-4605-b8f5-0799045490fa", "sighting_of_ref": "indicator--5f8a3542-49e6-4d48-9b6c-2b2b43612e85", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae19de4a-f7f0-4be4-925e-70ba8e8dec36", "sighting_of_ref": "indicator--f501bdc6-6e30-45cf-8566-e590db7fd0a6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad109f08-db2e-43c4-bf11-54c415ee6587", "sighting_of_ref": "indicator--f501bdc6-6e30-45cf-8566-e590db7fd0a6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52df53d9-9b2c-4620-9375-0cc5be67d322", "sighting_of_ref": "indicator--f501bdc6-6e30-45cf-8566-e590db7fd0a6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f7074f-f5ef-40f3-8ca3-0c6cd1e47f68", "sighting_of_ref": "indicator--5b488ca0-74f0-4cc1-92c7-401b643c072e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e3c373-89b1-41ab-a605-9e6c025b92e9", "sighting_of_ref": "indicator--44f43165-0524-4972-953e-c348f7c0fa97", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66a9539-1324-4f3c-aab6-0dc93c556791", "sighting_of_ref": "indicator--44f43165-0524-4972-953e-c348f7c0fa97", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e79f659b-59fe-4dd1-a324-47c8617036d5", "sighting_of_ref": "indicator--44f43165-0524-4972-953e-c348f7c0fa97", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f39fdb-7cbf-46ab-bda0-b3f94a5d279d", "sighting_of_ref": "indicator--44f43165-0524-4972-953e-c348f7c0fa97", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773b2237-2509-4b39-b115-2bcc0b4a9eff", "sighting_of_ref": "indicator--18c11239-d53f-4f5b-b090-16cc5bdf3e40", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611c0204-fa85-4382-8f77-a0b072bbe0d3", "sighting_of_ref": "indicator--342b2574-b466-4e9b-a717-e4aebdb4966d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3650637-c4de-4355-8a67-67baa5ea9ad3", "sighting_of_ref": "indicator--188d46d7-0ac8-418c-900c-d018cac5bcd6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0b800f-22c6-4e31-a31b-a4f40d6d665b", "sighting_of_ref": "indicator--78ef92b4-d248-409d-9bb1-97e5576db7a0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6da95a-1bfd-4679-9929-416d6f9804b5", "sighting_of_ref": "indicator--25c8cf82-d53b-4722-a666-4d400632bcaa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f08fcd1-0ed6-4d8b-b4ca-906b9a1f6e40", "sighting_of_ref": "indicator--aef26eb8-08e7-4b80-a466-4219e8468e01", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d3a709-b9a8-496d-bd19-6be129cd04cd", "sighting_of_ref": "indicator--aef26eb8-08e7-4b80-a466-4219e8468e01", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9dcc094-9d6a-4bb7-81aa-32e3e529baae", "sighting_of_ref": "indicator--aef26eb8-08e7-4b80-a466-4219e8468e01", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f92007-2d9a-4304-9883-2dfc82dae015", "sighting_of_ref": "indicator--52002479-f497-4213-a7eb-f517baa8da3c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256b7975-1f99-41c4-aef2-805d3efcc6a6", "sighting_of_ref": "indicator--52002479-f497-4213-a7eb-f517baa8da3c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e60996f-1fab-4dc8-9b2d-2775b7b7e59e", "sighting_of_ref": "indicator--1aa8e9cb-d4a9-4b08-b2ac-69403b680ec7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27735ef3-303c-425e-9445-adab1e627471", "sighting_of_ref": "indicator--e66d772a-1493-4af9-9b70-30e10bf188a1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6561c625-5033-4221-a94d-246ece6b058d", "sighting_of_ref": "indicator--8f21d267-1e6d-40f6-8585-80ed86f1f147", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b550c41-56f9-4124-82d9-d5627ffd7f6f", "sighting_of_ref": "indicator--8f21d267-1e6d-40f6-8585-80ed86f1f147", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00f88f1-55ea-4764-9030-68911b1888fc", "sighting_of_ref": "indicator--8f21d267-1e6d-40f6-8585-80ed86f1f147", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b3e033-1846-48eb-9951-62de5c43380f", "sighting_of_ref": "indicator--1a1a6c10-aa1d-40e9-a7f8-5df5469cc010", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9517be-7b23-48e5-984b-416f0d07f322", "sighting_of_ref": "indicator--1a1a6c10-aa1d-40e9-a7f8-5df5469cc010", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cef0c97-4a76-4cfa-8b87-d5debeb42888", "sighting_of_ref": "indicator--01c64fcd-0c3e-42fb-824a-2f5409b2d9df", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fdad14d-285c-4b93-b35e-0470206db059", "sighting_of_ref": "indicator--76925b5e-c763-466a-b3ea-3b540f52cc50", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b352d7d-23e9-42d6-95a9-b357502aa3c9", "sighting_of_ref": "indicator--33b1a6d8-2b61-4529-9277-92ca53956c4c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eceaaa80-7260-452a-8ebb-e611fa8c4c96", "sighting_of_ref": "indicator--cb4e31ba-9c7b-41d4-93a0-c8aa7349f2e6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706d8529-e8b5-47c3-9a8b-bf2534cc05eb", "sighting_of_ref": "indicator--cb4e31ba-9c7b-41d4-93a0-c8aa7349f2e6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaceb8dd-f063-4eeb-b61e-71344e4b5c70", "sighting_of_ref": "indicator--f42b9523-19d3-4643-bf11-62c63d649685", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429f4ab3-420b-484b-ad88-c4dfeedd47d2", "sighting_of_ref": "indicator--f42b9523-19d3-4643-bf11-62c63d649685", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4510bd5a-ba5b-4d29-ac21-f89af6c2791b", "sighting_of_ref": "indicator--70fdf66b-1ed1-4912-bde2-316504b4ed65", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f171a4bf-4c4f-4ce1-8899-77b281e8fa19", "sighting_of_ref": "indicator--ff1caf78-6e87-4ac5-b352-0efeec17a74a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9c5b21-6c2e-431a-ad9c-6cf2c2efc401", "sighting_of_ref": "indicator--50a19f0b-70d2-49e7-a156-9d845d385f2b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04838bfe-0d10-4002-a852-c1f43caf7d9d", "sighting_of_ref": "indicator--3fd4613e-1ee5-4bb6-8835-a2dc53d48d3a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397df8e4-69e3-4101-b30e-fd9be8def952", "sighting_of_ref": "indicator--3fd4613e-1ee5-4bb6-8835-a2dc53d48d3a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1424747c-ecaa-4923-9a9b-05372f0debfa", "sighting_of_ref": "indicator--c0ce823a-9217-4820-98b4-ea1ca8b6859f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2c7307-d0c7-485c-acf9-8764e9be2add", "sighting_of_ref": "indicator--f9aba59e-f863-4f2f-8dc5-d2f6c1723b5a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51272334-d58f-4e5d-ae72-364b93ff8df5", "sighting_of_ref": "indicator--367d5a4e-9e8c-4123-b1ef-9e2edb7da298", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f64dfcb-c909-428e-b518-c88554e4f068", "sighting_of_ref": "indicator--16f3cea8-8666-4dee-ada2-50f852c676da", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a08e7e3-6e73-4977-9ed5-33f5340b66fe", "sighting_of_ref": "indicator--51e48b01-272c-4074-a726-47721c474cde", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd48c996-46bc-4dde-9fab-72e584730e3e", "sighting_of_ref": "indicator--b129ff1d-44f5-4b37-87cd-0ccec02b6805", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13c6db1-6a67-44cf-aa9f-adb4688d821d", "sighting_of_ref": "indicator--4b4e6e1f-3708-4f34-b0a3-ddcc0284d9a8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef1d018-9a04-4aba-a0cd-211bb37a78e8", "sighting_of_ref": "indicator--4b4e6e1f-3708-4f34-b0a3-ddcc0284d9a8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da203ab5-8633-48f0-b914-e74385407968", "sighting_of_ref": "indicator--f35a4505-e9fd-478f-b5df-f7e5f28f574e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fca1b99-28bc-4cfb-ac6e-36db3024b3da", "sighting_of_ref": "indicator--f7e54bb0-f5f9-4d6d-b069-1bcec88707a0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e73cd4-c382-432b-aed7-661704d3e37d", "sighting_of_ref": "indicator--f7e54bb0-f5f9-4d6d-b069-1bcec88707a0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5872a878-a077-490e-bb6f-840f10919660", "sighting_of_ref": "indicator--eb915f37-95d3-4f01-ad93-715f7fb64ad3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64486851-532a-411b-9a1e-844bf4d2d9b6", "sighting_of_ref": "indicator--91ff7ed3-bf79-42ce-8405-8d64862b8c4a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f944e4-21ba-47bc-87dd-4b8eb98767c5", "sighting_of_ref": "indicator--017571ba-e5b2-43b3-af7e-c401ceda7be2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838f0bbc-fade-493c-92b5-dd4d19c23a66", "sighting_of_ref": "indicator--017571ba-e5b2-43b3-af7e-c401ceda7be2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0311f9a-ba68-4bdc-9e1f-22c1581bb5d7", "sighting_of_ref": "indicator--0707ff12-f968-4f35-bbc0-932ab5e8d78a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5ccb2f-5ae0-4543-93a2-52f1c22c2046", "sighting_of_ref": "indicator--a0c79b35-b9de-4f88-888c-2444d468b229", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a2828c-d184-4856-8e5c-88d104b10a00", "sighting_of_ref": "indicator--a5da99e4-5416-4f71-afbc-69702a6478d3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0f66dc-f6c7-448d-aceb-cd0fc1722cd3", "sighting_of_ref": "indicator--cdbf2c90-66d7-4b93-b3e7-827ce832c2b3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb149e6-d99e-4d1f-be8f-e4bd51e1ad19", "sighting_of_ref": "indicator--b1e6e0c9-9bca-40e4-899f-dbc9815c5086", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1c8527-cc2c-485c-b5e6-25b524bbcc43", "sighting_of_ref": "indicator--8f9c937a-d340-4074-ab4d-6447663266a6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635f2531-80e2-4e94-b26a-498b93f2c6bc", "sighting_of_ref": "indicator--d2c6c02f-20e7-4b6c-b0cb-689ccd69edf6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78c9a37-baa5-4080-9da3-66111b2b1aa7", "sighting_of_ref": "indicator--68110987-aada-40d8-ad8a-ff83e6b2098c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999dc75d-84ba-4d94-96c8-ca2598662751", "sighting_of_ref": "indicator--68110987-aada-40d8-ad8a-ff83e6b2098c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a084796-cad5-48e3-acbf-791433c83e70", "sighting_of_ref": "indicator--6d9eea00-7dc5-47d2-a3a0-4520334b8474", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d17f031-67c1-426b-9934-75103f5a9e5d", "sighting_of_ref": "indicator--6d9eea00-7dc5-47d2-a3a0-4520334b8474", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f0ca04-7d5d-4d55-a132-6f5d1477eb46", "sighting_of_ref": "indicator--25d9cc6e-931c-4fc0-ad2c-d86b309c0789", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4206a43a-7c32-4e8f-8870-55f3aa5543df", "sighting_of_ref": "indicator--68a3e491-92ed-4e19-8e9d-d27ac66feb6b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3d1072-1e89-471b-a966-1521358b0a4d", "sighting_of_ref": "indicator--68a3e491-92ed-4e19-8e9d-d27ac66feb6b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb30901-7e4e-47b7-8667-402cf3381a83", "sighting_of_ref": "indicator--fd72499d-63ff-4d3f-8584-3acbf04512da", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a3057c-059f-4929-bba5-a9d0531f28a0", "sighting_of_ref": "indicator--49b1038b-8af0-45b0-9971-5a183632356f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905781a9-f480-4ed7-8b41-780d3bf339e4", "sighting_of_ref": "indicator--49b1038b-8af0-45b0-9971-5a183632356f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d5c6cd-c82c-4697-b948-45adf862041c", "sighting_of_ref": "indicator--94fcf458-a4c1-4107-a082-e04ef0beee4b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a18fbfa-f22f-4e41-9ca8-2a0132904288", "sighting_of_ref": "indicator--e18df7e3-e1f5-49ca-a95e-26200d818111", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55472a9b-f7a4-462b-8394-24fab80c31a3", "sighting_of_ref": "indicator--8af2bafa-af25-4290-a0c9-212e572ce0c6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2fbc24-dd9b-45c1-bc17-36e4e52860f1", "sighting_of_ref": "indicator--a433660a-9cb7-455f-a1a1-df6ab3bf8758", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862dd05e-e9ba-4d8e-b9b3-e21c3e671e10", "sighting_of_ref": "indicator--56beb38f-813f-4226-9ca2-18c85a1fb8b8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d26912-ecab-48da-bafa-ae09219e37a2", "sighting_of_ref": "indicator--2259a65b-e391-4b3e-9d17-28ace7cdf40a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77131c5-ba03-47f3-95dd-ac9a1eaff81a", "sighting_of_ref": "indicator--89286a21-8dd3-48b1-a974-7652464e0b05", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5285c066-32e3-4e16-a2c1-0d79aca2a0d0", "sighting_of_ref": "indicator--89286a21-8dd3-48b1-a974-7652464e0b05", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4633360c-3de0-41c0-a053-dbffc148bb64", "sighting_of_ref": "indicator--89286a21-8dd3-48b1-a974-7652464e0b05", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6f9b79-ddfd-48b7-badb-99d894a7af21", "sighting_of_ref": "indicator--85e3b97f-dce9-4200-81e8-1fc6b04cfbb9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3c18bb-de27-4e23-9751-26e7a0cdaaeb", "sighting_of_ref": "indicator--85e3b97f-dce9-4200-81e8-1fc6b04cfbb9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ebbac4-6b2f-4a28-9f62-ebbb64ac7e4a", "sighting_of_ref": "indicator--372fe47c-a124-416a-bef4-1746cd192602", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76efceab-435d-4bea-b2a2-5bf96c59a59f", "sighting_of_ref": "indicator--a024b44d-52df-4833-a606-9fa729edb149", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280eea35-c671-42ab-81b6-c3a20ff5352d", "sighting_of_ref": "indicator--09972396-107e-4fce-9df0-8391d54fd78e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05af7ac8-5bc0-4b40-ab03-586e3fc3b8cd", "sighting_of_ref": "indicator--09972396-107e-4fce-9df0-8391d54fd78e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a584a6-0955-42c4-ac1e-b32364b61816", "sighting_of_ref": "indicator--96c548f5-c658-4a2b-be71-365925db7d2c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8b9892-b2fe-4c70-9eeb-ea10a47a5854", "sighting_of_ref": "indicator--96c548f5-c658-4a2b-be71-365925db7d2c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade79626-0278-40f6-afd9-7125be4a9b66", "sighting_of_ref": "indicator--9629bdd9-4770-49e6-aa02-8e0aa68628dd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6918f74-6d17-4dd0-8059-981ba6fbbdf8", "sighting_of_ref": "indicator--0ae7095b-ea21-4a52-9cba-9751b29fbe57", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b10e497-440c-4312-8d19-1778ef3b7e26", "sighting_of_ref": "indicator--0ae7095b-ea21-4a52-9cba-9751b29fbe57", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6d9eb3-8b7d-45eb-b5d6-e5daf9bf7dfd", "sighting_of_ref": "indicator--82caa3ed-af71-47d0-9a09-c08ea1f00ad3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8225ee-e11a-4050-867f-84516a797e34", "sighting_of_ref": "indicator--c1902ad2-c97b-4cc2-a1af-3026541b8d3c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b5221b-0f11-49fe-a587-50a6f3ce248d", "sighting_of_ref": "indicator--c1902ad2-c97b-4cc2-a1af-3026541b8d3c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7a9848-37ca-4554-8db2-0a6f00d2ba81", "sighting_of_ref": "indicator--e0d25753-980f-4edd-ae04-4a687f61aef2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffca2bd-e890-46a0-8883-256452721944", "sighting_of_ref": "indicator--e0d25753-980f-4edd-ae04-4a687f61aef2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd0b582-d301-4995-8973-a60571395003", "sighting_of_ref": "indicator--0e9c6bde-9780-4b20-a6fb-ad71c2241243", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a9f09b-996b-4e5d-8601-d7e1e96934b4", "sighting_of_ref": "indicator--0e9c6bde-9780-4b20-a6fb-ad71c2241243", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab110368-66fd-4724-a2c5-3aa8acca8341", "sighting_of_ref": "indicator--e89d33ba-106d-4e6c-ab5a-6373c8cf4e93", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776b1295-9fa0-4cc0-9b6c-6f6ab2f70bb4", "sighting_of_ref": "indicator--519754b3-dd71-4cab-abb7-0b2cf4491d9a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d6cf4a-95fb-4c4f-82b5-950be2a2f007", "sighting_of_ref": "indicator--519754b3-dd71-4cab-abb7-0b2cf4491d9a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8aab33-6bf5-49d4-8149-8dfc84bc5d94", "sighting_of_ref": "indicator--613726c5-0fda-4f22-b71c-9640b60b8929", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cbb55f-2b0c-4e67-9214-2a458a21634c", "sighting_of_ref": "indicator--3f73b4ec-1ff0-497b-8f7b-6c98cab7970d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8c30e0-4f0a-4b8e-af43-0c5237a3c58a", "sighting_of_ref": "indicator--e66ee609-3054-4d4b-94d0-681bafb42c31", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabadcbf-f9d6-4905-9960-0b56ab61b1fc", "sighting_of_ref": "indicator--9f12e87e-bd35-46e2-9d48-c3e6257739d5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92fae36a-4ade-4934-8b61-7c549e4d4c0a", "sighting_of_ref": "indicator--562f3f43-74b7-4af5-b560-a6a63a36ef72", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b9a3ab-6725-4e2e-b4a0-edd3b0dca62b", "sighting_of_ref": "indicator--562f3f43-74b7-4af5-b560-a6a63a36ef72", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509a16e9-5dd0-4691-9de3-7daa2d6a6eec", "sighting_of_ref": "indicator--f868a805-8542-438b-bd04-8faabd7aa1cf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a11bba8-5710-4cc0-bb2c-dfe611954bac", "sighting_of_ref": "indicator--a957842b-cea8-452f-acef-bfca3f821b1b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef73c4a6-cc2c-4b3c-afdd-e17ba78fbcab", "sighting_of_ref": "indicator--85a1bed9-93e2-4182-95e6-5df8809bc804", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed10e3f-50f6-440e-aae9-03770be2ede8", "sighting_of_ref": "indicator--85a1bed9-93e2-4182-95e6-5df8809bc804", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d14d7a0-8af8-45ff-bb70-7c27458ee594", "sighting_of_ref": "indicator--73b7203c-0dd7-44e7-b72d-08b1e51dba95", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4020ec-fbec-44d4-a38a-46b7aee619c2", "sighting_of_ref": "indicator--73b7203c-0dd7-44e7-b72d-08b1e51dba95", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6526de70-44b6-40b6-b20d-448d89a90bf1", "sighting_of_ref": "indicator--583dea09-d9cb-497d-9b11-d1f6306fcf86", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa36507-9519-4434-8085-6f4219dbe8c0", "sighting_of_ref": "indicator--947b44b7-3afc-407d-a3ce-f04c0af2ed8a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d81b716-afe1-45fa-bf57-4b1a80c81772", "sighting_of_ref": "indicator--2d915837-2806-4e95-b35c-4272978f6788", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1292e44f-4442-4e4e-9280-7bfca9c19220", "sighting_of_ref": "indicator--b3ce60d8-505d-479b-86d1-721af384b9c7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560b708b-8dae-4664-a9ac-a5fe5e848e1b", "sighting_of_ref": "indicator--890db4b9-3b3d-42e5-a305-da9c62bee257", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec9b734-740b-4645-aedc-0a9cce70837a", "sighting_of_ref": "indicator--67cee330-6a2f-48e7-bf5c-fa5a6d02ef34", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690d3fda-9644-4ca5-93f7-aa2c3d31a060", "sighting_of_ref": "indicator--6b7b28a6-167a-4c64-9bba-35d63ea20d73", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78fabe8-59c5-48ec-a5c7-eef759b6bbed", "sighting_of_ref": "indicator--6b7b28a6-167a-4c64-9bba-35d63ea20d73", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187a257d-3314-43c2-b4ec-945a3821e523", "sighting_of_ref": "indicator--26643822-6e0e-4ac4-95d1-516460ce7eef", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41bb1d57-6d38-413d-9326-9cb0d91901df", "sighting_of_ref": "indicator--26643822-6e0e-4ac4-95d1-516460ce7eef", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7fea330-a0d6-45fb-b5cc-ba84c559b846", "sighting_of_ref": "indicator--26643822-6e0e-4ac4-95d1-516460ce7eef", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2629e443-23bb-4a9e-9062-b49f081fb07a", "sighting_of_ref": "indicator--114d823f-4887-4db4-907c-c5ae29583d33", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8207806-001d-487a-9b45-8248ff162215", "sighting_of_ref": "indicator--114d823f-4887-4db4-907c-c5ae29583d33", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e644708-53b8-4523-b30c-f1c48e98a4f0", "sighting_of_ref": "indicator--114d823f-4887-4db4-907c-c5ae29583d33", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182f3d7e-5469-4d50-b0bf-4a5bff7930b1", "sighting_of_ref": "indicator--3e59d025-d628-46e1-bec2-0204a0c0c45a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407f3b2e-6b89-406e-b473-e6db2b957c4b", "sighting_of_ref": "indicator--9d011c98-d6e4-4702-aa16-bc1d0bb1a3de", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc858819-4d9c-4f4f-a448-86edaa848d3f", "sighting_of_ref": "indicator--9d011c98-d6e4-4702-aa16-bc1d0bb1a3de", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f119e8f0-cb28-473e-b2e3-84854376c705", "sighting_of_ref": "indicator--27fa024b-12b3-4a97-8f54-a5cbb86a24c6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b3efc6-a8cb-4920-b30d-9c8af67fc613", "sighting_of_ref": "indicator--27fa024b-12b3-4a97-8f54-a5cbb86a24c6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60907ec8-be8e-4817-9684-0b7d77d615ae", "sighting_of_ref": "indicator--27fa024b-12b3-4a97-8f54-a5cbb86a24c6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efbc9b3-6356-42a1-baa9-9e2255506dab", "sighting_of_ref": "indicator--471124ab-ffd2-4049-b268-8cfcab758ced", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771e69d6-d77d-461d-b3e2-a6c47f652fdb", "sighting_of_ref": "indicator--471124ab-ffd2-4049-b268-8cfcab758ced", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8ad6c0-4287-465a-9c76-8385fd6704e7", "sighting_of_ref": "indicator--471124ab-ffd2-4049-b268-8cfcab758ced", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041e8f5a-5bb8-4fcb-9639-d93d24c57a58", "sighting_of_ref": "indicator--f57d88c2-c4c6-4ea8-9d18-46dc8376799f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4254492-706c-457b-bdcc-9cf594088b9c", "sighting_of_ref": "indicator--876ac27e-07fd-495d-8f0c-b4978ba1192e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8748548-4c86-4f39-b41d-ac20ae7cb96b", "sighting_of_ref": "indicator--876ac27e-07fd-495d-8f0c-b4978ba1192e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901fe9f3-7dd7-4057-8752-3f0074f8623f", "sighting_of_ref": "indicator--91273714-8330-4849-be16-d39382b5cf37", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73acc315-38df-4432-b8de-2899462c7c0e", "sighting_of_ref": "indicator--91273714-8330-4849-be16-d39382b5cf37", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ca3193-4aca-4c32-9518-d29738208fae", "sighting_of_ref": "indicator--b5cd0ee9-5832-43e6-ab4d-f630f9343284", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5ea17b-09d1-4c9d-bcdc-c9f298e40d43", "sighting_of_ref": "indicator--78cf4609-bc92-4675-97b6-0e4841426ee2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc170bb9-e2ff-46d6-8c87-e6837ed8da94", "sighting_of_ref": "indicator--78cf4609-bc92-4675-97b6-0e4841426ee2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bafba4a-1b22-45c9-a0a8-52bca54fd76b", "sighting_of_ref": "indicator--9927c463-3355-4cb5-a70f-2accb97a062f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b7a880-8cdd-4aa7-b3cc-3465005df1e4", "sighting_of_ref": "indicator--9927c463-3355-4cb5-a70f-2accb97a062f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd782a8-e462-4a7f-bf83-5fa3c7cd8837", "sighting_of_ref": "indicator--02e902f9-7614-45f1-952d-8dddd852b647", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5aa496b-3c35-45f6-b64c-0ffaa73d987f", "sighting_of_ref": "indicator--02e902f9-7614-45f1-952d-8dddd852b647", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4d4749-d1d5-4d70-8403-dc6dc3c4d7d1", "sighting_of_ref": "indicator--79de1e80-dcf1-4834-bdde-dd4dfcdba288", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8772a2fe-c3b2-4ef5-b9dc-ccc01d54f693", "sighting_of_ref": "indicator--79de1e80-dcf1-4834-bdde-dd4dfcdba288", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d312acf-9267-4770-8757-07ecf6de236f", "sighting_of_ref": "indicator--a4224f3f-d79e-43ba-ba8d-c7fbae7f5389", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99e8d99-378c-4ac1-8623-423bdd455c52", "sighting_of_ref": "indicator--15fc6d17-aa50-4c42-b666-a27aad08e162", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5588ef37-7e4b-48c0-941d-f232efb6a3b2", "sighting_of_ref": "indicator--15fc6d17-aa50-4c42-b666-a27aad08e162", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003b8481-f63d-48d7-875e-758ce80db5e6", "sighting_of_ref": "indicator--9dc89809-a3cc-4d3b-903d-aa0c52b9d924", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69bc8653-548f-48a8-86a9-5c2df55fe800", "sighting_of_ref": "indicator--9dc89809-a3cc-4d3b-903d-aa0c52b9d924", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd65bb3c-e89f-4a92-92b1-8208be9b6fc6", "sighting_of_ref": "indicator--ecc55343-9832-4042-aead-8d4c0e8ec98b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f03bfa4-64f5-484e-895b-e9b5a16587be", "sighting_of_ref": "indicator--dcc01e3b-9ff1-49e5-bba0-96b7e1ddb934", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b866ee52-421c-4ea5-8852-540bb46e98fd", "sighting_of_ref": "indicator--a904b314-0eee-4bf0-8bef-76811bf7666a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34536372-a867-4666-a33d-5ae8e428af1f", "sighting_of_ref": "indicator--672b79f4-14bf-457d-bd4f-3db216fe75c0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5b1d38-3047-41ff-b0a8-3713085441b4", "sighting_of_ref": "indicator--672b79f4-14bf-457d-bd4f-3db216fe75c0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355acced-1c95-42db-902c-63e8059505a9", "sighting_of_ref": "indicator--4118e358-5590-4ab2-ad80-a9459747c0f8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83465e7-5181-4d0b-975e-66381d98a981", "sighting_of_ref": "indicator--4118e358-5590-4ab2-ad80-a9459747c0f8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb42ea7-07f7-4706-8742-bc9c911e3ccb", "sighting_of_ref": "indicator--41360453-e487-4c91-bb3e-a5b48ad9b941", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e8ff87-bd5a-4b7f-85d0-4a5fdd111e52", "sighting_of_ref": "indicator--95e4c66a-0fa7-44e4-a43a-89f176699433", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e152bed6-bca3-4fe4-b147-83d5890745f0", "sighting_of_ref": "indicator--95e4c66a-0fa7-44e4-a43a-89f176699433", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb89f5a2-0ff2-4b2a-9753-562bb612def3", "sighting_of_ref": "indicator--95e4c66a-0fa7-44e4-a43a-89f176699433", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f20633d-d075-4bfc-8666-41d3ddea4b9d", "sighting_of_ref": "indicator--f2b97e22-4d44-4994-a36e-8797a4e4275c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037104ce-f71b-4cc5-a51f-a11f1fdc5584", "sighting_of_ref": "indicator--339a53f8-364f-4ffb-90f1-d0760aac7949", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57262443-766c-4edc-bc46-cea53a896b47", "sighting_of_ref": "indicator--ba4818a0-b6fb-4b47-8227-808fa6092a02", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ed9c89-0782-4007-b015-314385b93c14", "sighting_of_ref": "indicator--ba4818a0-b6fb-4b47-8227-808fa6092a02", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403fb0a5-3570-40b0-a9f1-24c92290c025", "sighting_of_ref": "indicator--cf016577-87d1-40b8-bc19-b5df782de7cc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b634208e-7542-4040-a9be-85aa3f6db8e1", "sighting_of_ref": "indicator--d0091f19-7633-407b-9f8d-d7dc5abaf131", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c775a990-8fd3-4189-8b00-105a657a8547", "sighting_of_ref": "indicator--22a6cac6-4ce3-4420-a81e-70d00b2cdc4d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c771d429-6dcb-42e2-bf56-16412c3aade3", "sighting_of_ref": "indicator--bb34a96d-8b7e-4fdf-a074-c69404db7606", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c694a5-e754-45e7-88ba-852d3b8c812c", "sighting_of_ref": "indicator--bb34a96d-8b7e-4fdf-a074-c69404db7606", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4ba1f1-b711-472f-bb60-12a21e4182eb", "sighting_of_ref": "indicator--09028340-2b50-454a-959e-6580b230ab0a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8888e66c-e199-423f-bbe2-bae191ad81cf", "sighting_of_ref": "indicator--8c5640bf-7b70-4acc-80b0-7af93694f253", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d19eae1-b9b3-40e8-b487-8f903b20aa95", "sighting_of_ref": "indicator--8c5640bf-7b70-4acc-80b0-7af93694f253", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30db86fe-3233-44b0-9633-c5c1d21d98ba", "sighting_of_ref": "indicator--8c5640bf-7b70-4acc-80b0-7af93694f253", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa14d239-a85a-4f66-a072-7af5e9e60b73", "sighting_of_ref": "indicator--9c43f3a5-ad7b-408c-b2c8-b87a8240ae07", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670167a5-d3ba-4a12-aed6-0837564e2637", "sighting_of_ref": "indicator--9c43f3a5-ad7b-408c-b2c8-b87a8240ae07", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e3e7f1-c517-46a7-887c-8bcf79ee0685", "sighting_of_ref": "indicator--3089f288-2dcd-42b4-ba67-e70055f03672", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222cfae6-7ade-4a47-aa2b-5afcc4f18c55", "sighting_of_ref": "indicator--3089f288-2dcd-42b4-ba67-e70055f03672", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70c0bef-e0b5-4140-8d79-36797f7ac82f", "sighting_of_ref": "indicator--dbc1177c-1cbc-4db8-9ef9-7aceefcf246f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319e2bf7-18ab-40df-9df1-79063e6f884d", "sighting_of_ref": "indicator--e6ec3cad-3907-4275-b99c-9cb5b6c294b4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f957099a-b149-42e4-b3a2-8cc0af9d2390", "sighting_of_ref": "indicator--adef8498-bbfc-44cc-a505-76aebe7ae6ee", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b05bc3-2d03-4d74-b8d8-c05c93027454", "sighting_of_ref": "indicator--adef8498-bbfc-44cc-a505-76aebe7ae6ee", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2d4e4b-79ec-4a0b-89dc-0efbb20cb12a", "sighting_of_ref": "indicator--1c26139d-1e71-4946-8c4a-3f535b5f9d03", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec584b1-c6bb-4fc4-bea6-bd33e313d13f", "sighting_of_ref": "indicator--b9a4328e-9f69-45de-8342-4537027b5079", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be1da96-6ac4-496f-97e8-79f620c8c282", "sighting_of_ref": "indicator--1cd2ab19-d78d-4c6f-869a-1dac949fd3b4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9944e7a-284d-4771-8c1c-f3a79c62f317", "sighting_of_ref": "indicator--021f43e4-c641-4ab4-a007-c2b9d259ff50", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ab9264-6654-4e5a-8662-9ace0d34f3f7", "sighting_of_ref": "indicator--021f43e4-c641-4ab4-a007-c2b9d259ff50", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aaed0ad-e152-4854-9b4b-7433793f83c7", "sighting_of_ref": "indicator--021f43e4-c641-4ab4-a007-c2b9d259ff50", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff9e13b-b2ab-4c4a-b97e-dfacb6e5c9eb", "sighting_of_ref": "indicator--1d602309-5dba-493f-92b9-408d9b839708", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e96d799-b52e-4ccd-8c4a-7a43422dfd6c", "sighting_of_ref": "indicator--323257f9-f25c-45dd-a1f5-55d857662b60", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e8afdb-1815-4e4c-80ac-59e2795a2c5b", "sighting_of_ref": "indicator--31703feb-80fa-4088-b1c5-5152a8de9455", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d600c765-ccbb-45f4-acce-4a2201813bd6", "sighting_of_ref": "indicator--9eb67056-1342-42b6-9781-c7364b62b082", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493fd710-a456-4514-8137-7d4659fd349f", "sighting_of_ref": "indicator--9eb67056-1342-42b6-9781-c7364b62b082", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf88ee1-1189-4e34-be31-616715b889b5", "sighting_of_ref": "indicator--212255f4-d848-4831-9934-3fe05d1119ba", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5995ba-8d14-4215-a37b-699102fd3446", "sighting_of_ref": "indicator--d151b8b3-e2a0-429a-b865-27d5c52816c4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e492913a-af88-4471-83ff-762032e402d4", "sighting_of_ref": "indicator--95fffe98-dbb3-46c0-a50d-c688f6dd9b55", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63a7696-fc71-4892-b3fc-6389b52a7ba6", "sighting_of_ref": "indicator--95fffe98-dbb3-46c0-a50d-c688f6dd9b55", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee09bf0-e1d9-4b30-955e-ebd551fc6dd5", "sighting_of_ref": "indicator--d6686954-824d-4aca-bbbc-5dcc9fafd290", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bca213-8bbb-40c3-93f0-02502576b993", "sighting_of_ref": "indicator--d6686954-824d-4aca-bbbc-5dcc9fafd290", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140706e5-1e4e-4b2d-b741-c49ca55fe148", "sighting_of_ref": "indicator--0573552f-102e-48b8-8dcf-7a0eeb10fcc3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72c70b5-2997-4d8b-8e0c-9a40ffa4a8b9", "sighting_of_ref": "indicator--0573552f-102e-48b8-8dcf-7a0eeb10fcc3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a0ba09-1d01-41d9-b47b-b5bf2d39d930", "sighting_of_ref": "indicator--9c1b60a2-aa4d-4154-bf2d-362978277fc6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f046b4-7cb4-4b19-bb4a-3399621790dc", "sighting_of_ref": "indicator--ffa9657a-2260-4571-86da-16b3a1c32d9e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a3d826-1004-468f-b0aa-88bbc2d439dd", "sighting_of_ref": "indicator--24917595-5c35-4e38-b45c-308cce4d2437", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8712eadb-26b1-4a45-a071-772231716be2", "sighting_of_ref": "indicator--c9c75f4f-a03f-4322-8f5b-ed1930ca7928", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e92e875b-47c5-4f9a-8ee4-e21a55f7f5d5", "sighting_of_ref": "indicator--7180f6b3-1299-4a24-a6ec-4f7c1308d026", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055d02d4-2b75-4c2f-9f0c-aa3d9c9b293c", "sighting_of_ref": "indicator--4019b9de-deeb-41c4-a7ca-fd4ed1c0567d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ff52de-6ac0-4dfc-a77c-0957138c6a3e", "sighting_of_ref": "indicator--045d2b1f-fe09-42e7-a899-bc09a014d9cb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc96d32-4544-4738-824e-d7609be1a148", "sighting_of_ref": "indicator--9946b3f6-1a9d-461d-a144-a2504887e2ea", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c50996-b421-4035-a9cc-047f26b98cf4", "sighting_of_ref": "indicator--9946b3f6-1a9d-461d-a144-a2504887e2ea", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba957cf-c5b8-4ce6-ba55-8eb0f5b091b4", "sighting_of_ref": "indicator--39dd34a8-676e-4fbd-bc44-8266cbfa1423", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d4e637-6a92-4597-823c-871fdf0701ad", "sighting_of_ref": "indicator--74484f47-c53b-4f3a-be85-e4b337af1722", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825dc756-6f22-4dba-9d07-999248fb3d2d", "sighting_of_ref": "indicator--4096b3b1-cfd1-482c-9a18-0a1ed2384893", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30baa229-224c-4f14-9ccc-b3db2c6afeb4", "sighting_of_ref": "indicator--27da121b-eaa9-4c57-80b7-bc626c6a1492", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e7a170-40b1-436e-a052-2526d355cf9c", "sighting_of_ref": "indicator--4f825b6d-6ece-40ae-81ea-00019aefae67", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b6fbac-4066-4e18-a32a-f0d68e41baef", "sighting_of_ref": "indicator--fd19bf22-997c-447c-8146-7d503922a762", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1935b3-b3aa-4515-9f78-a9fd9fa998c2", "sighting_of_ref": "indicator--184a9d81-c4cf-4e03-b40b-b9e9ee9a7e2e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be1b731-b89f-4272-bbb6-6d0927b0fde4", "sighting_of_ref": "indicator--81b2dbcd-e221-4e16-a7b5-8e947115216e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30a74da-a0d5-4d53-b62a-0c1b245e59e5", "sighting_of_ref": "indicator--a606227f-231b-40bf-925c-e11654543144", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12568317-0042-42aa-a90f-a8cabef8d99b", "sighting_of_ref": "indicator--a606227f-231b-40bf-925c-e11654543144", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3471ec-ca8a-4d92-8a37-080b8a15f753", "sighting_of_ref": "indicator--67cf8609-425b-4acf-8a4a-d594530918a1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400a807b-e13c-462f-8926-31b31289d669", "sighting_of_ref": "indicator--e22862d8-6606-4413-9bd7-ee40eff6c880", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812130a0-2f35-4533-bea2-c1ea6cf398cb", "sighting_of_ref": "indicator--8ccf4a7c-e8da-4644-b60a-9241bdd69dad", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0353a7c-281f-47be-815f-ccac32830d03", "sighting_of_ref": "indicator--8ccf4a7c-e8da-4644-b60a-9241bdd69dad", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34da8fcd-7848-4dad-9457-c0678c5e2d76", "sighting_of_ref": "indicator--8ccf4a7c-e8da-4644-b60a-9241bdd69dad", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0244ab8-2185-4c38-b125-ab344fa9b886", "sighting_of_ref": "indicator--6dfa66bb-dbda-40a0-b57c-fa87aede9e3d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4b8cc7-dcce-4ad9-aec8-04e4ce9064a9", "sighting_of_ref": "indicator--25143c6a-836f-49ae-a148-80c48c6bbb63", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2796f8ee-7975-4668-9ee1-6025bd55b767", "sighting_of_ref": "indicator--25143c6a-836f-49ae-a148-80c48c6bbb63", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0300ce55-136d-40f4-8285-47fb284fa505", "sighting_of_ref": "indicator--47ab07d6-b47b-421a-a0a3-629e8ed8d16e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7403eeec-989f-4330-ba77-3d76d54f6103", "sighting_of_ref": "indicator--47ab07d6-b47b-421a-a0a3-629e8ed8d16e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a045f1fb-2ca9-483b-807c-afb2ac7e5755", "sighting_of_ref": "indicator--0eaf3797-1910-4765-ae50-5f52ce47d4b1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fedd8a02-911c-496a-95ca-de8a377969b8", "sighting_of_ref": "indicator--0eaf3797-1910-4765-ae50-5f52ce47d4b1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5f54a4-1a97-4444-bf21-9770f055f422", "sighting_of_ref": "indicator--f02cc63d-3227-4047-a1b6-499df4238b96", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd47a04-cd6e-4271-9a6f-3285a83dcdcc", "sighting_of_ref": "indicator--1693b5e0-bdb7-44b2-8315-7e828b4a538f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71713770-9bd6-46a2-a06b-0d41c1a5ec03", "sighting_of_ref": "indicator--f8999e87-0d92-4712-8d14-6db8123c86da", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09579d6d-7558-451e-b550-408424f5d38e", "sighting_of_ref": "indicator--56b0a074-2371-4349-9346-7aeb6f87e153", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd170b6-17da-4a59-a625-b86c77eed0eb", "sighting_of_ref": "indicator--56b0a074-2371-4349-9346-7aeb6f87e153", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69096d7b-a241-4072-918a-48268eb23aca", "sighting_of_ref": "indicator--80969317-4b9b-43b8-bc8c-15f786e6f276", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53dcd76-63a6-4186-ac02-c276d9e24a81", "sighting_of_ref": "indicator--f1284045-958d-4826-8a65-36d7b78b585f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142f59fa-3957-4f6e-a64e-8306dd701024", "sighting_of_ref": "indicator--f1284045-958d-4826-8a65-36d7b78b585f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44d55bf-dbe0-4783-9eb6-5589c6122eb6", "sighting_of_ref": "indicator--10972379-9381-4f1f-86a6-7ee94975df41", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b9f2ba-bdda-4e6c-8e91-d356238b0c50", "sighting_of_ref": "indicator--78a332d6-0e09-4ffd-a7a8-b29774ab567a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f2eaa6-5b20-40b7-8397-fede519846c5", "sighting_of_ref": "indicator--78a332d6-0e09-4ffd-a7a8-b29774ab567a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb25bc2-7a11-493b-bb47-540a64db2026", "sighting_of_ref": "indicator--082be848-4b76-4f5f-8f82-1a3df47a7598", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21a216c-1763-41ef-9bc8-f6b9f1d3b013", "sighting_of_ref": "indicator--9abc282d-79bb-462a-b44e-1e97e5eff329", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6d1061-250d-4368-84cc-7c7ec5bb9639", "sighting_of_ref": "indicator--235a93fb-6a7a-47a9-b3b7-09d096143a7b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36639924-de2c-408f-9a0e-43a69bede7cc", "sighting_of_ref": "indicator--235a93fb-6a7a-47a9-b3b7-09d096143a7b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c7cd45-5b8f-4287-9d06-8b06949310ab", "sighting_of_ref": "indicator--a576eef1-559a-4201-9d90-39e71daf7301", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea257eff-2129-4c2d-84a2-9db2eb10530d", "sighting_of_ref": "indicator--a8ce8dc1-5299-4522-af6e-276c521ad257", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a986a6-58cd-4b5e-ad03-7fd17dd04581", "sighting_of_ref": "indicator--fe52e5a8-2f4d-4e45-adba-d8a322995c65", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a92300-644f-4ef8-8a20-66bd84c6af32", "sighting_of_ref": "indicator--3e5ab67a-33f1-4e56-9605-cee266388168", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a205b8-ddf6-4a28-a6b8-ae55a258d6cb", "sighting_of_ref": "indicator--d5c456e2-5f90-4023-a1c7-06e40ecb0f25", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe226000-01eb-478a-b981-4b2aa03214ed", "sighting_of_ref": "indicator--d5c456e2-5f90-4023-a1c7-06e40ecb0f25", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db858ed-43d6-483b-8c26-7c512da03d8f", "sighting_of_ref": "indicator--a6673c86-913a-4bba-9ce7-fc82ce0313cf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8696bab3-58dc-4ee7-9a1d-6bb359dd523a", "sighting_of_ref": "indicator--0eba7e15-3ef5-4ab6-9113-b3de8005f42a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d722c7-0b70-4592-8543-b8a3d3ae3f3a", "sighting_of_ref": "indicator--c22055f3-a1f7-41af-9e3c-4b6bbd438495", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dbd2684-a0b8-4b58-b5d7-21d920a59bdf", "sighting_of_ref": "indicator--c22055f3-a1f7-41af-9e3c-4b6bbd438495", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb9c577-48ba-47fb-aa73-0075f4618987", "sighting_of_ref": "indicator--816adae9-b692-4108-97b3-2cea2f60942a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6781d861-53d0-4523-a798-133bd866a146", "sighting_of_ref": "indicator--bfcf6b1a-cc66-4980-825e-6d74b1a9fd50", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c993040-aef4-4174-acf8-66df318550a2", "sighting_of_ref": "indicator--bfcf6b1a-cc66-4980-825e-6d74b1a9fd50", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88bf4f35-a224-4c78-a26b-7a9071d3c742", "sighting_of_ref": "indicator--4b9a40fb-5101-4824-a385-952cd121876b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7181b16-dacc-445e-adf3-2ff437830dc8", "sighting_of_ref": "indicator--7be3abf5-3157-44eb-9dd6-010700bbe034", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d1ebf2-d75f-43ba-9cfd-99004804aa25", "sighting_of_ref": "indicator--a3cd647f-4242-4a9b-9abf-dafcb1cee792", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d15fa1f-bdf1-4cfc-992c-bc43697844f3", "sighting_of_ref": "indicator--8029597a-a76f-4dcd-8106-3bba46a464ca", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b04662e-1134-4f6d-a0a3-8ff2d7f325e0", "sighting_of_ref": "indicator--f3205bbf-f68b-4a71-b044-3142823d4f9b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf434da-f1a9-4acc-b0c1-a2fab5c17d12", "sighting_of_ref": "indicator--439cf0d0-ad65-4bea-8f86-3d84a619e87d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650ee5fb-eab9-4cf5-a527-60d958f34409", "sighting_of_ref": "indicator--3c3c3645-ba43-4c6e-ada1-0efbd6525383", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f412c36-b456-49ae-8457-e69dfeb3c70c", "sighting_of_ref": "indicator--3c3c3645-ba43-4c6e-ada1-0efbd6525383", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10fada08-7811-471c-9fb8-f936d415c03b", "sighting_of_ref": "indicator--88ed561c-6b4e-40ea-bdf8-fb2f243af225", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3aa54d5-7d1b-43b9-9df9-3351306bbb6b", "sighting_of_ref": "indicator--88ed561c-6b4e-40ea-bdf8-fb2f243af225", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f49f8fc-455a-4ec8-970e-264dc4447a12", "sighting_of_ref": "indicator--b3e922b5-e15f-4a82-9362-bc263508a232", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb039abe-911b-48fd-b56b-3a795fdeaeec", "sighting_of_ref": "indicator--b3e922b5-e15f-4a82-9362-bc263508a232", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072cd28e-16bc-41e9-ad02-6b29a911e1ae", "sighting_of_ref": "indicator--b3e922b5-e15f-4a82-9362-bc263508a232", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7ef6b0-dfae-4741-95ab-3aa0857df714", "sighting_of_ref": "indicator--02bcfc07-ebe4-42c0-8669-ef95a5ff33d0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93321b1-8a50-4df2-9cb9-0be41ca4cc1a", "sighting_of_ref": "indicator--196907b3-753b-4577-9aa3-bac96a02cee5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5731ea5e-aaac-4053-8075-943fca32b657", "sighting_of_ref": "indicator--1c0cc149-d9a6-4774-9d1d-bcc2b6f63d7c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78224cdb-f554-4433-a5ff-630c52927579", "sighting_of_ref": "indicator--d15888a0-532f-4f82-b0d4-f7ddcf4c7429", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382b032a-df83-4ce8-88d8-8e587298bb77", "sighting_of_ref": "indicator--814ce132-1465-440e-896c-5a16f7b9b996", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e39e69-1033-4f5a-9198-63fd3bcb1443", "sighting_of_ref": "indicator--4d86ca33-c28d-4037-a6ca-474d05411dc0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9399e6-0801-45ff-9073-3cc6bc36bc2f", "sighting_of_ref": "indicator--554a914b-17be-4562-a5fb-6fd30a09c1ed", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2429f8a1-c8c2-4474-874b-1d5d589cc22b", "sighting_of_ref": "indicator--7699b591-5c41-440b-ab70-acaf71a65592", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b74884-3cf8-416b-a646-13a1f40adb09", "sighting_of_ref": "indicator--d17850f5-0eb2-421c-b638-30b17beacb90", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e27874-ac5c-49c9-9630-99f5a6e968f8", "sighting_of_ref": "indicator--d17850f5-0eb2-421c-b638-30b17beacb90", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f69c03-8b8e-4646-8aef-4190e6a1cb28", "sighting_of_ref": "indicator--b1f09f8b-e80c-40bb-bc23-f1b9fad0ada1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f807f4a5-2e21-4a4c-8ca5-05d3286dcdf4", "sighting_of_ref": "indicator--0ad60e75-e8a3-4c49-97a6-d41bcea74903", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333d7d35-4804-4c2e-8b4b-5585d367e78e", "sighting_of_ref": "indicator--27c5ddde-b97c-4b6c-bc16-29725add934c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93357067-8616-4e4a-9ac2-43a434cf4216", "sighting_of_ref": "indicator--27c5ddde-b97c-4b6c-bc16-29725add934c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fce02d7-d352-467f-bf91-8b89fcbe99c1", "sighting_of_ref": "indicator--9e4302b8-3138-4672-bb14-838d1eff074f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105f6812-3e8e-4f75-a6d9-612fd7748752", "sighting_of_ref": "indicator--50537a6b-f496-4461-9bf3-9af99ede4fbe", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c91310-d35c-4201-8c12-c293ab37033b", "sighting_of_ref": "indicator--9dc5beed-2c14-4e26-b76a-8c35969b3bcf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a2e5cc-fe3e-436f-a485-910212fb0fe5", "sighting_of_ref": "indicator--ef865254-7f34-4189-8cea-4dfbdf90f661", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f66a72-344a-45b4-8e59-ca14456ada65", "sighting_of_ref": "indicator--e0d9d589-e155-4ce9-831b-758050d137fe", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3597e441-8135-4b09-b2fd-e7fc38121ad3", "sighting_of_ref": "indicator--3873393d-ee82-480a-82ac-797bc1a7b4db", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6b15b9-498d-4a12-a1bc-19951f440068", "sighting_of_ref": "indicator--c59eb7cb-089a-4bcf-bfbd-1783aa47c79f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fee16d-2e53-4149-95d1-4cc6a60e9aae", "sighting_of_ref": "indicator--5112e64c-07e4-4ad1-bde3-3934cf76caaf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6d4113-c7af-4acb-bdf9-67dd663a598d", "sighting_of_ref": "indicator--3d5a3087-038f-4fcc-a9f4-68dc08a65445", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ba10e2-d8de-471c-9d4e-12120a3479b3", "sighting_of_ref": "indicator--f4945e89-0182-4d8c-8c5e-9f01ce2f2aa6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9ca3a6-c961-41c2-9a3b-1a77525d8703", "sighting_of_ref": "indicator--73d75507-9e72-4242-a469-a74ba64d0b91", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42813207-4115-4afd-9600-e76b8ed35d14", "sighting_of_ref": "indicator--277a587a-f284-4014-847e-3e86965b9a51", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea62bb3-75e5-4741-8d13-394971180552", "sighting_of_ref": "indicator--c647d88b-dde4-420e-a323-8836ff3a42b0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b96f1b5-395a-4199-841c-1570d7349c74", "sighting_of_ref": "indicator--0d4f5d25-3d15-4e5a-9e4a-9b397e860eb4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7187250-8dc3-4449-8231-a1439189b718", "sighting_of_ref": "indicator--e4eb3a1d-71c6-447c-bd8a-3c745475f302", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e341dd78-57c0-4dac-81c6-645b52b651c8", "sighting_of_ref": "indicator--b05b4288-779b-497e-9841-e687b4eb2d6c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc1aab7-0690-48ed-9252-e0fe78a586a9", "sighting_of_ref": "indicator--334fa53b-e5b9-42bf-a5fa-04670c5a20e0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f3f92b-5836-427c-b18e-94eed59c69c0", "sighting_of_ref": "indicator--420358ad-ed09-4823-bdd7-82c5b5150e06", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313fc9f9-1055-48fd-8416-e8748007fa0d", "sighting_of_ref": "indicator--e43e5952-5b69-41b4-a8d8-6045fde21649", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699e36cf-b9ac-4fe7-8a16-3b650f8c7a95", "sighting_of_ref": "indicator--76630f53-d43a-4d7b-b17a-3824b7e38a3f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb254275-0347-4076-ba40-b81bd197bee7", "sighting_of_ref": "indicator--76630f53-d43a-4d7b-b17a-3824b7e38a3f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d69ac6-e132-41b1-a67b-3e59068e66d5", "sighting_of_ref": "indicator--cb95bbe4-da84-4ddb-b5bf-7f5b44edc17d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480a458f-c60a-487c-9890-799b72c736ff", "sighting_of_ref": "indicator--e108f82b-d965-4db1-8a3e-be20fdc07491", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b26db0-0788-4634-92d7-c2067de4845e", "sighting_of_ref": "indicator--738e4f87-537e-4d0f-b5a1-80ad550c1469", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b8d9f0f-906a-4f2d-9909-55ad082a8b55", "sighting_of_ref": "indicator--44b0d9bc-f40a-4d16-afad-ccf47fef6183", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c12f49-f18d-4d81-a5f0-b2ae43913153", "sighting_of_ref": "indicator--8ae562a7-7ed6-4bae-a06c-19b74d861834", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1377ad65-607a-4f90-986d-da6cc0f5149e", "sighting_of_ref": "indicator--8ae562a7-7ed6-4bae-a06c-19b74d861834", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a440b2af-d107-465a-a64d-11d70f755774", "sighting_of_ref": "indicator--bb9f2366-f7ca-46e5-9170-a6c0de111adf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd42d4a5-72b4-4fa5-a5b0-8f08b0628dc2", "sighting_of_ref": "indicator--e23d6c2d-48e2-4eef-a25a-a19766cb30cc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be949910-f6b6-464a-aa7c-c2325e1a8362", "sighting_of_ref": "indicator--51f84afb-f908-454a-b119-f1eb90e3759f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64659fc-1ec3-4936-b68d-9e21d05b2eed", "sighting_of_ref": "indicator--9b5c54dd-b611-47a0-8327-d7f76654616a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99842568-b497-42ef-a2b7-747c8a640d76", "sighting_of_ref": "indicator--e83938e8-9718-47d5-a6eb-0b0133a9d428", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7365518-a4ae-4d1a-b78f-2c013b8d59fd", "sighting_of_ref": "indicator--fa7a42ef-f19e-45c9-b079-ab4eaec0e695", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f13e70-2c35-45bd-a3db-f15ae75b3d29", "sighting_of_ref": "indicator--fc89645f-05f5-48f2-b8eb-8eb4c8a4056e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed28383e-7d09-4387-9624-4f0cd6d9ae20", "sighting_of_ref": "indicator--a4ef923d-25ee-417b-b437-258a1bb289ba", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf3c65f-271c-47dc-8f76-8e31f746f556", "sighting_of_ref": "indicator--7adf4bd0-732c-4f46-9793-6352848974de", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca81488-027f-4f62-ac5d-5cf3cacd567a", "sighting_of_ref": "indicator--8675d7e6-940a-4262-ad3f-56e8363c9340", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b25f33-e902-4a08-84dd-69fbb795f7df", "sighting_of_ref": "indicator--d36ae5e5-da5f-4aa8-8018-98afcfc5f49d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa32a441-01ec-4c7f-b6be-35191c3d87f3", "sighting_of_ref": "indicator--a2852b0f-38ef-4c31-9030-a083119d523f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9113c0ba-ad84-495b-827e-c708a6f81031", "sighting_of_ref": "indicator--b41052d8-8a8b-404a-9688-9abb9f17ee99", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff2156d-b17c-4d99-8635-95cd2e4d8f7b", "sighting_of_ref": "indicator--17963235-fcc3-4b78-8bc7-97b2df212580", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edaf49fe-08bf-410d-98c1-2d023c34c3af", "sighting_of_ref": "indicator--17963235-fcc3-4b78-8bc7-97b2df212580", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf512a41-a791-408e-af0a-57b023229e35", "sighting_of_ref": "indicator--028d3a98-547c-4bef-bbe2-cba14d86511f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e26066fe-196b-4aa2-ab93-7607dee697be", "sighting_of_ref": "indicator--51bae3e5-9832-4589-9b1a-5182b3f1c71e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0948717-4936-4d4e-8f71-08c049b57158", "sighting_of_ref": "indicator--6ee861c9-22a5-4ac5-98a3-05e404194809", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74880f92-d526-4e26-9834-054b59731163", "sighting_of_ref": "indicator--1677f0a5-ddb3-4707-aed5-90a2bdd5b5cc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ba9fc8-0796-415e-9a2a-8c8ef7e21e02", "sighting_of_ref": "indicator--269b74a2-6544-4331-b1a1-d9769c0af489", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42206363-66ad-4984-bcb1-5c5506c43cbc", "sighting_of_ref": "indicator--269b74a2-6544-4331-b1a1-d9769c0af489", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81462036-5588-46e6-98c5-552ece0f9c85", "sighting_of_ref": "indicator--3705abb1-82b4-4707-812d-8e2f9b02bf42", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d13360e-84f6-4bcd-9780-df2b39def034", "sighting_of_ref": "indicator--706a5496-e903-415c-90c8-62dd4a47ed9f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05023669-3429-4f1a-ae48-96c505445b37", "sighting_of_ref": "indicator--bd3a567b-1b66-442c-933b-912234a46bbc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cbead46-c38f-4e31-8520-0e5422b3fcb1", "sighting_of_ref": "indicator--bd3a567b-1b66-442c-933b-912234a46bbc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e40b0bf-252c-43db-8108-ec7b8c98b16c", "sighting_of_ref": "indicator--05e1ec76-688d-49f2-87d1-1edcdd885499", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95e66d1-49a0-4c2f-9562-38e5de50bf3d", "sighting_of_ref": "indicator--02bd0890-1028-4d73-9e4a-bfa27a5f9285", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb8cc88-fb8c-4bd8-86f7-8fff62488a3d", "sighting_of_ref": "indicator--02bd0890-1028-4d73-9e4a-bfa27a5f9285", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c8fa92-61b4-494e-9ac8-78f57a54c269", "sighting_of_ref": "indicator--7c998426-27f2-4a04-910a-f26a0e2cf17a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044bc9f7-da76-44d8-a2ea-4a2c2407f031", "sighting_of_ref": "indicator--c48433c3-9b92-45e6-a980-a911493ff075", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253d7895-989d-4f6b-8bd6-732f5f4d5074", "sighting_of_ref": "indicator--c48433c3-9b92-45e6-a980-a911493ff075", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1d9e1b-74b7-4010-9fad-1fc096e465df", "sighting_of_ref": "indicator--e09840b9-0e1a-44cd-b91a-25b67b108963", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6ac6a7-009e-4f74-a586-ca67ec5c367a", "sighting_of_ref": "indicator--af304645-d115-452b-a1b0-b9f1cccb94ba", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ecd42fe-8c1c-4121-99ba-4306ebd81feb", "sighting_of_ref": "indicator--4a95aad9-ee6e-49a7-8954-53ebe8319fe6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fa05fa-f39d-41a3-acb8-819b9dcc5aff", "sighting_of_ref": "indicator--4a95aad9-ee6e-49a7-8954-53ebe8319fe6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf36c5c-0bc7-4506-a753-72b70c45140b", "sighting_of_ref": "indicator--768c8e62-a8bc-4045-810d-da1543236ad4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7994f5f5-bac0-43f4-8605-517abf938eab", "sighting_of_ref": "indicator--216461d3-e355-42f4-8482-cdc11ec791d1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126442fb-bce6-4306-a529-c6243b53acb0", "sighting_of_ref": "indicator--47782011-ef34-4197-a7d0-c1770cc2279d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43db82e2-0a0a-4fae-a389-9a237625e1c6", "sighting_of_ref": "indicator--d6b5592f-8dcc-40ea-b2cc-cd2f78c71a37", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7442e1-0e73-4073-ad0c-3d97a9c6b2ca", "sighting_of_ref": "indicator--17987e40-6ddf-466b-97e6-d8c77bf1959b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dcc55c8-e7bc-4383-8b85-c01b6bcdaa3e", "sighting_of_ref": "indicator--826fa1b6-5c9b-4419-9bfe-f2024859d60f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cecb1f5-65d5-4ed6-8bf2-8e8e1cd753f4", "sighting_of_ref": "indicator--826fa1b6-5c9b-4419-9bfe-f2024859d60f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8d78c9-cb34-4fe4-a717-fb66b9796396", "sighting_of_ref": "indicator--31d27563-d088-4220-8c40-5331ade18dc6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42328be6-9c9e-4814-9e2e-ae32bf8fc7ae", "sighting_of_ref": "indicator--7617c1b3-0942-4924-8df0-21447186e1f6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59390d3d-6eda-4784-9f43-9e197a92de2e", "sighting_of_ref": "indicator--e142fa89-189f-426f-bd13-4fd6e3a3ae27", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd138f9-9bb7-4f1b-b492-efc3f94549fd", "sighting_of_ref": "indicator--b1eb98c3-796b-4d28-818e-890fbf4d55d9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a61ef6-0ec8-4cc9-a8c8-dd6cd8b6fe17", "sighting_of_ref": "indicator--b1eb98c3-796b-4d28-818e-890fbf4d55d9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9cb06c7-766a-40fe-9bd7-c0334549f7cb", "sighting_of_ref": "indicator--a6bd8fe1-2199-40a7-842d-1e4b9a33c595", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e374b20d-b5b1-498f-8028-a36576e2b336", "sighting_of_ref": "indicator--083fe58e-a9be-4959-b94a-752c4ccad7ec", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f19e58-464b-46cd-9f93-5477919742be", "sighting_of_ref": "indicator--c937bfb9-ff7e-4093-af3d-d159713bb35a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f80dd5a-bedf-432d-b326-d1d3348c522f", "sighting_of_ref": "indicator--9825d167-273b-42ef-8d11-0c1c03c2a984", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96141c3-fd3d-407a-8209-863d80e72725", "sighting_of_ref": "indicator--1a37bb20-8eb0-490a-9f9e-d8b501c77b3b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65ac709-f75b-4a56-9d41-e96346fb1060", "sighting_of_ref": "indicator--2c957117-d48d-464d-87ee-b48219364395", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f0726e-d137-4f28-8114-e9e7f3b6e384", "sighting_of_ref": "indicator--8f275aa5-c83e-44c1-9d9f-bb7c62c36807", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59cb069f-3bee-49a8-8665-c77fd4823b97", "sighting_of_ref": "indicator--e9344f6f-06e9-4dd5-8ef1-ffada603be85", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833a6ae5-ce70-4a42-9e7b-256cd64178cf", "sighting_of_ref": "indicator--95866b1b-d2fb-4b98-82e5-15f4494c73ba", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b62887-a073-4182-86b0-d8e933e7c251", "sighting_of_ref": "indicator--639281f5-1262-490e-9412-94aa50c25c60", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfbe3a30-2c1d-45f7-a89b-dee67b3219aa", "sighting_of_ref": "indicator--639281f5-1262-490e-9412-94aa50c25c60", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd511f1-3d7f-4690-a6a1-ae7e1fc33433", "sighting_of_ref": "indicator--5c5c4185-691e-4a0e-ad01-538d710da993", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be096172-deba-49c4-817e-2c6edce6ed58", "sighting_of_ref": "indicator--69c5eb07-72bc-4dde-9415-c81b63b37fd2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef845c5-7cc2-433d-afff-9e8ca9c63fc5", "sighting_of_ref": "indicator--e9e258b2-24a6-4946-80c3-223ccabfe84c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191c4308-74bb-4669-889f-438b13b2fdc8", "sighting_of_ref": "indicator--eac771ae-cf41-48a2-81a0-33cc69895644", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b48b0e0-52cd-42a3-8e53-e5cdc62d18f3", "sighting_of_ref": "indicator--eac771ae-cf41-48a2-81a0-33cc69895644", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a954f9d0-ce64-4cdd-8abc-08420f1c0669", "sighting_of_ref": "indicator--802e3139-49fc-4b6f-8a83-bcbd12d1edf2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667ad992-1565-477f-a2f7-3006d222c235", "sighting_of_ref": "indicator--cce08fb9-5f72-4f40-9a02-782447cb952c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600f7d2b-2680-4eb7-ac34-32799a7d5525", "sighting_of_ref": "indicator--cce08fb9-5f72-4f40-9a02-782447cb952c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed952980-ada3-43fb-b53d-85055fabac01", "sighting_of_ref": "indicator--cce08fb9-5f72-4f40-9a02-782447cb952c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d099eca-c19e-4dee-bdf8-9b3e5029f4d7", "sighting_of_ref": "indicator--de0ba32c-559f-4a59-a1a0-30ea26cbf8e7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58637f85-b073-490b-bba4-bbe04430f4aa", "sighting_of_ref": "indicator--de0ba32c-559f-4a59-a1a0-30ea26cbf8e7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa997176-1792-4a83-b731-b28e0b165a83", "sighting_of_ref": "indicator--de0ba32c-559f-4a59-a1a0-30ea26cbf8e7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b690fd9-d831-4301-87cd-2275cb1ba524", "sighting_of_ref": "indicator--17d4a495-1e73-43f7-84ec-6eefd3f2cf36", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e745a860-442b-4e9e-9768-ec173d7f3963", "sighting_of_ref": "indicator--480ecd1a-21d2-434e-a71b-7ff12cb86722", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a94ee5-a41e-4362-8015-1fb27c72da38", "sighting_of_ref": "indicator--edb355ae-1bea-4ec8-a8ba-dd830371fea7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4fc8d7a-eb68-4d30-9940-7b8ceab49ffd", "sighting_of_ref": "indicator--ecfd52cf-37f0-43ed-bbf5-e8771ed6fde2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66b5799-2dd2-47b5-ae5f-195188f4b589", "sighting_of_ref": "indicator--ecfd52cf-37f0-43ed-bbf5-e8771ed6fde2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174f1f18-31d0-4e8a-9320-32b30dc02e65", "sighting_of_ref": "indicator--82fca2d7-2adc-4ba9-922c-6b5309ad8157", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6664538a-f2d0-450e-839d-c628913bafb2", "sighting_of_ref": "indicator--bf8e9103-3b25-42dd-a563-c5bd527638ce", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233ab418-5484-4320-b3ef-366d744bf762", "sighting_of_ref": "indicator--bf8e9103-3b25-42dd-a563-c5bd527638ce", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65bfdf16-4f95-4409-b0ef-7575e37e61c2", "sighting_of_ref": "indicator--a818dd3b-b82f-4d8d-af9c-f494039ff3b8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992edb2c-6929-43fb-beca-fd1edf64705f", "sighting_of_ref": "indicator--a818dd3b-b82f-4d8d-af9c-f494039ff3b8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04845139-affc-4d22-a36a-84407a2c0aa8", "sighting_of_ref": "indicator--a818dd3b-b82f-4d8d-af9c-f494039ff3b8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b16dbd7-00f2-4a09-bdbe-75f19d1c66a1", "sighting_of_ref": "indicator--fe4083e1-04da-4ea7-af07-ccae92984ff1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e22008-17cf-4d25-8d9d-59373dc09723", "sighting_of_ref": "indicator--49c57baf-5098-407c-a5a1-eab7c5684f9d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd83beb-3e5f-4199-b5dd-e5f5333ba833", "sighting_of_ref": "indicator--49c57baf-5098-407c-a5a1-eab7c5684f9d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31cdf3dd-360e-45d7-91d8-f56ce312802c", "sighting_of_ref": "indicator--9640b969-a99a-4c4e-befe-81f6b7de9f86", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b229af-6c4a-4abf-86a6-00adc1498e43", "sighting_of_ref": "indicator--9640b969-a99a-4c4e-befe-81f6b7de9f86", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ba6005-f39e-4d5f-89da-eb398fe2ba0c", "sighting_of_ref": "indicator--db9af256-62ac-488e-a65d-14e43bbc9979", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebadf8e1-e778-4141-8078-c86b2f145e29", "sighting_of_ref": "indicator--390d743a-8bfa-4588-92da-5506dd50ee23", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c294cdc0-83eb-4b06-bd9f-59fcfc933e17", "sighting_of_ref": "indicator--390d743a-8bfa-4588-92da-5506dd50ee23", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576ab3a3-3046-4fa0-8812-aa03a97d9751", "sighting_of_ref": "indicator--fd9b5093-8e9e-4f72-9cd1-9b881edd1708", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230b7e4a-896c-4845-bfa8-ae0a9fc56fc3", "sighting_of_ref": "indicator--d64a778d-e289-470b-b32b-bed2874cdf94", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d93bc6-4af1-4f01-b1f0-8ad4a510c46d", "sighting_of_ref": "indicator--dda26694-d0ee-4601-b85d-301b2731a1ea", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d1a809-b51d-4838-a57f-d98f0a981db1", "sighting_of_ref": "indicator--dda26694-d0ee-4601-b85d-301b2731a1ea", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60056ded-4290-43fc-8151-e997165d2769", "sighting_of_ref": "indicator--dda26694-d0ee-4601-b85d-301b2731a1ea", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16d1bdf-e7cc-4ddc-b263-ee0a98d8b7c7", "sighting_of_ref": "indicator--b13c7d10-a0a7-48ce-bdcd-a5397e02722b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77f075f-c459-4083-93a3-51c16e979f03", "sighting_of_ref": "indicator--b13c7d10-a0a7-48ce-bdcd-a5397e02722b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f5d503-4fa8-42b9-977d-86df89b7e51c", "sighting_of_ref": "indicator--ee1e13e9-6750-41cf-8c13-e461b4149017", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed66a032-9475-4e6d-bffc-a3d696786a75", "sighting_of_ref": "indicator--d2260264-010f-4af0-a290-0e891335b9d0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69239fbe-8ce7-4701-bfb0-a0ece80b3019", "sighting_of_ref": "indicator--b9c74914-97d2-4361-b031-14b3d8b30bd8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0d8095-27da-44d4-b2e0-a14f3061f4b6", "sighting_of_ref": "indicator--b4a71587-0932-46aa-8764-055891e753d9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c27f38-2994-4862-99c9-04d05819c297", "sighting_of_ref": "indicator--ef61c465-8c2b-484a-a7c1-f67a08c0a7fe", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43fb3bd4-7f6d-4868-9937-7bc22ad33759", "sighting_of_ref": "indicator--d08085e4-5830-4c3c-911c-adb117f8e710", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e868405c-e650-4ad0-a0d1-09cb783cccca", "sighting_of_ref": "indicator--6bf0ffd6-20ef-4bc9-b325-0f63ad1ad153", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191bb50f-81bc-4d2b-90ac-08720fe643a0", "sighting_of_ref": "indicator--8c383d62-a6b6-4971-99ea-a997ef8e6ab2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae5afd8-74de-44ab-b811-d79a6f851672", "sighting_of_ref": "indicator--8c383d62-a6b6-4971-99ea-a997ef8e6ab2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee2477dd-4907-49bb-990f-d93e6b434ec9", "sighting_of_ref": "indicator--0f6c970f-c912-4420-b69f-a888f8c5aa54", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a18c76f-5bb7-4493-93a9-3f9a8ac0fe7e", "sighting_of_ref": "indicator--9116665f-77bd-48ae-84fc-6d7eda1e574c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a1a918-82a6-4f18-96a7-92957e2be20a", "sighting_of_ref": "indicator--9116665f-77bd-48ae-84fc-6d7eda1e574c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c993c760-40a8-4245-a1f3-5b4f1e3620eb", "sighting_of_ref": "indicator--b80f7da5-204b-4342-b41e-884bcec12eb7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde39980-6e1c-4289-98d1-74d1903d8068", "sighting_of_ref": "indicator--6263bf48-cbfc-489a-a2e3-581daf2df3ce", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07cc97e-446c-4df5-8565-acecfe6c0147", "sighting_of_ref": "indicator--760ebea8-a009-48f0-b83c-3d44cd9db252", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac956e9-efa7-49ab-8ade-f2e163af9d3b", "sighting_of_ref": "indicator--c242e2fb-0341-4bed-b638-b365a9cd3c43", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a53167-6139-46e2-b734-1bc61644ab7e", "sighting_of_ref": "indicator--c242e2fb-0341-4bed-b638-b365a9cd3c43", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c32afb7-24ea-479c-a198-826a2da1d986", "sighting_of_ref": "indicator--41d251e5-2ebd-4e51-8d19-49c767899656", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194a8e2b-679a-4571-8cd2-f7f83d81243e", "sighting_of_ref": "indicator--e8074628-4a44-40d2-8bde-8aacdd0cd60d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1bab28-19e3-4c58-a7a1-280d3aad9883", "sighting_of_ref": "indicator--12188e1e-8127-487c-9ef8-dddec5abb464", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81e0f79-9a9e-4e2a-8636-73448a73f49c", "sighting_of_ref": "indicator--12188e1e-8127-487c-9ef8-dddec5abb464", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ee20e5-d768-441a-968c-b96dc457047c", "sighting_of_ref": "indicator--418a24b8-b9ea-45e8-a3d4-d4994eb3d54e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee2c4c3-47a2-4ebe-99dc-50b6b1eb71f5", "sighting_of_ref": "indicator--418a24b8-b9ea-45e8-a3d4-d4994eb3d54e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7a6261-984d-4fea-8140-b2342b3f8bf0", "sighting_of_ref": "indicator--37c66430-3f3b-4329-88f1-2c4101def81c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20186a48-f01a-4ae4-9932-44df4a519569", "sighting_of_ref": "indicator--37c66430-3f3b-4329-88f1-2c4101def81c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aafb6425-8ef1-40a9-b3b3-6194307f090b", "sighting_of_ref": "indicator--b480e2f0-8199-4d0e-a42c-19681099099a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86239b0-5808-437b-a502-0104e0238289", "sighting_of_ref": "indicator--df5d6451-de1a-4078-b91c-2388cd049609", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1681adf-186c-46ac-8252-e06045386987", "sighting_of_ref": "indicator--e395a588-2f95-40c0-a522-98807a00d12f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9989c0-6278-433b-9012-e3a66e8888e4", "sighting_of_ref": "indicator--e395a588-2f95-40c0-a522-98807a00d12f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20cb51f-97dd-4490-b2bb-4cf0b6d3ddf2", "sighting_of_ref": "indicator--f8b11583-bf65-4056-8693-9b09e1d6477a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0770428-e4a4-47fc-8dd6-e13a528b181e", "sighting_of_ref": "indicator--16fd3d06-233e-4d7e-960f-bc7d1b1258d5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945b011f-7405-42b3-b629-4e0d4ba5c4ed", "sighting_of_ref": "indicator--16fd3d06-233e-4d7e-960f-bc7d1b1258d5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68f8388-2ec2-4cdc-8d74-90eaa07ffb9d", "sighting_of_ref": "indicator--11ddf816-4688-4aeb-84a6-a63d5ec408f2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72022544-8b27-41f4-8e95-30d6c929543c", "sighting_of_ref": "indicator--11ddf816-4688-4aeb-84a6-a63d5ec408f2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34216b77-8c94-474e-8d1f-67ad01b7a4e3", "sighting_of_ref": "indicator--9eb84f35-76f3-4f99-829e-e901843e399a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83978f61-4828-48a7-a550-3acec9a40d58", "sighting_of_ref": "indicator--9eb84f35-76f3-4f99-829e-e901843e399a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0827ea-5733-4f2f-9513-6ca202630887", "sighting_of_ref": "indicator--938e2f3d-0755-4fbc-857e-11137914f272", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9528e41f-a10b-47d4-b3f6-52e8f678d615", "sighting_of_ref": "indicator--7b3e6e10-44fd-4615-a158-36651238ca1f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac215fca-b64c-41b9-aac0-a93c88fa562c", "sighting_of_ref": "indicator--7b3e6e10-44fd-4615-a158-36651238ca1f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f4abb4-775a-47a6-896b-90b4f6328ea2", "sighting_of_ref": "indicator--7b3e6e10-44fd-4615-a158-36651238ca1f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcef9232-85e9-4040-aef3-348ce5f9bf4b", "sighting_of_ref": "indicator--4d681171-8962-499d-856a-706d30053d52", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec9e7fc-8202-4de3-8525-99a20cdacb43", "sighting_of_ref": "indicator--4d681171-8962-499d-856a-706d30053d52", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f39b93-4ae3-4d52-8c5e-c3ee50ab1371", "sighting_of_ref": "indicator--e4ff797d-caf4-4aa0-b407-8f89e57fe98c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ab9db8-5263-4607-8ddf-7d21dfbb002f", "sighting_of_ref": "indicator--e4ff797d-caf4-4aa0-b407-8f89e57fe98c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6370f4d-6824-4829-8f58-4eca0132bb56", "sighting_of_ref": "indicator--9379aaa3-01d1-4e70-ac20-f7bd7a6fe85c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93ef243-6898-429d-aa39-9c7885ba30b0", "sighting_of_ref": "indicator--9379aaa3-01d1-4e70-ac20-f7bd7a6fe85c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182a6833-4552-4638-9b51-965c5ce1ddcc", "sighting_of_ref": "indicator--3ca4ee0a-f82e-4452-8393-7ee915c9ede2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf3f7a6d-ffc1-466d-8547-56c6b51bce4b", "sighting_of_ref": "indicator--4cc41d41-ca6c-480e-a510-ac66aed5e137", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1329564-1018-42a0-b184-cf7a3e75eaca", "sighting_of_ref": "indicator--f9fc7725-f6dc-475b-bc06-ecadde507495", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90b3aec-8865-4c74-94a2-853568d7456b", "sighting_of_ref": "indicator--e7fb6e36-24d3-497f-b0a5-95e3f648ce7b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bffa31-dc82-45dd-85bd-9a47f02596be", "sighting_of_ref": "indicator--40780ae9-8c80-4f38-a807-c73470a195bb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df3a606-656c-42bd-916e-f5a68647fa01", "sighting_of_ref": "indicator--24e48329-2e42-4f9e-a43b-9421ecc28645", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f689011e-353b-4c5c-a29e-3855c1e4159f", "sighting_of_ref": "indicator--24e48329-2e42-4f9e-a43b-9421ecc28645", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb9d8cf-d05d-4518-b58a-95cb9f5cc402", "sighting_of_ref": "indicator--ba8d9780-9e45-483d-8fa5-934ae686948c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c55c1d-79e6-4bfb-9663-e456c1284efb", "sighting_of_ref": "indicator--ba8d9780-9e45-483d-8fa5-934ae686948c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d23227-1457-4330-9695-9a282c8ad140", "sighting_of_ref": "indicator--24acde1e-4220-41f2-b13d-a17ee5f6f6f2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25dd917e-6794-4300-9db2-118840fc836a", "sighting_of_ref": "indicator--24acde1e-4220-41f2-b13d-a17ee5f6f6f2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8279f27f-d33c-4db7-9cf4-1f771162b4d1", "sighting_of_ref": "indicator--b4532936-4d4a-48dc-8ed1-28887d5b6bbb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb17b3cd-a30c-49a7-a3c9-d1ce94c0d106", "sighting_of_ref": "indicator--b4532936-4d4a-48dc-8ed1-28887d5b6bbb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ccb3982-e221-41e7-bc81-38769ba9c4d3", "sighting_of_ref": "indicator--405c8414-364f-4000-863f-491328d55a85", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1749d9-9e03-48d4-a13a-1394c23960fe", "sighting_of_ref": "indicator--12d628e8-4316-448f-adcf-3b9035b80870", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9073899b-dfcd-4738-b6fb-fbe5231d87d2", "sighting_of_ref": "indicator--df30053d-d48c-4c0e-b500-c5a8b3af9299", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1ce8f8-425a-4aad-98de-9256c4d04ea8", "sighting_of_ref": "indicator--df30053d-d48c-4c0e-b500-c5a8b3af9299", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbb1bb1-515b-4365-8290-0ef329c57f34", "sighting_of_ref": "indicator--c2fe589a-5f01-4391-aa9b-db7370cf4a52", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1c0bbd-45e0-4730-96db-808e58d59dd5", "sighting_of_ref": "indicator--3c8d7dc2-894f-44c0-ac37-382986824bf5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b25b789-3536-414e-9a51-4726e9b18d21", "sighting_of_ref": "indicator--3c8d7dc2-894f-44c0-ac37-382986824bf5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9884db-a38e-4f1b-b302-6ea1571fcec8", "sighting_of_ref": "indicator--992c8677-1110-4d25-ae40-cb370b802afb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b28ce3-2c59-45d9-9d2c-19b6b09ab652", "sighting_of_ref": "indicator--2ccc69a9-8b9c-4217-a4d0-24e7ef7b01b7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f9740f-3605-4960-8f5c-dc6eb26762d8", "sighting_of_ref": "indicator--c942645f-3a2a-40c5-964d-3be90e616325", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2985784e-2d08-482b-b316-f2ef1878f9d2", "sighting_of_ref": "indicator--c942645f-3a2a-40c5-964d-3be90e616325", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faabbaf6-ceb2-4fbd-9565-8e682ac6f516", "sighting_of_ref": "indicator--937ace7d-5b46-4551-9ee0-d3a7c2792af3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d1c492-844c-480a-94e0-727e4ac8ac28", "sighting_of_ref": "indicator--937ace7d-5b46-4551-9ee0-d3a7c2792af3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3415c52-4a47-4dc1-8e49-ddc3c8755f99", "sighting_of_ref": "indicator--a4e9ca84-c032-46f0-9dfa-60307eefbb93", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed8eff6-7759-43c1-ba11-ac7554b327ec", "sighting_of_ref": "indicator--a4e9ca84-c032-46f0-9dfa-60307eefbb93", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ef1edf-3d7f-4c4d-844f-8d68d5f168b2", "sighting_of_ref": "indicator--a4e9ca84-c032-46f0-9dfa-60307eefbb93", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4033023-2f88-4aa1-a3eb-7904baab06c2", "sighting_of_ref": "indicator--12bad24d-626a-4593-93de-bb0e57a9e0f9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116e16ed-bb5b-491f-9cc1-a2880505a29d", "sighting_of_ref": "indicator--12bad24d-626a-4593-93de-bb0e57a9e0f9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac212bf-fe2d-4d8b-aa66-e5167bc0ce8d", "sighting_of_ref": "indicator--5c2d5c82-1416-4b0d-a291-46d960825249", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c484f6d1-bf6f-44a5-825e-48abdb22048e", "sighting_of_ref": "indicator--67601b0c-968b-46e9-b655-3a3e222c3d41", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58680c39-5e5e-470d-a6e1-64f4f075d55e", "sighting_of_ref": "indicator--e4cfa730-b33f-4a3a-a413-287538fa264f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f5b283-9d1d-4c90-988a-9d220b987036", "sighting_of_ref": "indicator--c6e2e3ea-079c-47cc-9193-ee89866e7fd8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa5aaec-c3af-494c-919e-457e2676ec1a", "sighting_of_ref": "indicator--c6e2e3ea-079c-47cc-9193-ee89866e7fd8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04c9ef6-1d18-4aa8-a774-9351e9467b3c", "sighting_of_ref": "indicator--484d790a-b6eb-4809-a543-0184699ac6b4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b93f766-8521-4329-8bdc-e01a5e97a3db", "sighting_of_ref": "indicator--484d790a-b6eb-4809-a543-0184699ac6b4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2e9a76-225c-4cbc-8ff8-d0d2099fe7a5", "sighting_of_ref": "indicator--f54fb5ba-c55b-4199-98f1-ca960a43cb05", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46aded5e-a1be-4b03-966c-91f15716f643", "sighting_of_ref": "indicator--f54fb5ba-c55b-4199-98f1-ca960a43cb05", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35785c5-6d14-43fa-92cd-91931e151d53", "sighting_of_ref": "indicator--18790acc-0aba-473f-88a2-ea63ff1d7d8e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0e1ccb-91e4-4dbd-83e9-5ee59c987b5b", "sighting_of_ref": "indicator--38cbcc6e-c6ec-4368-bf32-7d99a216b4ec", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40ff6b5-a02c-470b-91ff-43c8a2206ae8", "sighting_of_ref": "indicator--81e4ea58-2467-490a-bd77-ae29973039a9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dfe99cb-c54b-41c6-bc4c-e06786261f85", "sighting_of_ref": "indicator--22676399-f8ae-4c64-96a1-62e93be7e837", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0e2ac1-49db-438f-8e9e-7aded1bd43f7", "sighting_of_ref": "indicator--22676399-f8ae-4c64-96a1-62e93be7e837", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4febd8f2-98e8-4c66-a053-b2132c75641a", "sighting_of_ref": "indicator--46c49d81-1338-4659-964a-a74d9b3f0e1f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42e7928-0381-4ca7-882b-fabb7a3884c1", "sighting_of_ref": "indicator--1b1a6f3d-ee73-468b-a5da-1a24503eda53", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62acc3f-b863-4916-961d-3bd245bffc88", "sighting_of_ref": "indicator--d7cc7360-0817-4c74-a1df-4ca96bb4c59a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173baeb6-e1be-48f8-b086-6a048e0b0a8c", "sighting_of_ref": "indicator--d7cc7360-0817-4c74-a1df-4ca96bb4c59a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496056dd-01fb-49b4-b2be-fe17b8a3453c", "sighting_of_ref": "indicator--7405b3f7-08ae-417a-9e6d-438b5b274361", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67966668-9721-4859-a87c-ae20110371de", "sighting_of_ref": "indicator--7405b3f7-08ae-417a-9e6d-438b5b274361", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7fe1c01-e6ec-4fd9-8128-954d4ddb8c52", "sighting_of_ref": "indicator--8fc97280-28d3-48d5-a0ba-87bde481eaf0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f3df8f-282b-4a78-9a39-ebb71205cabf", "sighting_of_ref": "indicator--8fc97280-28d3-48d5-a0ba-87bde481eaf0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5074e565-8e5f-4289-b647-081534b8e3d8", "sighting_of_ref": "indicator--f6c01ff2-f529-487a-a26c-24b61194362a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f7131c-ae9a-4be8-86e8-1613c9075afd", "sighting_of_ref": "indicator--f6c01ff2-f529-487a-a26c-24b61194362a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe130c0-af5f-4ef5-b9d6-ef88ea0a867f", "sighting_of_ref": "indicator--f6c01ff2-f529-487a-a26c-24b61194362a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d1a76c-baba-4134-8852-081c78e21669", "sighting_of_ref": "indicator--4727c832-fc1c-4f7e-8ee0-b8425d9b76b1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bbd48c-36c1-4d4f-935a-c00f1f79c538", "sighting_of_ref": "indicator--4727c832-fc1c-4f7e-8ee0-b8425d9b76b1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ba3da8-9d78-4ecc-8b9e-66c19a6275a6", "sighting_of_ref": "indicator--05e1dde9-0cb1-45a2-ab3c-0a42be90f5fb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e50b849-14b3-409e-8b0f-707c42d6ca92", "sighting_of_ref": "indicator--05e1dde9-0cb1-45a2-ab3c-0a42be90f5fb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d04447-5b15-48e9-a170-849b4a9266d4", "sighting_of_ref": "indicator--98b73593-723f-46d9-a7fa-46527f3ae48f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3ed4dd-cab6-47e9-b870-631e623d48ec", "sighting_of_ref": "indicator--be3d1fd8-2c03-4f2f-a453-c43d9277d41b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3660e43b-2dda-4bc3-b74e-b6ea701927c9", "sighting_of_ref": "indicator--83a4e1e5-e78d-4f53-95c9-845adc9a1875", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da12478-e63b-42e2-812a-26a15698e6e3", "sighting_of_ref": "indicator--50e553d6-5b0b-468e-a890-34897dd55691", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1a82d1-44c7-4a3e-9e87-9ece55c750ed", "sighting_of_ref": "indicator--50e553d6-5b0b-468e-a890-34897dd55691", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67253fb-4ecd-4b39-b823-93c9ccee5dee", "sighting_of_ref": "indicator--50e553d6-5b0b-468e-a890-34897dd55691", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3304cd0d-2369-4110-a61f-5925d3cc4dae", "sighting_of_ref": "indicator--04133436-1be7-4fe3-81be-3d30872d87f1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53be5dd-e5b2-4aa4-90c1-d303e4146496", "sighting_of_ref": "indicator--8d4e0da6-5427-42fc-a055-cbb26717ca8f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a47815-9675-4ded-8a7c-1b238d443d0e", "sighting_of_ref": "indicator--8d4e0da6-5427-42fc-a055-cbb26717ca8f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb108fac-16c8-4862-a110-fdd67d243184", "sighting_of_ref": "indicator--c1987b70-e747-451d-8e5c-d0f659f99832", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7ae53b-5873-4af0-b63b-7dd20290dfaa", "sighting_of_ref": "indicator--395404c1-9b89-4de2-afa2-fff193fd8b38", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0631c0cf-8854-4c60-995c-1dae8dc824e7", "sighting_of_ref": "indicator--7ad35661-5dd0-4a1f-8ea3-cdf84a47107e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75be6afe-d53b-4fc3-8dbc-1059f656a9a2", "sighting_of_ref": "indicator--1ba47ba9-26f4-4a50-857d-7a8079cf9336", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e382d21-7485-4745-92ff-6dcb8bda8015", "sighting_of_ref": "indicator--cd0bbd71-6318-4652-86c5-a1fe9c6e86ee", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30192a9-9c5b-42b2-ba05-7ec547960d11", "sighting_of_ref": "indicator--cd0bbd71-6318-4652-86c5-a1fe9c6e86ee", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530ba046-117b-4be2-977b-17649003cd9d", "sighting_of_ref": "indicator--483d64d4-3d86-4053-9e67-ac645d6b766d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30166c2-bcb9-4a7b-be66-fa3644ce9f9f", "sighting_of_ref": "indicator--f9885e4c-ffd8-4a81-b227-e9216e01fb82", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3297a1da-acd9-4c59-b17d-c4b7998178f8", "sighting_of_ref": "indicator--b7aaa1c6-c81f-4311-b611-b25c9a8ea49f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822e91c4-6f44-4132-ba8b-2969bc772300", "sighting_of_ref": "indicator--e0d421af-7213-4577-a3ec-7653d4489676", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2006bd0-dbae-4c60-bbbe-0e85ba591de9", "sighting_of_ref": "indicator--f2b92d10-bf46-4c03-beca-f8f14c7889b8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8582d25-cc2f-4e2e-8e02-9a841804d334", "sighting_of_ref": "indicator--f2b92d10-bf46-4c03-beca-f8f14c7889b8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8849d5-4b13-4982-ad05-cd047ca59a15", "sighting_of_ref": "indicator--f2b92d10-bf46-4c03-beca-f8f14c7889b8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4c7838-295b-45ed-8c84-cb7f7b107cee", "sighting_of_ref": "indicator--5eefa8da-cdad-459c-9823-92e96391f204", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc9ddca-0820-414c-808d-8df54404d888", "sighting_of_ref": "indicator--0b79874d-9a80-4593-9521-afd1a86732b4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b981523f-42a8-46c1-a293-9cb9438e57c1", "sighting_of_ref": "indicator--0b79874d-9a80-4593-9521-afd1a86732b4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bfa84ba-3b72-4bc8-a714-d9b4ec6764d3", "sighting_of_ref": "indicator--b3e1d98f-8fe7-43cd-baba-6773be0d17de", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65156ce-872b-4549-847d-5e674fcdbce5", "sighting_of_ref": "indicator--b3e1d98f-8fe7-43cd-baba-6773be0d17de", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca3bb46-2e1c-4267-8232-351a774700f2", "sighting_of_ref": "indicator--b3e1d98f-8fe7-43cd-baba-6773be0d17de", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee895923-c99e-462c-9178-77076d5c8253", "sighting_of_ref": "indicator--4e77156a-c5b3-4929-ad2c-f6bfd9da6288", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bfd98b5-807d-4119-a39d-25f2ad4f83aa", "sighting_of_ref": "indicator--4e77156a-c5b3-4929-ad2c-f6bfd9da6288", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8cc92e-9903-4538-a9d1-4791469b407b", "sighting_of_ref": "indicator--eeff931b-3ddd-4a3a-a050-9e52b6fee7d6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50351579-739b-40e5-9e70-a573895b590e", "sighting_of_ref": "indicator--1909ee75-f254-4408-81e9-296e5e8892f4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6443dfa-be40-4184-8d9c-f3953bc4d072", "sighting_of_ref": "indicator--07311566-3db8-4d09-a984-827dc9511f44", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964c1eef-6fd3-456d-971d-7cebcf271c8b", "sighting_of_ref": "indicator--dc585550-0724-4a48-8164-53cc87643f5e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528d4337-213e-4093-97c1-dfd27ff0123a", "sighting_of_ref": "indicator--dc585550-0724-4a48-8164-53cc87643f5e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d45d02-7d2d-4a32-afef-184da32339be", "sighting_of_ref": "indicator--aeb37670-3fc4-4623-b652-93ba87ce8ad9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320db15d-642b-4fcc-ae31-26eb50f45801", "sighting_of_ref": "indicator--aeb37670-3fc4-4623-b652-93ba87ce8ad9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8977f29b-a115-43d3-81d4-de40b8b18cd6", "sighting_of_ref": "indicator--aeb37670-3fc4-4623-b652-93ba87ce8ad9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1b3ba7-3bd2-4c81-bad0-e90dbbfee86a", "sighting_of_ref": "indicator--99039379-425f-4c29-a198-ce201aa789f9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a8833e-81a4-476d-adc3-a690d7402103", "sighting_of_ref": "indicator--99039379-425f-4c29-a198-ce201aa789f9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce7e584-2f0d-4ee4-8958-91e239723ddf", "sighting_of_ref": "indicator--87d9d543-3077-42c1-bfe4-509b393c98ca", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60264972-bcad-49be-90b0-0b3c772f1d3e", "sighting_of_ref": "indicator--87d9d543-3077-42c1-bfe4-509b393c98ca", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2dd1c35-1cfd-4ac1-ba89-4f67a76da856", "sighting_of_ref": "indicator--7596388c-5347-44ca-bc42-bdfde12172c0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15a2dae-ad41-435a-aece-a02bf5b0d841", "sighting_of_ref": "indicator--473fc48f-5702-47c6-a4f8-aa9305ebca35", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff9c3d9-fe40-4f78-ba8c-72a6e8a6c1a4", "sighting_of_ref": "indicator--473fc48f-5702-47c6-a4f8-aa9305ebca35", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43f7a00-100d-4182-998a-6bef38d393a3", "sighting_of_ref": "indicator--63c24b06-7c68-4bb2-8b62-613176c129c7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74eb5281-8bce-4d3c-bf50-fce979b47a1c", "sighting_of_ref": "indicator--85570765-a8c1-4209-8fcc-f296deb4bf8c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e75ae0-95c2-4700-8972-fcb26c9b635e", "sighting_of_ref": "indicator--80ee2dca-e67f-40f2-8506-d615456feeec", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e45742-c925-4bf7-8705-c4458bdfb9a5", "sighting_of_ref": "indicator--a21282bc-d6c9-4a1e-859d-46dba83338ca", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2201f612-1449-4a54-9a2d-aea82b9cb03b", "sighting_of_ref": "indicator--27e5320a-db4e-4d4d-a807-8259a350ae3e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7678819-322f-42f5-886c-4be036366391", "sighting_of_ref": "indicator--d8c2592b-8ac9-46d9-9b39-f3fa9ff0b069", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b38faa5-b7e9-4fae-a3ed-7a392728dedd", "sighting_of_ref": "indicator--d8c2592b-8ac9-46d9-9b39-f3fa9ff0b069", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0394e507-94cd-49f7-8884-541d57c6caa8", "sighting_of_ref": "indicator--297bf450-67c2-43ee-8ee4-c382b5045c36", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4bd546-da7d-425d-b842-93b5e33350be", "sighting_of_ref": "indicator--96cb5add-8df3-4865-ade7-f325a859a56d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3598b12e-5e7e-4c8f-bb03-a0db35b80cf7", "sighting_of_ref": "indicator--96cb5add-8df3-4865-ade7-f325a859a56d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d622379-d59a-478f-955f-5cb6f066e1cd", "sighting_of_ref": "indicator--7f578eae-580e-4c38-8f10-5658c4900b0b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e526258-f1bd-40f3-8f9b-e39ae506d8b4", "sighting_of_ref": "indicator--9b3ba9df-ea14-44cc-985f-e711b3a33485", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da7ccc6-18d9-4948-bd09-04134360883f", "sighting_of_ref": "indicator--3b465651-bf9d-4a67-a54b-815d2e71dac9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752793fa-f649-45f6-bf63-d557b213c2f4", "sighting_of_ref": "indicator--2939db82-4ce0-458a-84bf-f5fd68e1e5c8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ccb5ff-243f-4604-84d8-e4dce00d063f", "sighting_of_ref": "indicator--2a9ac0ca-b0c5-4eb5-ace8-1bc59959463b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859a0646-bab9-4703-8fd1-cc74cc8eae96", "sighting_of_ref": "indicator--aba6e501-33d7-4b87-9f96-6f6fc96ea715", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2aeab2-b331-4c8f-94a4-86ed823b035c", "sighting_of_ref": "indicator--aba6e501-33d7-4b87-9f96-6f6fc96ea715", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0973eb7e-f331-4b9c-adba-a3b865dcd596", "sighting_of_ref": "indicator--2b12cc60-43ef-4f10-917e-52b77e608159", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b685a56-5d18-40dd-8438-85e7511567fe", "sighting_of_ref": "indicator--2b12cc60-43ef-4f10-917e-52b77e608159", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da64074-19f1-4a07-9ec7-7ae4a311e2ea", "sighting_of_ref": "indicator--40161761-9493-4f8a-a146-753188e4da19", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba89718-8ba6-48fd-8641-e5fcbba97cc6", "sighting_of_ref": "indicator--74bcbc79-7762-4480-89f7-5992f1f390d4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ad48ed-1d1a-45cc-88b0-4ea29d5eb782", "sighting_of_ref": "indicator--74bcbc79-7762-4480-89f7-5992f1f390d4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8bd05ae-d6c2-4295-90af-f0291527360d", "sighting_of_ref": "indicator--606d4e48-ac33-45c7-b710-b4c452037544", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bce5ba3-4aa3-4aa3-9907-dcc6aa7d2a32", "sighting_of_ref": "indicator--624de2a4-2681-4245-8f25-d2faa61f6463", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce117854-e13a-47bb-b3b2-7682a9e3c3c3", "sighting_of_ref": "indicator--92ba6346-8c6b-4f07-9c46-f8aadb201e5b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fe2ecb-d2a3-4d24-ab27-272f48bc4e1c", "sighting_of_ref": "indicator--75cd3fa9-6ec6-4ec0-b757-5bf1ab37f6a0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ae6567-c47b-4f68-a7b6-38ff7734e4a8", "sighting_of_ref": "indicator--277c6937-2e14-4865-9325-9f0bfd49835c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aefa0b3-c617-40c9-8f9f-c9803157dada", "sighting_of_ref": "indicator--0564cd31-b9ce-40cf-b9a0-78218aab9e96", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b91ef7-562c-42a1-bbc4-456a1e667ee1", "sighting_of_ref": "indicator--0564cd31-b9ce-40cf-b9a0-78218aab9e96", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc14651-aa98-45af-a0ca-0943c23589fb", "sighting_of_ref": "indicator--d5ffc008-5d3d-4f55-a47e-aaf07ff75abc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3181f2dd-5842-42d0-aba2-3e13f79b1f3d", "sighting_of_ref": "indicator--d5ffc008-5d3d-4f55-a47e-aaf07ff75abc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b33adff-efaa-49fa-b52c-33f2a89af78c", "sighting_of_ref": "indicator--53db5189-8702-4a2f-9915-628e1aff11fd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5520cf88-2216-4d04-aed0-d01ae5610917", "sighting_of_ref": "indicator--c232c11c-ee06-4053-ba17-15c747184613", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f299abc8-d020-4b00-8a0c-7413a9f294d2", "sighting_of_ref": "indicator--c232c11c-ee06-4053-ba17-15c747184613", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0bb741-903e-4c4d-87e8-4e6fcf1ed3ab", "sighting_of_ref": "indicator--91634b43-e3dc-404a-8067-43ce3893d567", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9285aa1-feba-42d2-a9c7-e0888ea68ec0", "sighting_of_ref": "indicator--fa8746a6-b3b9-4236-8c6e-5b2b887535c6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae954a5b-d5e6-4c14-b96a-a39b42b93993", "sighting_of_ref": "indicator--30af0bcd-c01a-4337-b4ef-5ba39921cada", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff906468-5c99-4112-83b7-5a7a4e287cca", "sighting_of_ref": "indicator--eaa97558-4920-4a6b-a426-ebc00ba6a344", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e21640-f282-4ae8-92ac-3dfa63b7f4b5", "sighting_of_ref": "indicator--eaa97558-4920-4a6b-a426-ebc00ba6a344", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43effb83-e3bd-407d-b52c-8e3d7d3024ca", "sighting_of_ref": "indicator--b9695ec0-a65b-4462-a1f3-3321e6634ce9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2797a8-c174-4844-8bb4-3e46854a8342", "sighting_of_ref": "indicator--68665106-d12d-4e44-b4a8-5926102440b4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb9b8ec-3826-4911-9ea3-1af0625eca19", "sighting_of_ref": "indicator--68665106-d12d-4e44-b4a8-5926102440b4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d6382c-85f9-42cb-948a-127d1d06a5a5", "sighting_of_ref": "indicator--a0eec2f1-ea78-4825-a61f-ec46687e3014", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80f1bb7-a2ee-43fe-bb0c-0e53a569a0cb", "sighting_of_ref": "indicator--449fa929-b623-4673-8788-601456b5d38c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a4a156-7f77-4dd4-bf63-783c9a5cad31", "sighting_of_ref": "indicator--fe23cd53-5166-4a31-a427-2b7cbb80ea8b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e59911-20e4-48e8-8737-85db67fc75b5", "sighting_of_ref": "indicator--87a5204e-d437-4a9e-bda8-60c395ee9c00", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d2c84a-88fd-466a-a78c-72a29414e67b", "sighting_of_ref": "indicator--0cdf6704-91f5-4a0c-9075-b9cbefaec1ef", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424bd57d-a69d-420d-9d41-293c6758b72f", "sighting_of_ref": "indicator--0cdf6704-91f5-4a0c-9075-b9cbefaec1ef", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd01babe-3968-477c-8181-155009568d30", "sighting_of_ref": "indicator--dd902c89-bab4-4bcc-8c6a-a4850f18e3ad", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052adfd5-a5ba-44b9-93b8-a033cff8115d", "sighting_of_ref": "indicator--95cd253b-4643-4e85-b0f9-992dd9db106f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a086c29b-10ff-46a2-9103-578d25977192", "sighting_of_ref": "indicator--54a19016-f680-4222-a571-fb921b4f6a32", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191ecf7b-f843-4071-9288-ddfcc1bb7569", "sighting_of_ref": "indicator--7f028031-e7f3-4cd0-9079-5654ed83d46a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a4b04e-e519-49fd-9da8-029fbede209f", "sighting_of_ref": "indicator--f3e83227-8adb-43a0-a232-dfedb54cd51c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74acf949-556a-4cc8-916a-f4396bc60b14", "sighting_of_ref": "indicator--f3e83227-8adb-43a0-a232-dfedb54cd51c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289c44bf-6236-4a32-8fd9-e6239bb5c374", "sighting_of_ref": "indicator--287d4edf-ce27-420e-844e-e66767520a90", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40ad40f-32f5-4c29-8b60-386d1689e21f", "sighting_of_ref": "indicator--aedbbb8e-ddb2-49b5-afc5-d4b93d604b72", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a91038-b395-4383-af5d-b064160607d9", "sighting_of_ref": "indicator--ba2b3a4d-90cc-4f6b-8fe0-bb3361759ce4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce3ddce-847e-414a-8736-a303ac848728", "sighting_of_ref": "indicator--ba2b3a4d-90cc-4f6b-8fe0-bb3361759ce4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9375c527-7840-48e1-8a23-7f0e7c253011", "sighting_of_ref": "indicator--f2dc56eb-4674-4e49-866c-efa2dac996b5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e3e504-d1d4-407b-84cc-1d81138b5d9b", "sighting_of_ref": "indicator--f2dc56eb-4674-4e49-866c-efa2dac996b5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6203790a-c0e8-46f8-b4e3-b17ab3423b3d", "sighting_of_ref": "indicator--47b1be6f-b3ba-4492-8628-ddd5e1c44fbf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b444db1-560d-4af8-b2dc-7ca679438c09", "sighting_of_ref": "indicator--fbd13d79-80b5-4b88-aaf3-296faa7f5a1c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c19db0-f448-4671-b5dc-37ca16df72d9", "sighting_of_ref": "indicator--cf656084-8334-489e-8e50-8206185d689f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14492fb8-ed34-42a9-931c-a2e9bac542f5", "sighting_of_ref": "indicator--2ea43d6b-1d70-4992-aabe-aae7acbbca88", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4a2d79-1e44-4239-801f-b62cbaf77bcb", "sighting_of_ref": "indicator--2ea43d6b-1d70-4992-aabe-aae7acbbca88", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a436d69-af2f-442b-9bb2-c554e2f3e533", "sighting_of_ref": "indicator--b5abdd1a-6eeb-487f-a3e0-d0646cc3627e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e43fa44-602b-4737-90bc-c70fe63729aa", "sighting_of_ref": "indicator--a3125378-dd64-4f6f-bf07-eb4ddb41b38e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41bdbdfe-19bf-44d5-ae50-e5164170491e", "sighting_of_ref": "indicator--a3125378-dd64-4f6f-bf07-eb4ddb41b38e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4076ca-4e63-4066-9a59-21940dbe8304", "sighting_of_ref": "indicator--fed3c230-cd7a-47d3-961e-6dca4b252cec", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c1fc7c-8764-4da7-891e-daa9c2cbeb56", "sighting_of_ref": "indicator--fed3c230-cd7a-47d3-961e-6dca4b252cec", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c41514-2905-419a-b0d4-b465f9b908aa", "sighting_of_ref": "indicator--e8113233-6fbb-488f-a0e0-9423412084a7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae2f222-ce64-4bfc-a129-f51777593345", "sighting_of_ref": "indicator--ab716949-bead-4e88-b152-a5380547ef4b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfcf6bc-a408-4f17-923b-a58ee8d62adf", "sighting_of_ref": "indicator--cc998296-c7e5-4cb6-8872-343560dc12d9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7edd2937-1a6d-4eaf-a0d6-2c3c7d32794d", "sighting_of_ref": "indicator--0b69ca60-73cb-448b-959b-0c590c28b6af", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ddf3e2e-f9f4-4e50-abd6-4c0e7da88ad8", "sighting_of_ref": "indicator--59608852-a635-4a14-b219-d15a46fc2395", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2c39ab-2eaf-4af2-9ca7-5e93f932fb38", "sighting_of_ref": "indicator--f97c4900-b8a9-4a2c-b5dc-f0d34cf6f390", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ff833e-4803-4cf8-b498-18193b8fd4c0", "sighting_of_ref": "indicator--2fa56ae5-2bc2-4f07-8ecb-62f51cdfa4b9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4082b1f-d902-4aa0-b438-6f627c2ba7a2", "sighting_of_ref": "indicator--cacea12c-5e98-4739-aca7-6ab998c0deae", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479bb64b-7763-4768-9c14-3bd4b49e624d", "sighting_of_ref": "indicator--b5fe264e-37d3-4f43-9f26-c2a9eb27c02e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0366f51-8b1f-4556-823b-bac7eec514d7", "sighting_of_ref": "indicator--d638ff05-52fe-4d56-9494-92623b52fa25", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ddfec2-5a46-4df1-b294-88b9fe156eb4", "sighting_of_ref": "indicator--90b4697a-0209-4998-a3d6-79cf8401b2fa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd80f11c-aad5-4b9b-96e0-1d97c5dce9ae", "sighting_of_ref": "indicator--150067e2-3db4-4e80-9d1f-4e3ae1b83038", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9447941a-7929-4dea-b86c-54fd711952d9", "sighting_of_ref": "indicator--03e1b5c0-a40d-4cf6-b2e2-30e8a3937945", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e23137-f4cc-4462-90aa-b95448fd3229", "sighting_of_ref": "indicator--522753c1-08d2-4368-9fde-8765fffa1546", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84648cf0-6dba-44e3-98bb-da0598ec49ba", "sighting_of_ref": "indicator--3b69376b-f62c-4d64-8167-65e86ab7788d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2397f8-5e86-4ba8-aaf2-94626061b481", "sighting_of_ref": "indicator--a71c643e-e38a-4b63-ae11-f7d547acf85f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1c1adf-dd4c-420d-8f99-4c39e091f091", "sighting_of_ref": "indicator--364b5aca-04b6-4206-9bbf-06161435eac4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d1f178-cf60-456e-b348-d05cf3e7784b", "sighting_of_ref": "indicator--17fe3300-365a-4501-b149-14fd34b4b2de", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20e28bb-e75b-45da-bc3c-f9f12a6a6401", "sighting_of_ref": "indicator--40eb3572-d82b-4cd9-aeed-d121911a0995", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80bbb30f-55c9-4154-8924-bebf55460ab4", "sighting_of_ref": "indicator--40eb3572-d82b-4cd9-aeed-d121911a0995", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773f9b40-6468-4b8a-859e-364ba8f23723", "sighting_of_ref": "indicator--fe8b8930-b569-4d7d-82c6-94fb474a11cb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb52303-4033-4c43-940f-1415e620904e", "sighting_of_ref": "indicator--58e7e851-f0a0-4632-bdd5-255161ca6e59", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe61ee1-7baf-4c46-8ddc-d8317efe7b1b", "sighting_of_ref": "indicator--58e7e851-f0a0-4632-bdd5-255161ca6e59", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca52e0f-b94f-48cc-abc2-e3fd5cd1094a", "sighting_of_ref": "indicator--517d03c3-d738-4e14-8d5a-fc31b705a021", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db2ffac-2d0b-406a-b01a-9e9518e2eeab", "sighting_of_ref": "indicator--517d03c3-d738-4e14-8d5a-fc31b705a021", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1feb6cd7-be97-48ce-9446-36b84d692804", "sighting_of_ref": "indicator--e74c21fe-07f0-4c4d-811f-ef2894b1580e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a41cf2b-2e8b-46b4-baa0-bcab68b79f46", "sighting_of_ref": "indicator--f57c8d55-ecbe-4c5f-9e6a-d67bdf1d4da9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b74a2c9-6e99-45e1-9ac3-71c3bb1be0e0", "sighting_of_ref": "indicator--135f363a-1795-429d-8ea7-55e220dc0959", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a95a9c-5964-4839-bf09-118ad98aca74", "sighting_of_ref": "indicator--3d81b079-9431-4444-a0fa-e79ddb0dda49", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c6d892-351c-4ad2-a025-e103c176c05c", "sighting_of_ref": "indicator--9a46197b-ce92-4c67-b19d-c2864ed2e8f5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e3f1af-9ae1-4417-b28a-8fb90d529ce5", "sighting_of_ref": "indicator--9a46197b-ce92-4c67-b19d-c2864ed2e8f5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44650efc-82cb-4667-85fc-bd6c47422d38", "sighting_of_ref": "indicator--aa372e11-ef41-4c10-970d-4227d6e71712", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5b367f-8841-4587-8af0-7313e97a563e", "sighting_of_ref": "indicator--4088349d-cf64-4d64-81cd-cba9ac9f5bf2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c85188-630c-4dc5-a754-a62cce2217b7", "sighting_of_ref": "indicator--4088349d-cf64-4d64-81cd-cba9ac9f5bf2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804ee87e-1dda-433b-b71d-3815f509322c", "sighting_of_ref": "indicator--de1f0b95-9aaa-4733-9927-8efac6f2d007", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a26cf3-2d23-4b66-a02b-1b7b984087dd", "sighting_of_ref": "indicator--de1f0b95-9aaa-4733-9927-8efac6f2d007", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484f8550-c429-4631-9ad6-f7afdcdcf35b", "sighting_of_ref": "indicator--a689b78e-dd0a-4f4f-a960-39a42dee84af", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069cc6ef-68f4-4b3f-b614-70b703be6766", "sighting_of_ref": "indicator--3871d2a0-f2b3-46e2-a1b8-ddd2bf599977", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5407ea38-f8de-479d-8c4c-7f7e6401eed7", "sighting_of_ref": "indicator--61e172a1-d88f-4f08-a50a-f109597521c0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e76616-beb4-48e5-a554-c590011612d0", "sighting_of_ref": "indicator--6cc4e778-acff-4f39-9651-e7620c87d080", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ddd41d-5540-48de-98ee-82791d86dba1", "sighting_of_ref": "indicator--19b9e808-691c-4684-a845-701539d0ff97", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563a05c7-8ca1-44f7-9d0e-65854cf96244", "sighting_of_ref": "indicator--0b38a1a3-09ad-49e0-8e61-e10f7df689ac", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbdfb2ba-741d-4b2b-a90b-8d5e791e36af", "sighting_of_ref": "indicator--0b38a1a3-09ad-49e0-8e61-e10f7df689ac", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1e705a-ef49-4e4e-a2c4-2158774dfbb4", "sighting_of_ref": "indicator--b0aece77-440b-4fba-b4f5-bfeba289c931", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91326a8b-0f1e-4e70-bc44-61e0e4477f51", "sighting_of_ref": "indicator--d8be1247-942f-4f5d-8c3a-fd1e7cf1d1c0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b70e956-67bf-4560-bdc1-6ef712f01331", "sighting_of_ref": "indicator--d8be1247-942f-4f5d-8c3a-fd1e7cf1d1c0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db08c93e-8b7a-47e4-a21a-ba346bea53c3", "sighting_of_ref": "indicator--06a8452e-01f4-4909-8940-12b457b7fbfa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96edd382-e153-41b5-a522-70d30ae6006a", "sighting_of_ref": "indicator--2c1edc83-0c03-4c9e-8608-b0e2beb76262", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe45127-b4aa-46d8-9f36-56cd1476be87", "sighting_of_ref": "indicator--2c1edc83-0c03-4c9e-8608-b0e2beb76262", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa34155a-dec6-4581-88ac-82f0c8b39955", "sighting_of_ref": "indicator--d2cbc2a6-4e69-4f95-8719-e3a238974551", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1cd6b21-7a2c-4236-8edf-b4277f2a485a", "sighting_of_ref": "indicator--4470fb92-7857-43a1-a451-48c0b4c5be46", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43096f1-448d-4c03-8578-7fa2b33589ba", "sighting_of_ref": "indicator--59de8eab-015c-49b5-8e3d-17eba43cccc1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0a9583-1604-4e82-ac02-463f99173e6e", "sighting_of_ref": "indicator--7bc4fc0a-7b19-4de0-b07a-707b796d4d4e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e9ae2a-1224-44f4-8b9a-92b3b12196a3", "sighting_of_ref": "indicator--bb13ee1c-d998-4f0b-b8b8-4ed69f6e2b2a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d42d709-6b8e-4a5a-ad97-a4bd00163c1d", "sighting_of_ref": "indicator--c46f0275-a6bd-433d-ae8e-e608e52a1531", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9475f742-279e-4c69-b178-a60c456f4255", "sighting_of_ref": "indicator--d92c55ba-d600-460c-8b9c-68b07a41cf76", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33de072-f18d-4a16-bc8a-fe8c33c824e7", "sighting_of_ref": "indicator--d92c55ba-d600-460c-8b9c-68b07a41cf76", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11841673-a4ad-4dbc-967d-13e39779c9f3", "sighting_of_ref": "indicator--d92c55ba-d600-460c-8b9c-68b07a41cf76", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e05867f-380b-4b56-b337-bfe845c2db64", "sighting_of_ref": "indicator--a891bfad-3666-4ea6-908a-a44b2c703ccc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66586bf-90ea-4f4e-a665-e43307393fd3", "sighting_of_ref": "indicator--a891bfad-3666-4ea6-908a-a44b2c703ccc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0549cb9-4ac7-449c-9e17-86af74083597", "sighting_of_ref": "indicator--a891bfad-3666-4ea6-908a-a44b2c703ccc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be186504-ddf2-46ad-9085-f3cf79c7b134", "sighting_of_ref": "indicator--0fb1f095-a322-441c-9fa7-e25a05d8e2c9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d184929b-9533-41d4-92bd-ee48bd2f8e3c", "sighting_of_ref": "indicator--0fb1f095-a322-441c-9fa7-e25a05d8e2c9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a76d8e-4dc9-46e5-bfce-5b368b13c8a3", "sighting_of_ref": "indicator--0fb1f095-a322-441c-9fa7-e25a05d8e2c9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c820f2a6-3c5d-48c8-b847-2ba83b8ae4bd", "sighting_of_ref": "indicator--87c34adb-b842-4ed2-8e2f-f791400e7414", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f7cd3f-1763-4df0-a986-51dd96aa3a19", "sighting_of_ref": "indicator--87c34adb-b842-4ed2-8e2f-f791400e7414", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfefda4-f428-4fdc-97b1-07d25953c3d0", "sighting_of_ref": "indicator--15eed63f-7da8-4843-bfea-f43603313edc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649dc33c-9d7b-41c0-87e4-65d2b71fadc3", "sighting_of_ref": "indicator--15eed63f-7da8-4843-bfea-f43603313edc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2eb2878-9922-4d9c-bf4e-093b29b160ca", "sighting_of_ref": "indicator--15eed63f-7da8-4843-bfea-f43603313edc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b259e14a-8470-401e-b513-af3e8eec102a", "sighting_of_ref": "indicator--079bd98b-a7f2-4b1c-8135-fb8d20a970dd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8e1d3c-b170-45bb-9edf-9b7d6dbc59ad", "sighting_of_ref": "indicator--079bd98b-a7f2-4b1c-8135-fb8d20a970dd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36237dea-bb42-4786-8870-56b5f24bc572", "sighting_of_ref": "indicator--007ee94d-842e-47fe-8e7d-77c33befc8f5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b465279e-4348-4be5-84a8-3bc430a3fe88", "sighting_of_ref": "indicator--007ee94d-842e-47fe-8e7d-77c33befc8f5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b36c5d0-6425-432f-9588-bc853adc51a7", "sighting_of_ref": "indicator--1b628f3f-996e-4e3f-8ad6-9386ba9abed4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a086c5-1b64-489e-b2c3-d593a9c437ea", "sighting_of_ref": "indicator--1b628f3f-996e-4e3f-8ad6-9386ba9abed4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c2c4a0-c30c-49cb-b776-e4c0d9c17700", "sighting_of_ref": "indicator--1b628f3f-996e-4e3f-8ad6-9386ba9abed4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b6880d-659f-4e1a-b8ed-143e0d5227bf", "sighting_of_ref": "indicator--1829b087-1445-4983-83c9-821b5b68afcd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f327ce6-c904-40c9-9fce-d93afac5eb5e", "sighting_of_ref": "indicator--547e84cb-da36-44a7-89bb-fa661528ace6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b19d83-4dfa-40e5-83e3-8a70d2e919f9", "sighting_of_ref": "indicator--547e84cb-da36-44a7-89bb-fa661528ace6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111911e2-44f9-4e46-a6c1-eac1041ff9f5", "sighting_of_ref": "indicator--547e84cb-da36-44a7-89bb-fa661528ace6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9165898-e682-4024-8084-41b6db268e71", "sighting_of_ref": "indicator--74aaec60-e217-4b1f-ba86-38def92e86ff", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ed2b30-3523-459b-b446-e81b1ee28d95", "sighting_of_ref": "indicator--98a1b406-5a42-4e69-9bc8-aa4bd4e69871", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ce44f5-ed9e-4fbc-83b9-7abd84550fae", "sighting_of_ref": "indicator--98a1b406-5a42-4e69-9bc8-aa4bd4e69871", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18179be8-84ca-48fb-8ef7-a924f279f161", "sighting_of_ref": "indicator--84b7c4eb-c31c-4063-bfc8-6d5f62c6ba49", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7909a0d5-71f7-4c8a-8fd6-cf491a9df130", "sighting_of_ref": "indicator--84b7c4eb-c31c-4063-bfc8-6d5f62c6ba49", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c1a019-923a-480f-a901-ad39a6699086", "sighting_of_ref": "indicator--84b7c4eb-c31c-4063-bfc8-6d5f62c6ba49", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--affc02ba-b3f9-4004-acac-5216f3daf7b8", "sighting_of_ref": "indicator--ee92bf85-1f2d-4b8b-b23c-6c5b32c0b22b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e720b0b0-e8a7-4a63-acca-9854d7d68821", "sighting_of_ref": "indicator--ee92bf85-1f2d-4b8b-b23c-6c5b32c0b22b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8935a3e8-5eed-43f5-9f2a-00440321104e", "sighting_of_ref": "indicator--ee92bf85-1f2d-4b8b-b23c-6c5b32c0b22b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71be91b9-5b38-407d-8573-10622709d04f", "sighting_of_ref": "indicator--75b4350d-7cdf-4bcd-895c-b86255c1a9ba", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77765e2f-fa07-43ab-beae-bd0fccb7ceb9", "sighting_of_ref": "indicator--75b4350d-7cdf-4bcd-895c-b86255c1a9ba", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61889ded-8234-416d-a067-0a484fb9dc0e", "sighting_of_ref": "indicator--75b4350d-7cdf-4bcd-895c-b86255c1a9ba", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e1653d-892b-487d-96af-0bb6165dc9e6", "sighting_of_ref": "indicator--337853dd-19f6-4499-bb52-2912ab985500", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c5bdf4-9c70-4435-9e83-ce2fe736f22e", "sighting_of_ref": "indicator--337853dd-19f6-4499-bb52-2912ab985500", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77d5f34-fe26-42ce-a08d-f0fd31b823c1", "sighting_of_ref": "indicator--31c936e8-7520-4f61-af71-615d403c5ae4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e840c818-be66-471c-b942-3395acfd7128", "sighting_of_ref": "indicator--31c936e8-7520-4f61-af71-615d403c5ae4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c714e5-2222-4cd8-87bb-8939146c3a0d", "sighting_of_ref": "indicator--f95af506-6ee1-4fdf-b9f0-53eb4979cbe5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8894754-ffec-451b-a25d-e14364ebd23b", "sighting_of_ref": "indicator--e142a87e-5466-48cb-8ede-724f53069103", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b984f3-2c19-4c7b-beb9-f78c334f073e", "sighting_of_ref": "indicator--e142a87e-5466-48cb-8ede-724f53069103", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1625064-8a14-47fe-8cbf-90cdf71b70b6", "sighting_of_ref": "indicator--a4878625-da56-43bc-ac1e-c02e4f1ca469", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb01735-739f-4883-ab60-2e9fd6e68b5a", "sighting_of_ref": "indicator--a4878625-da56-43bc-ac1e-c02e4f1ca469", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da7ebab-e140-4047-a9e8-9e056dea4e37", "sighting_of_ref": "indicator--80cd9743-04ff-483c-80e3-85d4bde86637", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304e9c45-206b-416d-90c4-d872d0408379", "sighting_of_ref": "indicator--80cd9743-04ff-483c-80e3-85d4bde86637", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--251d0e3b-9795-4994-9f1a-c667487210a0", "sighting_of_ref": "indicator--219f8a2f-03a9-48da-8c68-eb98ab3c5d36", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84fca8b9-709f-419a-b432-cac70442a6d4", "sighting_of_ref": "indicator--219f8a2f-03a9-48da-8c68-eb98ab3c5d36", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322087f7-6321-43f7-a3eb-0df8e31a6b5b", "sighting_of_ref": "indicator--f52e4ec0-2ec7-48d4-a7f5-4b42b2aecd36", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff7dd9f-d770-464b-ac6d-cd1dae75f8df", "sighting_of_ref": "indicator--f52e4ec0-2ec7-48d4-a7f5-4b42b2aecd36", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d38249-6706-4003-8149-79db0e4b2d61", "sighting_of_ref": "indicator--06654d8a-d37e-413b-9a4d-ef36d5a24795", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2028369e-1218-44c9-a25f-36d49146c79b", "sighting_of_ref": "indicator--06654d8a-d37e-413b-9a4d-ef36d5a24795", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e77859-268a-4121-9df7-18f493e3bb17", "sighting_of_ref": "indicator--06654d8a-d37e-413b-9a4d-ef36d5a24795", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b11693-3ad6-48cb-b054-3c82b1e8acae", "sighting_of_ref": "indicator--caccd333-d807-4dd8-a138-48846b9cbf40", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d38266-ad03-43c1-96af-90ae96f9a836", "sighting_of_ref": "indicator--d02934a7-261a-4f50-9055-20e173562f2f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2f94aa-175e-4aa6-8977-2e9bc2f1de5c", "sighting_of_ref": "indicator--f0892cda-2082-4b38-9017-77686259bb53", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2d18b3-0108-421a-89e5-f64368c9caf8", "sighting_of_ref": "indicator--f0892cda-2082-4b38-9017-77686259bb53", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030666f4-56f9-4303-8cbd-dee300b0773b", "sighting_of_ref": "indicator--51c0b1b7-3cfa-46d3-96ea-38d96746e08d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db13dc2-c5d1-42e1-91db-744a4b4aa248", "sighting_of_ref": "indicator--51c0b1b7-3cfa-46d3-96ea-38d96746e08d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8ea4ff-8d22-43b8-9e16-61dd58216eab", "sighting_of_ref": "indicator--f4c27f30-4e6b-40ca-b227-f12b0b58197f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e1e1d8-60d9-443b-b9b5-3ff8af25d047", "sighting_of_ref": "indicator--f4c27f30-4e6b-40ca-b227-f12b0b58197f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a9663b-82e3-4078-9d7e-56f1e1371bc2", "sighting_of_ref": "indicator--074f31bb-9cff-4401-8ab1-29a961c72589", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063792f6-8235-4d08-9fb0-ea7b4e551f18", "sighting_of_ref": "indicator--074f31bb-9cff-4401-8ab1-29a961c72589", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31585c94-5a53-468b-88c8-8342b167c31d", "sighting_of_ref": "indicator--074f31bb-9cff-4401-8ab1-29a961c72589", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba9a4e4-86bf-4b06-99ae-491f62ff63b2", "sighting_of_ref": "indicator--6873b211-9c0b-4a85-99f0-fe25aef25157", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83801396-2015-454e-9f3e-7b00636a49f2", "sighting_of_ref": "indicator--6873b211-9c0b-4a85-99f0-fe25aef25157", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bfe16ba-a426-455f-ac7b-f12c56f52363", "sighting_of_ref": "indicator--547f2649-a0f7-4c23-a672-34320a245f76", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d48453-f219-41b3-b3c7-49e219ad7cf1", "sighting_of_ref": "indicator--547f2649-a0f7-4c23-a672-34320a245f76", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7301d9-9247-41a5-b97f-83745ead5cfe", "sighting_of_ref": "indicator--03e5963b-f404-4784-8eca-c4f3c2df137f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c6cc33-ecfd-4aeb-bb8f-cc613917eec2", "sighting_of_ref": "indicator--03e5963b-f404-4784-8eca-c4f3c2df137f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3f2e33-c355-4c2e-adca-08b21a648678", "sighting_of_ref": "indicator--03e5963b-f404-4784-8eca-c4f3c2df137f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d946b8-7b2a-4237-900c-1946b3790b81", "sighting_of_ref": "indicator--9e8ac56d-0990-44c2-b0da-46580bddf2be", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5bf251-ebbf-466e-846f-9ede76aef5e2", "sighting_of_ref": "indicator--9e8ac56d-0990-44c2-b0da-46580bddf2be", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ea14b8-e9aa-468a-8179-08a7287edc78", "sighting_of_ref": "indicator--140482ea-cefa-439c-a75a-c5b9e82f53c2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ecad16-214b-42b6-84c2-112088714ebf", "sighting_of_ref": "indicator--140482ea-cefa-439c-a75a-c5b9e82f53c2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d255d5-4c47-4242-bd48-473daadb96e7", "sighting_of_ref": "indicator--ad1a2956-7117-486a-ab74-2884d834671d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0712063f-0620-4282-ae3f-be96b0b0fc94", "sighting_of_ref": "indicator--ad1a2956-7117-486a-ab74-2884d834671d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44eea7eb-48ee-4043-ad4d-dccf9b070835", "sighting_of_ref": "indicator--ad1a2956-7117-486a-ab74-2884d834671d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf8c92b-4d17-42fc-b935-69912d1c367f", "sighting_of_ref": "indicator--3c7f35bd-909d-4fc4-a715-ff0049217e97", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888f855c-6fe7-45d7-bd77-c424f659a369", "sighting_of_ref": "indicator--3c7f35bd-909d-4fc4-a715-ff0049217e97", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238cdfe3-7708-4c12-af52-f4f1619acb68", "sighting_of_ref": "indicator--3c7f35bd-909d-4fc4-a715-ff0049217e97", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a725b4-bd15-4f39-9f9f-7f8a37aac734", "sighting_of_ref": "indicator--5dfcc723-a5bd-45f2-b3dd-a9842689a321", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd969b5f-815e-411a-823a-0cca6ba182c7", "sighting_of_ref": "indicator--5dfcc723-a5bd-45f2-b3dd-a9842689a321", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd0ec3e-dc30-4de6-b856-8ef5acccb131", "sighting_of_ref": "indicator--1694ea23-a3bd-4f02-90d8-cc8b48a4875d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68f79d8-29d9-4a19-a17e-97585bc945f6", "sighting_of_ref": "indicator--1694ea23-a3bd-4f02-90d8-cc8b48a4875d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8913f6-7fec-4d06-bc7d-c7f8c42b51fb", "sighting_of_ref": "indicator--c1d123a4-f56e-41f0-8889-80b60d636cb4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc24dbd9-6881-4a45-8245-0db822978b17", "sighting_of_ref": "indicator--c1d123a4-f56e-41f0-8889-80b60d636cb4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a487d0d-7c4d-4cc8-bb0c-85b9990c923d", "sighting_of_ref": "indicator--c1d123a4-f56e-41f0-8889-80b60d636cb4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286e5e0e-ad3e-44a4-abaf-ccb39b18d576", "sighting_of_ref": "indicator--479e847a-c5c6-4bb0-8ad0-5667f51d72cd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27792d6b-9b4b-4c5f-9cc1-d1b566cfb9ba", "sighting_of_ref": "indicator--479e847a-c5c6-4bb0-8ad0-5667f51d72cd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10a7de6-d98d-4db1-8368-120aa4608ea9", "sighting_of_ref": "indicator--479e847a-c5c6-4bb0-8ad0-5667f51d72cd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25e1607-5490-4a65-be51-5a4a3450f17a", "sighting_of_ref": "indicator--31df6481-fbd1-4fd8-8610-9d835ba6ac58", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64f706d-59bb-438f-aa4d-14eb06278e97", "sighting_of_ref": "indicator--31df6481-fbd1-4fd8-8610-9d835ba6ac58", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b6e7a7-c726-4216-a72e-5486f4c22852", "sighting_of_ref": "indicator--31df6481-fbd1-4fd8-8610-9d835ba6ac58", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81dddf80-d899-4437-890b-52a2c8fcbae3", "sighting_of_ref": "indicator--668fc4d6-3802-4196-a9ca-284a3fe4d2ea", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580d831f-18fb-4ad3-8a61-8d4262d8ccbf", "sighting_of_ref": "indicator--668fc4d6-3802-4196-a9ca-284a3fe4d2ea", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f538592-b123-4d69-a23e-9fd76549b649", "sighting_of_ref": "indicator--668fc4d6-3802-4196-a9ca-284a3fe4d2ea", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91bb9cc7-2197-4b22-b28d-b8d8e83da126", "sighting_of_ref": "indicator--c0e0a4ca-d3dc-4713-b4cf-22fd6ed58af2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff7fa29-9d48-4fc7-815a-038f1961cffa", "sighting_of_ref": "indicator--2d189ec2-1e1c-4067-8169-23b4260eb652", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ca8734-88e4-4a79-9da7-e97307b42c1c", "sighting_of_ref": "indicator--2d189ec2-1e1c-4067-8169-23b4260eb652", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c6d5206-0a3f-4cfa-8168-dfee32d93028", "sighting_of_ref": "indicator--abc30935-dec6-4fb4-9086-a743161820b7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da4423e-bb7f-41d3-9a0e-001a7e5251e6", "sighting_of_ref": "indicator--d6ce10b8-6da5-4fc2-a0de-95839aea2bab", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8bd457-588a-44a1-9237-4827829569f7", "sighting_of_ref": "indicator--7d6e55aa-4be1-49c6-818f-3d767d9602eb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2537134b-293a-484b-86b9-09afa0b09827", "sighting_of_ref": "indicator--92b7fc0e-59a9-49e8-8af0-bf460aeb329e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbcd8470-69cf-4677-b809-93141b89d615", "sighting_of_ref": "indicator--dd1532b5-25a4-47d2-a437-308747ba22f6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9e5369-7b1e-4eec-8115-ddb00cdf21ac", "sighting_of_ref": "indicator--3794aa7b-3b46-4b15-9078-8a342690d98a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a55bf2-1fa9-4a07-b456-de52e163dff5", "sighting_of_ref": "indicator--3794aa7b-3b46-4b15-9078-8a342690d98a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f375647-4ae7-449d-867f-f8a49be50a23", "sighting_of_ref": "indicator--2758d721-cbfd-4fe9-85b0-e75230cfc5b9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60af7155-6bee-4cc8-98c6-f9cde79c0fc2", "sighting_of_ref": "indicator--bb860fbf-58e2-4565-8c12-5076df0d16d6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9219034f-26cc-40ef-8ee8-3ac5ad4fb708", "sighting_of_ref": "indicator--486b40fa-648f-4866-9585-799094684002", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744d86af-2eeb-43c1-87ea-c5c40e093be7", "sighting_of_ref": "indicator--af30075c-43c9-4d4c-b1e5-f2af6e6df769", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28bc8ef1-3fca-4e04-a17a-01a2dba08fcf", "sighting_of_ref": "indicator--35bd9e97-1654-49df-aee7-cbf1fa3da179", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61253788-1716-490e-a7a0-60dbdd0695be", "sighting_of_ref": "indicator--10748b61-906b-480c-b116-4614d9793151", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154d299b-765d-48d0-9d4d-f610e2171ab0", "sighting_of_ref": "indicator--2cec1896-2139-4c76-ac55-ca3e509a6902", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2adf1ae-58bb-48bb-898a-3fa5d208efe1", "sighting_of_ref": "indicator--4a33e342-78fc-418a-b5e6-af3cddb13074", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2d2ebc-bc88-447f-afbc-32bf6a3577dc", "sighting_of_ref": "indicator--4a33e342-78fc-418a-b5e6-af3cddb13074", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15355d1-f4d9-4e55-bd4d-50242bebae25", "sighting_of_ref": "indicator--2c2182af-1923-4845-9a13-4e5e7690df17", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236f78a9-306b-4ece-a1e7-178f330422a4", "sighting_of_ref": "indicator--2c2182af-1923-4845-9a13-4e5e7690df17", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9489dbc8-42fc-4950-a2a3-4dc729b36994", "sighting_of_ref": "indicator--bd67326f-7ee8-443a-bcb6-41d09545521c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e3da8f-88e5-4af5-9901-c9fddbd0e0b8", "sighting_of_ref": "indicator--bd67326f-7ee8-443a-bcb6-41d09545521c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65aa4efd-8a9c-42a0-8d45-e5d3789ee9bf", "sighting_of_ref": "indicator--67682b6e-8d22-41a4-90c7-21ae85d52a99", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83426d0-1d00-483c-8192-ebffdfb40f68", "sighting_of_ref": "indicator--67682b6e-8d22-41a4-90c7-21ae85d52a99", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af198ce-d329-4354-804c-952246e6ea38", "sighting_of_ref": "indicator--8d049992-350f-4647-b3fd-23dbd48894fa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca59fa56-0721-4943-8c5f-37a0a2399173", "sighting_of_ref": "indicator--8d049992-350f-4647-b3fd-23dbd48894fa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f34a9e6-7dc4-43c7-937a-c75d4256bc82", "sighting_of_ref": "indicator--8d049992-350f-4647-b3fd-23dbd48894fa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16009e5-2682-4066-8281-d84dc235feea", "sighting_of_ref": "indicator--40e82563-dd77-4ae8-98c1-eed3e4073a30", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55335dda-720a-4af6-ab2e-a45773d9aaa2", "sighting_of_ref": "indicator--40e82563-dd77-4ae8-98c1-eed3e4073a30", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f66ad3-67ff-4e66-8c98-747567ec624c", "sighting_of_ref": "indicator--4b4e00d5-b0ce-4ff3-8d71-ef82406724e9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe8aef2-8fd9-4831-97ae-fc8c5d4d7f45", "sighting_of_ref": "indicator--4b4e00d5-b0ce-4ff3-8d71-ef82406724e9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7505da0d-4dbd-4029-845f-a0b544d21e6d", "sighting_of_ref": "indicator--4b4e00d5-b0ce-4ff3-8d71-ef82406724e9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53479129-320b-464a-98e8-68c285a13215", "sighting_of_ref": "indicator--a89fcc0e-0fe7-4d45-9bdf-abbbe7354d2b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100a36a4-7e25-4aea-a2cf-1eeceeede3c2", "sighting_of_ref": "indicator--a89fcc0e-0fe7-4d45-9bdf-abbbe7354d2b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c671c7-3849-4ddf-b937-c2be650efaf6", "sighting_of_ref": "indicator--a89fcc0e-0fe7-4d45-9bdf-abbbe7354d2b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31fd8a9-e7d2-4c55-a4b2-ec01704afa20", "sighting_of_ref": "indicator--9a321820-c3eb-4901-aa7a-a7297062f192", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4be63eb-f532-40a0-aa5f-f527f48c16b2", "sighting_of_ref": "indicator--5f2bc857-da4f-4fe8-ab34-fff705a852cd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe10731a-72d6-4611-8653-5df4c2fd7e8c", "sighting_of_ref": "indicator--c7e4273a-709b-43cc-b710-795b79c47e8e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0092ae74-6372-4258-b931-7756b25637aa", "sighting_of_ref": "indicator--c7e4273a-709b-43cc-b710-795b79c47e8e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f302ed30-a233-40ba-a0f9-b77133bbbb4b", "sighting_of_ref": "indicator--c7e4273a-709b-43cc-b710-795b79c47e8e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e9971d-e239-4157-8006-2bf04279f651", "sighting_of_ref": "indicator--fddacf77-c6dc-48d7-b05d-0dd1a4d1a584", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9b703a-3a67-4a0a-9e5b-47ee714bcc21", "sighting_of_ref": "indicator--fddacf77-c6dc-48d7-b05d-0dd1a4d1a584", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ffc36f-993c-4230-ad58-f46ab8debb2d", "sighting_of_ref": "indicator--0b8cd8f0-0790-404a-9eec-730d17ffd1d6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ec9144-8251-4d62-8028-d784bd7d02f7", "sighting_of_ref": "indicator--0b8cd8f0-0790-404a-9eec-730d17ffd1d6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3026ee40-921b-4b35-9998-c0e25fa656d1", "sighting_of_ref": "indicator--3a5cdfdc-83c9-4ffd-aa89-08312bbed3bd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9d1be9-edab-4454-aaaa-fca095fc3e72", "sighting_of_ref": "indicator--3a5cdfdc-83c9-4ffd-aa89-08312bbed3bd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa70220-4db4-4160-bb51-bbd0b1cc2fa6", "sighting_of_ref": "indicator--3a5cdfdc-83c9-4ffd-aa89-08312bbed3bd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24584a1-8cb4-4b31-813d-fb6667380a28", "sighting_of_ref": "indicator--d591402d-69f4-4565-b016-8cf5c2befe1b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1410dd2-7396-4ea3-9c36-c7cb7ed9bf58", "sighting_of_ref": "indicator--d591402d-69f4-4565-b016-8cf5c2befe1b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54d8a7c-907d-4625-89d1-cc5ee64af70b", "sighting_of_ref": "indicator--d591402d-69f4-4565-b016-8cf5c2befe1b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a622b0ef-dca7-4481-8103-4f1264a9c961", "sighting_of_ref": "indicator--89ceeff5-88a0-4e44-8431-9c3a1d56f95f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4787efb-1265-413a-b968-8a52e50ff393", "sighting_of_ref": "indicator--df9a8227-8cb7-4931-bd54-fdd7cf4892f2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4676591-afde-461e-9f20-3e296e40d377", "sighting_of_ref": "indicator--c6b0162a-9201-4929-916e-e3fa268a9dfd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78bb5a4a-f6ce-4a39-b0ca-84c5c7564ac0", "sighting_of_ref": "indicator--c6b0162a-9201-4929-916e-e3fa268a9dfd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e76aaf7-474f-4f3d-b96f-e0493db6fb78", "sighting_of_ref": "indicator--198e7662-ec2b-4b32-8c16-31e9bf8938a7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db6bbdc-74ff-4eff-8cc7-faa9b3d88b9d", "sighting_of_ref": "indicator--198e7662-ec2b-4b32-8c16-31e9bf8938a7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435dcdf6-471a-4913-bf32-0de9559b7058", "sighting_of_ref": "indicator--0d5ccf44-ae66-47a7-ab61-72894980b34d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda45355-45f7-4e53-b17c-565a1f4de035", "sighting_of_ref": "indicator--ba59cfbb-df2b-490b-886d-f3f0a8c20dd6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95911ed-e9b3-454d-b653-b23b59c0b01a", "sighting_of_ref": "indicator--7af5192a-008f-4fc9-a42c-693f0406ece7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c88dc94-ea54-4cb8-ac26-ffb3d1c775aa", "sighting_of_ref": "indicator--eb09d8e1-fc5b-4fa7-b03a-612334d75f8f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bde3c5b-399f-4f2c-a5f4-c4afc305a318", "sighting_of_ref": "indicator--c5232339-2cc6-40d7-8bbb-3032e3cce718", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5755b06f-4c19-4a25-bcae-1e33965e9dca", "sighting_of_ref": "indicator--1271de7d-89e3-4a3b-aae9-56b41af5e19a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c190c7-81f0-407e-9708-9edc5f56940f", "sighting_of_ref": "indicator--ff37ed86-40ec-4b2a-b2de-694c99838d0b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc04f905-b66e-4513-bc1d-efcfe78b57eb", "sighting_of_ref": "indicator--fb7da28f-f5f3-43c3-8ea0-a9f54ba545e1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcad4812-5a5c-4b27-90c7-eb1313828acb", "sighting_of_ref": "indicator--5229ab78-630a-4fcc-a1ab-04665050696c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157c9d5a-6b3f-4fd8-b811-427398b9bbe2", "sighting_of_ref": "indicator--5229ab78-630a-4fcc-a1ab-04665050696c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be65789-116c-4370-9ca1-94c324e480ea", "sighting_of_ref": "indicator--5229ab78-630a-4fcc-a1ab-04665050696c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e904d1-cfbc-431f-8e2a-4e252b9e9a04", "sighting_of_ref": "indicator--6840c1b1-3663-4788-8d3f-e46187d937c1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677f89b5-0d6c-4f97-8b04-b0f656c7e733", "sighting_of_ref": "indicator--6840c1b1-3663-4788-8d3f-e46187d937c1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ee7e79-7af6-4d17-8f01-421955d8cf52", "sighting_of_ref": "indicator--6840c1b1-3663-4788-8d3f-e46187d937c1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f451dc92-0cd8-4caa-bddf-e27e8de9eef1", "sighting_of_ref": "indicator--6f524499-1d5a-4ee0-819a-3ed4cc2dfe91", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766682a4-6c21-4115-b1ff-c345ae170f42", "sighting_of_ref": "indicator--6f524499-1d5a-4ee0-819a-3ed4cc2dfe91", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f8c2e9-b97f-4b09-8b33-a62e8c71ec7d", "sighting_of_ref": "indicator--376e3065-cebf-4113-b443-79ea4f0a2785", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbee495c-9db0-4814-9630-e60effd422dc", "sighting_of_ref": "indicator--376e3065-cebf-4113-b443-79ea4f0a2785", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f197792f-837a-41df-b6b0-0eea1844563d", "sighting_of_ref": "indicator--61ccc566-9477-43af-bd03-858616f18c6c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83df02e-05c3-411f-8991-a99210a339ea", "sighting_of_ref": "indicator--61ccc566-9477-43af-bd03-858616f18c6c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2067e1a2-7b42-43a7-a514-6f5c7fdb366b", "sighting_of_ref": "indicator--0656a8b9-5a19-4610-b632-3e6496e2486c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9aa667-eae2-4954-9e3c-ab6723289ddf", "sighting_of_ref": "indicator--0656a8b9-5a19-4610-b632-3e6496e2486c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e774ecb-ab06-4774-9ce8-42179799fc4a", "sighting_of_ref": "indicator--41474ceb-f6ac-4613-b3d5-28d8a572df50", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0cf62b-1321-437b-a1b1-69e62c033ebe", "sighting_of_ref": "indicator--41474ceb-f6ac-4613-b3d5-28d8a572df50", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aeab104-15db-488e-9a34-6dc0b0f6ee9b", "sighting_of_ref": "indicator--a02da207-b690-440e-9945-4619044d6d5a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20ea442-2ffc-4b59-aa39-625ffc3f330b", "sighting_of_ref": "indicator--a02da207-b690-440e-9945-4619044d6d5a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dafd0144-684b-4518-a1ad-72a2b0d7c7b9", "sighting_of_ref": "indicator--a02da207-b690-440e-9945-4619044d6d5a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48bb20a0-b181-46a6-a0e8-8feb6dc8526a", "sighting_of_ref": "indicator--6eda7206-8f43-4830-92c2-a9eb270878a7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0b7e45-46d0-4d2e-ac5a-9caadc3ac691", "sighting_of_ref": "indicator--6eda7206-8f43-4830-92c2-a9eb270878a7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afab0558-3150-4b32-a4b4-146e58765450", "sighting_of_ref": "indicator--cb4de7e3-150b-4181-973d-733cbe77031b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e53f3f3-4a10-4bae-bb41-5400fb16cd76", "sighting_of_ref": "indicator--e35d6bbf-4c2e-4376-a4e4-52be038a90b3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7ebbed-d88e-4eb7-bb8a-591ed0da13fc", "sighting_of_ref": "indicator--e35d6bbf-4c2e-4376-a4e4-52be038a90b3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbe8380-6264-446e-aed3-044fa8a7f6c8", "sighting_of_ref": "indicator--e35d6bbf-4c2e-4376-a4e4-52be038a90b3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d37d6036-93c3-4466-a96c-ee6135fad2fd", "sighting_of_ref": "indicator--ef92284e-e2eb-4bec-8dc0-2e083c87982c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d481fe2-8afd-4d6c-8cb6-3d4b6ba5ef55", "sighting_of_ref": "indicator--8bcd40bb-80eb-4d67-9527-938fe0db7a6e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2258a39d-8660-48b1-a742-6efe2f09377a", "sighting_of_ref": "indicator--479a79ec-f6c9-4ed5-80b6-fb640cfea3f4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2aa6dc-0313-42b8-9949-32a67cb43431", "sighting_of_ref": "indicator--479a79ec-f6c9-4ed5-80b6-fb640cfea3f4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--713167b4-2c3d-4e50-a933-fefe3343add2", "sighting_of_ref": "indicator--479a79ec-f6c9-4ed5-80b6-fb640cfea3f4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--245eb8a6-22db-464c-8ec1-0599ee9aae73", "sighting_of_ref": "indicator--acb06b7d-86f4-458e-834c-b3407edfaa6e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1106ef5a-8655-4f29-b463-0809a68fc872", "sighting_of_ref": "indicator--acb06b7d-86f4-458e-834c-b3407edfaa6e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969ba8ed-5d47-4768-a763-e2b926da587b", "sighting_of_ref": "indicator--acb06b7d-86f4-458e-834c-b3407edfaa6e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1aa9208-024b-4575-bf8d-9eddcd000b41", "sighting_of_ref": "indicator--32b533c0-6bc0-45a4-a2a3-515062fc23c9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59523dde-9db9-4d3b-baa0-bfde79296bc8", "sighting_of_ref": "indicator--32b533c0-6bc0-45a4-a2a3-515062fc23c9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0998b20b-2fc2-400b-9592-12c910c7e328", "sighting_of_ref": "indicator--e94e17a1-4e31-4aa8-a2cf-7a13ca0279c6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53bab337-932a-4d66-abce-ea6cd36f1c12", "sighting_of_ref": "indicator--693f5a19-4fba-48d7-98a7-650540faacdd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6bf7d7-bed1-4de5-8a9e-5f700882d4de", "sighting_of_ref": "indicator--ae3f7843-c638-4b6f-a491-0c3ee941c5d1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfd2ea6-9d21-4e6c-8f5a-727e3d5ac78e", "sighting_of_ref": "indicator--307c0a0c-a429-4f00-a8b4-1d73fcbf878d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8990b1db-01bc-473c-ac50-25fd8866b51c", "sighting_of_ref": "indicator--44c4cf5d-227c-449d-812c-3837c3c9f507", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd91729-a5a8-45ac-a257-4ad492d21435", "sighting_of_ref": "indicator--0c0cc106-4b50-47af-9c75-e0f0c640cab8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d09ca2-9929-4e94-b795-713cd7ba5dc0", "sighting_of_ref": "indicator--7e3f8050-460c-4831-a9ab-8407ce261bcc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0b02fd-4976-4a8b-a8f5-9499ad801eb0", "sighting_of_ref": "indicator--ab8389ce-f044-4273-b258-1b6962210373", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f18be7-4674-4ae3-9dc1-7c9543d5bd37", "sighting_of_ref": "indicator--52f052a9-e045-4177-b1a8-47d4d714fd2b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d76117-f8b6-43b2-b635-f6fc429351d3", "sighting_of_ref": "indicator--a1f5fd41-2eae-43bb-a08a-f2504ae07b03", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9996df-f34d-419a-b41d-222fe6535bd2", "sighting_of_ref": "indicator--a1f5fd41-2eae-43bb-a08a-f2504ae07b03", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d071db-8517-48e8-a105-944734f73ce4", "sighting_of_ref": "indicator--8a3685f7-265c-4f85-a126-9349742868a5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abeb0f11-5b45-491a-98a7-848cd6f18b0f", "sighting_of_ref": "indicator--8a3685f7-265c-4f85-a126-9349742868a5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c683f11-ae58-48ff-83e6-d537ea853656", "sighting_of_ref": "indicator--67c59266-27bc-46f0-b44c-211e4a0b40e8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb2ceef-24c7-4443-9026-32ab11d17a73", "sighting_of_ref": "indicator--67c59266-27bc-46f0-b44c-211e4a0b40e8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30cf799d-8d94-4ed2-ac85-99a091323c07", "sighting_of_ref": "indicator--67c59266-27bc-46f0-b44c-211e4a0b40e8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5501a0aa-7df1-418a-a46c-4d0f469788b7", "sighting_of_ref": "indicator--881631d3-7f90-4694-b9e0-1bdbb24564dc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb469d7b-12c8-47bb-9676-a02037b8e924", "sighting_of_ref": "indicator--881631d3-7f90-4694-b9e0-1bdbb24564dc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766b3693-f41f-42d7-933e-889444d7850d", "sighting_of_ref": "indicator--c488e057-72ad-4a5e-8ca9-5348fdf80b92", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f4d6d0-cc99-4375-900e-f83eae7e63dc", "sighting_of_ref": "indicator--c488e057-72ad-4a5e-8ca9-5348fdf80b92", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dbfda4f-a1cd-436c-8672-b3a89bae2a9a", "sighting_of_ref": "indicator--c488e057-72ad-4a5e-8ca9-5348fdf80b92", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da292b2e-588d-4543-aff0-a5780b074ab3", "sighting_of_ref": "indicator--6ecb8885-9202-478d-8e4a-38167271fcdb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46157592-894b-4609-8677-386678944731", "sighting_of_ref": "indicator--6ecb8885-9202-478d-8e4a-38167271fcdb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e688499-b610-4e26-98c2-05680e9950eb", "sighting_of_ref": "indicator--65110f4a-a8e5-41ea-a710-d3eb793c46fd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7be2455-0641-4eba-8312-7335b8d739f6", "sighting_of_ref": "indicator--65110f4a-a8e5-41ea-a710-d3eb793c46fd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6eeea6-c867-49cc-a648-08280332cbc3", "sighting_of_ref": "indicator--65110f4a-a8e5-41ea-a710-d3eb793c46fd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549ab791-7238-433e-aa46-e5aa359131f0", "sighting_of_ref": "indicator--aa8435ff-4285-4aac-a275-3b73e6eb1225", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c340b9a-1104-40e7-978f-e5d901926bfd", "sighting_of_ref": "indicator--aa8435ff-4285-4aac-a275-3b73e6eb1225", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505b7ba0-370f-4668-a92e-5a143cc491f7", "sighting_of_ref": "indicator--0935bade-1228-44bb-a2d8-bb17e4a99c23", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e145da0-3c7a-4e09-940b-f25277a9948c", "sighting_of_ref": "indicator--0935bade-1228-44bb-a2d8-bb17e4a99c23", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8185064-c70d-4a0c-86d0-a4a148882920", "sighting_of_ref": "indicator--0935bade-1228-44bb-a2d8-bb17e4a99c23", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d4bd65-b814-4d7f-a0fb-6e9b70bd5a55", "sighting_of_ref": "indicator--8a93ae08-60b4-4af8-aeb9-48540e98227c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5616bd-b048-4c98-9e62-e61605b6c479", "sighting_of_ref": "indicator--8a93ae08-60b4-4af8-aeb9-48540e98227c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57824d3f-7422-4218-ad02-86e790cbd3b7", "sighting_of_ref": "indicator--8a93ae08-60b4-4af8-aeb9-48540e98227c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057de574-104c-41d6-9fa0-b8072fb15321", "sighting_of_ref": "indicator--d35b6248-f73e-4bc6-8479-d19a33cf50c7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe49c8f-b656-425d-9d6f-9394758f6853", "sighting_of_ref": "indicator--d35b6248-f73e-4bc6-8479-d19a33cf50c7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3389b77c-9f30-4ad6-b4af-ad4b14671861", "sighting_of_ref": "indicator--d35b6248-f73e-4bc6-8479-d19a33cf50c7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954aa5b5-6f6f-482e-9f84-25cb823727df", "sighting_of_ref": "indicator--0f1afcee-77ff-4c0a-aead-bd7590a8634c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c78a323-4c38-4469-80c5-c5b195c438bc", "sighting_of_ref": "indicator--0f1afcee-77ff-4c0a-aead-bd7590a8634c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a3a461-e4b4-4e6f-bf03-998fb0c95647", "sighting_of_ref": "indicator--6dd11c70-51d5-47e0-ab0d-9a50dab09c23", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2021890b-7807-4fd1-8fd3-ad159ea94c35", "sighting_of_ref": "indicator--6dd11c70-51d5-47e0-ab0d-9a50dab09c23", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c708533-edb7-4f47-a7e5-d5c161e5343f", "sighting_of_ref": "indicator--d31fcf02-553d-4899-bb65-a6cb797073bd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032362e7-61c9-430d-abf1-992dd3e28aac", "sighting_of_ref": "indicator--d31fcf02-553d-4899-bb65-a6cb797073bd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0694aefc-1d99-4571-af1a-c9d7f3192135", "sighting_of_ref": "indicator--aa7b3ea8-3df8-494a-88a0-9103f4ba9e08", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5afdca-8a25-409c-9eec-75ea9b14e73c", "sighting_of_ref": "indicator--956dd0e4-4ef6-4a74-8f64-a44770d4fb10", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc20594e-8923-434a-94cb-ee36029f38d9", "sighting_of_ref": "indicator--956dd0e4-4ef6-4a74-8f64-a44770d4fb10", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afee0a9-c5ca-43f9-8181-fc6edf86480d", "sighting_of_ref": "indicator--956dd0e4-4ef6-4a74-8f64-a44770d4fb10", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103ac827-53df-4ce9-aa82-6e4e0e17ed4a", "sighting_of_ref": "indicator--f40e1670-6664-4f3d-90ab-f1452d3cfa65", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37e756b-a673-414f-9dcb-4d3ab8bbbb58", "sighting_of_ref": "indicator--f40e1670-6664-4f3d-90ab-f1452d3cfa65", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cdaf34-a4e1-44bc-8cf4-b83d5156201d", "sighting_of_ref": "indicator--6ecc4995-170f-4a45-8722-64356146f2fa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49503504-b613-4818-8242-32c9f89d14b6", "sighting_of_ref": "indicator--6ecc4995-170f-4a45-8722-64356146f2fa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb78434-faf0-4198-a4e8-7eddb1368132", "sighting_of_ref": "indicator--1fe99e23-9f9a-4cf1-960b-48def0889367", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4ae1fe-0adc-4d4b-80ad-1a03dcafb90d", "sighting_of_ref": "indicator--655b0a8a-334f-4aa9-81c0-5c3de5948c1a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b76a05-0004-49cf-8071-32efb1d5e476", "sighting_of_ref": "indicator--655b0a8a-334f-4aa9-81c0-5c3de5948c1a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394576d5-9553-4cb7-9fdd-ab4f91cb08c3", "sighting_of_ref": "indicator--935ce604-49a4-4e96-8287-4c0f942890fb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9814c7e-d59c-4f80-b061-2d07011d613f", "sighting_of_ref": "indicator--935ce604-49a4-4e96-8287-4c0f942890fb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4924e708-995b-4213-b822-689ac2801116", "sighting_of_ref": "indicator--935ce604-49a4-4e96-8287-4c0f942890fb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6be4a0-e98d-4ce3-9868-3b768baffe0f", "sighting_of_ref": "indicator--4f3a58b3-a9d5-4acc-ab05-05b78d13a439", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71fc097-50f4-4c1a-9abf-a4c9665385cc", "sighting_of_ref": "indicator--4f3a58b3-a9d5-4acc-ab05-05b78d13a439", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c8e982-4f36-48f9-9cbe-fb2140b853ed", "sighting_of_ref": "indicator--ab57df51-f8e5-4888-884b-28f5bf40bb57", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011c26d9-6353-4489-bd58-fc6c0a8a49b9", "sighting_of_ref": "indicator--ab57df51-f8e5-4888-884b-28f5bf40bb57", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68299d7-9dcf-41bc-9dd8-c1bd2a9e5ebe", "sighting_of_ref": "indicator--fa6db24a-bd1d-4e3f-b12b-0a7929e51b25", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8dde4b-367a-41c1-8365-e8c577080e52", "sighting_of_ref": "indicator--fa6db24a-bd1d-4e3f-b12b-0a7929e51b25", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34e60fc-ac78-47d3-b990-ec44942c3ffc", "sighting_of_ref": "indicator--5555cc0f-66d0-4e0b-be20-d6cd61f2bb2c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de77739-7b09-4a19-8f9c-ed3ed453618b", "sighting_of_ref": "indicator--795bd85d-f65c-4e03-9d5e-60a4f3492a04", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122c60a0-a9af-477a-9831-f84730b37f24", "sighting_of_ref": "indicator--795bd85d-f65c-4e03-9d5e-60a4f3492a04", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d01324-9c0e-4efb-a422-dba51295afde", "sighting_of_ref": "indicator--795bd85d-f65c-4e03-9d5e-60a4f3492a04", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6582d8-501b-4189-9f06-e82a4e5d8943", "sighting_of_ref": "indicator--05309781-40bd-411b-b955-3f4cbfb48679", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dcd1fa2-86db-4fc1-bd54-6c3458552ac2", "sighting_of_ref": "indicator--05309781-40bd-411b-b955-3f4cbfb48679", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771a3d0b-af00-406b-9a6d-e979f7a82bec", "sighting_of_ref": "indicator--60c2af80-a2c1-4f75-90b3-e1b233925e33", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--889e18cb-9881-433a-97d9-c2d295a4099a", "sighting_of_ref": "indicator--60c2af80-a2c1-4f75-90b3-e1b233925e33", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478afcbb-d540-4a5c-81c4-c7f9fea6f074", "sighting_of_ref": "indicator--60c2af80-a2c1-4f75-90b3-e1b233925e33", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d759f406-7d39-4f4d-a266-22b059042ff6", "sighting_of_ref": "indicator--8b6a4adf-c1e0-4b7b-b181-190306a81f19", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ff11d5-2f75-4a83-ae69-1f5205b5b7ad", "sighting_of_ref": "indicator--8b6a4adf-c1e0-4b7b-b181-190306a81f19", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1edfb440-d447-4230-a1ed-d5b7ccfc6539", "sighting_of_ref": "indicator--8b6a4adf-c1e0-4b7b-b181-190306a81f19", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b28625-db3b-4486-a1e3-fc45a6952343", "sighting_of_ref": "indicator--12581401-b2a2-4bd6-aafb-2d69cfd09efc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf4b69d-c658-4b2b-9812-de50d86da028", "sighting_of_ref": "indicator--dcc27e93-5f70-4a02-9e1e-137deb22f41e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9281ae7-28b0-4d85-a11b-15fe2e82ca1c", "sighting_of_ref": "indicator--dcc27e93-5f70-4a02-9e1e-137deb22f41e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec43df32-2679-4e0b-ad48-59f1c137c1e2", "sighting_of_ref": "indicator--073950e8-87c4-4862-aada-3fe41cc5a3d4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0edf8fd-fcda-4e79-b8e9-4b84cd95b8d2", "sighting_of_ref": "indicator--83e4e5b4-f192-4875-8020-c556c812276a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04cff7ed-69d7-4c35-b324-66191c18e95b", "sighting_of_ref": "indicator--83e4e5b4-f192-4875-8020-c556c812276a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9168de5-c2f8-4f35-b8fc-20e5f0e0450a", "sighting_of_ref": "indicator--64873290-8c80-4446-935b-44bc19336e47", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d648c158-5f49-432e-9ad2-44919f696bcb", "sighting_of_ref": "indicator--64873290-8c80-4446-935b-44bc19336e47", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c32c6e3-686d-4c4e-ac7b-041775694202", "sighting_of_ref": "indicator--b7ae6816-7e7c-41dd-a3a5-5cf3ba7a9f40", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e754e69-2064-4f4d-92ac-19998aafc15f", "sighting_of_ref": "indicator--b7ae6816-7e7c-41dd-a3a5-5cf3ba7a9f40", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe1c2a4-c87a-4901-969f-8f46ebc58715", "sighting_of_ref": "indicator--b7ae6816-7e7c-41dd-a3a5-5cf3ba7a9f40", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca044774-e716-4922-bbd8-c8c2558694db", "sighting_of_ref": "indicator--8117e0e1-95a0-43a1-8027-4c475a2e0ea9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804de428-2ddc-4868-bc42-6ee342419001", "sighting_of_ref": "indicator--8117e0e1-95a0-43a1-8027-4c475a2e0ea9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06ff4b8-40a1-4267-a351-a99512ae1ee0", "sighting_of_ref": "indicator--19fb40d1-cc5b-4585-91fb-155eace238ec", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c881af0d-8e4f-46f7-9d9d-1e1ff9eda2e3", "sighting_of_ref": "indicator--9f0af98a-546f-4025-8f7b-5366fa8bac0f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ecd6fef-afd1-481c-9438-84b6636469ed", "sighting_of_ref": "indicator--9f0af98a-546f-4025-8f7b-5366fa8bac0f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11dc983-e3ce-4e4b-bb3c-b1697461d467", "sighting_of_ref": "indicator--9f0af98a-546f-4025-8f7b-5366fa8bac0f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726bba38-7c16-4cb4-b1f8-bb23f818565e", "sighting_of_ref": "indicator--b6a9af3c-bbe7-4f33-9035-3198c50afde7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85e0af7-2664-4ce4-82e1-50b257d1811f", "sighting_of_ref": "indicator--b6a9af3c-bbe7-4f33-9035-3198c50afde7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9406a8f5-c775-4dbd-81a9-8ff78104522b", "sighting_of_ref": "indicator--b6a9af3c-bbe7-4f33-9035-3198c50afde7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb31072-9277-4c29-a436-3c9d75911bae", "sighting_of_ref": "indicator--8b34a59a-6552-4372-9ed1-543e4abb8eca", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e85b625-ca00-48a3-b895-8c5ee553ca44", "sighting_of_ref": "indicator--8b34a59a-6552-4372-9ed1-543e4abb8eca", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b03797-64fe-48ce-b57d-9849bf64dafa", "sighting_of_ref": "indicator--8b34a59a-6552-4372-9ed1-543e4abb8eca", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248ad038-23e2-4143-a849-3a9b7a869737", "sighting_of_ref": "indicator--e0a82eb3-b561-4422-8eb9-d0af3c7cd3cb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0976c8-af66-408d-b473-a3f5ea783e8e", "sighting_of_ref": "indicator--e0a82eb3-b561-4422-8eb9-d0af3c7cd3cb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460590a3-3b48-484d-a28d-f2584025134e", "sighting_of_ref": "indicator--e0a82eb3-b561-4422-8eb9-d0af3c7cd3cb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068bae08-6376-41f7-902b-c838359d5f2b", "sighting_of_ref": "indicator--7a549123-8dc1-4432-ad9a-f052264f2d0b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a70427e-cf81-460f-ab23-b8ce070cede2", "sighting_of_ref": "indicator--7a549123-8dc1-4432-ad9a-f052264f2d0b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21abdaf3-89ba-4ae5-8cc9-b458eb5d1bd5", "sighting_of_ref": "indicator--988919b5-0d00-4588-b1ab-88cc03b520f2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8104d4f-f77e-4089-ae3b-9360856a4647", "sighting_of_ref": "indicator--988919b5-0d00-4588-b1ab-88cc03b520f2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0415ec2f-76ac-486d-9bbb-0b08a3ef16f3", "sighting_of_ref": "indicator--988919b5-0d00-4588-b1ab-88cc03b520f2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c2f2a5-ba74-4677-8dc0-f78e9f0e009b", "sighting_of_ref": "indicator--1ea40ddf-73cb-41db-b860-39f551119b31", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf16a3e-d139-48d5-b896-7142fe8ad7fb", "sighting_of_ref": "indicator--1ea40ddf-73cb-41db-b860-39f551119b31", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78879140-c1ba-4e47-a412-8242bb04dc10", "sighting_of_ref": "indicator--1ebcc68b-995a-4a48-b0f1-02c1ff503458", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ee8400-f31d-43e0-a4cc-f23be1611212", "sighting_of_ref": "indicator--1ebcc68b-995a-4a48-b0f1-02c1ff503458", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4dc8f7-abcf-4da6-802c-2d85f217577f", "sighting_of_ref": "indicator--1ebcc68b-995a-4a48-b0f1-02c1ff503458", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497e9dda-cdda-406f-b7ee-f6d805cea17e", "sighting_of_ref": "indicator--0a5b8fc4-6124-4772-ac1c-9ce44cd76f8a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfec317-365d-43a8-8e3e-cd4881931fad", "sighting_of_ref": "indicator--0a5b8fc4-6124-4772-ac1c-9ce44cd76f8a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf1180a-4abd-4a88-aaf7-3f76a1c45962", "sighting_of_ref": "indicator--8df30c71-74d7-4411-9e0a-00b0f8b41889", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65140cde-b210-4117-a44b-94ab46a59317", "sighting_of_ref": "indicator--8df30c71-74d7-4411-9e0a-00b0f8b41889", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b4a788-ebf6-4999-a8bc-e3107cd8c832", "sighting_of_ref": "indicator--173484c9-886e-47a6-a53a-a1f6b338e5c3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f5641e-d40c-43f5-a078-5f18f72adb05", "sighting_of_ref": "indicator--173484c9-886e-47a6-a53a-a1f6b338e5c3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828fdbb5-0a47-49a1-9973-3b15e8cb378e", "sighting_of_ref": "indicator--173484c9-886e-47a6-a53a-a1f6b338e5c3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e00fd8-df96-4497-9506-ecf2b14f1d50", "sighting_of_ref": "indicator--f5fd4de0-1d09-4b3e-8b4d-550caac2f1f9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c47b49-f6cd-4dd5-8b37-ec88310b72d7", "sighting_of_ref": "indicator--f5fd4de0-1d09-4b3e-8b4d-550caac2f1f9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d691f185-19b2-40ca-82ec-ba23e91d2d24", "sighting_of_ref": "indicator--f5fd4de0-1d09-4b3e-8b4d-550caac2f1f9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bf6c6c-ea67-4e5a-afa0-2c30eb2eebe0", "sighting_of_ref": "indicator--aa4695d9-c229-4c57-ae2d-b452f06c2974", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6ec867-0c83-4cbc-9380-d44a958d37b5", "sighting_of_ref": "indicator--aa4695d9-c229-4c57-ae2d-b452f06c2974", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de47cb15-4f73-43b4-a61e-2b85e237ad1a", "sighting_of_ref": "indicator--31b7cd3a-5cd2-4dc5-8457-495e9d8cfd53", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--757d1902-6a1c-4029-8a95-58c11ac3c262", "sighting_of_ref": "indicator--345b2071-1aed-46be-b313-30cb585f3797", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43de1482-9e3b-4cbe-9d67-3904cb4a450f", "sighting_of_ref": "indicator--1d1a1e79-b491-4531-bf90-eaab0901acb3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60c2a4b-bb7b-4cc2-9603-95ae39d4efc6", "sighting_of_ref": "indicator--3680cfb5-e4cc-4ef5-8b48-e0f75c31cd82", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb5b9e8-189e-44f2-b60c-c69e22b46567", "sighting_of_ref": "indicator--a16a41b3-99bb-40a8-bf18-916590c0d17b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d98a64c-e696-4d1d-b022-d86bb7079d4d", "sighting_of_ref": "indicator--2c9bfc8f-4c52-4751-995f-d824c1cd5edc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f4eba6-6bbc-406b-94b1-531c328c1c47", "sighting_of_ref": "indicator--8a34bb40-af32-4759-a780-4ef2a8dd46c4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b68b4f89-112c-4417-ae19-a193847e999a", "sighting_of_ref": "indicator--ddd9016b-3bc7-415c-824c-948fa51176c6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ef0908-474c-4cd7-bf63-4801ffad7a30", "sighting_of_ref": "indicator--4aaacbd1-ee18-490b-b763-abfb31341222", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca7c36fb-259e-4a36-ad1f-a9807f220f40", "sighting_of_ref": "indicator--4aaacbd1-ee18-490b-b763-abfb31341222", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c591ddd-1da7-4081-9349-1534b6cd4179", "sighting_of_ref": "indicator--55de5a90-977b-4b07-9439-4ed1f0c3b279", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d29e3d6-f91f-4c5f-a5db-99b8bad73d12", "sighting_of_ref": "indicator--f65b7912-2729-4295-8e7f-e48229fc1b75", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78876c55-63be-43d9-b33e-65dc975bcdc6", "sighting_of_ref": "indicator--557b485e-4695-4a57-a222-e38888afad8d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d49128-78ed-4f6b-a533-78d4bd818e22", "sighting_of_ref": "indicator--557b485e-4695-4a57-a222-e38888afad8d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa37fcaf-9f19-462a-b10d-70e836f7e957", "sighting_of_ref": "indicator--f3851f05-4415-478f-98b9-bf300b3f23f6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e84ffef-9f58-4b2a-a6b8-81b1da456660", "sighting_of_ref": "indicator--efc0c922-7c70-4558-b527-5d251fb6a2a7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d9dd95-0cca-43c6-b87f-ae3987955b55", "sighting_of_ref": "indicator--3aa9c1d5-3e6d-4bb3-b3f6-27a2e8641c8c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7ad496-0e33-418c-8862-3d7d9bf87135", "sighting_of_ref": "indicator--3aa9c1d5-3e6d-4bb3-b3f6-27a2e8641c8c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc30241-2674-49b8-8f31-ef276629fcf3", "sighting_of_ref": "indicator--3aa9c1d5-3e6d-4bb3-b3f6-27a2e8641c8c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373920a3-35c7-47cd-b296-4083a267d43e", "sighting_of_ref": "indicator--c6305a5b-7f91-48a0-a202-0d36e4d1c5b4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f89cee-0d3b-4fc5-808a-59f51872c45e", "sighting_of_ref": "indicator--e79139b4-59ef-419c-9f74-10c8efcbf777", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563e796f-165a-4e7b-9a78-993513deeb5f", "sighting_of_ref": "indicator--2a8008b5-e15b-4935-80a0-20844fe2b6ea", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4910714f-3c30-41e7-b3fc-591ed1886119", "sighting_of_ref": "indicator--7a559ca6-13b4-4d8a-aa6e-5ffa7d6185ae", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d2ae69-a9f5-4f2b-9ad1-e4f28f17c4cd", "sighting_of_ref": "indicator--1994016f-1366-4690-bc57-f828383d46da", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d763560f-36e5-4f9d-b1ce-bb15c97ae3d1", "sighting_of_ref": "indicator--1994016f-1366-4690-bc57-f828383d46da", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de69acf-21f0-458a-93b8-775a267798c1", "sighting_of_ref": "indicator--1994016f-1366-4690-bc57-f828383d46da", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7c375e-5748-4f42-b722-e1a9c61bb8d2", "sighting_of_ref": "indicator--b0ca2533-9eef-478a-a0a0-ae8ff9b49c88", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f42d01b-3136-4213-b4f2-871e1145ed81", "sighting_of_ref": "indicator--b0ca2533-9eef-478a-a0a0-ae8ff9b49c88", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260c6ffc-e1b1-47e9-b259-4f5faac4d21b", "sighting_of_ref": "indicator--b0ca2533-9eef-478a-a0a0-ae8ff9b49c88", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c7e382-5a8f-4c3a-9174-d5fae12504d7", "sighting_of_ref": "indicator--766810af-3fe9-4746-9757-cb7210066c02", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b17be87-6f28-4748-bf08-0b2991d10faf", "sighting_of_ref": "indicator--766810af-3fe9-4746-9757-cb7210066c02", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7db81e-1ce5-4a7b-b30d-207c3103b3fa", "sighting_of_ref": "indicator--766810af-3fe9-4746-9757-cb7210066c02", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44491768-6155-4663-82bd-b40a72c084ad", "sighting_of_ref": "indicator--b1f76d8b-ba3a-47f7-a162-0fcbdd46ec0b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca89bb1-1c01-4361-a7ee-dd249c3264a4", "sighting_of_ref": "indicator--b1f76d8b-ba3a-47f7-a162-0fcbdd46ec0b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d2ed60-82ef-457d-8c2c-4eee34e2421e", "sighting_of_ref": "indicator--503a5012-7751-47ce-8e09-bb00382dc5d3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b14bce-9bfd-4016-99a9-bc4a002afe6e", "sighting_of_ref": "indicator--503a5012-7751-47ce-8e09-bb00382dc5d3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31754ea-373f-4e95-bbf3-62471c3ba46a", "sighting_of_ref": "indicator--503a5012-7751-47ce-8e09-bb00382dc5d3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d1dbfc-2297-4e64-a589-fe9075ec4b42", "sighting_of_ref": "indicator--e8e9a828-ff9c-4013-beb6-a52415484199", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453a1435-9e36-4b5c-b927-3293ab598913", "sighting_of_ref": "indicator--e8e9a828-ff9c-4013-beb6-a52415484199", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece8ec55-b9a5-498c-89d1-8f45824dd74a", "sighting_of_ref": "indicator--e8e9a828-ff9c-4013-beb6-a52415484199", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565f6652-297f-404c-a14e-334cd985c134", "sighting_of_ref": "indicator--76ba122f-9a4d-4d01-9a99-12fddd96abd9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d683bc0-a60e-46dd-b51a-51cce6e4f819", "sighting_of_ref": "indicator--76ba122f-9a4d-4d01-9a99-12fddd96abd9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1fa533c-41e4-479d-b90f-90d6aa9b58d4", "sighting_of_ref": "indicator--76ba122f-9a4d-4d01-9a99-12fddd96abd9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190fe3d6-300e-4d13-8d3a-357f8b1c03b8", "sighting_of_ref": "indicator--67f72ea2-3419-4bef-98d6-6e487610b3b9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ad4568-58b6-4a14-acb2-89e6c3ce2ede", "sighting_of_ref": "indicator--200ee0fc-a218-4d19-9d52-51ca42018685", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2d7098-b6dd-4317-b855-cc8d30e9cfb8", "sighting_of_ref": "indicator--200ee0fc-a218-4d19-9d52-51ca42018685", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8051869-77be-4704-8e18-f93bd68967e1", "sighting_of_ref": "indicator--200ee0fc-a218-4d19-9d52-51ca42018685", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68749e3b-c07a-4f4a-b366-2c6a5ab2cc60", "sighting_of_ref": "indicator--a90a85ca-9e80-461f-b2f2-1080ce4c9740", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed23cab-8728-4e5e-84a6-d022b08e60ce", "sighting_of_ref": "indicator--a90a85ca-9e80-461f-b2f2-1080ce4c9740", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a2e23e-39dc-445a-8e3c-6e0993fdb8aa", "sighting_of_ref": "indicator--a90a85ca-9e80-461f-b2f2-1080ce4c9740", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2324dc40-9b44-451f-9dd5-c0774004027f", "sighting_of_ref": "indicator--5c6daef6-6af4-44a4-b185-4b6919605284", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5122ca2-258c-4888-9029-d4c74f801c90", "sighting_of_ref": "indicator--5c6daef6-6af4-44a4-b185-4b6919605284", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3de250d-c879-4f30-98b5-8cb65e511e74", "sighting_of_ref": "indicator--5c6daef6-6af4-44a4-b185-4b6919605284", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7225723b-ec77-4059-a559-de19e44f48fc", "sighting_of_ref": "indicator--c24b7d20-23da-4a70-bc45-c65aa36d92f7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6447edc0-912f-4e51-a247-0bd512aa03b0", "sighting_of_ref": "indicator--c24b7d20-23da-4a70-bc45-c65aa36d92f7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49c12cd-6b63-4112-8193-aa1afe90637f", "sighting_of_ref": "indicator--c24b7d20-23da-4a70-bc45-c65aa36d92f7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97c72f7-4dce-486f-88dd-12e8184ff400", "sighting_of_ref": "indicator--65036681-4d0f-4665-a1ed-64db3503f71a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5166ae-473b-4945-b17e-a9bf0b4e18b6", "sighting_of_ref": "indicator--65036681-4d0f-4665-a1ed-64db3503f71a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b446b2-bb1c-44f5-94ea-de8a26715b16", "sighting_of_ref": "indicator--65036681-4d0f-4665-a1ed-64db3503f71a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d070d4-014c-4057-8bde-4a5d3d6d8917", "sighting_of_ref": "indicator--2d57446d-5a8b-45ba-a6b2-c56adcff0247", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5957dbcf-0515-4af0-9556-5f91055addf6", "sighting_of_ref": "indicator--2d57446d-5a8b-45ba-a6b2-c56adcff0247", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4542049d-f48f-47f2-ac78-096bc38226b7", "sighting_of_ref": "indicator--2d57446d-5a8b-45ba-a6b2-c56adcff0247", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d426bdc-7f17-419c-b4d6-3ffba7b2dd20", "sighting_of_ref": "indicator--b3a93253-0526-41aa-9161-62d7879eca83", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c423fda-4a40-4e3e-be12-01a478435db2", "sighting_of_ref": "indicator--b3a93253-0526-41aa-9161-62d7879eca83", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc0160f-3e75-40c9-b570-93025cb86f2e", "sighting_of_ref": "indicator--b3a93253-0526-41aa-9161-62d7879eca83", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50f17ff-41a9-4e4c-8601-37a0759bef67", "sighting_of_ref": "indicator--093eaea2-4e9b-48a9-ae1c-647fccb9a614", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47f5498-55a4-4b2d-801a-74c98d1d3c06", "sighting_of_ref": "indicator--23adeb94-ea7e-4716-a286-ac4eeecd07f4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3266252d-821c-4ac9-af10-636c0dd6a6d9", "sighting_of_ref": "indicator--229a745f-3a55-445a-9efe-294ea7d2cbf5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12462562-817b-4cb5-aa12-296e9ee1ae0f", "sighting_of_ref": "indicator--5a4aaa57-b8c0-47b0-b6a4-3238b8b6a3db", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47bc248-843a-4e36-9a1b-40190bb81c3a", "sighting_of_ref": "indicator--6fe78809-263c-4006-9263-264cddcb4020", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c23ab02-3d0b-4106-b642-fe42eb8edefc", "sighting_of_ref": "indicator--b1cffa28-4f24-487c-a67a-988ef9f02c38", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5a3037-967e-41b9-939f-15babaf1caa5", "sighting_of_ref": "indicator--090850a1-f077-41ba-a1df-88f04d13ca8d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431d3b27-8051-4390-82b8-20ec48c2e8e1", "sighting_of_ref": "indicator--5229ebda-bccb-433a-a81f-69f49c7300a2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0379e45-5f5a-4405-8861-f8f7f0b6c66d", "sighting_of_ref": "indicator--5229ebda-bccb-433a-a81f-69f49c7300a2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c91321-fc75-41a5-9a73-a28e2d6db905", "sighting_of_ref": "indicator--5229ebda-bccb-433a-a81f-69f49c7300a2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abcf5749-b8d7-42c7-808d-a8b665ece3ba", "sighting_of_ref": "indicator--5e6840d9-a1d3-47f1-b445-e699d9d532bc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3dd407d-a58b-4b05-95d5-57b557d36951", "sighting_of_ref": "indicator--b1fbd87b-e631-4a87-bf67-08c590f14a51", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98814100-5fba-4d3d-9a7e-eceed1eb6745", "sighting_of_ref": "indicator--5656f3d0-87a3-4f2e-94b8-145d2dac938b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c45cc7-11f6-43b6-8259-a7062fef0f62", "sighting_of_ref": "indicator--5656f3d0-87a3-4f2e-94b8-145d2dac938b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6ba0fd-5793-4041-b54f-8d00450bdadf", "sighting_of_ref": "indicator--1fd0768c-ca04-487c-8712-7b495e12481e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119bc099-aecd-45d2-b223-dca533d01730", "sighting_of_ref": "indicator--84a143f9-798b-4f8b-9b84-d9e500f24a7f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675c4993-cb7f-4028-b44a-4295e302c613", "sighting_of_ref": "indicator--24d3c43b-9959-4d05-9aa9-65fb3c68a4a5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d53554-2fd0-4562-88b5-37ea85381e13", "sighting_of_ref": "indicator--90fe7dcd-8421-4a3c-b6ee-d8696e79583b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b20ed8-52d1-44ee-9ac3-5af83a004280", "sighting_of_ref": "indicator--95f3cba5-dcbc-483a-9938-20a218bcf78d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc50baab-c283-44c3-a6ce-8fc2b4254d87", "sighting_of_ref": "indicator--9d35fe7c-ad8e-4ece-9cfc-5c12a8106647", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1d1f14-933f-485e-b8c4-998a0d5cb237", "sighting_of_ref": "indicator--e96adc2a-db8f-4c81-985a-4162eded80fb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf834ed9-16c2-4b34-8154-ebe5c063fac8", "sighting_of_ref": "indicator--ba474bde-9fcf-4d0a-9214-566e1ef7cbfa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2dafd60-374c-4cc5-bf1b-13150650b48e", "sighting_of_ref": "indicator--c534d6d3-2d48-48c1-b791-4e32fac4914e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c31cea2-3571-41f9-9f02-16b92db4a189", "sighting_of_ref": "indicator--0648b25e-2b27-418f-8a2f-ca2d5fbfdb37", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc37c355-a309-449c-853d-e5c390808eca", "sighting_of_ref": "indicator--4c8a4ef1-509d-4882-a778-3b821130a1e1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87c7828-8897-422d-bd43-b0a10830b3a9", "sighting_of_ref": "indicator--a9fe6663-8769-4575-a07f-a59f9fb532de", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40625c4-8f82-4f28-9efd-f5e418da0a05", "sighting_of_ref": "indicator--8db35b87-0023-4310-989a-fafe282fdcc2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3adb0e92-e4c2-407b-afc7-9fab1c5584e6", "sighting_of_ref": "indicator--8db35b87-0023-4310-989a-fafe282fdcc2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d11f6d-8152-4735-a7ab-6fb4ddd8050f", "sighting_of_ref": "indicator--11a98e69-9b61-44a1-9e63-1ae2c79a375a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608c2ac8-ff85-4672-826c-4ef15fd84a4a", "sighting_of_ref": "indicator--11a98e69-9b61-44a1-9e63-1ae2c79a375a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e92763d0-6f28-42a8-962d-d105486bd831", "sighting_of_ref": "indicator--11a98e69-9b61-44a1-9e63-1ae2c79a375a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6ba3ac-7586-4210-8f37-c6881ce579f3", "sighting_of_ref": "indicator--3cb5838a-d5eb-4b53-b910-2a5dc669ebef", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039c4862-7779-4790-b669-96de2a3a3ae6", "sighting_of_ref": "indicator--3cb5838a-d5eb-4b53-b910-2a5dc669ebef", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d81b9d3-088d-44cb-890b-b1e8df232f3b", "sighting_of_ref": "indicator--0e4817e7-9331-441c-a543-735ee1a594c7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ccf3514-8bb6-42dc-9a3a-05e9ec26d0c6", "sighting_of_ref": "indicator--0e4817e7-9331-441c-a543-735ee1a594c7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf36042c-39a7-425f-ad84-b9d1f7b02e1f", "sighting_of_ref": "indicator--0e4817e7-9331-441c-a543-735ee1a594c7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4eec6d-c67d-433b-b906-7bc053da00ae", "sighting_of_ref": "indicator--f6ef429c-8a04-44a0-bc1c-a7d772f159c3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f750ae25-b0be-4cd1-80e5-efb143879ac5", "sighting_of_ref": "indicator--f6ef429c-8a04-44a0-bc1c-a7d772f159c3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ea5218-6811-4d05-82d8-140690289906", "sighting_of_ref": "indicator--9820e676-f262-43fa-9d63-f14e72bee910", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787f7508-681a-42db-9c6c-277ac5cbdb18", "sighting_of_ref": "indicator--9820e676-f262-43fa-9d63-f14e72bee910", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4af443-b4fc-4fa5-8afb-2f6fe5e63824", "sighting_of_ref": "indicator--5fe4aaf2-c6af-4f44-a433-ff28a7c573fb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e5e0ce-a48d-4adb-bfdf-ed05495db483", "sighting_of_ref": "indicator--5fe4aaf2-c6af-4f44-a433-ff28a7c573fb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6846e4d5-c853-4bd4-8d5f-3fe5806639ca", "sighting_of_ref": "indicator--567437f7-0a45-431c-8d31-29b21eb7bd9f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46dd1f83-c6e7-401d-9599-9ddd717ad199", "sighting_of_ref": "indicator--567437f7-0a45-431c-8d31-29b21eb7bd9f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ccc2dfa-f083-49eb-939a-cdd8618e1ac5", "sighting_of_ref": "indicator--3dde0de6-dd3b-4440-b5fc-e8fc8675d2fd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85232194-2cb0-4298-b4df-87e2cc9ea510", "sighting_of_ref": "indicator--d80f2248-4232-4a1b-a1ac-b4439d4cd265", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56bd5f70-43de-4bfd-a656-b6a4b61cb09c", "sighting_of_ref": "indicator--d80f2248-4232-4a1b-a1ac-b4439d4cd265", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a491db1b-6ba1-412c-8472-55dd0e8a31c9", "sighting_of_ref": "indicator--e71ba80a-fc2b-48fe-afd6-e238b1aa8197", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b97a32-a2d5-4607-b05c-1f9f41147299", "sighting_of_ref": "indicator--279f83ed-ba12-46d6-a55d-30181078b39f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656d8ee6-aa11-4f8c-9589-bc9312dadc08", "sighting_of_ref": "indicator--fcd13e3e-de5a-42b5-ab17-e4058da8d43b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f80f71d-146a-4719-aea7-05690d75c498", "sighting_of_ref": "indicator--fcd13e3e-de5a-42b5-ab17-e4058da8d43b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2c9b23-6960-4d71-88c4-9869a2b36723", "sighting_of_ref": "indicator--fcd13e3e-de5a-42b5-ab17-e4058da8d43b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770b1833-72e9-459e-b0ac-29605c3ef3d1", "sighting_of_ref": "indicator--0beba2f2-ec31-4d94-b3c0-28256f067eef", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9ce2d9-a989-4229-901e-39985182bc22", "sighting_of_ref": "indicator--0beba2f2-ec31-4d94-b3c0-28256f067eef", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8040c7c5-dbe9-45c2-87e7-907f2a43ddb9", "sighting_of_ref": "indicator--ed5e19d2-cf95-4020-b683-dddd70980242", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f6003c-5798-4dca-9107-87433bc815b1", "sighting_of_ref": "indicator--ed5e19d2-cf95-4020-b683-dddd70980242", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50cfc5a9-8a81-4cc6-97bb-c22d6ef1b401", "sighting_of_ref": "indicator--c72fbd0e-1542-4753-b60c-9ee4946264e8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6db5451-faab-4c29-9068-7b8d09a331bc", "sighting_of_ref": "indicator--c72fbd0e-1542-4753-b60c-9ee4946264e8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b40cf8-2bc3-46c9-8045-305178004067", "sighting_of_ref": "indicator--c72fbd0e-1542-4753-b60c-9ee4946264e8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61643be8-7c55-4f75-977d-4e17ce2c71f1", "sighting_of_ref": "indicator--11f34dd8-c609-4d2f-b77c-6067ff407570", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf410bf-16fc-4533-a6ab-ad22f6455eb5", "sighting_of_ref": "indicator--11f34dd8-c609-4d2f-b77c-6067ff407570", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb239bc-4baa-4fd1-9f48-93b9fa928fce", "sighting_of_ref": "indicator--b0860b5c-2793-4593-a80e-0142e5a93f56", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb9b897-7a73-4b21-9b9e-d1f52fe23f25", "sighting_of_ref": "indicator--b0860b5c-2793-4593-a80e-0142e5a93f56", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d15e3fa-4d1a-41a0-acd5-b05706f110e4", "sighting_of_ref": "indicator--66902982-ce24-4395-9beb-283cca4fd39c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6348dfad-b999-4197-87fd-4812380e0ea2", "sighting_of_ref": "indicator--14a40db6-5034-4ba1-90ef-816d1ea825e6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbb8d8d-1204-4ef7-b34d-cccc1bd4c814", "sighting_of_ref": "indicator--3f41d1e4-d9b0-4029-9a78-6f767a59c253", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe4585b-07e8-430b-81ab-8349922165c9", "sighting_of_ref": "indicator--b0ccca8e-8c93-4280-8250-f7346cf8b327", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f29cf5-6c20-48ba-88b1-ace79d675404", "sighting_of_ref": "indicator--ac92131e-dde2-4134-a397-d299c967fc14", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b43629-5721-433b-9531-feae4c28163e", "sighting_of_ref": "indicator--e0082769-e4d3-4dbe-a5a3-cab5d977fa3f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa149e7a-d9e6-4f32-bc48-5cbfb40fef08", "sighting_of_ref": "indicator--e0082769-e4d3-4dbe-a5a3-cab5d977fa3f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c40669-75fe-4b6b-b62f-d8b27620643f", "sighting_of_ref": "indicator--a8c46d4f-6ede-4f12-9d05-ef8d87808b72", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb368c76-75d6-4cca-947b-5bc9f0b3c30e", "sighting_of_ref": "indicator--9adc96e4-5d23-404d-8e0d-af537907228e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d20de61-9eea-4121-939e-9b67ce51a1e3", "sighting_of_ref": "indicator--e91a31ec-b11c-4ad9-a2b0-e1311e2c2079", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cc6b8f-fbe9-4cd9-b089-1135ef33bde7", "sighting_of_ref": "indicator--6d83cba3-1846-45ae-899b-c13a0fc21925", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912ec6db-a5e7-47fa-b9d0-4a5f12e338b7", "sighting_of_ref": "indicator--b485472e-ca58-4fb1-85de-5aad6dcc23aa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c51754-854a-491f-bb28-cc5091d88151", "sighting_of_ref": "indicator--54ed6b79-b6f3-418b-ad92-f38841e70bc2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2733c46f-4863-4923-97b0-71c2adaf5af7", "sighting_of_ref": "indicator--e2fb106a-56c3-4ab9-b82f-6f1bb70f2d03", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143638a2-31ac-4585-b49a-45a4093a17a1", "sighting_of_ref": "indicator--e2fb106a-56c3-4ab9-b82f-6f1bb70f2d03", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ada1f4-0ed6-40d2-a1da-61c6d8e15774", "sighting_of_ref": "indicator--ae9b7ceb-94fb-4247-b3ea-a07a71744321", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84485bec-1c33-4079-bb99-c861618b949e", "sighting_of_ref": "indicator--51ecfb35-5c18-4900-a065-2aed5f9910ff", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62059cb-507e-43ab-b80d-4d5e454e42f7", "sighting_of_ref": "indicator--51ecfb35-5c18-4900-a065-2aed5f9910ff", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07103d11-7f90-4c67-9267-f15da0cdddaa", "sighting_of_ref": "indicator--255668e9-299c-4806-9e6a-2f26f10cb29e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831ddb57-3233-4a8c-94c1-c974c5656660", "sighting_of_ref": "indicator--255668e9-299c-4806-9e6a-2f26f10cb29e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cc3677-6e1f-4ac0-a5ee-d7ff60924159", "sighting_of_ref": "indicator--255668e9-299c-4806-9e6a-2f26f10cb29e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb41bab-d3bc-4abc-903d-d4d920966aba", "sighting_of_ref": "indicator--4872acfe-499c-4311-b321-db50a1c6508d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a1d0b5-47b1-475f-9b31-309f7475053f", "sighting_of_ref": "indicator--44e8bdf1-69ce-4534-992d-169f072f57bf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4613936f-935f-4ff1-b301-3c4e95ad2026", "sighting_of_ref": "indicator--599cd7bc-e29c-4907-9f6e-4614982a709b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85bacc09-1931-4bb3-93c5-556f41281b97", "sighting_of_ref": "indicator--0d59cb28-b249-46bc-8c48-84de49a971b8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fbfc526-761d-4d9e-b946-752afec6c11b", "sighting_of_ref": "indicator--0d59cb28-b249-46bc-8c48-84de49a971b8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2d56eb-2fc4-4e7c-91d5-5504df9566a6", "sighting_of_ref": "indicator--7ceed16c-9dce-428b-bf18-fdab5fda23d7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d51dbc-4e0d-4877-a9ba-1e8976578b7f", "sighting_of_ref": "indicator--7ceed16c-9dce-428b-bf18-fdab5fda23d7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35916efe-bbda-4ca7-8bae-623e46b3cf51", "sighting_of_ref": "indicator--7ceed16c-9dce-428b-bf18-fdab5fda23d7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad3ed89-4d9a-4bf7-8752-35343dfb8371", "sighting_of_ref": "indicator--a38346aa-0b21-4be2-aa42-f4358a2081c3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31aa5f1c-8cf8-4b6d-9348-ae0a9aff5ad0", "sighting_of_ref": "indicator--a38346aa-0b21-4be2-aa42-f4358a2081c3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755ef5fb-423e-402c-b952-9d3d8ba48f98", "sighting_of_ref": "indicator--6209721d-23b2-4b89-8a11-58f3342057ed", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b66ccd-2670-4008-b1d9-c3f0a6ffdf72", "sighting_of_ref": "indicator--e75d7a0a-1c92-4390-adb0-e3c882ea63f9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3144c5b5-8c4d-4ae3-a97f-7938d5bd7edd", "sighting_of_ref": "indicator--cd1ee90a-4549-4bce-885c-e239da998bdf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddda8104-f045-492c-b9e0-341464d54c59", "sighting_of_ref": "indicator--69f7aae5-d13b-4049-84bb-a469eb2f2f12", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3d98e7-7c2d-48e4-b720-a5068069f16b", "sighting_of_ref": "indicator--9cbb1509-2e4f-40f6-b88d-1ebf9e52225c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ba7f91-b400-4bb3-bb6c-0eb1fc8177fc", "sighting_of_ref": "indicator--02903766-d4ff-480f-a512-07310ea229f1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25431022-7e45-4e74-b33d-1dd2783a4865", "sighting_of_ref": "indicator--02903766-d4ff-480f-a512-07310ea229f1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b979c6f2-0f8c-4c28-8652-96d3f8510a15", "sighting_of_ref": "indicator--58eed4b1-3788-40ff-8bd2-491b5850a34c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884128e4-d2c1-4e73-b50f-367ff66a24e9", "sighting_of_ref": "indicator--58eed4b1-3788-40ff-8bd2-491b5850a34c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c128ac-8a5f-4adf-a109-c18a718a094b", "sighting_of_ref": "indicator--58eed4b1-3788-40ff-8bd2-491b5850a34c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10de7acd-0c7a-46e4-9149-ea0d8a25e25d", "sighting_of_ref": "indicator--2c1a7d68-3058-45c5-93ef-51a3eed4ce62", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9efea8ae-8a54-4dd2-ba46-f94659051561", "sighting_of_ref": "indicator--2c1a7d68-3058-45c5-93ef-51a3eed4ce62", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4f6ee6-df73-4bb0-822c-fb9665991d86", "sighting_of_ref": "indicator--2c1a7d68-3058-45c5-93ef-51a3eed4ce62", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0a7de5-24c7-4411-8100-bdf45cad9573", "sighting_of_ref": "indicator--651d7c5e-a60c-4d18-b2ef-70e4b60a4527", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7637c7-8ec6-438d-8e7a-8a5f6cfaf80c", "sighting_of_ref": "indicator--651d7c5e-a60c-4d18-b2ef-70e4b60a4527", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855d9065-7589-40f1-bd92-299cc893dc28", "sighting_of_ref": "indicator--651d7c5e-a60c-4d18-b2ef-70e4b60a4527", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cf3227-5df2-4783-a253-2d6e463032e9", "sighting_of_ref": "indicator--6d00d624-76b1-4339-938b-d934def13314", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceee50e3-bd3d-420f-8689-0f6618f71117", "sighting_of_ref": "indicator--449a6c8b-a96e-45a8-900b-da07175282c4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438684d4-c99f-4527-ae7e-2f4d3e112b37", "sighting_of_ref": "indicator--1fa01400-0b6e-43db-92d4-304845c1f5b4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91f92f4-7dd4-409b-baf7-52a6ceb010ff", "sighting_of_ref": "indicator--46299b02-d202-411f-9b94-3538f95c53b8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fecfb9ca-b2b3-48f8-90b3-8da64efd12b8", "sighting_of_ref": "indicator--616bdca7-d4ea-4691-842a-e456932644de", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6b7c7c-9955-4f42-bfc1-310214842b32", "sighting_of_ref": "indicator--aef55932-cf9a-43fd-9457-884c42ab126a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a38a055-8279-4f68-87f2-d8830e13d92f", "sighting_of_ref": "indicator--77346c52-91fd-45f5-bf7e-81592a5ff142", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59eae53a-e9ac-48d0-bc7b-62de042e5851", "sighting_of_ref": "indicator--8671599e-d90e-4e6d-b8c9-82d8a73e889f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01087b09-89d2-444f-af23-9bea48b48979", "sighting_of_ref": "indicator--f2e14507-9d13-4db1-a66e-486a3bda8fa3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3424aaf-1c01-47e9-995f-f692b0d9e204", "sighting_of_ref": "indicator--968ccc93-c6ac-4a8d-951d-4ac293f16a86", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14771968-70e3-4d8b-a8fe-222b4e774c56", "sighting_of_ref": "indicator--968ccc93-c6ac-4a8d-951d-4ac293f16a86", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b970015-b846-4aa4-9968-03b973af0135", "sighting_of_ref": "indicator--f50b4396-eed3-4824-a1a8-c87503fd177a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d504d57c-01c0-4439-b1a8-bc7fb02587d6", "sighting_of_ref": "indicator--13216880-bba3-4ebf-a959-4bf89d62be80", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a40d04-9a38-449d-b846-6d607bcd6f12", "sighting_of_ref": "indicator--e99755dd-7ef2-4b12-9652-b6f4e2f67957", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2adc0d7-2159-445b-8d39-08c91ee6d27d", "sighting_of_ref": "indicator--c3d01f37-c90c-4ca9-8bbc-5420cb1912a5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d641ccfa-f126-42cf-9eaa-9425446080aa", "sighting_of_ref": "indicator--5a85ed6e-1e74-4111-b072-8a2a29724fac", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d381026-8937-44d7-83f0-44037c836a5e", "sighting_of_ref": "indicator--5a85ed6e-1e74-4111-b072-8a2a29724fac", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9115942a-9c1b-4e65-91a2-9369364763a4", "sighting_of_ref": "indicator--069c4fba-d65d-4878-b5e1-b64921f6a4b3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e884eafa-6130-4cc4-a21d-abbe56464680", "sighting_of_ref": "indicator--db5711cc-1805-497b-a421-e306fab185ed", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4852c5ea-efa5-4a10-b984-821a685751ac", "sighting_of_ref": "indicator--1e8d0d72-82e6-4c6c-95e2-91ba18734958", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f0db75-6c1c-497a-926d-0bf40f4b2e13", "sighting_of_ref": "indicator--a6056a99-eda0-4e14-93cd-e77fe146bdee", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f871fae-d8c0-4421-987d-043663ebc56b", "sighting_of_ref": "indicator--a6056a99-eda0-4e14-93cd-e77fe146bdee", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dca31b7-5f71-4f38-844d-62657ae8792b", "sighting_of_ref": "indicator--0b912e67-06c0-4bb8-8255-296432d6aa72", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2326726-4a5d-4f58-bb2f-0a0dce1abb51", "sighting_of_ref": "indicator--0233b9a1-cd8e-4185-9339-1cc13106fa9c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bef1300-50eb-4cc8-94bb-2752b724a99e", "sighting_of_ref": "indicator--24aff07b-abae-4c7a-8c15-b86e65ca953e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8022b38e-d65b-43d8-ba7b-9ab177eb947d", "sighting_of_ref": "indicator--2e481061-6ff7-44c7-b84d-9599627dcf71", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3786ad-f539-4629-8f43-a5243c39ae8c", "sighting_of_ref": "indicator--2bd20616-a36a-44af-8cce-a4b9a6fe19e0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db47cd28-c562-4678-bb98-e6a2485c78fa", "sighting_of_ref": "indicator--327024d2-9e9f-4558-aae5-c1196e141573", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59cab230-b18a-40cd-87ee-dd096d764636", "sighting_of_ref": "indicator--40d7263f-bc65-490c-9430-675918b600ce", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1071b5-83ea-4f65-9f0e-ef61d629a469", "sighting_of_ref": "indicator--27195d37-900b-4ec6-b831-e91d9def7286", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917486f6-7b1e-460e-af48-da7e0cb47e7c", "sighting_of_ref": "indicator--08817f94-4df2-4daf-a462-9c0cdd6fabe6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a9bedc-674c-4353-9bb0-ca5f074c850e", "sighting_of_ref": "indicator--4b38a271-e502-4d4c-b130-2f29073c01e4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4428d91-a534-47af-ac73-69267399361f", "sighting_of_ref": "indicator--1f347f9b-8d96-4360-908f-898851326b4a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5390c2e-a743-4e33-a0e9-a2623308ac17", "sighting_of_ref": "indicator--1f347f9b-8d96-4360-908f-898851326b4a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d95e99a2-d2af-4680-b594-12ed2d8995c6", "sighting_of_ref": "indicator--1f347f9b-8d96-4360-908f-898851326b4a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ed55c1-447e-4e56-a195-e077c088c201", "sighting_of_ref": "indicator--2386bcf5-d4c7-4369-8ddf-8cc43712f319", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bd8777-9f38-4b0b-a716-7601e87028b1", "sighting_of_ref": "indicator--1b092846-e85a-498a-afbb-df6d9f5c863d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92be5a1-425d-4730-93b4-daa313eeebe2", "sighting_of_ref": "indicator--5df93711-e9de-4f6b-8b06-857afac31dbd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60851c65-cff2-46df-9898-a76f3d3c3f1c", "sighting_of_ref": "indicator--542588b3-2704-456c-83ef-fd31b2661d68", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213de327-f2f8-40b4-afa5-0dafccadf9c2", "sighting_of_ref": "indicator--ee8022f3-aa4b-47aa-92d2-7201712d901a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9424e3-3926-4bfe-8f12-d5aeba838ab2", "sighting_of_ref": "indicator--54343913-2997-45ce-bac2-23e52f9011a7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5521974-23cb-4970-89bb-7612d1e053c8", "sighting_of_ref": "indicator--58e92eb7-72c7-4d65-a7e2-8a65d37d504c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82981cf9-4695-4a3b-a52f-924979c07fb1", "sighting_of_ref": "indicator--b6c8441d-7c48-46c8-8d81-97631bd7b500", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c362b3-3221-4702-b752-799d748f16c5", "sighting_of_ref": "indicator--9bb43096-cbab-48b7-b176-1ccf535e3c6c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e02c1c-15d6-4cab-869f-25c42c705826", "sighting_of_ref": "indicator--4156ca38-8b14-4b51-9f4c-8b02b178f4d7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd82c7d7-4b9c-4f26-886b-890428c80e01", "sighting_of_ref": "indicator--d5d55961-9ca4-44b7-b2e6-a90ca35337ce", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77788b59-bfb5-401d-8fc9-e70ace70a180", "sighting_of_ref": "indicator--cfe2dc27-f3c2-404e-bd5b-37ced5168a10", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f74fb28-7918-40ea-bd4f-653216ad52f3", "sighting_of_ref": "indicator--b9eba999-7423-47cc-a333-4858f6ddf494", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f60ff8e-341e-419d-bedb-8609d4a00ccd", "sighting_of_ref": "indicator--573fd107-c196-435e-9b06-193d1e2a342c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8cb4372-7c66-44c4-985d-e0df1e942abb", "sighting_of_ref": "indicator--573fd107-c196-435e-9b06-193d1e2a342c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1275c171-6fbf-4243-8427-7ce550ec260c", "sighting_of_ref": "indicator--573fd107-c196-435e-9b06-193d1e2a342c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751eb040-ca58-415b-8f5d-d98a581edbfa", "sighting_of_ref": "indicator--b649441e-db53-45d6-8ade-8391a7bd685e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1164473f-2c30-49b2-aadc-c839cdb080d3", "sighting_of_ref": "indicator--edc9e17a-3a3b-46fa-b965-e025a8d47109", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c418dafc-a24e-489a-92dd-57647ebbf1a5", "sighting_of_ref": "indicator--822a10bf-4df0-43c6-8850-60e7cd51cab3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7fcc22-4849-48c4-8cfd-05dc63b6d3ba", "sighting_of_ref": "indicator--822a10bf-4df0-43c6-8850-60e7cd51cab3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82168934-7ffc-46e1-a866-789d431be7f7", "sighting_of_ref": "indicator--3990f589-7e5d-4345-8062-fd35a8d13a06", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512d51fb-0264-4417-8850-3e5cf7f433de", "sighting_of_ref": "indicator--1f62d37a-f7e4-4a45-9d40-629568b9f31a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4a59c6-afe9-45af-b374-41cc47ec0f7a", "sighting_of_ref": "indicator--bdd5e41b-43d3-49d0-b992-9b5068fbfd45", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4829c4cc-8d92-450b-90da-d71adafe4905", "sighting_of_ref": "indicator--bdd5e41b-43d3-49d0-b992-9b5068fbfd45", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13efb25-a88b-40e9-b20d-bf181235d3b9", "sighting_of_ref": "indicator--bdd5e41b-43d3-49d0-b992-9b5068fbfd45", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33d2005-c1d1-408a-84f3-32225741c084", "sighting_of_ref": "indicator--5cf45a85-c907-4114-af9c-d59194803a09", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae64afe1-7ec9-4a08-9a12-bdf274bdc6ee", "sighting_of_ref": "indicator--5cf45a85-c907-4114-af9c-d59194803a09", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73717ff6-b797-4e27-8252-8ea1c1e8ebeb", "sighting_of_ref": "indicator--5cf45a85-c907-4114-af9c-d59194803a09", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0e5281-ab3f-4de6-96a4-3d1e653e5f0c", "sighting_of_ref": "indicator--8a60f9c4-651e-4483-a416-05dfa4439f5e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06dcedfe-f415-4f49-b4c4-fc7e005acfea", "sighting_of_ref": "indicator--8a60f9c4-651e-4483-a416-05dfa4439f5e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c2eb89-3472-4d92-b5c3-e0aee42f91a2", "sighting_of_ref": "indicator--8a60f9c4-651e-4483-a416-05dfa4439f5e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d66f8c7-bb20-4885-92ec-60892b8b1191", "sighting_of_ref": "indicator--e1105969-67c3-4d8b-9d14-c98e3ccadac0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3481f28-d873-4c44-a1ad-7aef0b3d22b4", "sighting_of_ref": "indicator--e1105969-67c3-4d8b-9d14-c98e3ccadac0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65939300-15e2-439a-817e-22a1665a815d", "sighting_of_ref": "indicator--e1105969-67c3-4d8b-9d14-c98e3ccadac0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0899cf-d9cf-49f2-b003-351a7f8c9c60", "sighting_of_ref": "indicator--e4edcd80-670a-4703-84d8-39eec2a4ba12", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6652db5c-96e1-4b64-88d1-b9ece7f15dda", "sighting_of_ref": "indicator--e4edcd80-670a-4703-84d8-39eec2a4ba12", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4515e011-95ca-4984-a5ba-08eb89e5b30d", "sighting_of_ref": "indicator--e4edcd80-670a-4703-84d8-39eec2a4ba12", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722c9540-336a-4718-ba89-673148608bcd", "sighting_of_ref": "indicator--5c303d5a-5771-4130-975d-70c70789cff9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a20f3dc-5aa5-499d-8528-83f2407a61ed", "sighting_of_ref": "indicator--5c303d5a-5771-4130-975d-70c70789cff9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788912af-95c6-472a-85ee-d936bdf91e01", "sighting_of_ref": "indicator--9038c950-36cb-47a9-a65a-4349e40ed3d3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6213da56-2a52-433a-ba68-01fde9320d82", "sighting_of_ref": "indicator--9038c950-36cb-47a9-a65a-4349e40ed3d3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52707833-cb16-4147-86d2-7aecdd39397e", "sighting_of_ref": "indicator--9038c950-36cb-47a9-a65a-4349e40ed3d3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d78a16d-cdb0-4d06-ad2a-162d0c7169b2", "sighting_of_ref": "indicator--ea69b00c-7282-4739-beb3-0f6ded939a09", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1072628-61b3-4174-9c7f-927e39ec6f2e", "sighting_of_ref": "indicator--ea69b00c-7282-4739-beb3-0f6ded939a09", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1959d204-9c14-4a5b-a7c4-b8cdda1f35fd", "sighting_of_ref": "indicator--ea69b00c-7282-4739-beb3-0f6ded939a09", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09813d1e-4c9f-48ac-bb31-d10dc5ce83f0", "sighting_of_ref": "indicator--fa0b6cf8-5e2b-472a-bc10-793ced739c47", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e2841a-7ca3-44e1-983d-2e98663d8cb5", "sighting_of_ref": "indicator--fa0b6cf8-5e2b-472a-bc10-793ced739c47", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2eca73-d6cb-42a9-84f8-31d51f8b1d7f", "sighting_of_ref": "indicator--fa0b6cf8-5e2b-472a-bc10-793ced739c47", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ccfc82-f644-4144-9ddf-215d2c783b1a", "sighting_of_ref": "indicator--db1de346-8a0e-434e-b396-ae8a577d0ccf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba8beb8-d721-499c-85a8-96d818a62753", "sighting_of_ref": "indicator--db1de346-8a0e-434e-b396-ae8a577d0ccf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa1d46b-8845-43d9-bcb8-c8e9067287d8", "sighting_of_ref": "indicator--db1de346-8a0e-434e-b396-ae8a577d0ccf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4387785f-ef29-4618-8928-f35beeab8c95", "sighting_of_ref": "indicator--3682f158-d883-491f-adec-c941c037bc20", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951c8440-8cf9-4e79-8c13-f16c313b9ad7", "sighting_of_ref": "indicator--3682f158-d883-491f-adec-c941c037bc20", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1122c168-c96a-435d-bea1-9117ef15109f", "sighting_of_ref": "indicator--9c9ee51c-b850-42d0-8f3e-889b940b458b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67110b90-884d-4209-aeb6-221d13161195", "sighting_of_ref": "indicator--9c9ee51c-b850-42d0-8f3e-889b940b458b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779df405-04cd-4e65-a127-2afcc52df90f", "sighting_of_ref": "indicator--9c9ee51c-b850-42d0-8f3e-889b940b458b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6fcdd73-832f-45e6-9999-77e2b0132340", "sighting_of_ref": "indicator--da660bb3-87c0-41c5-a4a3-0bfd9df0b344", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1300ce7-b4ce-4e68-8cc4-e27b9066bdd3", "sighting_of_ref": "indicator--da660bb3-87c0-41c5-a4a3-0bfd9df0b344", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568f013d-f5f5-4752-9b7a-d15547c29d71", "sighting_of_ref": "indicator--da660bb3-87c0-41c5-a4a3-0bfd9df0b344", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d77c42-d45e-40b1-ad27-6661d4a414fe", "sighting_of_ref": "indicator--33e04472-b9f8-4c81-b5e4-5b48acd67065", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1bcba5-c59d-4583-a880-dd09f4ecbc83", "sighting_of_ref": "indicator--33e04472-b9f8-4c81-b5e4-5b48acd67065", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de67e466-4eab-4306-9e1e-5eab1b37dcf2", "sighting_of_ref": "indicator--33e04472-b9f8-4c81-b5e4-5b48acd67065", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62546649-33a6-4a64-add0-04b352930c77", "sighting_of_ref": "indicator--ab129e8c-133c-4f46-9dff-3ac91618959c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c220bf18-e316-4371-9040-2ca3749d707b", "sighting_of_ref": "indicator--ab129e8c-133c-4f46-9dff-3ac91618959c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4ad2b7-d345-4c3b-9914-543df6fbe2c8", "sighting_of_ref": "indicator--ab129e8c-133c-4f46-9dff-3ac91618959c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59aad59-dad4-4636-9816-317566e05e95", "sighting_of_ref": "indicator--455d5676-42ca-4568-bccd-ee9718da3301", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8b7844-076d-4522-99da-366bc23c5d98", "sighting_of_ref": "indicator--455d5676-42ca-4568-bccd-ee9718da3301", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb02a00-8be7-4891-84a1-b2135d5fda50", "sighting_of_ref": "indicator--455d5676-42ca-4568-bccd-ee9718da3301", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb105644-16d8-4e25-9a19-9ea157b49158", "sighting_of_ref": "indicator--7e9504f6-79df-4234-ba89-5dfd4716bd1a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28de522d-f00a-4b5e-a634-5e9f7c3bcaca", "sighting_of_ref": "indicator--7e9504f6-79df-4234-ba89-5dfd4716bd1a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013eb61e-6b37-4764-9de2-db6aa40d6f62", "sighting_of_ref": "indicator--7e9504f6-79df-4234-ba89-5dfd4716bd1a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220da610-78a1-472b-9796-1e9cd7c1762a", "sighting_of_ref": "indicator--c81bc636-cbe6-48d1-b273-767c43c621d0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afff121-31c8-433a-a562-d2c20c266714", "sighting_of_ref": "indicator--c81bc636-cbe6-48d1-b273-767c43c621d0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35934c36-e232-4875-80d9-bcdd6ca50cab", "sighting_of_ref": "indicator--c81bc636-cbe6-48d1-b273-767c43c621d0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6393a0c-b57a-4b36-a21f-46d904b3c626", "sighting_of_ref": "indicator--a6ac5fe7-c0a1-4f41-ac0e-095a66b9853d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45640a87-d932-4cbb-9cdb-0483d77f023d", "sighting_of_ref": "indicator--a6ac5fe7-c0a1-4f41-ac0e-095a66b9853d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f20d58f-86d0-4f6e-a4ea-89de67d25d36", "sighting_of_ref": "indicator--a6ac5fe7-c0a1-4f41-ac0e-095a66b9853d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3389a9-9834-47a4-837c-9a6a5bb0ffc2", "sighting_of_ref": "indicator--c9299411-efd2-4183-8fb2-8a667fc17d0d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe29181-5fb0-44ed-a8b3-9f3a5544d65e", "sighting_of_ref": "indicator--c9299411-efd2-4183-8fb2-8a667fc17d0d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06dfea13-bd75-4dbb-91f9-a3ff83e81c36", "sighting_of_ref": "indicator--c9299411-efd2-4183-8fb2-8a667fc17d0d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7abfbd-d0ef-4296-a09f-42de7da411ad", "sighting_of_ref": "indicator--a0bcddc3-79e1-45e3-831e-7671572a1cbc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5be7e1-00d9-465f-9419-54f0f27e4621", "sighting_of_ref": "indicator--a0bcddc3-79e1-45e3-831e-7671572a1cbc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c08008-ec52-4fea-a228-30785c8dff80", "sighting_of_ref": "indicator--a0bcddc3-79e1-45e3-831e-7671572a1cbc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7324ba3b-3b88-4f03-83a2-a58ff4affa1a", "sighting_of_ref": "indicator--0031e1e6-05b9-4231-b6c0-366e306f4494", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8918865-b47f-436c-8c15-a90feac53b1c", "sighting_of_ref": "indicator--0031e1e6-05b9-4231-b6c0-366e306f4494", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d657ac4-fee4-43a2-a540-0d34a1b1003b", "sighting_of_ref": "indicator--b8f25564-b996-43e5-a179-1692327fc2e3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc229e8a-ed67-465c-b765-27e27b5427f2", "sighting_of_ref": "indicator--b8f25564-b996-43e5-a179-1692327fc2e3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b94743a-f1cf-42da-8331-9e08b5f879fb", "sighting_of_ref": "indicator--b8f25564-b996-43e5-a179-1692327fc2e3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134355be-5a50-4b12-9a08-6cb35992dea0", "sighting_of_ref": "indicator--2cb222e0-ab28-4fe8-a32f-4f6f6ceb7d46", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d6d0ca-86f5-4c3b-bd48-24f279132eb3", "sighting_of_ref": "indicator--a313d3d7-5b3c-461c-9a64-84220c1fb586", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e92eba2-a44a-4811-98e7-f4ab09e281ad", "sighting_of_ref": "indicator--a313d3d7-5b3c-461c-9a64-84220c1fb586", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda51584-5291-42de-bcf1-8636bc38e1d0", "sighting_of_ref": "indicator--a313d3d7-5b3c-461c-9a64-84220c1fb586", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b67c7f-231e-4422-b7db-b85c45e6a199", "sighting_of_ref": "indicator--6c215b50-4646-4bfc-9141-87cc63c11322", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6920d89d-8ca6-4b75-a913-72672de56f90", "sighting_of_ref": "indicator--6c215b50-4646-4bfc-9141-87cc63c11322", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e35b59-d909-42d2-8a3d-9240f3f7b9e3", "sighting_of_ref": "indicator--6c215b50-4646-4bfc-9141-87cc63c11322", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127e68cc-692a-4800-bf82-5fe427eec8d5", "sighting_of_ref": "indicator--53d901d8-e802-4be8-906c-53ed06836fb9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f629ab0b-be04-44ba-9292-61a23bbaa81f", "sighting_of_ref": "indicator--53d901d8-e802-4be8-906c-53ed06836fb9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9459127b-1662-4f39-a1b2-d53530983be4", "sighting_of_ref": "indicator--cdea138e-e6de-437c-ba1e-dc349d5888a8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6947dba6-8268-45de-9063-34fb0e20b04a", "sighting_of_ref": "indicator--cdea138e-e6de-437c-ba1e-dc349d5888a8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff08840-fdee-4b29-b051-f1850168bd4e", "sighting_of_ref": "indicator--cdea138e-e6de-437c-ba1e-dc349d5888a8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2c183b-cf78-4a15-ada7-5530772f0b12", "sighting_of_ref": "indicator--5673ac84-bb16-4f1b-8bec-b35c7549b242", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0cad5b-12c4-4cd8-bd1f-daf989d0ff6c", "sighting_of_ref": "indicator--5673ac84-bb16-4f1b-8bec-b35c7549b242", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eea1504-5eb6-4cfd-ab23-859c38a5b1eb", "sighting_of_ref": "indicator--5673ac84-bb16-4f1b-8bec-b35c7549b242", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6789c3-249b-4afa-81fc-ba8d2fc94c16", "sighting_of_ref": "indicator--9c5b506d-2b54-430a-937d-a292641ffbe5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ffadc6d-83c6-490f-8be1-553995a9dc2d", "sighting_of_ref": "indicator--9c5b506d-2b54-430a-937d-a292641ffbe5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c0324a-adc8-44c5-bf0c-901bfa7f63ce", "sighting_of_ref": "indicator--9c5b506d-2b54-430a-937d-a292641ffbe5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b583cf2-e1c7-49ee-86ec-8aa8b1b43e0d", "sighting_of_ref": "indicator--a31b8f5e-5874-4ca6-b3f2-52cc9ed36b16", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb76ac2-dc77-4e34-acdc-e0150b554230", "sighting_of_ref": "indicator--a31b8f5e-5874-4ca6-b3f2-52cc9ed36b16", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3974589c-fd1e-4d78-9640-a2bfe35d6cd6", "sighting_of_ref": "indicator--a31b8f5e-5874-4ca6-b3f2-52cc9ed36b16", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ea13bb-ba2a-4c84-9692-35e3d45b5f9c", "sighting_of_ref": "indicator--fb702215-03bc-4490-aa4b-d160d24b6a4f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea6ba1a-5cbe-4b05-946c-93541dee2bf1", "sighting_of_ref": "indicator--fb702215-03bc-4490-aa4b-d160d24b6a4f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97978a0c-8686-4760-adbb-1355955e17f3", "sighting_of_ref": "indicator--fb702215-03bc-4490-aa4b-d160d24b6a4f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e43ad5-9dd2-477b-bfdb-5ff0fee3261a", "sighting_of_ref": "indicator--5d0a7c75-0b6f-4eb4-81ff-0fb82c63f317", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd3384a-9470-48d0-b144-52dc7b7f1442", "sighting_of_ref": "indicator--5d0a7c75-0b6f-4eb4-81ff-0fb82c63f317", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503d3e97-6b6e-4fb5-9f4c-ee7f1030a972", "sighting_of_ref": "indicator--5d0a7c75-0b6f-4eb4-81ff-0fb82c63f317", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60cfe3d1-d7ea-4061-841f-34d9903ed27a", "sighting_of_ref": "indicator--005b8972-9e30-4f33-a2bc-2049277e6ab1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b786645f-dd77-41e2-a8cf-b6bccd8a7112", "sighting_of_ref": "indicator--005b8972-9e30-4f33-a2bc-2049277e6ab1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110d39e5-c1ca-4451-97eb-0ca506d409a4", "sighting_of_ref": "indicator--005b8972-9e30-4f33-a2bc-2049277e6ab1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896fe29f-e476-40eb-9914-0cec2aacc3cf", "sighting_of_ref": "indicator--cf5e1288-5854-4535-bc11-0f7eac1153b0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1358428c-9c5f-46ba-b67c-a26c10ce4218", "sighting_of_ref": "indicator--cf5e1288-5854-4535-bc11-0f7eac1153b0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0729ffd-0042-49c0-9398-d9ed24d8fa29", "sighting_of_ref": "indicator--cf5e1288-5854-4535-bc11-0f7eac1153b0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8bb8667-c352-49a4-9932-cdf2a6e91c6e", "sighting_of_ref": "indicator--fd45a710-7244-4cf7-a40c-d21d0c452a2d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7c322f-ed9a-4815-91e7-c754f66cc5e9", "sighting_of_ref": "indicator--fd45a710-7244-4cf7-a40c-d21d0c452a2d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c200d7-97a6-4de2-b964-0fe3e355685a", "sighting_of_ref": "indicator--0323d85f-7729-480c-84d8-1ff637167f20", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5422d7-d57d-4cae-b0ff-15de0a1e6abf", "sighting_of_ref": "indicator--0323d85f-7729-480c-84d8-1ff637167f20", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb0c75e-a523-4485-bab9-179ea546aa5f", "sighting_of_ref": "indicator--0323d85f-7729-480c-84d8-1ff637167f20", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09985f61-137a-4e5b-880f-902286a2f54d", "sighting_of_ref": "indicator--e9b82343-452c-42a6-bf10-cb72918bf20b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb222b38-415b-4fab-8805-b176aa59eab0", "sighting_of_ref": "indicator--e9b82343-452c-42a6-bf10-cb72918bf20b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84c1859-6a22-427f-b3fc-8b011d46328f", "sighting_of_ref": "indicator--5f9c715e-0512-4bc1-9e06-ad387918d4a1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868d44e3-8d12-407f-8fbb-fba051b60d38", "sighting_of_ref": "indicator--5f9c715e-0512-4bc1-9e06-ad387918d4a1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c1f2f1-4dd0-4e4d-a922-edc07d4285b6", "sighting_of_ref": "indicator--5f9c715e-0512-4bc1-9e06-ad387918d4a1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc59cbc4-48f3-4782-b87f-1720e8f4cc70", "sighting_of_ref": "indicator--200cd093-2f75-4534-a9df-4750ef259245", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931d70b8-746f-4f7b-92f0-fb8ad58bc762", "sighting_of_ref": "indicator--200cd093-2f75-4534-a9df-4750ef259245", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c309e4d5-5363-4381-b46f-80b081c4de37", "sighting_of_ref": "indicator--200cd093-2f75-4534-a9df-4750ef259245", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65cd530e-7239-4b59-bb02-375fda8db461", "sighting_of_ref": "indicator--50e5c454-2799-4fb5-a011-0d46775e7512", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3db8a4-60d2-497f-8491-dd34a953cc3e", "sighting_of_ref": "indicator--50e5c454-2799-4fb5-a011-0d46775e7512", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18096130-c34e-440c-9333-5d81d8f46760", "sighting_of_ref": "indicator--50e5c454-2799-4fb5-a011-0d46775e7512", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9ceb27-e993-407d-96eb-057f896f6332", "sighting_of_ref": "indicator--345de77d-48f1-4c16-9168-27bf1c0654a2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615e796d-feea-446c-9cad-d32e613de778", "sighting_of_ref": "indicator--345de77d-48f1-4c16-9168-27bf1c0654a2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8eefe94-32c8-496b-85e2-f10c91cc436f", "sighting_of_ref": "indicator--345de77d-48f1-4c16-9168-27bf1c0654a2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14142c7-c8ad-4762-804e-1016609f15dd", "sighting_of_ref": "indicator--4110d487-2182-4eb9-a7aa-0ff2489d4526", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2549941-7288-42c0-9d55-8e031644d624", "sighting_of_ref": "indicator--4110d487-2182-4eb9-a7aa-0ff2489d4526", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09cc0278-ffc7-487c-aac2-85c3695cb81a", "sighting_of_ref": "indicator--4110d487-2182-4eb9-a7aa-0ff2489d4526", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5037e513-cb0c-4ab9-a63f-181cd4193c7e", "sighting_of_ref": "indicator--6a082b18-64bd-44df-9e4a-5cee4558d883", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cfac79d-1bf6-48fa-a8b3-d9147a98ccfd", "sighting_of_ref": "indicator--6a082b18-64bd-44df-9e4a-5cee4558d883", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7240c69-c054-4be9-a7c8-ababd7f21560", "sighting_of_ref": "indicator--6a082b18-64bd-44df-9e4a-5cee4558d883", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9fc79c4-93e3-4730-b72f-40268fa7f682", "sighting_of_ref": "indicator--2464fdd3-123c-409f-bbc1-710848c46fbb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72cc38f5-3a63-41c6-995d-f4c2bb8266a7", "sighting_of_ref": "indicator--2464fdd3-123c-409f-bbc1-710848c46fbb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c48f1c-61a5-4251-8495-2b447c4a51c5", "sighting_of_ref": "indicator--2464fdd3-123c-409f-bbc1-710848c46fbb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a556afe-0906-44b4-b802-9b083e954f0d", "sighting_of_ref": "indicator--e2f60a56-88db-48d5-b720-7458dee77fce", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d95affd-0c0f-4a00-ade9-feef209dfdd6", "sighting_of_ref": "indicator--e2f60a56-88db-48d5-b720-7458dee77fce", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0db320-0122-490e-be56-60910f3b0dc8", "sighting_of_ref": "indicator--e2f60a56-88db-48d5-b720-7458dee77fce", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1fa49d-4e2d-4e25-a809-e31cf521d526", "sighting_of_ref": "indicator--d12a7657-a945-4a0c-9318-69a69f36eca8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e7ae15-01ed-4eb3-b531-893e852f5e9f", "sighting_of_ref": "indicator--d12a7657-a945-4a0c-9318-69a69f36eca8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a32669-4cd0-416e-b910-3537bdb29b96", "sighting_of_ref": "indicator--d12a7657-a945-4a0c-9318-69a69f36eca8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f61081-27d7-4d4f-97a5-3af6a8a59a32", "sighting_of_ref": "indicator--b773f649-0370-4009-a15f-c9ae510482ea", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a4447f-a099-4855-a80f-a248f81f4deb", "sighting_of_ref": "indicator--b773f649-0370-4009-a15f-c9ae510482ea", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0431481-358a-4c77-930f-19267cde0e18", "sighting_of_ref": "indicator--b773f649-0370-4009-a15f-c9ae510482ea", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74161b4-bdb2-4e86-84b2-8fde35615445", "sighting_of_ref": "indicator--791dc36a-9b8e-471d-aa5e-9e1b82e7cfcc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd26e51-541b-4ab5-8ddd-31fc79d614b6", "sighting_of_ref": "indicator--791dc36a-9b8e-471d-aa5e-9e1b82e7cfcc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81803ae6-048c-4277-85bf-2384b1a1335a", "sighting_of_ref": "indicator--dd5c08cf-f20e-4c7d-8bff-f5461e1aa718", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f910f58-ea32-4884-9b27-1288dc80e84c", "sighting_of_ref": "indicator--dd5c08cf-f20e-4c7d-8bff-f5461e1aa718", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887232f8-63bd-458d-b26b-c973ee6ae1aa", "sighting_of_ref": "indicator--c4bd8a79-f73d-40f7-b360-3e0fe0322d62", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de64117e-971f-48b7-8561-3bb3b5ca4931", "sighting_of_ref": "indicator--c4bd8a79-f73d-40f7-b360-3e0fe0322d62", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20cc39e9-8036-498a-a4da-a8eced68df74", "sighting_of_ref": "indicator--c4bd8a79-f73d-40f7-b360-3e0fe0322d62", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee149e5-7217-49b5-ba6d-4fcf71a055c2", "sighting_of_ref": "indicator--3587c128-dbcf-4b3b-bcb8-2a0a23fa72a5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bef8ac6-652b-4d4b-a2dd-4234ccb5e183", "sighting_of_ref": "indicator--3587c128-dbcf-4b3b-bcb8-2a0a23fa72a5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1604d0-b7b4-48b2-a909-ef5c80363013", "sighting_of_ref": "indicator--3587c128-dbcf-4b3b-bcb8-2a0a23fa72a5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9010bcd-1665-401a-81a0-90d9267edc76", "sighting_of_ref": "indicator--36976bf2-7f52-47ee-9cff-6f9c0eaf99c1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf336c3-08b0-4055-8158-4f9962ac578b", "sighting_of_ref": "indicator--36976bf2-7f52-47ee-9cff-6f9c0eaf99c1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9b9d69-9b92-46cc-865c-7914ead29f90", "sighting_of_ref": "indicator--eaa504ea-8788-47b8-904b-615c87d0a92a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a66ac4-bb1d-4e03-bbdd-8624db14bebb", "sighting_of_ref": "indicator--eaa504ea-8788-47b8-904b-615c87d0a92a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c039cdd5-5fc7-46fc-a100-136ed9f1c9d6", "sighting_of_ref": "indicator--eaa504ea-8788-47b8-904b-615c87d0a92a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8143b679-4c74-4641-8072-81c92b4694c9", "sighting_of_ref": "indicator--418f8b1e-edb3-4f81-9732-c76553b8c2a3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07763270-848c-4235-9a3a-7b9fcb8219d5", "sighting_of_ref": "indicator--418f8b1e-edb3-4f81-9732-c76553b8c2a3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794be5b9-76cc-4c1d-8a06-5e8cc37d35a6", "sighting_of_ref": "indicator--418f8b1e-edb3-4f81-9732-c76553b8c2a3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62e4e86-de3b-4df6-b556-1eea356d79ad", "sighting_of_ref": "indicator--237741c5-7e68-4ff0-8c45-97976fa26a9f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3273ccce-f831-4ff6-978e-1e3f2255055b", "sighting_of_ref": "indicator--237741c5-7e68-4ff0-8c45-97976fa26a9f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d8f08bd-de0d-4bdb-ba7f-a7b120b97e54", "sighting_of_ref": "indicator--2ed5c6fc-a7e0-445b-81b7-e7a657b648eb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74dfc0ed-1f0a-4b28-9842-2c926a929200", "sighting_of_ref": "indicator--2ed5c6fc-a7e0-445b-81b7-e7a657b648eb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef31db9a-37d7-42ae-8840-9e5cc7d1a74d", "sighting_of_ref": "indicator--53be20bb-f56e-45a3-9410-e4af2ae361eb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5690822d-3e10-4442-ae64-9729d8c0b820", "sighting_of_ref": "indicator--53be20bb-f56e-45a3-9410-e4af2ae361eb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d465f9d5-0768-4c16-a166-017ca61d9e7e", "sighting_of_ref": "indicator--53be20bb-f56e-45a3-9410-e4af2ae361eb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d24c8e14-388d-43f4-abdf-45e731d006d4", "sighting_of_ref": "indicator--b8c12822-dfc1-403c-8fcf-4d5c383bad58", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d1ca2c-3636-41b5-80c9-a6961a43e22f", "sighting_of_ref": "indicator--b8c12822-dfc1-403c-8fcf-4d5c383bad58", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1a21a3-1fa7-4349-8a2c-2711d91e7fc4", "sighting_of_ref": "indicator--b8c12822-dfc1-403c-8fcf-4d5c383bad58", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9661f35d-7cc4-4d05-92d8-05a40ff9e450", "sighting_of_ref": "indicator--35f2b4ad-926c-41c7-8003-d2b32af10922", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9352b24d-1cf8-4994-bd4b-da3bf90209d2", "sighting_of_ref": "indicator--35f2b4ad-926c-41c7-8003-d2b32af10922", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c44218-0d4e-46c9-91e6-1df5c5b93ac0", "sighting_of_ref": "indicator--35f2b4ad-926c-41c7-8003-d2b32af10922", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cfbd78f-4f93-4988-9ba8-cfdc37c1dce2", "sighting_of_ref": "indicator--517dfa78-9c7e-4fbe-b054-432d720efd87", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9ecde4-8ca4-4e19-abe7-b844a714939e", "sighting_of_ref": "indicator--517dfa78-9c7e-4fbe-b054-432d720efd87", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2cbdee-b357-4903-a276-d1a8d8df4479", "sighting_of_ref": "indicator--517dfa78-9c7e-4fbe-b054-432d720efd87", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35176a3-b6fa-453f-a439-f5dc394a671b", "sighting_of_ref": "indicator--991abbe7-0a25-44c8-b876-a4ceaaff7129", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73e3df7-bf86-4f41-9515-3cf1593da7f2", "sighting_of_ref": "indicator--991abbe7-0a25-44c8-b876-a4ceaaff7129", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf651d51-d57b-40f4-b9d1-eab3dc3028bf", "sighting_of_ref": "indicator--991abbe7-0a25-44c8-b876-a4ceaaff7129", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e421132-2951-44a0-93a3-125e036533a4", "sighting_of_ref": "indicator--54a8f65b-a8e3-4e30-bb91-da113981d99f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb43cdd3-d602-4567-9fd9-ad576c45c4e9", "sighting_of_ref": "indicator--54a8f65b-a8e3-4e30-bb91-da113981d99f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4138250-e0a5-4023-8f88-0668998d4185", "sighting_of_ref": "indicator--54a8f65b-a8e3-4e30-bb91-da113981d99f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bef3ec8-cf6f-4806-af90-a76f6821ee08", "sighting_of_ref": "indicator--da9daa26-37b1-4e36-aac3-7c667e75ee14", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6122e220-3f02-4207-a92e-c85abf575a40", "sighting_of_ref": "indicator--da9daa26-37b1-4e36-aac3-7c667e75ee14", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4481399-6819-4dd5-9aed-c3ce665ed85c", "sighting_of_ref": "indicator--da9daa26-37b1-4e36-aac3-7c667e75ee14", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78705970-6ace-4986-b91a-57ef2eb479b2", "sighting_of_ref": "indicator--11eb7cad-d16a-4bd2-96f2-4abef86e622a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d578802-37b6-4836-a5bd-6787ac09bb1e", "sighting_of_ref": "indicator--11eb7cad-d16a-4bd2-96f2-4abef86e622a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e82957-bf51-49c5-8d6c-3f72bc61e912", "sighting_of_ref": "indicator--11eb7cad-d16a-4bd2-96f2-4abef86e622a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5bee3eb-7589-4d94-bf0b-2f34acdb50a3", "sighting_of_ref": "indicator--390900a8-fc23-4819-bc48-a5b55b1837e7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988f104c-48cf-4117-a919-d46d1dd2c83e", "sighting_of_ref": "indicator--390900a8-fc23-4819-bc48-a5b55b1837e7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02929cfe-ddd7-47b9-8141-5ce9fe551094", "sighting_of_ref": "indicator--c8221474-48ea-431a-958e-4459c1cd12ec", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7a62c9-f3f0-4681-9e28-5bba2117f23b", "sighting_of_ref": "indicator--c8221474-48ea-431a-958e-4459c1cd12ec", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490f2ac1-1f49-44dc-9fae-99977e982107", "sighting_of_ref": "indicator--3cf56562-ea50-4165-9872-9dfde6912d72", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ccb593-954e-408f-9118-58187937c83f", "sighting_of_ref": "indicator--3cf56562-ea50-4165-9872-9dfde6912d72", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0bfce6-6960-4236-b665-7fac5a210abe", "sighting_of_ref": "indicator--3cf56562-ea50-4165-9872-9dfde6912d72", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f67a7e-9386-46c7-a89b-c3673b188d44", "sighting_of_ref": "indicator--f190c5c2-8922-4bfa-8789-bec214ffcfc0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b181c18-b6bc-423b-83e2-a09dc8649bdd", "sighting_of_ref": "indicator--f190c5c2-8922-4bfa-8789-bec214ffcfc0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa718dc-931d-471d-9c9d-1a4094034bac", "sighting_of_ref": "indicator--f190c5c2-8922-4bfa-8789-bec214ffcfc0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2946f6-a76f-4ab9-8a1e-3a90990934da", "sighting_of_ref": "indicator--a24bc719-9e60-45c1-82fd-d8331eaa2322", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ab2c9b-29cc-4c91-8802-8dbfe4dbe2a7", "sighting_of_ref": "indicator--a24bc719-9e60-45c1-82fd-d8331eaa2322", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e703ca9b-e9c1-4af6-9379-646313ba1c8e", "sighting_of_ref": "indicator--a24bc719-9e60-45c1-82fd-d8331eaa2322", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4354150e-9e46-478c-b24b-8be14fcdae24", "sighting_of_ref": "indicator--5da868d4-590b-4741-9eec-c2d5394190d9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91b2433-2ddb-4b15-b5a5-6f5d250bcc4c", "sighting_of_ref": "indicator--b5492cee-e4e6-4163-83ad-f12bd1a873fa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f042bd-9536-47db-b3d6-0c87a9822229", "sighting_of_ref": "indicator--b5492cee-e4e6-4163-83ad-f12bd1a873fa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617edc88-3cc6-4a38-86a8-8f8a4859b312", "sighting_of_ref": "indicator--b5492cee-e4e6-4163-83ad-f12bd1a873fa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734f08d5-63e5-41ea-b05f-6155647751c2", "sighting_of_ref": "indicator--0fce480e-7a47-4c62-812c-2070b8001f0a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c29895-d1d1-4294-8f54-d2368b28b733", "sighting_of_ref": "indicator--0fce480e-7a47-4c62-812c-2070b8001f0a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a99fe44-37a5-4966-bf2d-ceb6a7e1db54", "sighting_of_ref": "indicator--80e75f32-029c-43da-8431-e78e67ce3790", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5bae5ac-1fb9-4a36-acc8-71193b71602f", "sighting_of_ref": "indicator--80e75f32-029c-43da-8431-e78e67ce3790", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4d408f-8a27-49eb-a6ab-7b428d44c09b", "sighting_of_ref": "indicator--80e75f32-029c-43da-8431-e78e67ce3790", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea5f9ea-a52f-4a5d-b249-fb314da9a151", "sighting_of_ref": "indicator--6495ea68-8c99-4be8-be31-521b7f00d7bb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954a82fe-101a-4899-a29f-59184c2d1abc", "sighting_of_ref": "indicator--6495ea68-8c99-4be8-be31-521b7f00d7bb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28731f8-8017-4779-b834-759402e97868", "sighting_of_ref": "indicator--6495ea68-8c99-4be8-be31-521b7f00d7bb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ff5c3f-e9b8-480c-98d9-d312ed1e74c7", "sighting_of_ref": "indicator--90b45359-2af0-4712-bdf3-753419f2c169", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f234204-2624-4dc5-b99e-8e7c8166049d", "sighting_of_ref": "indicator--90b45359-2af0-4712-bdf3-753419f2c169", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4970e70b-305c-42bf-adc9-5caf85c99341", "sighting_of_ref": "indicator--90b45359-2af0-4712-bdf3-753419f2c169", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd459114-3a2c-43bc-9b31-609743ff6ad3", "sighting_of_ref": "indicator--3e9057bd-603e-4ebf-aed3-20e9c2cf4898", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb074dee-5303-43f0-8e2b-d0f751fb49e7", "sighting_of_ref": "indicator--3e9057bd-603e-4ebf-aed3-20e9c2cf4898", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08eb7cc6-c04f-4e52-b037-ada910122c84", "sighting_of_ref": "indicator--d56d4ca9-90aa-45a6-838a-99e0e092b563", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3191110-001d-40e6-8d22-0e8715c7ea94", "sighting_of_ref": "indicator--d56d4ca9-90aa-45a6-838a-99e0e092b563", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0cc7e4-78f3-4912-931e-fc3f6f11882f", "sighting_of_ref": "indicator--d56d4ca9-90aa-45a6-838a-99e0e092b563", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e225d6-e7ea-4b88-b9b7-de18d6615eed", "sighting_of_ref": "indicator--ff7742b0-fcea-4d95-afd2-fec7de76732d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9904ea-9a3b-40b3-bee4-fbaae97d7052", "sighting_of_ref": "indicator--ff7742b0-fcea-4d95-afd2-fec7de76732d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9bf6fff-062a-47af-954c-4df9191886f9", "sighting_of_ref": "indicator--ff7742b0-fcea-4d95-afd2-fec7de76732d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e372a43c-80d7-4659-bdce-9f9987f62e91", "sighting_of_ref": "indicator--4a75444a-e002-4fee-9677-eb326787fc84", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ced0192-5757-4a37-8f79-0c2452d313cc", "sighting_of_ref": "indicator--4a75444a-e002-4fee-9677-eb326787fc84", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db94506d-0de1-4696-b8aa-d7232455c88b", "sighting_of_ref": "indicator--7480e11d-6946-4d07-9a1e-c1db6dfde67e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c02e57a-7cb5-4e5e-9405-9324edcbfe91", "sighting_of_ref": "indicator--7480e11d-6946-4d07-9a1e-c1db6dfde67e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5d4825-a51a-4cb6-8ad9-406d10437913", "sighting_of_ref": "indicator--7480e11d-6946-4d07-9a1e-c1db6dfde67e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19800b01-7aea-4188-b505-14aaa664fbdf", "sighting_of_ref": "indicator--a87f409c-655f-442f-acae-0fa8e4da7c14", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a84b0f-4f3b-4532-9e23-754b2e27d22d", "sighting_of_ref": "indicator--a87f409c-655f-442f-acae-0fa8e4da7c14", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78339b96-ee1c-464c-a8f3-5dcb50ac233e", "sighting_of_ref": "indicator--a87f409c-655f-442f-acae-0fa8e4da7c14", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ba22b6-0184-41a4-aa2d-e9465cc46af1", "sighting_of_ref": "indicator--6dc80a04-1e24-4757-b047-838040684cd0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd590ae4-f55f-493a-bc12-ba176297ef8b", "sighting_of_ref": "indicator--b7229bda-96a9-4afd-9a09-a5f726dfcde3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d616b901-3b88-4bb2-a775-7ccfad6f31f3", "sighting_of_ref": "indicator--b7229bda-96a9-4afd-9a09-a5f726dfcde3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f260fc-7521-42cc-8677-9ea798322605", "sighting_of_ref": "indicator--4035972c-451c-46df-84cb-d3f7daa640b5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d732fbd7-d2a1-43dd-a720-e20f97be193b", "sighting_of_ref": "indicator--4035972c-451c-46df-84cb-d3f7daa640b5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf2701f-e9ff-4fc7-98e1-365add814cd0", "sighting_of_ref": "indicator--5dd5caea-550d-4d30-ab90-27a47ee9581e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0669912-5eb6-42a4-9368-610f05d84e59", "sighting_of_ref": "indicator--5dd5caea-550d-4d30-ab90-27a47ee9581e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa565a4-ac70-44d8-bfce-6f74ca2ed714", "sighting_of_ref": "indicator--5ec9859e-f2e8-475a-9f45-34a72acfdb3c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15eecc7c-8448-43e6-abc8-4ba2b915dda7", "sighting_of_ref": "indicator--5ec9859e-f2e8-475a-9f45-34a72acfdb3c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3890c9d0-b7d8-4dd2-aa63-5da932e86fd3", "sighting_of_ref": "indicator--5ec9859e-f2e8-475a-9f45-34a72acfdb3c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7279aed-97ee-411f-8c88-e6024d8e951b", "sighting_of_ref": "indicator--93e01ede-d829-4b9a-a735-dad922c9bc3f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b08021-ab7c-4771-b960-f2916e1186ff", "sighting_of_ref": "indicator--93e01ede-d829-4b9a-a735-dad922c9bc3f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1baf16-582f-4c5d-929c-64fb70c1436c", "sighting_of_ref": "indicator--93e01ede-d829-4b9a-a735-dad922c9bc3f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19fc868-56b6-4665-b230-d692af79e05b", "sighting_of_ref": "indicator--33a08ce9-76bf-483a-8559-118960853639", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6daaf2cc-3825-4cba-a820-7abc1bf60c11", "sighting_of_ref": "indicator--33a08ce9-76bf-483a-8559-118960853639", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02fd5fd2-e95c-4a51-8db5-aa93774c0fa8", "sighting_of_ref": "indicator--33a08ce9-76bf-483a-8559-118960853639", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb73ba1-1e7a-4b3c-87c5-0d7eeaeb0169", "sighting_of_ref": "indicator--935557e5-8fcb-4e04-8bbe-0da207d1af0b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb09aac2-88d3-45fc-ba69-0eb54d804af6", "sighting_of_ref": "indicator--935557e5-8fcb-4e04-8bbe-0da207d1af0b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd748d8-859d-4727-88e1-b0b5ef253fb2", "sighting_of_ref": "indicator--935557e5-8fcb-4e04-8bbe-0da207d1af0b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689fcca9-4499-45eb-8512-43f6c3462532", "sighting_of_ref": "indicator--6f2738da-5b1e-4c06-b57b-c716c796293a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90970f33-c079-44aa-a8fd-60fbf25100a1", "sighting_of_ref": "indicator--6f2738da-5b1e-4c06-b57b-c716c796293a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a0ed41-6753-42c7-956e-99db276e974a", "sighting_of_ref": "indicator--6f2738da-5b1e-4c06-b57b-c716c796293a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935b2831-f60d-4fda-b6fc-a0ea163ac051", "sighting_of_ref": "indicator--95510f9d-4da7-4af6-8d99-4bc7e7fd6cbb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1e493a-5305-42a6-ad05-22357046a1e3", "sighting_of_ref": "indicator--95510f9d-4da7-4af6-8d99-4bc7e7fd6cbb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ac87b2-9db0-4c3c-9e25-0426aa5577a3", "sighting_of_ref": "indicator--aba8f5ca-c8ac-4e22-a0a6-1d64b1008307", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ab811c-a30c-4825-9cd8-a130760ef755", "sighting_of_ref": "indicator--aba8f5ca-c8ac-4e22-a0a6-1d64b1008307", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c38b52b-2d19-4e22-9eef-5632d1039dc0", "sighting_of_ref": "indicator--aba8f5ca-c8ac-4e22-a0a6-1d64b1008307", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f19424-3698-4a06-a259-a5c03ec07de3", "sighting_of_ref": "indicator--da1ef93d-9a7a-4c30-aa28-68d23addfc30", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd736ac-3688-42de-ad5f-a1bbc5957c5a", "sighting_of_ref": "indicator--da1ef93d-9a7a-4c30-aa28-68d23addfc30", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b79d6e-6454-44a3-83ae-d16737c4b55c", "sighting_of_ref": "indicator--1ce9040a-d379-44b0-a137-f9d4a0320aee", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc6f56d-fde6-48b3-94ca-c9fbda6fca72", "sighting_of_ref": "indicator--1ce9040a-d379-44b0-a137-f9d4a0320aee", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a54c2b0-171d-4ee8-a05e-e0614b9b824b", "sighting_of_ref": "indicator--1ce9040a-d379-44b0-a137-f9d4a0320aee", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42918ecc-0b57-487f-9a4a-52b0525f5711", "sighting_of_ref": "indicator--876f77c5-f6a2-49bc-8839-60027c17bf1f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b24ae4-24e3-47da-be3c-02f5f2c22596", "sighting_of_ref": "indicator--876f77c5-f6a2-49bc-8839-60027c17bf1f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114011bd-44f0-4d02-b45c-205af9c770ae", "sighting_of_ref": "indicator--876f77c5-f6a2-49bc-8839-60027c17bf1f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7404c650-772e-4c7c-8afd-d8fd2d458767", "sighting_of_ref": "indicator--967c6dc3-31c3-419a-bbc2-e13892dce501", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d33dfc-d925-4659-b19a-37f7fa2a9ec4", "sighting_of_ref": "indicator--9d78e823-cb3b-49d8-9fad-73055823bbfd", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5baf1d1-45b3-442c-892a-7c97af821a84", "sighting_of_ref": "indicator--72e5affd-5baf-4415-901a-ca0778c5a6da", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a16cca-8e3e-462a-9d96-f44e00e50139", "sighting_of_ref": "indicator--af2ab44b-2c1d-4050-a5ef-ffe29b08a39c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f62e8f-07cc-4cbf-953b-2ce0565c1b16", "sighting_of_ref": "indicator--af2ab44b-2c1d-4050-a5ef-ffe29b08a39c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e228af-78e6-406f-8ae6-34e1452ec6ab", "sighting_of_ref": "indicator--b8510364-a580-4b01-a96f-2d36d517bb83", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853e5306-8f3c-4150-95de-db179a4864af", "sighting_of_ref": "indicator--b8510364-a580-4b01-a96f-2d36d517bb83", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108f6435-22e7-43dd-b9c5-67d6ed056482", "sighting_of_ref": "indicator--b8510364-a580-4b01-a96f-2d36d517bb83", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e65106-2596-4946-b39c-43b94ceab7fb", "sighting_of_ref": "indicator--7cdadc49-6f49-48e2-a2ab-0c40fe20f4d0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba0f4b8-e13b-45dc-b56c-1542939baba0", "sighting_of_ref": "indicator--7cdadc49-6f49-48e2-a2ab-0c40fe20f4d0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa0c341-684d-4765-b0a4-68fd8605b398", "sighting_of_ref": "indicator--28f611e8-1f0d-461e-9f74-c211c1186684", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb6205e-6465-4feb-87d8-657c551879a7", "sighting_of_ref": "indicator--28f611e8-1f0d-461e-9f74-c211c1186684", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa86ae9d-72af-4956-a2e5-ee3345f919f3", "sighting_of_ref": "indicator--28f611e8-1f0d-461e-9f74-c211c1186684", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3129d6b1-ce90-486c-8715-08f69bfb8ec6", "sighting_of_ref": "indicator--775ca5a5-f4a9-438d-8915-6524ffead806", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d9fea8f-a2e7-4ac9-9524-d885a9cf9334", "sighting_of_ref": "indicator--775ca5a5-f4a9-438d-8915-6524ffead806", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38816237-53a9-4da5-b02b-a67f3bd41447", "sighting_of_ref": "indicator--89166a19-cf2b-46ca-a267-51b22e07f93b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb00dbd-4ade-47b6-9133-fee387f9a2b5", "sighting_of_ref": "indicator--89166a19-cf2b-46ca-a267-51b22e07f93b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2b44a9-ab82-40f2-b68d-0c6821706a80", "sighting_of_ref": "indicator--9743ce4a-0d17-4dcd-8aef-2ab24139f0e7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0bdb0c-5e6a-45af-9f9b-fdee323d3864", "sighting_of_ref": "indicator--9743ce4a-0d17-4dcd-8aef-2ab24139f0e7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765303b5-c799-41bd-8af0-dacaeb0ec7e2", "sighting_of_ref": "indicator--9743ce4a-0d17-4dcd-8aef-2ab24139f0e7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d1d678-6d56-441a-bd66-dc3ee710f2ff", "sighting_of_ref": "indicator--5cf55469-d348-4268-a625-d8b577a4ec0b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22342cca-49b0-445a-b94b-361aac71043a", "sighting_of_ref": "indicator--5cf55469-d348-4268-a625-d8b577a4ec0b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33dfa625-8f3a-481d-9c73-e34d25d7655e", "sighting_of_ref": "indicator--88b1504d-b66b-4a45-9bc0-d2e4058253cf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c0c754-0060-4676-981f-5b481579861f", "sighting_of_ref": "indicator--88b1504d-b66b-4a45-9bc0-d2e4058253cf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96263733-0b2b-43e1-87f5-3e8786d8e79d", "sighting_of_ref": "indicator--5f117a21-bbe2-49d1-9212-bdee08c24866", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5829d24e-a789-4f78-bef6-5c99c047217f", "sighting_of_ref": "indicator--5f117a21-bbe2-49d1-9212-bdee08c24866", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224226c5-5307-4b19-972b-f24d7b27c7a5", "sighting_of_ref": "indicator--0d27d0ca-a11f-4828-a8b7-7722f592db89", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a87b1e-39fa-41bf-b4f8-f9ed48425a1b", "sighting_of_ref": "indicator--0d27d0ca-a11f-4828-a8b7-7722f592db89", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ee0975-82c9-44b0-a91b-f33ce1b8c9b3", "sighting_of_ref": "indicator--c470537c-a04c-4b43-945a-14584b664880", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22033df-ae0f-41ab-a10c-c408ffc91835", "sighting_of_ref": "indicator--c470537c-a04c-4b43-945a-14584b664880", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234cf216-9936-4ca6-97d4-a7969132fb97", "sighting_of_ref": "indicator--c470537c-a04c-4b43-945a-14584b664880", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5426a3-ac13-4ee7-ab54-10843a8f2f52", "sighting_of_ref": "indicator--735f0561-4e8b-4bef-aa53-a2014662e797", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078cdfb6-db1a-439b-abbd-9dec6943f29b", "sighting_of_ref": "indicator--82bcc0fc-9075-4854-863d-4411e04b4c7b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45eafdf-dc36-465a-9f6f-88ec0ee0bc5a", "sighting_of_ref": "indicator--82bcc0fc-9075-4854-863d-4411e04b4c7b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296addff-c02a-44a4-83be-8efa886c8c73", "sighting_of_ref": "indicator--d3af1408-3180-4125-a417-a1db9f80a81b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9b6d0e-76dc-45fc-a4cb-9e0f98cb3bba", "sighting_of_ref": "indicator--d3af1408-3180-4125-a417-a1db9f80a81b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57cbfe0f-1ccb-4664-abaf-e9a93bce231e", "sighting_of_ref": "indicator--dbe22ba0-a2f7-436f-ba1b-1c0e2b6ad399", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4a0c89-afbf-4607-80bc-b97d1943befb", "sighting_of_ref": "indicator--dbe22ba0-a2f7-436f-ba1b-1c0e2b6ad399", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc3b0ad-917d-47d5-ac56-1f7162fdb3fc", "sighting_of_ref": "indicator--e3600838-39f4-4db6-baac-7e78fab82a4b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3204ef31-c8f6-4d16-ae03-2f26ab4bf4c5", "sighting_of_ref": "indicator--e3600838-39f4-4db6-baac-7e78fab82a4b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70cd86d8-49a6-47cc-8f8d-d3f40c14defd", "sighting_of_ref": "indicator--e3600838-39f4-4db6-baac-7e78fab82a4b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af30f19d-b5f3-49e5-82ed-da2e3c2b04a8", "sighting_of_ref": "indicator--c0408978-0270-4e4b-ad6c-6fefde752e20", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50208ef4-e9cd-4493-95fe-096adb747bfa", "sighting_of_ref": "indicator--503ec232-1ec8-45b9-9651-a7c1f8709f2c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc594288-7d3b-42e6-848e-4d067904747e", "sighting_of_ref": "indicator--503ec232-1ec8-45b9-9651-a7c1f8709f2c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273c7cc7-724b-493d-9573-f82e25562552", "sighting_of_ref": "indicator--503ec232-1ec8-45b9-9651-a7c1f8709f2c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8164509a-1336-4d09-aa5c-b08abe767da2", "sighting_of_ref": "indicator--c4c32a9b-c22f-4575-8821-433629fd9d7c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a548d3d-0cb6-4252-a4f3-b00d800cd44d", "sighting_of_ref": "indicator--c4c32a9b-c22f-4575-8821-433629fd9d7c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece0c259-e271-4e63-980d-14138334c0fc", "sighting_of_ref": "indicator--c4c32a9b-c22f-4575-8821-433629fd9d7c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf963b3d-d710-456d-a65d-e7d7754c4f75", "sighting_of_ref": "indicator--deff3093-9c0c-4da1-8672-2ac45fbf88a8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0ec94f-dbb5-48fe-b340-ae956cc87fc9", "sighting_of_ref": "indicator--deff3093-9c0c-4da1-8672-2ac45fbf88a8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e422ebb-21b8-47cf-96ef-1ffc54d13c33", "sighting_of_ref": "indicator--deff3093-9c0c-4da1-8672-2ac45fbf88a8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278cd90f-db2e-420b-b83f-b184aed23d88", "sighting_of_ref": "indicator--0f1c3efa-a246-43bd-ae14-7aa3a1956421", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7e13f2-2254-4c4b-bdef-dc54fcbc8a02", "sighting_of_ref": "indicator--0f1c3efa-a246-43bd-ae14-7aa3a1956421", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e69403-cc47-431f-8af0-7ac9b3b9a01c", "sighting_of_ref": "indicator--0f1c3efa-a246-43bd-ae14-7aa3a1956421", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cffe936-9b04-4e99-9930-9cc837a4bc27", "sighting_of_ref": "indicator--19d78820-2d23-44a1-98ed-3b4575087f67", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76dac123-1b03-4d31-a70d-671b764814f7", "sighting_of_ref": "indicator--19d78820-2d23-44a1-98ed-3b4575087f67", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c2ad3c-9788-46e9-ae45-41761550f37c", "sighting_of_ref": "indicator--19d78820-2d23-44a1-98ed-3b4575087f67", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f464fb0-6021-44ad-a8aa-5db96ed40e29", "sighting_of_ref": "indicator--a5a975e4-edec-40c9-a601-3a5611a715d7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3acc23fa-b020-4eb5-9bca-e05170114315", "sighting_of_ref": "indicator--a5a975e4-edec-40c9-a601-3a5611a715d7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6233852d-6450-43d9-9dc7-fd36867ab0f2", "sighting_of_ref": "indicator--a5a975e4-edec-40c9-a601-3a5611a715d7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b33a44-a8be-4106-bb56-736ca7c51dc3", "sighting_of_ref": "indicator--2e8d4a34-7ea2-4d3e-8951-f8bca80abe65", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462117af-07a2-4ca7-ae27-01896e479678", "sighting_of_ref": "indicator--2e8d4a34-7ea2-4d3e-8951-f8bca80abe65", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c34874f-2380-46d7-a1c3-275ebf9c4c73", "sighting_of_ref": "indicator--2e8d4a34-7ea2-4d3e-8951-f8bca80abe65", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1be3ed-3a5b-451e-ae67-fcc13d9efad3", "sighting_of_ref": "indicator--3bdc855a-16e3-40ef-95e7-62fcca59ad20", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fffdbc9-cfb2-4000-8422-1eff510179c9", "sighting_of_ref": "indicator--3bdc855a-16e3-40ef-95e7-62fcca59ad20", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379794e8-0d9a-472b-a623-bcf99a82f727", "sighting_of_ref": "indicator--3bdc855a-16e3-40ef-95e7-62fcca59ad20", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa796089-7e6c-42d9-8661-d6ace4ecb262", "sighting_of_ref": "indicator--f28ff1bf-c251-4db2-8e31-56f17ecfa509", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56072d8-0423-4753-9062-654d7a85c4bc", "sighting_of_ref": "indicator--f28ff1bf-c251-4db2-8e31-56f17ecfa509", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781a5cce-e7a6-448b-8146-f79a84e79a2a", "sighting_of_ref": "indicator--f28ff1bf-c251-4db2-8e31-56f17ecfa509", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84786a89-0976-49a9-9a44-aea01c94c575", "sighting_of_ref": "indicator--6effc9ab-7415-49cf-88d4-037b6d029e6a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab11324a-406b-41c7-9028-56f9ba968428", "sighting_of_ref": "indicator--63451e70-8d83-4896-802b-d557d54c512c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55871870-103b-4d57-9b8e-542886fd82d1", "sighting_of_ref": "indicator--63451e70-8d83-4896-802b-d557d54c512c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c89e0a-9e8e-4d94-b007-a774b5989afc", "sighting_of_ref": "indicator--63451e70-8d83-4896-802b-d557d54c512c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5f194b-1c46-4e98-9959-7a5a19241cd0", "sighting_of_ref": "indicator--461f18df-b233-4c62-9dea-c362a513b48e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c60729c-ce49-43e6-8d44-39331b21a1ff", "sighting_of_ref": "indicator--461f18df-b233-4c62-9dea-c362a513b48e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f0557d-aa09-4361-b953-17cc6df70020", "sighting_of_ref": "indicator--461f18df-b233-4c62-9dea-c362a513b48e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52257c09-71a9-46ca-a158-391442b5f385", "sighting_of_ref": "indicator--39e11993-d2ca-4ab9-9da9-06ef849d12b6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187c8d81-46b2-4b88-b5dd-3ec7650ea16f", "sighting_of_ref": "indicator--09c5a557-1e8e-4813-af85-e3fd8ab07950", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd940497-521a-4277-8338-249336c73daa", "sighting_of_ref": "indicator--09c5a557-1e8e-4813-af85-e3fd8ab07950", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36aac8e-b253-420d-9230-3aebd79baf8a", "sighting_of_ref": "indicator--28296365-46ef-45c3-98b0-a4159b62c971", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d98725c-8964-4e06-8a83-6437f3174e66", "sighting_of_ref": "indicator--b0da78af-bf2c-4732-9a3a-032fbaf161cd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc0645c-a94e-4b1d-ab4c-d6a9a598b69b", "sighting_of_ref": "indicator--b0da78af-bf2c-4732-9a3a-032fbaf161cd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c9b611-2e4c-4ffb-881e-aff8412d9f66", "sighting_of_ref": "indicator--b0da78af-bf2c-4732-9a3a-032fbaf161cd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c9aff5-e8f6-4abe-8211-a1b2d4d8d732", "sighting_of_ref": "indicator--deb4686a-2b83-43f2-be80-3605c11fa0b7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65891f6-3210-4113-8e23-af2f9b9d91d3", "sighting_of_ref": "indicator--a3d0c793-9e99-4ab2-b78d-d9c0f83ffbbb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01b4aba-caae-47d9-ba2d-24ac74243109", "sighting_of_ref": "indicator--884b7a83-054e-4ba4-bd8a-422bb1621d58", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1eae82e-7255-4849-8d90-c82ca8155d14", "sighting_of_ref": "indicator--6022075e-6bda-4e8a-863b-defe9d0e07fa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02386668-54f5-434a-a586-78a2ea97792a", "sighting_of_ref": "indicator--d9cd2797-1625-48d7-a641-74b6491cbd47", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ed31c9-8e2d-4269-a1ad-2a3d44ced6cb", "sighting_of_ref": "indicator--d9cd2797-1625-48d7-a641-74b6491cbd47", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea3ebda-628a-4922-b43c-7967e303dfcf", "sighting_of_ref": "indicator--d9cd2797-1625-48d7-a641-74b6491cbd47", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1e3b03-672b-4134-a0a7-2108063daf0c", "sighting_of_ref": "indicator--97d85617-8dfa-4801-b2bc-560818446edb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6baac05-21e6-4fa4-a376-65cbfb3c51e7", "sighting_of_ref": "indicator--ae4d0318-95b8-4270-8a02-1b8cd7106e81", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb55f948-99ef-46f6-9757-f4509ac7d3d4", "sighting_of_ref": "indicator--3759ec34-b1cc-4769-8994-95b6e8af4510", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--becf6bdd-59c8-48e7-8079-338b862a2a07", "sighting_of_ref": "indicator--db3c8910-71c6-41d3-9c28-644ba9566214", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3627f7-8954-4b67-81d5-47a1fc59fc3c", "sighting_of_ref": "indicator--7f966842-4444-43af-90ca-b07814a083cb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854c5c3d-7b9c-4a08-9eb1-151a48d12da2", "sighting_of_ref": "indicator--e2e99137-c8a6-41b2-a5db-766cdedfc193", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3090c91c-007e-4ae5-b7b6-0f12b253a82e", "sighting_of_ref": "indicator--72961ca8-bed3-479e-93bd-fb21d32bf9c1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9d4d2c-1176-4415-9f4f-ab393128d9c3", "sighting_of_ref": "indicator--e6ea06cf-0c70-4115-92bd-6a26125074e5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2870c6-15fd-4eca-9032-c06ba04bbb1d", "sighting_of_ref": "indicator--3041b0d2-28f8-4a7b-8999-49d282d4f262", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93610d02-0628-4d24-ad07-b718150b3602", "sighting_of_ref": "indicator--d4c97137-63d5-4549-8bc8-cd2b87b2bcec", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30729cba-fc90-4d1d-ac74-cd7193120eba", "sighting_of_ref": "indicator--d4c97137-63d5-4549-8bc8-cd2b87b2bcec", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960b3ea9-52bf-4a92-94bf-d6e7188f4aa7", "sighting_of_ref": "indicator--821dd42c-6c8f-470d-979e-404b5e1f9031", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44c8061-9927-480c-bab0-5aff97804f7a", "sighting_of_ref": "indicator--6b245ba6-cd67-4605-a51b-25919ee2c415", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf8cbb6c-5f6e-42f5-b216-575a9745491d", "sighting_of_ref": "indicator--7e26ae1c-7be9-4b7b-adc8-6c43f2a3db14", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5adbeba7-7f0f-420b-8828-6b67e00533ee", "sighting_of_ref": "indicator--501d1d77-342c-44ac-a71d-c00a7ff6bb08", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86654820-59ed-472c-953f-77734569f91f", "sighting_of_ref": "indicator--8669c219-0bce-4d67-a17c-b467d8b5adaa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95e11a9-1633-4d98-b456-e8385d3ff615", "sighting_of_ref": "indicator--8669c219-0bce-4d67-a17c-b467d8b5adaa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e76146-c4b5-4081-978b-44a3f03bb2a4", "sighting_of_ref": "indicator--8669c219-0bce-4d67-a17c-b467d8b5adaa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b33ba94-d8fe-43df-84b8-e9b7314438eb", "sighting_of_ref": "indicator--58a670fb-2516-4d42-8b0f-13e576a9745b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d778acdd-ad1d-47a8-98db-a2f63b3137ea", "sighting_of_ref": "indicator--822540fe-631f-4f1f-95b5-d152c6fca1ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f32bd65-4200-48e9-a6ae-e29f7503a4b2", "sighting_of_ref": "indicator--e9f34a03-4dfc-4a2f-ba66-20b980963a17", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06942a88-2ffc-44a2-9f7c-c96c3eb21d7e", "sighting_of_ref": "indicator--3ca7ac8c-4db9-411a-9255-9635576c7461", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd2920d-6cfc-4af1-b78b-7e82c6b062a5", "sighting_of_ref": "indicator--20056e74-a519-4b5a-a30d-0320720079e1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c4b9af-3408-40c8-ace2-218dde973460", "sighting_of_ref": "indicator--20056e74-a519-4b5a-a30d-0320720079e1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c22a4af-0a82-4aac-a52c-8b4cd2d14ce4", "sighting_of_ref": "indicator--600987c9-00c1-47da-869f-1e5bf02f3ae8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df47116-c595-4261-be6b-05c53b5afc0a", "sighting_of_ref": "indicator--b3e3116c-a8ae-4110-b565-f19c9bcece11", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e5c6b3-f344-45b4-a95a-f422dc1dd449", "sighting_of_ref": "indicator--1dd30cfd-3b81-481e-aa70-eebbe77048a0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066eb0f8-45ff-4a26-a231-e174915ac28a", "sighting_of_ref": "indicator--16b0b2f8-62a3-4416-b160-07585ec08a34", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25dbc98d-3397-434a-94f3-99bba05dd44e", "sighting_of_ref": "indicator--cabaeb31-b56a-4ff0-8197-1a8c50795859", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1eba6fd-d211-4e6a-831e-06e5e2b0f4a1", "sighting_of_ref": "indicator--cabaeb31-b56a-4ff0-8197-1a8c50795859", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233d0470-324f-47ab-8065-89af9c627567", "sighting_of_ref": "indicator--8b41413e-6725-49ce-b896-f48bf7ee206a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae18f5a5-07f6-4d6a-a711-74825856a0a2", "sighting_of_ref": "indicator--72d90c23-7f6a-41a4-b889-c2677735ec6a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--251c7871-171b-47df-892b-21759761524c", "sighting_of_ref": "indicator--72d90c23-7f6a-41a4-b889-c2677735ec6a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f0cb7d-df10-40c7-8f6e-a20e27fc0d0e", "sighting_of_ref": "indicator--c7756851-2a81-476c-a3bf-b89ead77e503", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a04d187-be5e-40c6-bf4c-090cbcc33d54", "sighting_of_ref": "indicator--c7756851-2a81-476c-a3bf-b89ead77e503", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f4aadf-db06-416f-893e-d3e1c8a99368", "sighting_of_ref": "indicator--ece29587-4f2d-4db8-bca4-eb8668155216", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ada444-acab-46b5-b1bf-de255fdf7109", "sighting_of_ref": "indicator--ece29587-4f2d-4db8-bca4-eb8668155216", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb487ba7-4a14-4b22-baa8-ea327347f17b", "sighting_of_ref": "indicator--3455e17f-4ff2-4e43-8c18-593ffa543bb7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619c748a-24fe-4f42-9502-863a039936ef", "sighting_of_ref": "indicator--37f82c27-95a0-4bfc-bf9f-5dc164038008", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc08aa1d-4cd0-42c3-bc18-f911990bb3ae", "sighting_of_ref": "indicator--37f82c27-95a0-4bfc-bf9f-5dc164038008", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37624cb-80c4-4247-87c6-b02821c1c222", "sighting_of_ref": "indicator--665b8c3d-82bc-46b7-8a51-d7861f78451a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1d1b21-4fe3-4c7b-b174-86ba72a86aa2", "sighting_of_ref": "indicator--665b8c3d-82bc-46b7-8a51-d7861f78451a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72313089-6bc4-462d-9df6-9547f375da09", "sighting_of_ref": "indicator--73a357dd-0770-4e68-9c57-9a7d244e7b9d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0b019c-d513-4b2c-9b76-13b6e7c64d24", "sighting_of_ref": "indicator--73a357dd-0770-4e68-9c57-9a7d244e7b9d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e63bc4-2d4b-45a9-970b-b0e6ef230a80", "sighting_of_ref": "indicator--0bd52c1a-23be-4ae4-9894-b7e1513f7830", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c8f362-10fa-4a0e-8173-3708d1d079c3", "sighting_of_ref": "indicator--586ae199-143b-455f-bfc6-27ccfead974a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f641f7b1-f8b3-49dd-9580-e989865846bd", "sighting_of_ref": "indicator--3fdb931a-8e9d-4067-a97b-ba6c63abe8c2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab4ca4d-0b70-41d2-bd41-cb1e008f3fe1", "sighting_of_ref": "indicator--03df4052-1321-4e28-9a5f-787586d39134", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaef70b0-5929-422e-b1d8-a1251cdbd74b", "sighting_of_ref": "indicator--0c76b0c8-05b6-4689-9a1c-925648f88e3b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a1c404-f142-43ca-9755-b8900d4d1e8c", "sighting_of_ref": "indicator--0c76b0c8-05b6-4689-9a1c-925648f88e3b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e1a5ac-ca8b-41e6-a8ee-5743749043af", "sighting_of_ref": "indicator--745a5da9-7ff7-4a66-90ac-823f9ea06314", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179413da-8406-4515-897c-20f3d427ac14", "sighting_of_ref": "indicator--745a5da9-7ff7-4a66-90ac-823f9ea06314", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed9e912-f2cb-4e19-abac-da918131d87c", "sighting_of_ref": "indicator--745a5da9-7ff7-4a66-90ac-823f9ea06314", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb50703-30ba-4b8d-a5a1-194ad6f5c02f", "sighting_of_ref": "indicator--e008f2e3-b2df-481f-94ed-1d95cd4520ac", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb75f64-b1be-4fa5-8a41-2fd6a835876b", "sighting_of_ref": "indicator--afa6cfc0-e09c-4ee9-87e2-c9a37b2c4766", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a785c0-b1b3-4827-9371-3fdafb26fda7", "sighting_of_ref": "indicator--e4538f15-3f74-4f83-b371-5f61b1757480", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7377d754-c29a-41f1-8d34-2cbda3be9f28", "sighting_of_ref": "indicator--9be3d019-0c6e-4feb-ba22-0c893508324c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88e96fe-d034-402b-8794-56c8e8c79c6c", "sighting_of_ref": "indicator--9c602be0-7454-4eb3-a221-baf469004934", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad6e2b0-4d5a-49f1-b1ec-89ddf1eb5dbf", "sighting_of_ref": "indicator--b167da5c-64a7-4f10-814d-09a9cffcc96b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56098195-3b36-4912-b39f-eaca2b7fc7e9", "sighting_of_ref": "indicator--68bf909c-bc88-47a2-b2ca-595a721fb880", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851b3c38-77ea-4eb3-ab72-3abd9dc3a70c", "sighting_of_ref": "indicator--e0a62230-054c-4383-a6ef-c9d96212bec7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9367652-2af9-4113-bed6-248965fa199e", "sighting_of_ref": "indicator--e0a62230-054c-4383-a6ef-c9d96212bec7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30cec8f5-359b-43df-ba89-63aaaf573765", "sighting_of_ref": "indicator--e6806376-cea6-4465-b42c-a8d20053ae01", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2ccc56-3062-48b0-b6c0-c9626c258630", "sighting_of_ref": "indicator--e6806376-cea6-4465-b42c-a8d20053ae01", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10bfa63f-ac3f-418f-b3f5-ac7ccc63e878", "sighting_of_ref": "indicator--470da12e-5f61-4b19-bfe8-dfa9433048dc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151ce20a-097f-4461-ba1a-b97a59744aff", "sighting_of_ref": "indicator--470da12e-5f61-4b19-bfe8-dfa9433048dc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41eb1a52-c3a6-4a32-a9d7-1385b16e3494", "sighting_of_ref": "indicator--592f70a9-2672-460e-8c0e-9c312c825bdf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d8371a-e7cc-47d8-a492-37668c648cc3", "sighting_of_ref": "indicator--d2865b94-7128-4c0b-878a-5e519d272e83", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61c699e-3851-49f5-9f27-edad0ed57176", "sighting_of_ref": "indicator--5533fdbd-e62f-4776-ab41-efbc72cbee9c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5519ba73-88b2-41f2-bc4c-d6b73411b0a0", "sighting_of_ref": "indicator--f182c765-dc4b-44c3-8c57-1a6241462e7d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bd4c15-e6d9-493c-8ec7-42a45aa7242c", "sighting_of_ref": "indicator--d092cf40-d3eb-46ce-ac4a-56e9dd131694", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc6bddf-d545-428d-a618-a35ad62650d6", "sighting_of_ref": "indicator--50d2f763-edb8-4d4f-b332-4cd5ed965926", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155b5c2d-4a63-4022-8c55-270d78d21270", "sighting_of_ref": "indicator--d5090c3c-ebd7-47ef-b058-964ff4cbe92c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa66974-dc45-461f-a55f-e80339f86c3f", "sighting_of_ref": "indicator--d5090c3c-ebd7-47ef-b058-964ff4cbe92c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64aa913-7443-4a5a-a34f-7da84709fe8f", "sighting_of_ref": "indicator--f3187414-861b-41a4-862b-9416cd215169", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401aceb0-c7d0-4b75-9a40-21adf280aae4", "sighting_of_ref": "indicator--f3187414-861b-41a4-862b-9416cd215169", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d582f7e0-1389-4080-8008-229c1f0fff65", "sighting_of_ref": "indicator--2a876c3f-9d68-435a-847c-1f923e2fd414", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e297d93a-1204-40e0-89ce-823644ceb978", "sighting_of_ref": "indicator--2a876c3f-9d68-435a-847c-1f923e2fd414", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7ad1f4-3f10-44ad-9606-30ce8494a3f3", "sighting_of_ref": "indicator--790f48d2-af74-4697-b5f9-2ce441d0f5f6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07af8b90-e776-4e8a-aaa6-59ddf446b905", "sighting_of_ref": "indicator--790f48d2-af74-4697-b5f9-2ce441d0f5f6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a82c56-0cef-4869-8fbe-0e244e7edddf", "sighting_of_ref": "indicator--7416b44d-4b71-48de-8f3f-605f701dea5c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a35910-313c-478d-a593-89e2f683813e", "sighting_of_ref": "indicator--236d4605-5bf0-4fa5-9d4c-d321974f2edd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f4755d-66cf-4880-b001-2c6c1926def4", "sighting_of_ref": "indicator--3dc4a9ac-580d-4516-bb47-4f37b8375e10", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f2ee19-eb38-4cbe-8ac5-2f540ad2188f", "sighting_of_ref": "indicator--3dc4a9ac-580d-4516-bb47-4f37b8375e10", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1617cf-1093-4207-9102-5de6bb07a85d", "sighting_of_ref": "indicator--3dc4a9ac-580d-4516-bb47-4f37b8375e10", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f9b4d1-e05a-4bb9-9fa6-2ebcde3b5bb8", "sighting_of_ref": "indicator--0d26f4f3-2a03-4e36-98d1-fcf6b0237cbe", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07928a5f-a069-4e77-9842-e3d5eab0e862", "sighting_of_ref": "indicator--aedd5fb0-808d-4335-8339-88ad0c9d0923", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b1d4cd-2ce0-4a80-8c94-5d805ebd742b", "sighting_of_ref": "indicator--8a62f212-7e2d-4542-9d8e-616cef88846a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b53c75-015f-42f7-854c-bb7468c4e2ac", "sighting_of_ref": "indicator--8a62f212-7e2d-4542-9d8e-616cef88846a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1319335e-6fb8-416d-9003-a9c278eb59f1", "sighting_of_ref": "indicator--8a62f212-7e2d-4542-9d8e-616cef88846a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0787dbfe-9c4b-4324-b5d3-99d90ffa3518", "sighting_of_ref": "indicator--6562453a-5d4b-4299-9a4b-1288e1a11cae", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f861e92b-dc8d-405a-bd99-621c0e3dbb3c", "sighting_of_ref": "indicator--6562453a-5d4b-4299-9a4b-1288e1a11cae", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8788b31-45a0-4c25-b4aa-35c43309d22e", "sighting_of_ref": "indicator--6562453a-5d4b-4299-9a4b-1288e1a11cae", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87512e85-afbc-438f-a0c9-9c1e0fc446d0", "sighting_of_ref": "indicator--1e4d2357-e2d3-4bfa-94fd-0e26887c247b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2a9fb3-95de-4822-9ae5-5794c572a67e", "sighting_of_ref": "indicator--6aa6a10a-331a-491a-9a0c-bb9d759237f9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eef8fd8-581e-4847-82ed-81a4af16c481", "sighting_of_ref": "indicator--6aa6a10a-331a-491a-9a0c-bb9d759237f9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32419af-26b5-46f0-a7d9-1008b4fa5711", "sighting_of_ref": "indicator--6aa6a10a-331a-491a-9a0c-bb9d759237f9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7cd14b-52f5-4031-b154-a1b173ea29cd", "sighting_of_ref": "indicator--555270d3-343b-4d48-9dbc-fd159cadd323", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559056e9-6682-4dd0-b8b1-ce61fa3e7e77", "sighting_of_ref": "indicator--555270d3-343b-4d48-9dbc-fd159cadd323", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d2f3f6a-2224-44fe-a8be-0a426a26ca79", "sighting_of_ref": "indicator--555270d3-343b-4d48-9dbc-fd159cadd323", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1add7be-d0c4-4062-a831-b862382febee", "sighting_of_ref": "indicator--7a1e4de2-14de-4fdf-80d1-35891ee5b84d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb7cba9-3da0-4742-9ce5-e71c0b112940", "sighting_of_ref": "indicator--7a1e4de2-14de-4fdf-80d1-35891ee5b84d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23de5b2-7733-42e8-8492-5ca454046858", "sighting_of_ref": "indicator--7a1e4de2-14de-4fdf-80d1-35891ee5b84d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2707ebac-9ff2-449d-ac36-efde5cf9b773", "sighting_of_ref": "indicator--66886949-0cd2-40c9-8f61-e8f6dd088170", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f274345-0cf5-44a1-b8e9-54c518dc710c", "sighting_of_ref": "indicator--1790d7a5-f048-4681-a5c1-de2345bbc010", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f067b88d-f65b-413e-96e6-20a23e0fbab7", "sighting_of_ref": "indicator--1790d7a5-f048-4681-a5c1-de2345bbc010", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe3a752-f867-4f50-9de4-f8d4952c7f1c", "sighting_of_ref": "indicator--1790d7a5-f048-4681-a5c1-de2345bbc010", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97b7b05-7808-4699-b6e7-2812909dcbe1", "sighting_of_ref": "indicator--e7e05998-e4ab-463b-a800-260eeccdf8b3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba3869d-ebcd-40f7-a902-75ad30e2d28b", "sighting_of_ref": "indicator--e7e05998-e4ab-463b-a800-260eeccdf8b3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--425ecc33-5b6e-4edc-b33c-af121f10b27f", "sighting_of_ref": "indicator--e7e05998-e4ab-463b-a800-260eeccdf8b3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44569698-8dcb-478c-a3e3-14d6f87a0fd4", "sighting_of_ref": "indicator--caf0783f-9934-4099-a449-0edaa554626c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef47290-bd26-4671-ab1b-b8dd94bc97bb", "sighting_of_ref": "indicator--caf0783f-9934-4099-a449-0edaa554626c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8332c502-1ca9-4120-9b0f-dae38c6e4186", "sighting_of_ref": "indicator--caf0783f-9934-4099-a449-0edaa554626c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da3a530-0cff-463e-9c0c-cb07a1c7cee2", "sighting_of_ref": "indicator--5c2d1685-a117-4a78-b862-be773b4a4854", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e658c8-5c8e-458b-879d-1732f56553a3", "sighting_of_ref": "indicator--5c2d1685-a117-4a78-b862-be773b4a4854", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b0ef8c-a853-46ff-bf5e-6fc213f89d3d", "sighting_of_ref": "indicator--bf701479-5561-4570-9163-8ae20f1b14a9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d70c7f-26f3-4253-8d09-a6a0bc9bd263", "sighting_of_ref": "indicator--f4f432ed-598a-4948-8fbe-c11d9576b431", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5201562c-8c09-4cf4-906c-b10571447082", "sighting_of_ref": "indicator--8ac563d8-3bf3-4597-9afa-1b78d2ba8762", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08715b1-1bcc-4d07-ae78-35d2b92754f1", "sighting_of_ref": "indicator--8ac563d8-3bf3-4597-9afa-1b78d2ba8762", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5bb4f3a-8d5c-4921-880d-c0c8b1967e32", "sighting_of_ref": "indicator--8ac563d8-3bf3-4597-9afa-1b78d2ba8762", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c2344d-205e-4124-a2c5-f6f48a58c893", "sighting_of_ref": "indicator--f4840f81-c9a0-4cd5-95e7-a28af23451a6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1324e6b-5f47-438a-8b92-0822de0bad30", "sighting_of_ref": "indicator--f4840f81-c9a0-4cd5-95e7-a28af23451a6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7dfb16-f97f-450a-b0c4-3e7e04dae062", "sighting_of_ref": "indicator--f4840f81-c9a0-4cd5-95e7-a28af23451a6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90fe4859-2b18-4cef-9211-39b36176b82e", "sighting_of_ref": "indicator--0dfd1619-e27b-44b3-b19b-7c6368440b49", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5557e1-e4e3-426f-b0cb-dd8f26a82cf1", "sighting_of_ref": "indicator--0dfd1619-e27b-44b3-b19b-7c6368440b49", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd5fb9c-ca5e-492f-8bec-7e04e1a49180", "sighting_of_ref": "indicator--0dfd1619-e27b-44b3-b19b-7c6368440b49", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcddfb0c-1644-4a6b-a416-963135dfe008", "sighting_of_ref": "indicator--84628b8a-ac94-40ec-a3b1-b876c47c8a8b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f39d93-105c-4338-8111-659916025bb8", "sighting_of_ref": "indicator--84628b8a-ac94-40ec-a3b1-b876c47c8a8b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a6ea84-8975-4ff3-8861-6d000d479225", "sighting_of_ref": "indicator--84628b8a-ac94-40ec-a3b1-b876c47c8a8b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e552bc80-8454-4a66-bb5c-009eca5621bd", "sighting_of_ref": "indicator--ac0d7fd7-fc64-4251-a418-559de04344d8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0dbf4b3-66bf-4537-9ddd-e3df790950a0", "sighting_of_ref": "indicator--ac0d7fd7-fc64-4251-a418-559de04344d8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbf128a-1dd2-4d03-81a6-bb72cd869095", "sighting_of_ref": "indicator--ac0d7fd7-fc64-4251-a418-559de04344d8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46b725e-4461-41c0-a797-bbab60d09abb", "sighting_of_ref": "indicator--4f6d2f51-f8f9-4c8d-a443-2809bb89ef3f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09805da4-b937-4473-9c97-670dd6ce1acc", "sighting_of_ref": "indicator--4f6d2f51-f8f9-4c8d-a443-2809bb89ef3f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d42542-96b0-4d11-8042-0a784361d7ab", "sighting_of_ref": "indicator--4f6d2f51-f8f9-4c8d-a443-2809bb89ef3f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3884b70-95a6-45ae-9a9d-71123c0c9616", "sighting_of_ref": "indicator--25f8c598-4a90-4ee3-86f3-34f9a5ed217f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0748f82-7203-4400-997e-4ffe4122c697", "sighting_of_ref": "indicator--25f8c598-4a90-4ee3-86f3-34f9a5ed217f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46312e0-5dc4-4a54-869a-6202a22e4408", "sighting_of_ref": "indicator--25f8c598-4a90-4ee3-86f3-34f9a5ed217f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142f282e-79b3-4a43-9533-60fe57a00aaf", "sighting_of_ref": "indicator--177e4db6-992d-471d-a065-8956f483cc4c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7722290a-9183-4bbe-b082-b05608551494", "sighting_of_ref": "indicator--177e4db6-992d-471d-a065-8956f483cc4c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5fe8765-2525-4ef2-96a4-c86ae63050e5", "sighting_of_ref": "indicator--177e4db6-992d-471d-a065-8956f483cc4c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95cdd04-6c3f-4570-a93a-ac4cfc6de6a8", "sighting_of_ref": "indicator--14d50fb1-ffd1-4d61-a946-ce9f9ae2e50b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad0db17-425e-4e86-b290-5abc9ea140af", "sighting_of_ref": "indicator--14d50fb1-ffd1-4d61-a946-ce9f9ae2e50b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71d7456-6a4d-4226-9021-5e3d0b9e2121", "sighting_of_ref": "indicator--14d50fb1-ffd1-4d61-a946-ce9f9ae2e50b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992306e1-f47f-4cbe-a0fe-892ecd37c422", "sighting_of_ref": "indicator--18de9cd8-a407-4091-9481-ec3a98d36d87", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa083c4-eccf-4395-91c2-cd20b19acabd", "sighting_of_ref": "indicator--18de9cd8-a407-4091-9481-ec3a98d36d87", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ddfabc-9e6b-49b9-8b64-6c520dba19de", "sighting_of_ref": "indicator--18de9cd8-a407-4091-9481-ec3a98d36d87", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b976ed-2e79-46be-851c-f3dc433527c7", "sighting_of_ref": "indicator--af0ee80e-00b3-45c0-b3a6-60b7d5ff30e5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b95aa5c-7fdb-4ccc-81e0-7ef1cd2095df", "sighting_of_ref": "indicator--af0ee80e-00b3-45c0-b3a6-60b7d5ff30e5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0bfd1cf-2408-415b-b43f-07157d5263e6", "sighting_of_ref": "indicator--af0ee80e-00b3-45c0-b3a6-60b7d5ff30e5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57af01da-4c73-4a06-9e57-d2399bb09d23", "sighting_of_ref": "indicator--e4054333-e580-4788-a5c9-ddee2c8483d8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d03842b-806d-4b2a-b54f-01841640c713", "sighting_of_ref": "indicator--de6751b0-cd50-4b96-947a-f75f7c70d9d2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07214bf-1b29-47b3-bb60-1905a6c12bf4", "sighting_of_ref": "indicator--3b8c9bc8-5f90-463d-9541-8c3581690022", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb563b0f-c0b6-46dd-9fb1-248a60687868", "sighting_of_ref": "indicator--ba8b4e15-917a-413e-a279-933b80a08aac", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f77422-2214-4276-a862-06c91f80e10a", "sighting_of_ref": "indicator--ba8b4e15-917a-413e-a279-933b80a08aac", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f76881d-1148-455a-9989-a69947818b66", "sighting_of_ref": "indicator--5d22434f-64b9-40d5-87fd-fa196fdba0df", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c850fee-781d-4e88-b4ab-85eb6f41a240", "sighting_of_ref": "indicator--55c39e05-ee3a-445b-9b02-e8786937301f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79411c2c-af3e-4268-a9c0-5f7b2f34db8f", "sighting_of_ref": "indicator--8b81d40f-c41b-4972-974e-18af8f3db54c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee77a67-7f3b-40c5-80c8-0483518a1af3", "sighting_of_ref": "indicator--8aa7fae0-8786-4bd5-aef4-908e9a9d1fb1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2de36a-3c39-4f36-a40b-2cb1aaef591e", "sighting_of_ref": "indicator--59b1c0f7-00e7-44aa-9db3-6be9a1dc7de1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3b6da5-695c-416f-8693-67e2ba346e6a", "sighting_of_ref": "indicator--59b1c0f7-00e7-44aa-9db3-6be9a1dc7de1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f7775f-46bd-4be3-bdd1-726f246fef81", "sighting_of_ref": "indicator--6ad02f6e-a348-4119-8999-46eefeb1ff3d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9803f486-187d-411f-a56c-51fad6c3f220", "sighting_of_ref": "indicator--6ad02f6e-a348-4119-8999-46eefeb1ff3d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd015f71-31a3-4419-8421-8bcae7c48f26", "sighting_of_ref": "indicator--6ad02f6e-a348-4119-8999-46eefeb1ff3d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd372e76-1915-402f-907c-e3b353542854", "sighting_of_ref": "indicator--d717958a-ba57-4368-bf62-39245bb9b6dc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f5c904-9d0f-4f05-a6a8-2ce3e893d6b0", "sighting_of_ref": "indicator--d717958a-ba57-4368-bf62-39245bb9b6dc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e52b38a-c260-4346-b65b-6f67d19929c5", "sighting_of_ref": "indicator--d717958a-ba57-4368-bf62-39245bb9b6dc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f638c1e1-8f7e-4b8f-bfe1-5a232f67a690", "sighting_of_ref": "indicator--dc526200-00bc-4adb-8eed-d2d43e0e612f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e8a241-915b-4130-b07f-2c118aac9784", "sighting_of_ref": "indicator--dc526200-00bc-4adb-8eed-d2d43e0e612f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e458acc-b541-4424-90eb-127d679c303a", "sighting_of_ref": "indicator--dc526200-00bc-4adb-8eed-d2d43e0e612f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6523f4af-53bd-4488-b9a2-bce14b3095ad", "sighting_of_ref": "indicator--365b792e-da19-4328-b832-33041894e88f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d841371-9289-484a-a069-9e2011456a68", "sighting_of_ref": "indicator--365b792e-da19-4328-b832-33041894e88f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9d4e61-85fb-4e3a-ac5d-a69e15e96adc", "sighting_of_ref": "indicator--365b792e-da19-4328-b832-33041894e88f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbaa06bd-0f5a-4cd5-8e65-9d590e31e9c0", "sighting_of_ref": "indicator--3e07d149-3d67-4965-a8d1-5f769b91902f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f01ef50-f68b-474a-bdbc-c78284fed5c6", "sighting_of_ref": "indicator--3e07d149-3d67-4965-a8d1-5f769b91902f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d37aff-e684-4c8c-b069-7eefa0264b43", "sighting_of_ref": "indicator--3e07d149-3d67-4965-a8d1-5f769b91902f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97738b2d-ce94-4e55-9c67-20bb8b2e36dd", "sighting_of_ref": "indicator--e9e8d78b-d64e-4ccd-bc96-8a780f099c6e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8bdbea-f669-49d4-9565-85c1cf7cda75", "sighting_of_ref": "indicator--985fc047-2258-4c23-9111-794feceee8f6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ef244a-b3c4-4afc-b0cf-46a4c79ff747", "sighting_of_ref": "indicator--66b2b533-227c-40a0-9676-1f3422906beb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d666b2f6-2642-4f0d-aa4c-6c56cc964d95", "sighting_of_ref": "indicator--da73c0e6-00c3-449a-9745-7d94bdc22067", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1ec2ae-9394-4ee1-850a-78a2b94d5b37", "sighting_of_ref": "indicator--da73c0e6-00c3-449a-9745-7d94bdc22067", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0e7d9d-c7f3-4a3c-9f2d-925e1607d951", "sighting_of_ref": "indicator--da73c0e6-00c3-449a-9745-7d94bdc22067", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543b8847-89aa-4009-8a5c-f16f390f3eea", "sighting_of_ref": "indicator--441bb0f3-b609-4430-b667-84e56c7a2f37", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc74392-3dec-4592-8e86-27c09510e4ed", "sighting_of_ref": "indicator--441bb0f3-b609-4430-b667-84e56c7a2f37", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005d3f2a-8d8e-49d0-810f-f57e622bc9a8", "sighting_of_ref": "indicator--441bb0f3-b609-4430-b667-84e56c7a2f37", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d8a1b8-5c8e-46e5-942f-3b703b63ef56", "sighting_of_ref": "indicator--158aa2b8-3254-43f6-8092-55887fd89ae0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55761e2c-031e-49e5-90c9-a3c80c8fa77b", "sighting_of_ref": "indicator--158aa2b8-3254-43f6-8092-55887fd89ae0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad61a9c-797f-4b2b-97ea-8fdde6ee27ba", "sighting_of_ref": "indicator--158aa2b8-3254-43f6-8092-55887fd89ae0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acdd8651-e556-4c50-b681-5324885186a5", "sighting_of_ref": "indicator--6dc2b619-68eb-477d-9fc8-df1957690767", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777ea744-44de-4d7e-b4e2-5e9d0a5692ec", "sighting_of_ref": "indicator--adbf58b4-aea2-4b00-9db7-c09a8d021003", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10074373-dc78-463e-9f65-ea7ec9a7ffd1", "sighting_of_ref": "indicator--adbf58b4-aea2-4b00-9db7-c09a8d021003", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b679bf34-a8ae-4d53-b44d-d155d2926574", "sighting_of_ref": "indicator--adbf58b4-aea2-4b00-9db7-c09a8d021003", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b68ecfc-5835-4944-af95-d25779687c72", "sighting_of_ref": "indicator--5b7195f3-59e9-4433-84b3-ad07d8534039", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee43d31-0665-479e-9b79-e6f4b10a10f2", "sighting_of_ref": "indicator--5b7195f3-59e9-4433-84b3-ad07d8534039", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe99ec2-48e3-41ba-938a-7056f46a0f43", "sighting_of_ref": "indicator--5b7195f3-59e9-4433-84b3-ad07d8534039", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce370053-2aeb-4d92-96a6-2258c2eb5a60", "sighting_of_ref": "indicator--c6070188-ede9-4d97-98a5-d8fee9af198b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269066eb-33d4-40db-9a1e-8cf0cda2b0d6", "sighting_of_ref": "indicator--c6070188-ede9-4d97-98a5-d8fee9af198b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9ef45a-7b9a-49b0-877e-c9c10ee4daa6", "sighting_of_ref": "indicator--c6070188-ede9-4d97-98a5-d8fee9af198b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc47cc2e-651d-4bb9-8a63-7822db2466aa", "sighting_of_ref": "indicator--e301c7dc-2f6b-4005-9376-1e5003b26a42", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab144c7-5716-41f0-aa89-2a71dc19515f", "sighting_of_ref": "indicator--e301c7dc-2f6b-4005-9376-1e5003b26a42", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb4badd-1770-421c-a74a-e87dc00e6aa9", "sighting_of_ref": "indicator--e301c7dc-2f6b-4005-9376-1e5003b26a42", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf1f953-fad4-46e8-a9b9-33184e272724", "sighting_of_ref": "indicator--3e28787f-4ea8-46ef-a528-997aef0c2b7e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066fb0db-d9b2-480f-9b1d-8e9456068cf8", "sighting_of_ref": "indicator--3e28787f-4ea8-46ef-a528-997aef0c2b7e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de9f38a-998f-4296-88ab-3f09ad3c97d4", "sighting_of_ref": "indicator--3e28787f-4ea8-46ef-a528-997aef0c2b7e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6da60e4-eb43-4cc8-b6cc-e24131b9d519", "sighting_of_ref": "indicator--8d15ca47-20ee-4aee-8236-6a605709e16c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c07d99-e486-40ec-afdd-c1e3c5deeb7b", "sighting_of_ref": "indicator--8d15ca47-20ee-4aee-8236-6a605709e16c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba81b9cc-af8a-413e-99e3-99882e50d68a", "sighting_of_ref": "indicator--8d15ca47-20ee-4aee-8236-6a605709e16c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46da91e7-e049-4a68-93eb-5ea17ad3a9e1", "sighting_of_ref": "indicator--290034bc-ef60-4039-b62f-7ffabcf70bbf", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523a344e-1a18-45fb-bf80-015b35870dec", "sighting_of_ref": "indicator--290034bc-ef60-4039-b62f-7ffabcf70bbf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a756574-52c0-42d7-8f74-1ef703d6ed19", "sighting_of_ref": "indicator--290034bc-ef60-4039-b62f-7ffabcf70bbf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4084ff-c4f2-4d33-972d-6335174622e5", "sighting_of_ref": "indicator--6cd03c87-0cb1-4239-b36d-efa43bb5014c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f6521a-e72b-4674-9cd6-bffe71dac272", "sighting_of_ref": "indicator--6cd03c87-0cb1-4239-b36d-efa43bb5014c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6240f3-06ea-45bc-9ab7-ea189b37c11a", "sighting_of_ref": "indicator--6cd03c87-0cb1-4239-b36d-efa43bb5014c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f67f08-936d-45e2-9b3e-979d4aa85454", "sighting_of_ref": "indicator--da4e3a76-2ebc-4565-ba5b-255bb5fb3fa9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c38a569-2efd-4127-87a3-a4eec8ed93e4", "sighting_of_ref": "indicator--da4e3a76-2ebc-4565-ba5b-255bb5fb3fa9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e30464-1a50-456e-951a-ddc0384fe0eb", "sighting_of_ref": "indicator--da4e3a76-2ebc-4565-ba5b-255bb5fb3fa9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74e4b3a-03fb-4de5-89fc-d8dcd944ea37", "sighting_of_ref": "indicator--25c0c9fa-dd90-4e75-bbc6-259688f98c53", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53dc8dc0-03a6-4919-9cdb-2ec46043e0d9", "sighting_of_ref": "indicator--25c0c9fa-dd90-4e75-bbc6-259688f98c53", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee78162-084c-418d-ba7f-9dbd06ffee9b", "sighting_of_ref": "indicator--25c0c9fa-dd90-4e75-bbc6-259688f98c53", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a2e020-a59f-44a1-94a1-522ce1fc4ef7", "sighting_of_ref": "indicator--83487d9f-ead8-4c5c-8782-baad27a46750", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38292d22-0bcc-4acd-9170-524dd86a86d0", "sighting_of_ref": "indicator--83487d9f-ead8-4c5c-8782-baad27a46750", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32945c36-50ec-4668-9d9b-fe9ea5a1dc95", "sighting_of_ref": "indicator--83487d9f-ead8-4c5c-8782-baad27a46750", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5c5f83-5de9-4155-9e03-da893ca9634a", "sighting_of_ref": "indicator--4d53550b-1d80-486d-84cd-77a663cd9769", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04656e6-32c1-4187-bf81-b251ced208c6", "sighting_of_ref": "indicator--4d53550b-1d80-486d-84cd-77a663cd9769", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dab8840-3e43-462e-8d4f-a50136d94b2f", "sighting_of_ref": "indicator--4d53550b-1d80-486d-84cd-77a663cd9769", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5bef9ee-d0e7-4004-b3be-b849db08c4a7", "sighting_of_ref": "indicator--dadd5535-e63c-40fe-bbd6-645fe155bc8b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44939334-f294-4c85-bc43-ab84970fcda3", "sighting_of_ref": "indicator--dadd5535-e63c-40fe-bbd6-645fe155bc8b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda58613-5616-4519-a72c-57fdee87013d", "sighting_of_ref": "indicator--dadd5535-e63c-40fe-bbd6-645fe155bc8b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65b5782-75a1-4927-b0c6-ef53987662a3", "sighting_of_ref": "indicator--70b51aec-e155-46b7-ae79-1bee2539f2fb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba26512d-66b6-4e1f-ae39-048f21a6f84f", "sighting_of_ref": "indicator--70b51aec-e155-46b7-ae79-1bee2539f2fb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68324354-7264-498e-9ec4-a4154981df39", "sighting_of_ref": "indicator--70b51aec-e155-46b7-ae79-1bee2539f2fb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec00706-90da-4dd3-8b4e-e276f847f1ba", "sighting_of_ref": "indicator--ce0f1f00-3244-42b1-a7ce-b3a9ebfd756d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe7e8b5-7ed7-4fbe-80d9-936c269f7f1e", "sighting_of_ref": "indicator--529cc297-8601-4d93-b7c2-8acc3694cd94", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f8eac4-2166-4445-9d70-cc07e1be0c3c", "sighting_of_ref": "indicator--529cc297-8601-4d93-b7c2-8acc3694cd94", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14584096-43b1-47f7-911b-852f9ab9f2d8", "sighting_of_ref": "indicator--64b27b1a-67b3-43e2-be85-04dbf66b1073", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0977e6a-89d4-443b-bd1d-64a9c607c239", "sighting_of_ref": "indicator--64b27b1a-67b3-43e2-be85-04dbf66b1073", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ad7c64-7b2a-4693-8270-e6ae79722feb", "sighting_of_ref": "indicator--d660d1ec-42b8-4e99-993f-018b43bc3203", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42355b35-16c7-4952-abce-2f5ceab3c5d6", "sighting_of_ref": "indicator--d660d1ec-42b8-4e99-993f-018b43bc3203", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c041134b-9ebd-4cc8-8b0e-b6c3af9cc773", "sighting_of_ref": "indicator--d660d1ec-42b8-4e99-993f-018b43bc3203", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e85f9c-a3cf-43aa-a045-2136f33e0463", "sighting_of_ref": "indicator--23f2879a-5e3d-4734-a5d0-ef9093b15ff7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1e5699-e279-4a83-a93b-666db9c2aff2", "sighting_of_ref": "indicator--23f2879a-5e3d-4734-a5d0-ef9093b15ff7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e648110-baae-43ee-ac70-e7a3b7109132", "sighting_of_ref": "indicator--03ae43ac-96d3-4629-9f01-c11d5e4980ef", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b712ecb-d2d0-45b3-90d5-23cdd8abb2f9", "sighting_of_ref": "indicator--9db86cd1-5a51-4932-bbd8-174750c13497", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c0b13d-f8c8-4deb-86e9-23d5c1a7c9f4", "sighting_of_ref": "indicator--41877a29-7a54-44ba-be09-62fd6bd30785", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83636f1-0f62-4f7f-af09-6877ef82111c", "sighting_of_ref": "indicator--14e053d0-d301-413c-b903-84b386377d4e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1669d40-047e-4892-90a9-01e82f9c0ce9", "sighting_of_ref": "indicator--fc6a87ee-5faf-4e42-a955-e74bea9051b0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27e990e-89a2-4ef1-848c-d1b6c0b97915", "sighting_of_ref": "indicator--fc6a87ee-5faf-4e42-a955-e74bea9051b0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f4f39e-5a7b-469f-a4d8-cd9c194cb876", "sighting_of_ref": "indicator--828651ee-1e3a-4a54-b44c-ad3b26b13ae9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194f9595-cfaa-4999-8118-9d84291e2229", "sighting_of_ref": "indicator--deca5ebc-2712-41b0-8e57-1aaee0088314", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b13878-bafa-43e5-b364-6d5b9f99caf7", "sighting_of_ref": "indicator--3143fe0d-1db7-4335-98e2-427e28b04fc9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c207d3f7-b7e0-4c25-9352-8079a8075de6", "sighting_of_ref": "indicator--3dc86762-d16a-47af-9fbe-3b8998b54b5a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fde452f-77c3-446f-9ab2-b5b752c98220", "sighting_of_ref": "indicator--277ca698-cfc9-4373-8156-f102efb02cdf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b162fa6e-ab90-44ce-8135-b46141a58ab3", "sighting_of_ref": "indicator--f2ebe16f-6d6a-4027-90ef-b2e8ff8b4772", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8461848-dd38-4c76-9572-caca110391ed", "sighting_of_ref": "indicator--6e8f3e4c-fb1b-4d5c-b74a-8b7a7b807c83", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99aa91f0-60ba-4455-848a-5a21d4edb7bb", "sighting_of_ref": "indicator--9e81496c-233b-4418-abfa-246afc482042", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83257419-d288-46cf-9315-e0cb410accfc", "sighting_of_ref": "indicator--9de32883-1e32-4c3e-9c20-0bee5af7db39", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6492094b-d722-4b42-9952-f1ea8e77a3f8", "sighting_of_ref": "indicator--9de32883-1e32-4c3e-9c20-0bee5af7db39", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133582fc-57ad-40b0-b71f-a784a3519319", "sighting_of_ref": "indicator--73fb1396-a189-4efd-8b71-8acc371f2d0f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2691a0dd-3d3b-42be-990b-69fa756aa9d8", "sighting_of_ref": "indicator--452b8c00-9e86-479c-adc0-2afc6462d55a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c651108-53c0-4c0d-877e-c5afad424f25", "sighting_of_ref": "indicator--6255ce9d-74eb-44e3-9ab4-3c629603d907", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c9f4e2-b173-4e56-8548-77a7a1242dff", "sighting_of_ref": "indicator--fad9470f-a171-409e-a5ca-8e7f10cd7d88", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c88eb2-4826-43c2-944e-6ee4d1f40d9b", "sighting_of_ref": "indicator--e1d94214-befa-495d-9d55-12fcfe9d3ef5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c08d0b3-f8ce-494f-8f57-1839ac9a1e0d", "sighting_of_ref": "indicator--29cc6080-0915-4014-86e3-776420823ee4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f0e0e9-e49f-4179-b009-0717df381505", "sighting_of_ref": "indicator--2f099292-7f03-4fb0-98fa-7993e2de7dfb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d41018-c718-446f-92d1-8ca8c9817a9d", "sighting_of_ref": "indicator--49d0d732-9ca2-40a6-acb8-5dab63447cc2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d35e72-777e-418a-a48e-20bcfa86faea", "sighting_of_ref": "indicator--cd696af1-e188-4301-bf5d-c3d3c045ec8e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc74789-b94d-4122-b4bd-e8381047181b", "sighting_of_ref": "indicator--dbd3b1fa-ca97-4921-9f99-9abf906b10e8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b2e2e9-bea6-4a04-af22-b48efd4681f6", "sighting_of_ref": "indicator--65bdc5fe-f8a2-45f2-940d-436950cbf285", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf15271-74df-4b6e-8332-b8620a107ae1", "sighting_of_ref": "indicator--914f19b3-3928-4083-8f6a-b416b645a982", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab04937-71d2-4ae5-b819-966d643ae3a9", "sighting_of_ref": "indicator--a37796b6-3ee3-4bde-ad01-f169d7a3454a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b6b264-2865-4219-8112-c712974ba90f", "sighting_of_ref": "indicator--958c4e87-49fa-4829-b75f-58a3b6f0fb51", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9113696f-d912-454c-9601-99ffcd91e291", "sighting_of_ref": "indicator--59bbe7d5-89f2-4831-a6bd-8e9d3a332183", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ddbe5fe-1f79-4360-8c0b-8c9984a47b91", "sighting_of_ref": "indicator--ebfcae0c-324a-4481-84d9-e4a50b237192", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9619b396-08cf-4d72-8489-5003222fe9f7", "sighting_of_ref": "indicator--c5cd9700-d750-400d-b6a1-62c36af98f8b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc121a1-1f6d-4c0d-866f-1e59a36907d0", "sighting_of_ref": "indicator--ebd0b95d-9abf-4a8a-8eef-d138a55460ac", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0daa408-9744-49df-ab8d-472f06fa39b7", "sighting_of_ref": "indicator--776d2dbe-46d8-4834-b38d-df5b0972d419", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84004446-e681-433c-b40f-52b71549312f", "sighting_of_ref": "indicator--574024c0-c01e-4b72-8404-dced323fcb1b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53c63d6-6212-4b3b-9d03-dfac8a981fbc", "sighting_of_ref": "indicator--593af3a5-7c69-405d-93f1-1cd806d18437", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e580a458-4cf6-4aa7-ae47-797482e301f4", "sighting_of_ref": "indicator--b407fa17-ba64-4291-83e6-787e7d349c5c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2114c7-a128-4a3f-a937-12c115e8c9d4", "sighting_of_ref": "indicator--02d2db51-47f7-4fbe-8041-028aa3b23146", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e257cec0-c43c-4db8-b561-fa6095748800", "sighting_of_ref": "indicator--404420e7-1a76-4d87-9756-19724b5d2508", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569ffc95-8da2-4270-9693-7d64d0970d04", "sighting_of_ref": "indicator--dda49e7a-8558-488e-b925-d2a9f5e81843", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692c33e0-d8f1-4909-a93d-710c91606cbb", "sighting_of_ref": "indicator--8e735d45-9935-4ba7-9ca2-06db1f9b7e14", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94cd54e8-2d97-4570-9d42-19ed34957be4", "sighting_of_ref": "indicator--d080e8c0-e21e-436b-8f0d-1847f60fd84b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c65b46e-e6d9-41e7-8597-8570b68fbb95", "sighting_of_ref": "indicator--a50cbf04-b32a-4998-b646-d4cc5437ed32", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a34f7f-8f52-429f-9f01-3cdccf362ed9", "sighting_of_ref": "indicator--a52f49bb-a13b-446b-8edb-589db862a58a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2c5851-f325-4a9d-a9c2-43bd0427a6d1", "sighting_of_ref": "indicator--2773b368-58e8-496d-871e-5269610f843c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c536e1e8-7495-4596-8a65-30837942b88a", "sighting_of_ref": "indicator--9e7737d6-e7f1-4aee-8bbc-377e09f11f88", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a686b847-8408-415d-9f06-5f79aff535a1", "sighting_of_ref": "indicator--9e7737d6-e7f1-4aee-8bbc-377e09f11f88", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473ba20c-ba49-4912-a74f-8a91a9b55b1f", "sighting_of_ref": "indicator--3f024010-d31d-47b7-8ef9-fcfe2e05b41e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c2ace5-310e-44ee-ab65-cd3117094bc9", "sighting_of_ref": "indicator--3ca0cf4b-e452-4077-b894-875e6e0866d4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b65391-7444-4fac-aa15-1b3cd1217493", "sighting_of_ref": "indicator--fa09481e-8d4c-4dab-80f0-e5079336350b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaee3a11-fb91-4cf2-9ff9-08782fe647ca", "sighting_of_ref": "indicator--7e2e920e-4b6e-4482-9ed1-7fce5b7aa334", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b41b6c-7f60-4bdb-8f50-ea5aca4c3ce0", "sighting_of_ref": "indicator--c978db1e-386d-4b84-b8fe-4b0d06d666ce", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a485122-5492-4c2a-b572-8ff4a15e692c", "sighting_of_ref": "indicator--7b116ba1-9f00-49cf-8e2a-3c0c8f578f39", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11c0898-6171-4005-aed3-7d9d8a57d687", "sighting_of_ref": "indicator--3cb289ac-d87e-4147-810f-bc153a205b5c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd39506-acdc-4656-84fd-9cf40162fdba", "sighting_of_ref": "indicator--3cb289ac-d87e-4147-810f-bc153a205b5c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19901edd-52cb-4b1a-9713-6ca0e38abe3e", "sighting_of_ref": "indicator--0daf35c3-227c-43ea-bd8c-c1eb9656411d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feedc922-1d6c-4373-a42f-b59d78ebcf9d", "sighting_of_ref": "indicator--8e1fa3fd-dd6b-4c18-8155-72c07668c71c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d65bfc2-aea0-4ea4-b825-c731974bb7a5", "sighting_of_ref": "indicator--0f830414-21c3-4a4a-b906-c2635e833055", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84531056-8f33-4d28-a340-a6d3cc8c9dc3", "sighting_of_ref": "indicator--088a0d3b-86f1-469f-a942-73c8e1570381", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906bf06c-2ab1-44f4-80cd-c6733c91bfdd", "sighting_of_ref": "indicator--9f3c6e69-8579-493e-9a07-73a990ba4e6a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f53c30-7606-4167-b6f2-9c5c1966eb85", "sighting_of_ref": "indicator--99b3481d-5c6c-4924-abba-511306d0fdeb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16686b7-6c78-4613-8686-0536acb7d81f", "sighting_of_ref": "indicator--bf15a9e0-301f-437f-9a49-6e9f97125f0b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba962402-23ed-4373-9c37-996920acffe6", "sighting_of_ref": "indicator--0fa72d6b-c673-4b72-8ee7-f4a4fd31c349", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8346f43c-0f31-4f55-ad04-222adfd4d067", "sighting_of_ref": "indicator--83e74853-077b-41d8-8063-2e308d9dce9b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6036a4c5-26a5-440c-8b25-620bc3b0968c", "sighting_of_ref": "indicator--f5ff6ea1-62b5-41a0-9993-50e4c7581fca", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9b4a07-914a-47eb-8d76-a7493b8437c6", "sighting_of_ref": "indicator--6df1fafb-b20e-42cc-8241-b6a49f7c7063", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57dad78f-d6a3-41af-8e61-17d5981f1680", "sighting_of_ref": "indicator--57a8f76a-1f42-45f3-b33a-4469a973230c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bceb2fb-758c-4f31-b743-2c2a041f4619", "sighting_of_ref": "indicator--6295cbb0-4ae0-4a63-ae4a-dc18cca7568b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc5860a-4b6f-487f-83d9-4858cff3ee06", "sighting_of_ref": "indicator--e749c71c-96d0-48e3-893d-b4a272f738c5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca150ec7-916b-4e4d-bccc-951b44d5e6ef", "sighting_of_ref": "indicator--b36b0eb6-be53-46f0-8fcc-42db9d108a11", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f831ed76-902a-4505-9caf-2b22cf0fdfbb", "sighting_of_ref": "indicator--e3596fa9-348c-4fe0-8669-fe84442f5cc4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814c93c1-5fa1-4871-87a6-7b6fcc84c616", "sighting_of_ref": "indicator--7eaa11d4-65d2-40ce-838f-b494cb007865", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880bdcf1-22d0-4a1e-81bc-e462a51ea699", "sighting_of_ref": "indicator--0d16515f-e9a2-4b19-959f-6aabe6a5f711", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b453dd-54f3-45ce-84e3-0cadce2966fa", "sighting_of_ref": "indicator--bbf73e4b-30fa-43a1-898c-304fa416ac87", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27db92f-7fc5-4eee-a1eb-d012744052d3", "sighting_of_ref": "indicator--5a26bc37-835f-4a21-9a66-50f6a637a6c5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f382032-d1ad-42d3-9ace-a35a70256cbf", "sighting_of_ref": "indicator--73ca5533-53fd-4eb8-adec-9f2811dbb32c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dcf3758-4317-46a7-b042-dc64a1f2b013", "sighting_of_ref": "indicator--02885c02-a0cc-4c05-89ee-171885c1f8a9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d89cb2-6908-45d0-acc4-f5774f1d8f42", "sighting_of_ref": "indicator--9c08fd3c-bd3a-4ccd-86a2-f748a5970f6e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0dfe89-0c0d-44c5-8a2e-a679201cabd1", "sighting_of_ref": "indicator--d7d774bb-51cf-486a-a1be-380d60fe839c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3bcc06-c682-4201-bcc1-55c512194c5e", "sighting_of_ref": "indicator--252e416e-d624-41ac-952d-95829dfd1c45", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fd8038-7b41-4464-b064-0f57a243cee1", "sighting_of_ref": "indicator--909dc053-ea0e-4353-9218-7fa425e66eb5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b211ce0-963c-44fa-ba64-cc37a0921219", "sighting_of_ref": "indicator--e4740cdb-96ab-4aea-ac89-0d0d2b5d6124", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd41264d-9c88-4145-a195-e01d89b1c422", "sighting_of_ref": "indicator--fffe6e79-05bb-4f1e-8e88-d1818d6209d4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156a1fe7-37ae-4879-bf6d-7284611e867b", "sighting_of_ref": "indicator--3c94a7bb-0753-4170-981f-8c8d0a00e4ed", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304222d0-af47-472d-993a-54d05257c773", "sighting_of_ref": "indicator--cb118dea-fc04-4802-b928-e670a34a1cda", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613a962f-06df-4533-ac95-41efc4e2246d", "sighting_of_ref": "indicator--e5140c81-4e92-419b-aff0-32aa2ed287e5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db776b11-aa90-48de-802e-d0bea4e1bae1", "sighting_of_ref": "indicator--0cd2f798-238e-49bb-ad01-f677a378dd5f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021c2d7b-a784-4202-b3e4-518288e5a788", "sighting_of_ref": "indicator--72940bcc-46e9-4d76-9a2f-8a24d86574a2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb55e3c5-a4f7-465d-bd25-11c9298a3715", "sighting_of_ref": "indicator--a8ee3f3f-ccba-4755-b1a6-42425a70f8b8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d6836c-9f23-4dea-9a3c-834c8ac43503", "sighting_of_ref": "indicator--a8ee3f3f-ccba-4755-b1a6-42425a70f8b8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e00628-7820-401c-ac74-8e932f409747", "sighting_of_ref": "indicator--b1f9d0b9-990b-4623-b42d-9c57b6437328", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da164776-f792-4221-9bc2-a335811737a9", "sighting_of_ref": "indicator--9df5a690-9f88-4ed6-be41-e456d78f0055", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4c8902-9fdb-4f60-850b-a6583866c355", "sighting_of_ref": "indicator--8d2a2215-5893-4fcf-baf8-0a65d43d368a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2fe70d-480b-43b3-b572-e23a7016c431", "sighting_of_ref": "indicator--e293545c-c392-44a7-9b1e-c85478d01545", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9449339-2b6c-4046-ab22-b96842f80b76", "sighting_of_ref": "indicator--d2870959-da94-4470-90fd-982e3da87984", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d570d3c-6da2-40ad-9f86-64236822195e", "sighting_of_ref": "indicator--d2870959-da94-4470-90fd-982e3da87984", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b138ee5-c74e-4051-b863-7c17ddd2ecb1", "sighting_of_ref": "indicator--ed067b47-9e77-40f3-b023-1a374646a578", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e02214c-29d4-4854-a5a0-e735d5ae0422", "sighting_of_ref": "indicator--013c7484-1388-4eb1-ba13-17ec1e851f13", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6230d9-7508-40e0-b990-ee2db4c4d889", "sighting_of_ref": "indicator--1bc68a62-76a9-4a2d-83af-2bac9ebd9200", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdbae260-d37c-45cb-91e4-6b84b8fba497", "sighting_of_ref": "indicator--fabec1a4-be22-41a2-8e7d-17c3e9881437", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8499306-5ee8-4c5d-9386-527ac3f34645", "sighting_of_ref": "indicator--12f38f4d-0b2c-4af7-bf81-6f985beef42c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03df324e-8afe-4cca-95f7-ec29f124b454", "sighting_of_ref": "indicator--385cbd59-9b28-46ed-9b72-b9ab9bbf2b9a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb574c5d-ad65-4646-9e31-4dc5531a4edc", "sighting_of_ref": "indicator--5c7e70cc-2a6a-4c92-8854-21201e090d68", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af416ee0-10f3-487d-b293-51526cd52ebc", "sighting_of_ref": "indicator--88c2ae8b-d2c3-4cbd-9291-9cca978a07ff", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a421940a-71fe-4548-968b-350dc9160ebf", "sighting_of_ref": "indicator--88c2ae8b-d2c3-4cbd-9291-9cca978a07ff", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4266e67d-6f1c-4aab-8e3c-7a173ddc27d6", "sighting_of_ref": "indicator--7d15d8d9-318b-4f93-9bdb-87bfbfaac9df", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da587f3-a051-4602-bd4c-ad1d95290097", "sighting_of_ref": "indicator--e0b69d03-5fba-429b-9c3d-c5943a83d853", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4ea61a-1234-4a24-a84b-a85c25217b89", "sighting_of_ref": "indicator--b0c6c73c-9b11-40a2-9543-ef4110893481", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e241d44c-1c31-4b17-8c5a-70ed439773be", "sighting_of_ref": "indicator--db38d317-19fe-4cba-9244-ff63ab37c6d3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35bc818a-a9b6-403d-9209-90585d9d81c2", "sighting_of_ref": "indicator--f0ab2385-17b7-43cd-92cb-5294c888bb21", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a5ffa1-406c-4e2f-94a6-738292b0f232", "sighting_of_ref": "indicator--255db1e3-9583-4e55-96a0-36bdb36a2f7b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09809e04-0fa7-4d38-a217-14cbf9925b6b", "sighting_of_ref": "indicator--aacd39a4-11e3-42b3-8f9c-caa24987f2ac", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888fe6c3-1e47-47d8-b164-0d4f32bd49ad", "sighting_of_ref": "indicator--acc8ca6a-04e9-44b7-8bc1-060c3906c7fd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de8f754-5ecc-4fd6-bf7d-404aab4ca9dd", "sighting_of_ref": "indicator--1d407a20-eb4e-49dc-ae47-fd8632edb285", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88982e5-3b72-4dd4-ac0a-057f8c8a9f48", "sighting_of_ref": "indicator--2a2f7608-9e57-4a7f-9307-81c827c35117", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92b887e-b226-40be-ad17-c91bab3f9e08", "sighting_of_ref": "indicator--47e8fb31-b62f-4eeb-8a36-2cd6ac77fbb0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7ddb46-549b-41f7-a056-8f32e1aa6825", "sighting_of_ref": "indicator--5c6df27a-10ea-446d-b75a-30c88f6e5a8e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62405a5-e740-42cd-a3de-467b57544393", "sighting_of_ref": "indicator--5311e253-54db-45c8-b895-6f90214d1303", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff62994-208b-4427-86aa-ec77b8116dae", "sighting_of_ref": "indicator--fa784ee8-66a0-4fd5-9e43-8873a06b64a1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977996e9-44a0-4faf-b1f2-14dbf7b61c66", "sighting_of_ref": "indicator--fa784ee8-66a0-4fd5-9e43-8873a06b64a1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66996cc-3768-423e-a98d-39e2834b4e8e", "sighting_of_ref": "indicator--fa2daab7-ca63-42cf-a334-661a6c5dafa8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60174aa-add4-45f9-8fdc-02c93348bd62", "sighting_of_ref": "indicator--77033acd-0cd8-451c-a1f4-b0dc91246798", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246d8177-4d56-4a6e-b224-64bd8843cac5", "sighting_of_ref": "indicator--01528b27-a3b5-4ebf-a61d-0c99e3daa111", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860382c2-3196-4057-b8cd-05ba36b5e917", "sighting_of_ref": "indicator--35be6bc5-b307-41a2-9523-a15f9515dd8d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddfb33f4-fcdc-4e78-93e9-c5786219d9e3", "sighting_of_ref": "indicator--961e3944-da26-457a-bbf5-0ce151a3e2df", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7ba7f9-f89d-4b9e-9524-94b33463ce45", "sighting_of_ref": "indicator--300625d2-4abe-417f-8a9c-d2d798f75b26", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa229b6-5913-4645-bfce-d7159f77c764", "sighting_of_ref": "indicator--978cd28b-c476-4f63-a8c5-c625acaa3bbb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db26944a-3431-4706-9300-29d44f4e5e04", "sighting_of_ref": "indicator--3d91ec77-4c79-40ee-ae6d-b14e79988349", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88878b4-795d-4606-8f6e-8140186058f9", "sighting_of_ref": "indicator--d157957c-eed9-4162-9b3a-80b8b74a70d5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91bd5139-379f-4f48-9e3f-ff0ecfb17a03", "sighting_of_ref": "indicator--d344f135-6ffc-4e1a-99be-c977a7413149", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--183695dc-d502-4ba3-ba38-5d64a54a3590", "sighting_of_ref": "indicator--3dc02062-c4e1-469c-9ef4-cc7d8523e45d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c1a570-26c6-40ac-8353-66d46469874e", "sighting_of_ref": "indicator--efb8a6ff-3326-423a-aebf-c0114f665d83", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6e31b0-1458-40e5-9fa9-4eda37328f65", "sighting_of_ref": "indicator--a079f7fc-0fed-4a12-ae4d-e99680d20032", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484dd5b2-51e4-4d45-9a39-65cea545f7e4", "sighting_of_ref": "indicator--def55d25-3bdb-4207-ab10-3262ef1c7ad1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c164d5-1036-4d7b-82ee-513c39bc6ba9", "sighting_of_ref": "indicator--978b7031-0cbd-4e7a-acf5-b7b12600ecbd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d58344c-67c3-4b36-9217-2a9079de0f66", "sighting_of_ref": "indicator--dc932f25-80b2-4ebb-9518-7d585fd58dfe", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15ee50d-b91a-4279-aba0-96408fde88b0", "sighting_of_ref": "indicator--e1d3cf26-00c6-496c-b3db-7ba443c12c93", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98396d6-c6f6-4496-8934-514b1a321ca5", "sighting_of_ref": "indicator--ab1f944b-9994-43a5-9cdc-1bb83263babb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58c817c-d258-4d0a-873d-6d0da4b75d6b", "sighting_of_ref": "indicator--7cbfb445-3327-4904-9dc0-c5cd1749e423", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1526084f-614f-4deb-9e86-18fc84366241", "sighting_of_ref": "indicator--4b19cc1a-2041-4d10-92e0-26994373b490", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0bab5b7-9643-41ea-922c-c3e2e9274818", "sighting_of_ref": "indicator--a1164445-2b90-4fb3-8d55-0acac51640f3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61621159-0e5f-4bce-98e7-1f9a64cace06", "sighting_of_ref": "indicator--ca661423-c01f-4f65-87f5-ab0e63bfa1d9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e7298c-1f82-46f4-9fcd-b7b4b6a291fb", "sighting_of_ref": "indicator--f191c2f6-9d1d-42e9-a332-51a81a35c478", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4d5050-d252-4896-91b6-0a050e8eb498", "sighting_of_ref": "indicator--cc32a5b0-b13b-4ab1-b5c9-02daa73a839c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1419c5e-ec1e-42a9-b62b-52a91db3ded6", "sighting_of_ref": "indicator--3235e91f-8dbc-4467-9a6c-ca45ff27e344", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03802f6e-d8f6-43d7-9f63-8c6be24bc26c", "sighting_of_ref": "indicator--0a16ba6b-87e4-4325-88f4-e9d5ba2b403a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab853e3-fced-4dcb-acc5-62a8b7f121e4", "sighting_of_ref": "indicator--c004392a-c495-4022-8c2c-67f698e98d59", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cd908f-d2ca-4e22-b097-8d0731334bcb", "sighting_of_ref": "indicator--09b7be97-81bd-4b28-82dd-91b5ecaab0ed", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaaa2317-b49c-4884-9c7e-8c33f12918c1", "sighting_of_ref": "indicator--b22db22b-a468-418f-9dc9-0f28fc6d359d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ba73f7-798e-4d88-9307-8aa17e89d476", "sighting_of_ref": "indicator--b22db22b-a468-418f-9dc9-0f28fc6d359d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21428cc-aa1e-4674-90b2-b53a26baa16b", "sighting_of_ref": "indicator--95313b6e-b9b3-4909-94f0-9410b9d90117", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4c9e92-d39b-47b6-877b-f6347448213e", "sighting_of_ref": "indicator--5d1e7d26-b53d-457f-8001-1402e1802455", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc05963c-31ec-4eb2-882c-0619ca98e588", "sighting_of_ref": "indicator--9aa22a41-51e1-4652-9cca-fd9c68332bf1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9010794-ff1c-4a74-a54e-72c816d46615", "sighting_of_ref": "indicator--6246ac6d-6a97-48ee-87f3-91f2e874ce6f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18cefc5d-6a6d-4370-88b0-62ea7c3179aa", "sighting_of_ref": "indicator--c1d05a13-88ba-4b37-83f6-7d825b2bba67", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d4fe39-4fcc-4610-bdda-a6e519afe5a6", "sighting_of_ref": "indicator--9ee6cb4c-355c-48cf-99e4-0fa030da630f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5406de-c3dd-4f56-ade2-6584cf5262e0", "sighting_of_ref": "indicator--689b7ca3-6a4f-4628-815f-e7fd873586a3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620c6a30-e58d-4e92-8a25-69672988dc57", "sighting_of_ref": "indicator--f2811f14-346d-4a8f-a662-6f26bd0c864b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4aad1a-dd04-45b4-9ff2-7d3ddce2376e", "sighting_of_ref": "indicator--f2811f14-346d-4a8f-a662-6f26bd0c864b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8032168e-c5ca-4284-97eb-088ceda7d448", "sighting_of_ref": "indicator--7d81ff08-6cbd-4039-931e-e0fdff5e6e36", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d3adf0-4578-4761-ac23-3647286c373e", "sighting_of_ref": "indicator--7d81ff08-6cbd-4039-931e-e0fdff5e6e36", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c9f2d8-35a0-4767-ac27-e6a093c9ed2d", "sighting_of_ref": "indicator--b440c869-5146-449b-b276-b41f441d5aa4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe05d42-a2b3-4940-814c-802c10fe660c", "sighting_of_ref": "indicator--fe080024-8b7c-483d-bbb8-3da4cca22c5c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8856aa-51de-4b65-a394-2b98d70c4da7", "sighting_of_ref": "indicator--fe080024-8b7c-483d-bbb8-3da4cca22c5c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a732d0d6-cc3f-4532-9815-868129d5877b", "sighting_of_ref": "indicator--fe080024-8b7c-483d-bbb8-3da4cca22c5c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154f1527-7f93-45ae-8a85-0ea7ebaf79e1", "sighting_of_ref": "indicator--8f7e6e05-7c3f-437d-b6dd-615abe75abf8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f24893-2942-450a-b6b6-dde2a917ed14", "sighting_of_ref": "indicator--8f7e6e05-7c3f-437d-b6dd-615abe75abf8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150e86c1-4b27-4a46-80e8-f837f9a0feb8", "sighting_of_ref": "indicator--8f7e6e05-7c3f-437d-b6dd-615abe75abf8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd77969-2d71-41fa-a984-2b97eb44efee", "sighting_of_ref": "indicator--45281405-18c0-4b99-be0d-4f1a86824046", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408c216a-521f-4def-91a6-adfe8dcdeacb", "sighting_of_ref": "indicator--45281405-18c0-4b99-be0d-4f1a86824046", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5b51b3-1cc5-44a7-a710-0940207e66d1", "sighting_of_ref": "indicator--9de756b1-ac3f-4c8e-a79d-9b204b386f65", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81908907-4e93-4a6b-80a4-6917e3178048", "sighting_of_ref": "indicator--7d6d049c-40a0-454e-8da0-6280071f7977", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf72d2c-6039-44b0-94ea-d51b4ff55b62", "sighting_of_ref": "indicator--7d6d049c-40a0-454e-8da0-6280071f7977", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f238db-a171-46e3-8391-560652cfe13d", "sighting_of_ref": "indicator--a4860aca-eed5-419e-953f-a1e3b923efe8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119786ac-23d7-438d-95f2-cb9467cba0ea", "sighting_of_ref": "indicator--a4860aca-eed5-419e-953f-a1e3b923efe8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0058efe-9a29-4074-a6fd-7da3ab5e17f4", "sighting_of_ref": "indicator--a4860aca-eed5-419e-953f-a1e3b923efe8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ac3a41-6c32-46f0-9323-b4f340594fc0", "sighting_of_ref": "indicator--cac3dafa-45e6-4916-8141-4c976dc557df", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a592cb7-0da3-4143-8240-0d0918f5f158", "sighting_of_ref": "indicator--cac3dafa-45e6-4916-8141-4c976dc557df", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173332b1-dc7a-4da8-b482-a84360899b55", "sighting_of_ref": "indicator--69218421-5247-4694-84ad-24f99c93e444", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b937ad-d0b7-4c35-99cb-e750a591b4a8", "sighting_of_ref": "indicator--69218421-5247-4694-84ad-24f99c93e444", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f90f4e-03fc-40e7-8552-b9f8542953b3", "sighting_of_ref": "indicator--69218421-5247-4694-84ad-24f99c93e444", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d6186e3-dfa3-4c51-a5ae-4ee38a5ecd46", "sighting_of_ref": "indicator--ce17c46c-1098-4f7f-9564-81783751cbd2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d974c6-0f1b-4b2f-a0f6-d03854839b52", "sighting_of_ref": "indicator--e090a3e1-cb94-4e1e-a9a5-d6926622c011", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3481e1-0002-483e-9ee4-65e6beb5b7a9", "sighting_of_ref": "indicator--3538f457-9adf-4b97-b8af-aa8ecb992778", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484e1429-11b5-4ec3-a3b3-83d8afa3e714", "sighting_of_ref": "indicator--aec7f04a-0cc0-4e6c-9415-f518301f6b3a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e04c43d-2d64-4778-8640-429fb6ec3804", "sighting_of_ref": "indicator--aec7f04a-0cc0-4e6c-9415-f518301f6b3a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b7f53a-fa01-4626-9c08-bb06640b6aaa", "sighting_of_ref": "indicator--aec7f04a-0cc0-4e6c-9415-f518301f6b3a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c69e68-a25a-4271-b541-0048e905129c", "sighting_of_ref": "indicator--726ba9b1-d606-4367-af38-883a1aefe87f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8e248a-3daf-4b3d-90d9-88a28809e823", "sighting_of_ref": "indicator--726ba9b1-d606-4367-af38-883a1aefe87f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930a0a85-e616-4e8e-b1fe-712ae756b77b", "sighting_of_ref": "indicator--726ba9b1-d606-4367-af38-883a1aefe87f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3c99e6-22b9-4030-8dbe-276b7eaac396", "sighting_of_ref": "indicator--ef474369-397d-4a22-867b-79f98f5615b6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832e0a0f-1d9b-4fa3-a357-76d07add169a", "sighting_of_ref": "indicator--ef474369-397d-4a22-867b-79f98f5615b6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d2ee9d-e4c3-4ee5-9dda-06ebe9f7b5fb", "sighting_of_ref": "indicator--ef474369-397d-4a22-867b-79f98f5615b6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4ba654-9b3e-413f-a2b0-75e12fd26c50", "sighting_of_ref": "indicator--df33eea7-7dc3-4996-810c-ffcad5f91d33", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea326647-2a26-4d7b-ab61-9d1ddbd5546c", "sighting_of_ref": "indicator--df33eea7-7dc3-4996-810c-ffcad5f91d33", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55c71fa-f447-4ffc-8a64-f31f63344530", "sighting_of_ref": "indicator--df33eea7-7dc3-4996-810c-ffcad5f91d33", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc24976-2c0c-42e2-9873-a05cefa0b371", "sighting_of_ref": "indicator--ddb0e66a-1553-46d7-8889-c5f7021a53a0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03bf455a-5a41-4565-a19a-80b866d76fac", "sighting_of_ref": "indicator--7bce9e1f-6508-41b6-9b6d-912b3b13d451", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6083baad-324b-4293-b996-29adfbd5ea67", "sighting_of_ref": "indicator--4fd93c60-d963-479f-ac69-640936343785", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b90d2b5-df68-444e-9add-7a50a7d78b04", "sighting_of_ref": "indicator--aa4e521b-5540-47bd-b3d6-7a7813c0aa46", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86d5968-b347-4060-b678-41984329cef3", "sighting_of_ref": "indicator--a38a6b7a-d359-468a-a7db-7258bc058bb8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07285468-8e0d-412a-8c22-d615a03142d0", "sighting_of_ref": "indicator--a38a6b7a-d359-468a-a7db-7258bc058bb8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c434a7a8-4ab0-4dc4-bccb-8d19f92f0e74", "sighting_of_ref": "indicator--e64fb94c-4d3c-44d8-8684-c7a867834bd9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c11243ab-c097-4868-aa17-dfcfa1441ee3", "sighting_of_ref": "indicator--b6d8196a-7dac-424d-a229-2deb40553fe2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21cb426-b66b-4e22-a39c-32de994af0ae", "sighting_of_ref": "indicator--1fe9c880-556d-4abd-8539-0bf19dd39d21", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6704905e-8809-49cc-9338-cd444674544b", "sighting_of_ref": "indicator--5068d4ae-d568-4233-abac-51b4f5e90143", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e93890-66d1-4920-bf7e-fe051aa9b2ed", "sighting_of_ref": "indicator--5e6b2f2b-c897-462a-a5d9-038a1f3b1fd3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500228ef-f631-45c7-a8bf-a23dba080644", "sighting_of_ref": "indicator--d5b80b5e-b932-443a-bf24-c99d8b93c654", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0e0b6b-b873-4ae7-a17a-c7f9623de778", "sighting_of_ref": "indicator--96761bf3-1248-4990-b33b-c80324f5bd3c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1026a505-d03f-4de6-9efb-3508fff3a46f", "sighting_of_ref": "indicator--718fa26b-154d-4c2c-9f17-e8f161ccbb4d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bf8239-a9b1-4a53-b1ba-8d9c73881455", "sighting_of_ref": "indicator--5090e22e-65dc-489b-9928-de90217d21de", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980f98ef-56a7-40e9-a08e-35245d3c2ff7", "sighting_of_ref": "indicator--44cc5dce-0aae-4963-9bdf-2a3d8973f95a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef885e76-12c5-4f82-ad29-9c951e8d54f9", "sighting_of_ref": "indicator--3e038531-3ec7-4f55-b4df-5c42bf3ba248", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8498d3b7-ce52-41c5-a698-2f2effb990de", "sighting_of_ref": "indicator--e469f6cf-28ed-40ba-89ec-78f35bbe7f4c", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a636da7b-9125-4668-848a-5443858db4bb", "sighting_of_ref": "indicator--21047f27-a962-467c-87a1-6bf44ac2e61c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91029240-52af-4a7a-b283-261d37f4047d", "sighting_of_ref": "indicator--d6736046-2ac0-45cd-b7e9-37dd088ce2a3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d8cb3a-ce15-4980-bc43-15e115ee82fb", "sighting_of_ref": "indicator--e6262e92-82e3-4ac3-afca-20fc803a1a09", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d2b8bc-cf48-46c7-98dd-cbae60ccfbfb", "sighting_of_ref": "indicator--238506ee-169e-409a-89f2-332cc410a9c8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c06adf4-65ee-4a87-8379-a425bcf7ec9b", "sighting_of_ref": "indicator--50b7392f-d2cf-4c9d-a92d-eb5fba411f5b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237e2c82-0c43-4bb5-a992-01451d77ce36", "sighting_of_ref": "indicator--0448749b-efc7-49f7-ac31-34c41c324553", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689c21f5-282c-4533-9108-af12e6614210", "sighting_of_ref": "indicator--97c8cc0d-c45b-4c0c-9a35-db4f4d81e526", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02fc9e07-086c-4d02-81f9-a88b6c47ea62", "sighting_of_ref": "indicator--97c8cc0d-c45b-4c0c-9a35-db4f4d81e526", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b18b5a-7c6d-494f-80f2-8ba0c17a9511", "sighting_of_ref": "indicator--97c8cc0d-c45b-4c0c-9a35-db4f4d81e526", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a121ae-ecd1-432a-9969-12cb91dc0f54", "sighting_of_ref": "indicator--97d8c0bf-ed81-4fb1-afc6-69d2fb2e7734", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6faf55-a4bc-4f1b-b51b-86a604dc9e27", "sighting_of_ref": "indicator--97d8c0bf-ed81-4fb1-afc6-69d2fb2e7734", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17ce80a-6f07-4cbd-8976-32590724b32f", "sighting_of_ref": "indicator--97d8c0bf-ed81-4fb1-afc6-69d2fb2e7734", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1bba0f-a098-4be1-8ab8-941530d07748", "sighting_of_ref": "indicator--22bdf3c2-27f3-492b-adf0-815d3eda354a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a2ae4f-cadd-4828-81eb-fd88d09dd7b7", "sighting_of_ref": "indicator--671e4ce0-c591-4abd-8299-81d7e4043cff", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19aa53c-1ff2-44d3-9dc5-7c6ea6387f0c", "sighting_of_ref": "indicator--0b0500fb-6858-4ddb-9116-bb43836667ba", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b660a1af-6aec-43be-94ae-35a5d0527d52", "sighting_of_ref": "indicator--580f1132-dd4b-4f65-8454-06c1370fc746", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c484d7-0281-4366-9d4d-f0fbbfae2304", "sighting_of_ref": "indicator--8bcd616c-7acd-4097-b1bd-b3d6a9a97948", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a017515c-b29b-429a-9699-084061f64292", "sighting_of_ref": "indicator--ba077f14-a3d6-4a4d-93bc-42e653a173d1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc68fa6-818b-445e-98d1-6d13a9de5739", "sighting_of_ref": "indicator--ba077f14-a3d6-4a4d-93bc-42e653a173d1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea06a1e-bcdf-4f93-a521-f56eb074e839", "sighting_of_ref": "indicator--3e86c388-0e77-4627-aff6-5342dc6f3d04", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594bd294-a14f-49b6-af68-9ef6cb1c3119", "sighting_of_ref": "indicator--9be10ab7-eac6-4e17-bb66-012190095bf6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eedddbe1-eb27-4975-8f5d-4a52d5ec887a", "sighting_of_ref": "indicator--9be10ab7-eac6-4e17-bb66-012190095bf6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff5eca7-4ef4-46ac-af87-02e4597eccbe", "sighting_of_ref": "indicator--8523ade6-66f4-435a-bed1-1d782b2f31c3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4597e6-02bc-4528-ad1f-142b2e455c14", "sighting_of_ref": "indicator--51d54b2b-d685-436f-8eea-e951887a8002", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fbb992f-87aa-4fa1-97b1-57fb3bc7ecb9", "sighting_of_ref": "indicator--a918dc73-fa0e-4c73-aea6-b5cb161f08ed", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cf2d1d-b0a6-4a8c-a614-05d50fdf1083", "sighting_of_ref": "indicator--a918dc73-fa0e-4c73-aea6-b5cb161f08ed", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469b4063-d20f-49e3-a50b-52918d1169da", "sighting_of_ref": "indicator--a918dc73-fa0e-4c73-aea6-b5cb161f08ed", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24375ecc-c7c0-45f5-949c-1dd93ef13313", "sighting_of_ref": "indicator--2fe40e65-f8bb-485b-a183-59ae2c181523", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc335582-4154-4293-b262-3b5d73140d86", "sighting_of_ref": "indicator--2fe40e65-f8bb-485b-a183-59ae2c181523", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6e60e0-e415-4516-9565-eef42f1e8708", "sighting_of_ref": "indicator--2fe40e65-f8bb-485b-a183-59ae2c181523", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7098d5-aad4-44a8-aef2-f3c257e5fcfa", "sighting_of_ref": "indicator--f3c737e2-f897-4705-9efc-2a539508aa98", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76736600-febc-4cc0-8942-c5ca42eab023", "sighting_of_ref": "indicator--f3c737e2-f897-4705-9efc-2a539508aa98", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d787bd30-6160-48e2-90a4-c9bf7696b28e", "sighting_of_ref": "indicator--2a63cbe2-22ae-47cc-acce-c3035499a9d2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301c9c98-54d8-4745-ba10-97ac8ed0cf0d", "sighting_of_ref": "indicator--2a63cbe2-22ae-47cc-acce-c3035499a9d2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326cb98a-4bdf-4820-b762-582b22a2eab0", "sighting_of_ref": "indicator--2a63cbe2-22ae-47cc-acce-c3035499a9d2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad62cee-7e73-4fac-a1ec-14c6f1eca512", "sighting_of_ref": "indicator--31f8df5b-ea7d-4254-aff1-6574ed773eec", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28e9058-c736-44b7-8e3a-345bc9c61b8b", "sighting_of_ref": "indicator--67fedc7e-8ed4-4e75-bc4c-267a8fd7f405", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b839b6-2409-4032-b5dd-9bcf0891ad51", "sighting_of_ref": "indicator--e01f7d42-5415-4eb1-b9e7-fcf5f5b016c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85adb4a-b767-4109-b01e-ca5101962188", "sighting_of_ref": "indicator--da74e72f-c8f4-43ee-9edd-97020180df5e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c98eef-ccdf-427f-bd50-dffa66554ec1", "sighting_of_ref": "indicator--78b0831c-ea27-46f6-902e-402ab726ce33", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d93dec-0f5e-41ce-9bbe-642dda7e8524", "sighting_of_ref": "indicator--d0e0c7ba-2048-40e2-85cc-eb60a6dae3f5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3dbc770-adcf-4dd6-ad24-079df70f13f6", "sighting_of_ref": "indicator--32737089-88d7-4e3b-8f1c-c4f191f0e5f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37622560-dd95-4722-acf5-67415e33c3d0", "sighting_of_ref": "indicator--e0e8dc26-5dd7-4833-899e-bf7cbd8ea3b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e5e131-12d4-4996-a455-248fbc87ee53", "sighting_of_ref": "indicator--b7895363-1aaa-40a2-9645-ee94ca14e04e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86641b4-2156-4460-a9fd-c8ff981b2c65", "sighting_of_ref": "indicator--8e63233b-e2e8-491d-9160-c6e30a846608", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8827962e-d11c-4607-978f-605c43899ea3", "sighting_of_ref": "indicator--21b5d5af-f1e9-4187-a79a-5444eabc082f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ff6483-33f6-4ba3-9b2c-29df86cc8b78", "sighting_of_ref": "indicator--de2f6cab-aed7-45e8-89aa-bd3e9e7091de", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a73e14ee-2f6d-48fc-be42-7d58bc451d4b", "sighting_of_ref": "indicator--517dee2c-d8c5-49b3-88a9-a5bee61d2bbc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c039cf9-7294-4a10-88d2-79638291a40c", "sighting_of_ref": "indicator--2d400c15-e8ff-4ee5-8ce3-f71113078710", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be05078-9a9b-47ec-ac6a-baa73abad9a0", "sighting_of_ref": "indicator--d1acd2e6-51cc-4d90-aab6-42190f3b4923", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c94b48-9ea0-4ef6-98ab-cfe6d95824df", "sighting_of_ref": "indicator--edb7176c-96d9-47e4-bf09-ab500615df9f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e4c18a-0979-469e-bbd6-6dad2ec76b32", "sighting_of_ref": "indicator--5dcd5f9c-74d1-450f-be57-4450f0c76e4d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21652a1-8100-4d10-beaa-b87871da587b", "sighting_of_ref": "indicator--0b8e641a-b224-4510-969a-ab4298fa95fc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fb5ce7-a559-4ab4-b4b0-98bf192ffc3f", "sighting_of_ref": "indicator--720b15bf-1254-49f6-8a4a-e4bd504b6f25", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4754b5a8-33c6-4cb4-bcbf-62c599dff3a3", "sighting_of_ref": "indicator--1b7f9f3a-94ae-4334-899b-f4c2b8eea723", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c5be50-b245-4c01-a3ed-1b6db5634c1f", "sighting_of_ref": "indicator--f839dd67-2cc7-40af-a07e-9ef1c669e14e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff22133a-e89d-4223-9a40-cc113198e585", "sighting_of_ref": "indicator--de04973a-dd6f-44f8-ae54-20d246b3582d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7477b4ca-a882-4f35-869d-544bb31c1b27", "sighting_of_ref": "indicator--de04973a-dd6f-44f8-ae54-20d246b3582d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--293bbf3b-d7c5-4461-8da5-b70c1bb492b3", "sighting_of_ref": "indicator--f9aeb322-3e9b-4beb-b5d1-4897c05d583b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c43cbaf-6619-4a4c-9f87-0f11ff088aac", "sighting_of_ref": "indicator--b254f1c9-8722-47cb-89f3-66a9c9e289c5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab808bb3-7e95-4d15-9a1c-adebedf88875", "sighting_of_ref": "indicator--61908dcb-4bc8-46ce-bdaf-8cb9050c4388", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7cda63-e7c4-4dba-919a-6f32eb5f48f0", "sighting_of_ref": "indicator--9b973956-b8b6-4d68-9b01-7bb9ba757ddb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45c6fad-b161-4ab2-9ca2-c619623a5b6f", "sighting_of_ref": "indicator--9b973956-b8b6-4d68-9b01-7bb9ba757ddb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023fbb4a-1141-4b60-8760-f165cd837163", "sighting_of_ref": "indicator--2b19a73c-4901-4bd2-af06-70384a48d497", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3e974c-e10e-4bb7-9d44-3c147708d6d4", "sighting_of_ref": "indicator--2b19a73c-4901-4bd2-af06-70384a48d497", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b63a9e2-37ce-42c5-8a98-82643602e0b2", "sighting_of_ref": "indicator--a533d56e-7053-46bc-afe8-5e63fe84776a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37aa323d-1e35-44e0-b67f-efbd82a65564", "sighting_of_ref": "indicator--a533d56e-7053-46bc-afe8-5e63fe84776a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2cd9a3-4dbc-4b45-a892-7205b60c100a", "sighting_of_ref": "indicator--f089d622-0bb1-4aad-a13f-eaeb94e3599f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37243c2-402a-4d3f-b2f9-76bf838c6e9b", "sighting_of_ref": "indicator--f089d622-0bb1-4aad-a13f-eaeb94e3599f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13a4828-2178-411c-8b87-d58694f7be82", "sighting_of_ref": "indicator--5bb32d3e-0a3a-48ff-a46c-69b02d65b3a5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cf882d-efc5-419f-849b-2a08cca28d52", "sighting_of_ref": "indicator--5bb32d3e-0a3a-48ff-a46c-69b02d65b3a5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827cc0d6-38fe-415e-b1cc-dc7139228713", "sighting_of_ref": "indicator--a85a9789-9478-4a22-8c66-7f41f3b594b5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8e5fe2-c6f9-47d7-8d3e-3370ec1f3032", "sighting_of_ref": "indicator--a85a9789-9478-4a22-8c66-7f41f3b594b5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6acc3a3f-c4fd-4d44-a677-dde8f4b98d14", "sighting_of_ref": "indicator--125f7918-5d6a-48c9-a743-3cca5164d6a2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014541c1-db7b-4a97-bd26-17dec9cd83c7", "sighting_of_ref": "indicator--125f7918-5d6a-48c9-a743-3cca5164d6a2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b58add-23a8-4c0d-902b-2df384da82b7", "sighting_of_ref": "indicator--8c5bb732-4766-41b8-8ea2-e55aee538c75", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a918df-da3e-47a4-a30b-71413b3d3bb8", "sighting_of_ref": "indicator--8c5bb732-4766-41b8-8ea2-e55aee538c75", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7c82d8-7863-4ad3-8ef9-834a90613bc1", "sighting_of_ref": "indicator--0f999492-f3a6-450f-aeeb-d5db3966e3f0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894001c6-1c5a-4b17-8eeb-768f9f49bb4c", "sighting_of_ref": "indicator--0f999492-f3a6-450f-aeeb-d5db3966e3f0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be3a269-20aa-4709-8428-bea50290c3b9", "sighting_of_ref": "indicator--411a4a43-cf07-451e-8f3c-08d2d5eb87d6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b864741a-5dd7-44ef-b831-9ff1d009a46c", "sighting_of_ref": "indicator--277abad6-d883-4065-8131-a154437fbd33", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e10c1a-565c-4bfc-a102-2df46aa143e0", "sighting_of_ref": "indicator--277abad6-d883-4065-8131-a154437fbd33", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9a911c-53d3-4796-8eb5-cb30a95d9572", "sighting_of_ref": "indicator--459dd5ae-406a-46d1-aab9-13559df1b4ef", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb583f5-dcbb-416b-bfdb-a95ba5ce75f8", "sighting_of_ref": "indicator--459dd5ae-406a-46d1-aab9-13559df1b4ef", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd31744e-bf17-407d-bc72-a72f468b9375", "sighting_of_ref": "indicator--ef80ad7d-2abd-4ffe-ba4c-e3d0968b87fc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81dca85c-2020-4fc7-9361-94819ffe42cf", "sighting_of_ref": "indicator--ef80ad7d-2abd-4ffe-ba4c-e3d0968b87fc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07b66f1-6882-4cc1-accc-5ab86be02a51", "sighting_of_ref": "indicator--0bffa451-c99e-4300-a085-2843ec545eb0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539c49c2-6a03-4a02-b228-c68939b9ae82", "sighting_of_ref": "indicator--0bffa451-c99e-4300-a085-2843ec545eb0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67af1295-4c9b-41d6-bb6d-b74c6c2765f3", "sighting_of_ref": "indicator--36278e70-3b4d-4a2d-b157-7ee4a0e1337d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578ce85d-335f-4d34-bb43-7e8b8c197337", "sighting_of_ref": "indicator--36278e70-3b4d-4a2d-b157-7ee4a0e1337d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dadf692-4e58-4f26-81b8-050a5c6c2ac2", "sighting_of_ref": "indicator--d11beb19-1102-4282-a674-2517a40c13e5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4ac92f-4af3-4f12-a25d-0289a1a68c17", "sighting_of_ref": "indicator--99959baf-efe3-4687-8447-7167c1a0653c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c60979-461e-4094-91a8-af3c91e91ed8", "sighting_of_ref": "indicator--99959baf-efe3-4687-8447-7167c1a0653c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9c96b7-ef94-4188-b6f3-66d47beccd6e", "sighting_of_ref": "indicator--df3cc905-e656-4beb-be30-1ca1dc368945", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ae393c-cf2b-4312-a09d-b46f21a12cfb", "sighting_of_ref": "indicator--df3cc905-e656-4beb-be30-1ca1dc368945", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1becde-1ce7-4283-ad48-e1537f8f8f1a", "sighting_of_ref": "indicator--eac6d54a-0b8e-47c9-b546-f21f193db265", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67737fc4-f61e-48c0-9fb2-b2cf0e52f624", "sighting_of_ref": "indicator--fd5dbc49-ac5f-4fa9-aca4-9b29ccc9e6a4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e6095b-7a8e-45ee-bd4e-076cceccb275", "sighting_of_ref": "indicator--fd5dbc49-ac5f-4fa9-aca4-9b29ccc9e6a4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578652d4-af74-4415-afc5-ca1bb8bdc9e1", "sighting_of_ref": "indicator--15c90773-0f5d-4f38-be0b-bde3c12e0c10", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd96a2b-cfc7-4efd-a36d-74ca0ed95f42", "sighting_of_ref": "indicator--15c90773-0f5d-4f38-be0b-bde3c12e0c10", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3008f75-25cc-4928-9048-931ae4f63f81", "sighting_of_ref": "indicator--ae2bcda1-4507-43fe-aa59-e49ddbfaf6da", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059a4c41-3d79-4d72-9d75-517ccac5870d", "sighting_of_ref": "indicator--54c6f1bb-fcdb-4955-bbf9-e7a830c11ba3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee12a45-624f-4f2c-a94b-5dc0cb2168fc", "sighting_of_ref": "indicator--54c6f1bb-fcdb-4955-bbf9-e7a830c11ba3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cb910e-66a2-48d2-afcb-d018a7667613", "sighting_of_ref": "indicator--dcfc5262-6b80-43dd-b7f6-7d1daf4f08e1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e75b80-8a5a-4a84-bf8e-25fb36c2ced1", "sighting_of_ref": "indicator--dcfc5262-6b80-43dd-b7f6-7d1daf4f08e1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13e6373-2b53-4749-9cbe-c3e50078b52a", "sighting_of_ref": "indicator--1af6a172-86af-4327-906e-36edd7ed55c9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b31886-487d-4712-998a-e76c536b3ce8", "sighting_of_ref": "indicator--1af6a172-86af-4327-906e-36edd7ed55c9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d6dc79-8683-4aa2-90e3-af49a2706955", "sighting_of_ref": "indicator--963b855f-cd6e-4446-b7eb-8ec10cb23993", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaec2c7a-144a-4110-a7a4-a18c2de74d61", "sighting_of_ref": "indicator--c0315238-93eb-450b-b56e-25564a88c7bd", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736ef52d-9409-4751-84f9-7407d8870a71", "sighting_of_ref": "indicator--c0315238-93eb-450b-b56e-25564a88c7bd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5f719f-b7cf-45ec-a75f-974bf45e0f82", "sighting_of_ref": "indicator--b42214d2-9205-4320-bae4-0703d4c15102", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6b6200-e5cf-44ff-b846-ba524a5ec138", "sighting_of_ref": "indicator--b42214d2-9205-4320-bae4-0703d4c15102", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d31b81-125b-42d6-880c-a2e5a650637c", "sighting_of_ref": "indicator--d9952fa6-c50d-4b47-990e-51b7a29d2399", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e670e9d-79b7-4587-ba15-8eb9df137cb4", "sighting_of_ref": "indicator--d9952fa6-c50d-4b47-990e-51b7a29d2399", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64497394-f2cc-440c-a642-ee9f9937b9ac", "sighting_of_ref": "indicator--500dd165-a5e1-4feb-84d1-ea8c1db8785e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2c6c23-44cb-400c-8b12-862143c846d1", "sighting_of_ref": "indicator--500dd165-a5e1-4feb-84d1-ea8c1db8785e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abe1cbd-2563-4d45-af92-443991a238fa", "sighting_of_ref": "indicator--95f9ecd5-a032-43e3-9d47-d125f7ff3c17", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffca4ca6-62ae-4ccd-9e4c-b299ab73b90f", "sighting_of_ref": "indicator--95f9ecd5-a032-43e3-9d47-d125f7ff3c17", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3617ef9-b35d-4929-9469-6bdee9a4cf8e", "sighting_of_ref": "indicator--212993ae-b30d-412a-95c7-5e54482dae99", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5974779-fba0-43bd-9fa3-f2a23c801512", "sighting_of_ref": "indicator--212993ae-b30d-412a-95c7-5e54482dae99", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3603b8-fbaa-49b5-9646-5b0ac426a9b0", "sighting_of_ref": "indicator--840b1a3f-5aa0-467b-b264-de27bf543ff9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c90d31-798c-461b-abf4-3e261af6d487", "sighting_of_ref": "indicator--840b1a3f-5aa0-467b-b264-de27bf543ff9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c73a2db-dea2-46d4-b70d-78d0c036ab9c", "sighting_of_ref": "indicator--bd69caa5-ceca-48f0-bba9-dc49c32cabfe", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce05191-2df7-4627-a61d-e1edf52f78b7", "sighting_of_ref": "indicator--bd69caa5-ceca-48f0-bba9-dc49c32cabfe", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27131798-1e92-42d2-a210-4e4a0ee46e42", "sighting_of_ref": "indicator--7fc70e9f-a5e3-4c7a-8aa6-b2538154082e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caabbe41-1459-48ee-abb2-db4e84b1c281", "sighting_of_ref": "indicator--7fc70e9f-a5e3-4c7a-8aa6-b2538154082e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05125c25-1684-401c-99c8-3b955fa5ca38", "sighting_of_ref": "indicator--769c949e-370e-40a1-8f9b-29eda2fc0b90", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0894e040-65b2-4b7f-acfd-4b7bcc2e65ba", "sighting_of_ref": "indicator--769c949e-370e-40a1-8f9b-29eda2fc0b90", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fcf34fe-c647-4ded-aa9d-91f252d70c5f", "sighting_of_ref": "indicator--63d9d246-632d-4769-a3c8-dc9078ff088f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b445788-5861-44b5-ae9b-bc028e388c59", "sighting_of_ref": "indicator--63d9d246-632d-4769-a3c8-dc9078ff088f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015b56c0-1c4f-45bc-89c8-48e5b3d9e517", "sighting_of_ref": "indicator--779549eb-7a9e-4d6b-b67b-c48f877172b0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d813fcac-ac7d-4920-b371-5917fa952dd7", "sighting_of_ref": "indicator--779549eb-7a9e-4d6b-b67b-c48f877172b0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84bd58a-dfd9-4bc9-a917-a3933da50ae9", "sighting_of_ref": "indicator--358d273a-9140-4833-a0ce-5045cd36ec89", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aba1df9-659c-46d5-80c6-3c4aaac5e56c", "sighting_of_ref": "indicator--358d273a-9140-4833-a0ce-5045cd36ec89", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8581aaea-5dd4-4ef5-9b9e-062cfe70a7ef", "sighting_of_ref": "indicator--ba667bda-1728-44ae-929b-4a82a4ccf181", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8f1a47-d50f-4120-b7b4-9d47dc075b4f", "sighting_of_ref": "indicator--ba667bda-1728-44ae-929b-4a82a4ccf181", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eae3c80-b40c-47d4-bf17-09518d25208a", "sighting_of_ref": "indicator--45b7b905-edc5-434f-a57e-e0a3f2e94fe0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db4b446-fabc-4255-8800-20b050ed037d", "sighting_of_ref": "indicator--45b7b905-edc5-434f-a57e-e0a3f2e94fe0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61cc8782-3f28-40e1-8602-ea1afc6de4d2", "sighting_of_ref": "indicator--82828ad3-e463-4c76-9788-0c568115258e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61e7f6b-dcce-42ed-b681-49763185c345", "sighting_of_ref": "indicator--82828ad3-e463-4c76-9788-0c568115258e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00249f18-5cc1-4c4e-80cd-40990772a753", "sighting_of_ref": "indicator--b111f34e-8ea0-429e-9bce-7dedc648fbf4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fa23a1-6185-42ee-9bc7-c8db0c0f8482", "sighting_of_ref": "indicator--b111f34e-8ea0-429e-9bce-7dedc648fbf4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad243112-ee37-4336-9535-7066013bbab1", "sighting_of_ref": "indicator--ddd9a428-68ef-49b0-ba67-3464ea78c53b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dee315c-46d7-4de1-928b-81e1736cc172", "sighting_of_ref": "indicator--ddd9a428-68ef-49b0-ba67-3464ea78c53b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c1d310-a6c4-456d-8a61-45ae16ee0399", "sighting_of_ref": "indicator--04f6a80d-8111-40aa-90ab-06033a235a1a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a325783e-ec31-4540-bf16-09f65e728db5", "sighting_of_ref": "indicator--04f6a80d-8111-40aa-90ab-06033a235a1a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3379df41-0c09-4e17-92eb-846c11192b88", "sighting_of_ref": "indicator--07a5e3ad-0117-4232-b8bc-4a8d91fc7c8f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d1a78f-3cac-409f-b5f5-83a61681595e", "sighting_of_ref": "indicator--07a5e3ad-0117-4232-b8bc-4a8d91fc7c8f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0077012d-9669-44da-ab7d-aae4deba4eb9", "sighting_of_ref": "indicator--86ff817d-dd96-4211-9702-434e3659a650", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14983e8d-8fb3-4f3f-bc1e-8463225f38f7", "sighting_of_ref": "indicator--86ff817d-dd96-4211-9702-434e3659a650", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfaf54ff-5859-4ba7-b0db-3c808653371d", "sighting_of_ref": "indicator--fe45cbcc-25d8-4ab0-bb4d-2d8f0940897a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a473a02-012c-4a3a-8394-bd54797c4f9f", "sighting_of_ref": "indicator--fe45cbcc-25d8-4ab0-bb4d-2d8f0940897a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8292a4e-e409-4f2f-a35b-0c9b11a4a087", "sighting_of_ref": "indicator--a3f8ad95-4d18-4a85-ae45-f5ac5766c44a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f371cecc-8ad9-4ecd-8427-c1f06fe60235", "sighting_of_ref": "indicator--a3f8ad95-4d18-4a85-ae45-f5ac5766c44a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06050b58-bd31-4c3f-84d9-a1febc2d0fed", "sighting_of_ref": "indicator--53f96c11-64e3-4582-8cdf-15330501beef", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9912ea-b00c-4553-93d4-cc5c619a694e", "sighting_of_ref": "indicator--53f96c11-64e3-4582-8cdf-15330501beef", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8636da-c4f4-4b3b-88a0-052ed76e5b95", "sighting_of_ref": "indicator--bd34c395-7b21-4aa1-963e-1b3e13687fcc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa204a82-a89a-4022-bb03-05188fae6468", "sighting_of_ref": "indicator--bd34c395-7b21-4aa1-963e-1b3e13687fcc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78460772-3d7b-4fbb-a19b-7234c205552b", "sighting_of_ref": "indicator--48b11dad-a05b-4ee9-973a-48f32184e688", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806b4137-0a47-491b-8458-b9fda88fc319", "sighting_of_ref": "indicator--48b11dad-a05b-4ee9-973a-48f32184e688", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ef2f98-9f12-46fe-860d-3b4574c8862d", "sighting_of_ref": "indicator--3ef63837-a188-4b79-9dad-e6e937d3c1e7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b335db4-c775-4c9c-ad3e-63370cd774e0", "sighting_of_ref": "indicator--3ef63837-a188-4b79-9dad-e6e937d3c1e7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--178f7b43-ab27-4ea0-aebb-85415cbf9975", "sighting_of_ref": "indicator--221d0152-e574-4c4e-91bb-5e522e7ee540", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fb1a2d-0557-44a9-89b5-e26e4f4122c6", "sighting_of_ref": "indicator--221d0152-e574-4c4e-91bb-5e522e7ee540", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3a0ac2-ac31-4649-93e4-a710d9398058", "sighting_of_ref": "indicator--f49fdb5f-5265-492d-99aa-0b5e9df62b76", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd5c5844-acfa-441d-8b6d-856a329ded33", "sighting_of_ref": "indicator--f49fdb5f-5265-492d-99aa-0b5e9df62b76", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac6264e-b091-4ade-be4d-1b6a239c628f", "sighting_of_ref": "indicator--ecf67fd7-82b1-436d-b6eb-1524dcee4b18", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b1d27c-ef63-4bf3-9d1b-fd0cc7a97a93", "sighting_of_ref": "indicator--ecf67fd7-82b1-436d-b6eb-1524dcee4b18", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fac9b2-eb77-42d3-927a-9f560bdeb98a", "sighting_of_ref": "indicator--0db1de86-0046-416f-bd24-c868119093a3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37cdf189-884f-44d5-8954-83fb47f305f6", "sighting_of_ref": "indicator--0db1de86-0046-416f-bd24-c868119093a3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec978c8-ddf1-4b2f-8cdc-680c4f7f4dba", "sighting_of_ref": "indicator--aad0c003-0e87-47c7-a559-7263e0ef93b9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f8ed44-ee04-49ee-8dd9-2754fb79e960", "sighting_of_ref": "indicator--aad0c003-0e87-47c7-a559-7263e0ef93b9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef8b222-adf2-4075-9724-a0c03039f4e0", "sighting_of_ref": "indicator--9b23403b-d37e-49bd-8023-1c6633f1e73c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da869e1-93cd-45ae-924e-782e5b28d54d", "sighting_of_ref": "indicator--9b23403b-d37e-49bd-8023-1c6633f1e73c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89115f0-b214-49e3-9f6c-06b8080c4f64", "sighting_of_ref": "indicator--4c77ce84-98e1-428d-9cf5-9f80732e095f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976ece1b-9ec2-4253-abde-bcdf3feca7af", "sighting_of_ref": "indicator--4c77ce84-98e1-428d-9cf5-9f80732e095f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b043d3-00af-4e95-af87-340c34c55923", "sighting_of_ref": "indicator--cc7e01dc-7883-4932-a482-2366700da222", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff03c9a-ecda-4fcc-ba33-32dee212445f", "sighting_of_ref": "indicator--cc7e01dc-7883-4932-a482-2366700da222", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3149dd-8993-4754-81af-b85724ad2400", "sighting_of_ref": "indicator--fc8ab687-9525-4a7c-8dd0-3d4f3f66becf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b874a1-37fa-492e-b06c-4c26bf1e68b0", "sighting_of_ref": "indicator--fc8ab687-9525-4a7c-8dd0-3d4f3f66becf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d58e8d-3c8e-44e2-90cb-d57175ab4739", "sighting_of_ref": "indicator--419efd05-eb5c-4be6-a5b3-e070925b3c68", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd95498-f1f4-4141-9499-0a0bf2b8f185", "sighting_of_ref": "indicator--419efd05-eb5c-4be6-a5b3-e070925b3c68", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c538b65b-e659-4c93-a853-867c2ed73de4", "sighting_of_ref": "indicator--42015dfb-edb5-4a07-bae1-b6fbdb94a2ef", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28c5ae8-2226-46a4-b5b0-49138abcaf59", "sighting_of_ref": "indicator--42015dfb-edb5-4a07-bae1-b6fbdb94a2ef", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5102493-2e4d-44d9-8916-4bc488dd9af8", "sighting_of_ref": "indicator--373c44b8-9efa-408f-9c3c-b903b53bbe3b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2978a714-d1f1-4d9a-bed5-a6715079a10b", "sighting_of_ref": "indicator--373c44b8-9efa-408f-9c3c-b903b53bbe3b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97331735-9d52-4607-b2c6-a94d64629950", "sighting_of_ref": "indicator--6ae8cebe-7890-4bf3-8846-5683654fec7f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04457c48-8c59-4e89-8b01-e44fd8647c78", "sighting_of_ref": "indicator--6ae8cebe-7890-4bf3-8846-5683654fec7f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be0bb5a-9f2e-4d30-bde2-8ab51d526702", "sighting_of_ref": "indicator--8d483289-8059-498d-ac02-da63ed072d80", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd35ddf9-2742-4ec0-ac1b-1d61ff3c1bd0", "sighting_of_ref": "indicator--8d483289-8059-498d-ac02-da63ed072d80", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec5f29f-8154-4e78-a541-b0f9bd30491d", "sighting_of_ref": "indicator--d09b4162-0680-4772-a90d-cb1c26b0343f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea27762-32a9-49c0-b51d-02c2b73e7a7b", "sighting_of_ref": "indicator--d09b4162-0680-4772-a90d-cb1c26b0343f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7587b11e-f6f6-4fe3-803c-62fd64b03551", "sighting_of_ref": "indicator--17a439ac-0c6b-4d20-8a62-12c07cdcfa40", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfdf4001-9ed1-41c1-a026-7d61f517ce92", "sighting_of_ref": "indicator--17a439ac-0c6b-4d20-8a62-12c07cdcfa40", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f81ab88-7de9-4386-9775-8b3cb278fc04", "sighting_of_ref": "indicator--429ac225-2ccf-49da-9a7c-caa5ebabbc78", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791a4028-2a76-48ee-8040-ecbafa7b8a50", "sighting_of_ref": "indicator--429ac225-2ccf-49da-9a7c-caa5ebabbc78", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b231f0-1e12-4dd9-858e-342235e69b68", "sighting_of_ref": "indicator--8535b03c-de49-4777-ba32-8f1c3272334e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d13723-35fe-4780-9364-72853f98034c", "sighting_of_ref": "indicator--8535b03c-de49-4777-ba32-8f1c3272334e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b021cc3-fb38-4e72-8695-d74cbd499347", "sighting_of_ref": "indicator--26e7df16-39b6-4c16-b81a-6fa68437d3ba", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecbf6e9-c1e9-40a3-b2c2-d045f4e62027", "sighting_of_ref": "indicator--26e7df16-39b6-4c16-b81a-6fa68437d3ba", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5d7bc0-d8db-42a8-b995-b5333897eec1", "sighting_of_ref": "indicator--461e5b56-2e6c-4668-bc95-cc2e8e2b34dd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79bc1a2a-99e3-4a83-9b3b-a019fb6d1e78", "sighting_of_ref": "indicator--461e5b56-2e6c-4668-bc95-cc2e8e2b34dd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57532835-0a58-47b2-a65e-c563103c49b7", "sighting_of_ref": "indicator--f134c84f-b12a-4955-8a15-cfec35cd5cb7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b061b7-0585-424c-8663-055b9f177bab", "sighting_of_ref": "indicator--c4ac517a-0757-4e6e-a76c-41e37e13b319", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb140858-b57e-4d66-9f4b-c903e3b730fd", "sighting_of_ref": "indicator--c4ac517a-0757-4e6e-a76c-41e37e13b319", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d989639-7077-4fdb-8cc5-d53cf780978f", "sighting_of_ref": "indicator--11b702b1-e894-4231-8aa4-a10f2b607b22", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ce2935-5276-4476-8a96-e719f93e6c4f", "sighting_of_ref": "indicator--11b702b1-e894-4231-8aa4-a10f2b607b22", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4119b3b2-2901-43d7-9581-85803eb4d034", "sighting_of_ref": "indicator--7885030e-b8ff-4a10-ab26-3ed3bc605d0e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839d0076-c788-423e-96a5-20574dd337c3", "sighting_of_ref": "indicator--7885030e-b8ff-4a10-ab26-3ed3bc605d0e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b614e92d-a1b1-4adf-b36b-d95bf1e63544", "sighting_of_ref": "indicator--ed9d454b-e422-4cb2-8a3a-c27d11b45f97", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d70ab1e-e97a-48ea-8728-13aae363fb2b", "sighting_of_ref": "indicator--ed9d454b-e422-4cb2-8a3a-c27d11b45f97", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc043b08-26de-446c-87d0-a6949c2af87f", "sighting_of_ref": "indicator--5629af2c-82ee-4d75-8a10-f95ab2f4f10a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80711d37-fc98-4b0c-a0d2-9c0cdc37bdf9", "sighting_of_ref": "indicator--5629af2c-82ee-4d75-8a10-f95ab2f4f10a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb3bdda-1c3c-4e4c-b8a9-6cd9bc566a0d", "sighting_of_ref": "indicator--7d983cd5-865b-42a6-b3b1-14b4fd57c862", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--077b059d-0e90-4ce3-babc-56cfa5396b86", "sighting_of_ref": "indicator--7d983cd5-865b-42a6-b3b1-14b4fd57c862", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a049cc1-f61c-412e-a475-f52749e83bc3", "sighting_of_ref": "indicator--b8a78d92-86d2-42c2-96b5-57c3faba2862", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4549bbde-52d2-4e54-a22a-1d7acd880aa0", "sighting_of_ref": "indicator--b8a78d92-86d2-42c2-96b5-57c3faba2862", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9a3e2d-9438-43a0-9f43-90fb25727d65", "sighting_of_ref": "indicator--dc01b7fd-e7c9-4452-91a5-0c2c508563cf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ed9076-2b03-4aa7-b98d-e6f57d1839d4", "sighting_of_ref": "indicator--dc01b7fd-e7c9-4452-91a5-0c2c508563cf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f1f6ac-9ee4-4d78-ae90-cd6409a63bbd", "sighting_of_ref": "indicator--4579657e-8e82-4a3f-8a87-6f643dae65de", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b839beb-58e5-4b72-b17d-a847859414e8", "sighting_of_ref": "indicator--4579657e-8e82-4a3f-8a87-6f643dae65de", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf012e71-3708-414d-837a-092cc5f7f0d5", "sighting_of_ref": "indicator--fbea8cd4-f69a-408e-adf4-cd7b9732aaa9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73770c49-1a21-4d34-9933-639d597843b5", "sighting_of_ref": "indicator--fbea8cd4-f69a-408e-adf4-cd7b9732aaa9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b5f803-d46b-4e4b-b7f8-293031e7d4a6", "sighting_of_ref": "indicator--0e18f8e4-fc3f-4dbd-807d-ba8099c5149c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a948cc-f446-4760-a22d-b55366c9d2c2", "sighting_of_ref": "indicator--0e18f8e4-fc3f-4dbd-807d-ba8099c5149c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2055e6c2-2759-4b2c-9f40-3cd5d6fabfa0", "sighting_of_ref": "indicator--cee9e037-ce13-458a-bb44-247a4ad47d0b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96c2829-833a-466e-8701-ff26582f61e4", "sighting_of_ref": "indicator--cee9e037-ce13-458a-bb44-247a4ad47d0b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a154d97f-0916-4969-8547-0ebd8b8a2bac", "sighting_of_ref": "indicator--51479d76-3fa0-47a0-90fa-602bbe6edbfd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8d891e-7bd7-4dfc-81eb-075062a2da5d", "sighting_of_ref": "indicator--51479d76-3fa0-47a0-90fa-602bbe6edbfd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c648fde1-ca02-4554-8f24-6553dc2ca0c5", "sighting_of_ref": "indicator--aa8c4b2b-60e6-4047-bf22-3bd2e1643780", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ee86da-1f30-4f5c-8cda-6580b1be18d5", "sighting_of_ref": "indicator--aa8c4b2b-60e6-4047-bf22-3bd2e1643780", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24500a2-66a8-467c-b6e9-c8992bacd97b", "sighting_of_ref": "indicator--e6331b8b-b289-4976-965b-3d31290987f2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07cf024-290d-4ce6-bad6-84bbbba7ee09", "sighting_of_ref": "indicator--e6331b8b-b289-4976-965b-3d31290987f2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e92587-072f-4117-9b19-16427f9c292d", "sighting_of_ref": "indicator--1d384615-0e10-444b-b082-d2234ac8face", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bccc8057-f4bc-4252-ba7b-11fe61f57897", "sighting_of_ref": "indicator--1d384615-0e10-444b-b082-d2234ac8face", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2103c9aa-e2de-4530-a3b6-65d78e104753", "sighting_of_ref": "indicator--17e687d4-3c53-4e91-aa94-9e44e29eac1d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b401177a-f066-4b51-ab52-d80982f96310", "sighting_of_ref": "indicator--17e687d4-3c53-4e91-aa94-9e44e29eac1d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997f66ed-9afe-4834-816e-4ff0b2584f73", "sighting_of_ref": "indicator--58c77a30-89bc-4fd3-a82b-e9180d95905f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514ed81f-b8b3-48f0-bf97-254ab18fdd40", "sighting_of_ref": "indicator--58c77a30-89bc-4fd3-a82b-e9180d95905f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc5542b-8c5c-4c11-bfdc-eeb2a1b354d2", "sighting_of_ref": "indicator--3b3a636d-4cfe-48e6-ac96-9e9337033170", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b76bde-98ad-44c9-a1b4-d735368d3835", "sighting_of_ref": "indicator--3b3a636d-4cfe-48e6-ac96-9e9337033170", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c66ec1-eb30-4c02-af11-e6ba07b7d1c9", "sighting_of_ref": "indicator--df4c6bea-345f-4f40-a1e7-4d4faf3a8b96", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ce0248-f044-4759-81b9-9162656eb68a", "sighting_of_ref": "indicator--df4c6bea-345f-4f40-a1e7-4d4faf3a8b96", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638d44a5-6cf0-4b35-9887-4d671486d14a", "sighting_of_ref": "indicator--f3aaf394-0c4a-4a98-8c14-37015faff42c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d0a3ae-f8cd-4958-ae84-69d2adc74fbf", "sighting_of_ref": "indicator--f3aaf394-0c4a-4a98-8c14-37015faff42c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de5b55c-33e3-4ba4-b972-96da27c59964", "sighting_of_ref": "indicator--17ea7ce6-18bf-41e5-b51f-bf09567dc0d5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f874b9a3-e37b-46e7-8ad6-092ba0448b4c", "sighting_of_ref": "indicator--17ea7ce6-18bf-41e5-b51f-bf09567dc0d5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212458b2-1c74-4216-816c-53a26b5521c1", "sighting_of_ref": "indicator--f3ecc306-1564-4092-ad3e-c56e2496dd9c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad55f458-8eb6-412f-a3e3-284a1b76fc1f", "sighting_of_ref": "indicator--f3ecc306-1564-4092-ad3e-c56e2496dd9c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fd5f3f-150f-444e-8932-b26c56283244", "sighting_of_ref": "indicator--6abd3e42-48a4-47f9-8f50-660f9b7ca812", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999bffb8-24f9-4947-90e4-55cb6baa44d4", "sighting_of_ref": "indicator--6abd3e42-48a4-47f9-8f50-660f9b7ca812", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec530a0-60d5-4807-8bb7-473c76750b58", "sighting_of_ref": "indicator--2888686c-ee0d-419d-a95b-2c0180e9c902", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43ceeef-9f76-4652-aff8-a527f2e0d50e", "sighting_of_ref": "indicator--2888686c-ee0d-419d-a95b-2c0180e9c902", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e01a18d-ce16-4fb7-9c50-1aa6b3329545", "sighting_of_ref": "indicator--96677bbc-361b-4ca4-86dc-8a6d3f7598a2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cfa7e62-2cec-458f-97ac-37b0363d0170", "sighting_of_ref": "indicator--96677bbc-361b-4ca4-86dc-8a6d3f7598a2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31a8a55-a4bb-4dcc-abbb-a5f8eb522a63", "sighting_of_ref": "indicator--5facda33-cbbe-4fd8-b825-76dd1dd79fa5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9c04e4-93c7-4471-bd7d-519d6e4b8686", "sighting_of_ref": "indicator--5facda33-cbbe-4fd8-b825-76dd1dd79fa5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b585f5-8922-4bf1-86f6-6e29f39d1128", "sighting_of_ref": "indicator--64a657ba-d2cb-42a0-aa67-4451cea4f962", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285202c8-a629-4608-bf4b-7c5fd2cb832a", "sighting_of_ref": "indicator--64a657ba-d2cb-42a0-aa67-4451cea4f962", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c20ece-6dc0-4f2c-b0a0-9b1fbfc8af02", "sighting_of_ref": "indicator--2320c68a-44d0-452b-ae39-2d266d08cb1c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb6bb21-2edb-443f-b055-827b0b85f720", "sighting_of_ref": "indicator--2320c68a-44d0-452b-ae39-2d266d08cb1c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ea4f08-bdb6-435b-a052-f3a410a52552", "sighting_of_ref": "indicator--13e28fae-067f-43de-9f42-76697576db99", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abd941e-9fd1-4ffc-931b-dd755c7fbb3e", "sighting_of_ref": "indicator--13e28fae-067f-43de-9f42-76697576db99", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e68a40-de68-4dff-a304-fa2c8c9695c5", "sighting_of_ref": "indicator--6374ae95-794f-409e-9147-8400dc95a4f7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e94fd6-c1cc-4605-bc73-c8b5cf60ceb1", "sighting_of_ref": "indicator--6374ae95-794f-409e-9147-8400dc95a4f7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1033a86e-0954-43e3-9bac-1dc3fe59c526", "sighting_of_ref": "indicator--477c18ee-c972-4bec-994e-abf3126ba041", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc833dc-cd54-4bef-a31c-ccef66300e0f", "sighting_of_ref": "indicator--477c18ee-c972-4bec-994e-abf3126ba041", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b05796-e432-4fe0-9fcb-1f489c768376", "sighting_of_ref": "indicator--6eb08e70-5c40-4361-890e-b302ac24e0b4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9ca277-ce19-4602-8416-b6e66872ccf2", "sighting_of_ref": "indicator--6eb08e70-5c40-4361-890e-b302ac24e0b4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18219379-42b4-4a71-966e-10f6656034f4", "sighting_of_ref": "indicator--dd42c663-f9c0-49aa-bebe-fb2b9cae9bc0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227355a5-ffd8-47fd-8bf9-6bd469d9d384", "sighting_of_ref": "indicator--dd42c663-f9c0-49aa-bebe-fb2b9cae9bc0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52f1972-8e99-4d01-b5d2-a018ce2b5d67", "sighting_of_ref": "indicator--ac45bacd-d09b-446b-9635-0fa9af7a40b1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316a291e-5154-4fdb-9775-b5418605f3e3", "sighting_of_ref": "indicator--ac45bacd-d09b-446b-9635-0fa9af7a40b1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74c0f3a-d90f-4a7c-bd25-817fe0d0809a", "sighting_of_ref": "indicator--4373c916-3dd0-4b96-9272-5d136b054d51", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87229b63-5c1b-41c3-8438-27a0485531ed", "sighting_of_ref": "indicator--4373c916-3dd0-4b96-9272-5d136b054d51", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb32bddd-8fe8-4c8a-a191-ab15ac53d258", "sighting_of_ref": "indicator--511535c8-d5c2-492e-ba0d-ace66f4b0da3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8fd1578-277d-42f5-b04c-51475dbd1da4", "sighting_of_ref": "indicator--511535c8-d5c2-492e-ba0d-ace66f4b0da3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7739f9d0-029b-43ae-9155-650ebfcdd9b9", "sighting_of_ref": "indicator--cfdfb78e-1efe-4761-957e-9f4b2a026569", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4083f4-24d5-44f8-b492-a439845e622c", "sighting_of_ref": "indicator--cfdfb78e-1efe-4761-957e-9f4b2a026569", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa8edc1-0ec1-4bf5-8076-98d8bb61347d", "sighting_of_ref": "indicator--d166a2ec-b945-452b-a6a5-d41fea2fa3a0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d155d346-6518-45d1-ac40-273271fdbb54", "sighting_of_ref": "indicator--d166a2ec-b945-452b-a6a5-d41fea2fa3a0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a46cd0-c634-47c3-8088-b40102b88d6f", "sighting_of_ref": "indicator--c8e87047-b1c8-43e0-ab9c-2a5c195d3278", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14116108-8c5c-42de-98a1-252ff9f3ae1c", "sighting_of_ref": "indicator--c8e87047-b1c8-43e0-ab9c-2a5c195d3278", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bafa4c5d-0437-478b-9ac8-58e369e7e005", "sighting_of_ref": "indicator--e225ea9e-890f-4e84-9d6f-95406dc7e734", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1b5958-2b02-4c4d-a965-b0bbeb387a91", "sighting_of_ref": "indicator--e225ea9e-890f-4e84-9d6f-95406dc7e734", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953f935b-9c98-4092-9722-ceca3f0b3ea0", "sighting_of_ref": "indicator--ed43dcd7-207b-431b-aeae-ee42ff1d1439", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd490ce2-65ba-4d21-aaac-81bab5765471", "sighting_of_ref": "indicator--ed43dcd7-207b-431b-aeae-ee42ff1d1439", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c9b082-93ed-498a-bbb2-6c3ce18184b7", "sighting_of_ref": "indicator--faea3281-da9b-4478-9ec0-45ca7d672b98", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b30770-ecc9-4910-9bfd-16b9bda10ba9", "sighting_of_ref": "indicator--faea3281-da9b-4478-9ec0-45ca7d672b98", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf6fffd-d58d-4296-94c9-d98056721b63", "sighting_of_ref": "indicator--226be804-2243-4b73-a1b7-08b134aca102", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9784b512-0787-4707-bf7a-fb85d4aa92c7", "sighting_of_ref": "indicator--226be804-2243-4b73-a1b7-08b134aca102", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb97c40f-8826-4ad6-ab9a-b6492344a04c", "sighting_of_ref": "indicator--766d048d-ca41-423e-9b2a-ff320f759442", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19c0614-e1dc-4835-bdd3-2cdda75b4ef4", "sighting_of_ref": "indicator--766d048d-ca41-423e-9b2a-ff320f759442", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff26965-cf1b-4f42-bea6-35252fc71a32", "sighting_of_ref": "indicator--5572dd1c-85f7-46df-bf8a-24356c6a7e82", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0db1eb-9ebc-41c9-b255-094ca8e20b10", "sighting_of_ref": "indicator--5572dd1c-85f7-46df-bf8a-24356c6a7e82", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f3bb1c-87a8-4f4f-bf57-aa9a3a6d6029", "sighting_of_ref": "indicator--369bd86c-bc36-4ead-82cd-25f5a2d9ad51", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ead4216-81a2-4cc5-bb2a-012b892457ea", "sighting_of_ref": "indicator--369bd86c-bc36-4ead-82cd-25f5a2d9ad51", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db39364b-51ab-4e49-a718-e0f1f5d78644", "sighting_of_ref": "indicator--a225bc14-6d6f-4d77-8702-29926960f015", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53caa8d2-5b20-46e3-bca6-bec360d83467", "sighting_of_ref": "indicator--a225bc14-6d6f-4d77-8702-29926960f015", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071c1874-8296-4ca6-b698-8584180c6525", "sighting_of_ref": "indicator--818e78e4-806f-4020-a8a5-a443eed62701", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c9499c-b4a6-40ab-b6e0-f838267afd55", "sighting_of_ref": "indicator--abf96e02-867d-49f4-a5a7-a757e4a5263e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15e4619-8c62-47cb-be94-91df377da1e2", "sighting_of_ref": "indicator--abf96e02-867d-49f4-a5a7-a757e4a5263e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3262332-d60e-47b3-b9cd-51426af6515b", "sighting_of_ref": "indicator--abf96e02-867d-49f4-a5a7-a757e4a5263e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e927e106-02fc-41fc-9481-4375b5920d73", "sighting_of_ref": "indicator--ad9fbe23-6f29-4c08-bc4e-54b2d73b58b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2a0014-513b-4abd-a74e-13e77c13d92e", "sighting_of_ref": "indicator--87afe94f-abae-4ce1-b7fe-2215ee6c7a39", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee96a1ed-ccfc-4a8c-b7c7-928cae7a8667", "sighting_of_ref": "indicator--3ddf274d-f3ce-432f-873a-3c0e271c6fbc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7cf5b21-40ea-40af-9830-9af2eebbc725", "sighting_of_ref": "indicator--74eaa094-3301-4e1e-8677-a09aac57397b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3e0307-6efc-46ab-80a2-83fa94ba1a76", "sighting_of_ref": "indicator--74eaa094-3301-4e1e-8677-a09aac57397b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b39ab4-81e2-47f8-a9a7-2e7567462f3c", "sighting_of_ref": "indicator--74eaa094-3301-4e1e-8677-a09aac57397b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffca6b67-c859-43a1-b7d9-71c0623b3f2b", "sighting_of_ref": "indicator--90d40f4a-875a-4aa0-a661-9bf31d936a0f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfc52ec-508e-49e7-8981-fd89391687b5", "sighting_of_ref": "indicator--90d40f4a-875a-4aa0-a661-9bf31d936a0f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a360d8b9-a746-44b9-8cc0-0bb2e472b2d9", "sighting_of_ref": "indicator--edc82710-65d7-4eec-b3cd-2175acd5b889", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d4c8d4-fd02-40ab-b9b9-277fade43249", "sighting_of_ref": "indicator--edc82710-65d7-4eec-b3cd-2175acd5b889", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743073c4-76fa-4b61-b3d1-9440442d28f0", "sighting_of_ref": "indicator--d1bc5eb5-1dbb-42b8-ab7c-f32a3e05eed7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be88e9df-dc9a-4e41-9316-1873e558309d", "sighting_of_ref": "indicator--d1bc5eb5-1dbb-42b8-ab7c-f32a3e05eed7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23734aff-3278-4315-bcbc-baace9af164e", "sighting_of_ref": "indicator--313b8db3-591c-4234-8500-f96d896b5bc1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf37be6b-c9b8-4519-9575-6bf277c02506", "sighting_of_ref": "indicator--6b8a5624-8a8f-4c4d-bb3c-c4c70a139b24", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6443f309-76de-4a1f-bc7f-1c5d31c87253", "sighting_of_ref": "indicator--693e85f9-36bc-48c4-ae34-3dcd7152cc1f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6f18f4-f69c-4755-ab99-b82a24639562", "sighting_of_ref": "indicator--693e85f9-36bc-48c4-ae34-3dcd7152cc1f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ea537e-14fb-4b08-804a-3a50e52ff869", "sighting_of_ref": "indicator--cf370711-1409-42a5-983c-bb6d7c7cf71e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a32dda-8d45-4f5f-85f5-0663c5be4009", "sighting_of_ref": "indicator--cf370711-1409-42a5-983c-bb6d7c7cf71e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c9b8c4-f3b0-48b9-abef-64470b219fdf", "sighting_of_ref": "indicator--27343438-a50d-4eef-9911-968424a8fba9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07fc53c9-804d-4c53-b04c-4aea060c5668", "sighting_of_ref": "indicator--27343438-a50d-4eef-9911-968424a8fba9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8278153-db60-488c-994c-3c1ca3d2971b", "sighting_of_ref": "indicator--59019e6d-e952-4b03-80f9-42fc925d87e4", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e913a02-1d11-4281-ace4-80011c92230c", "sighting_of_ref": "indicator--59019e6d-e952-4b03-80f9-42fc925d87e4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da090237-9cf0-45c4-acd4-d7427da3e6c6", "sighting_of_ref": "indicator--59019e6d-e952-4b03-80f9-42fc925d87e4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e972352b-b6a0-415e-87d9-2d15719151a8", "sighting_of_ref": "indicator--ddae5c74-0b3a-4179-85a8-0838b63ebe21", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1c3317-1b5b-4fd6-a3c4-3990c844d001", "sighting_of_ref": "indicator--791763fe-58e6-4ccc-92ba-dea11e8de86c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa516159-fc7d-4ba1-a291-13a28bb95368", "sighting_of_ref": "indicator--791763fe-58e6-4ccc-92ba-dea11e8de86c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1c6c55-8096-4560-9f4f-e118f56416dd", "sighting_of_ref": "indicator--791763fe-58e6-4ccc-92ba-dea11e8de86c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e361a246-3ba6-4754-8cec-048b58c2be4b", "sighting_of_ref": "indicator--12681e19-df73-4fb8-a20b-41c8467da895", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d9cadc-96dc-4a7a-ab22-f2ceef4d8b5c", "sighting_of_ref": "indicator--12681e19-df73-4fb8-a20b-41c8467da895", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3397476e-61d3-41c3-af2f-6955e2193073", "sighting_of_ref": "indicator--c737094b-e7a7-40ce-80b4-f69fb95efb3e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9a0f54-89de-4578-a795-107c99f9b123", "sighting_of_ref": "indicator--38454a13-de9a-4ec9-950b-f92dac23510b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f601cc-26fc-486a-a21a-1dce68446ea6", "sighting_of_ref": "indicator--69f9cc9f-b40a-4698-af35-1a9428218f3a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40336a26-784b-4263-b53b-dae2d7fa3578", "sighting_of_ref": "indicator--69f9cc9f-b40a-4698-af35-1a9428218f3a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b9a847-cabb-45a3-946d-97330f31b414", "sighting_of_ref": "indicator--69f9cc9f-b40a-4698-af35-1a9428218f3a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c458cc5-4051-4ff8-910f-bafcf55df691", "sighting_of_ref": "indicator--ff2c3baa-ffd0-4309-96b8-61ce6d39032d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69463bcc-0606-4efb-ad95-2eeb3df2729b", "sighting_of_ref": "indicator--2a114f3b-175e-4aa6-b3ff-f261e5275ec8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75aee143-d9a3-4fe0-b04d-a4f9da1e1ca7", "sighting_of_ref": "indicator--becd6e80-bc02-411f-bf91-edf8ba67288d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f737278-6b64-4ffc-9214-141b7a3bbef3", "sighting_of_ref": "indicator--6356558a-1a65-43ee-9de1-033a928f82c0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1dd20d9-1029-4a7f-b919-e85aed01587a", "sighting_of_ref": "indicator--3232e85d-db92-4b84-b14c-01a7bfb0c21c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2b68dd-ecaf-4da5-a447-abb85b477e85", "sighting_of_ref": "indicator--4b98ff5b-0167-47c2-beb0-ee80fa05c417", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca94db66-ec39-47c0-bda9-755e015cd7cd", "sighting_of_ref": "indicator--ac0ed8e7-df3c-433b-bf6a-fae5350cf0eb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c41d0fd-4a57-4c81-aecb-3ab042ae10bc", "sighting_of_ref": "indicator--dc047c68-7984-468b-87cd-986d02038e85", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6706f96-7a61-47aa-8bfe-7f0c40d6817f", "sighting_of_ref": "indicator--1bbbc8a0-e97b-414f-bb4f-b62a0eec48ab", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b73ff2-d6cf-42fb-a4fc-e69cf2059569", "sighting_of_ref": "indicator--70e978ec-647f-4ddb-9e10-0b7546fd4ceb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--232fb0e7-f404-4ea0-83d2-21e3f3362b20", "sighting_of_ref": "indicator--70e978ec-647f-4ddb-9e10-0b7546fd4ceb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6f9493-eb2f-47a1-a045-d4d8d9770bb7", "sighting_of_ref": "indicator--70e978ec-647f-4ddb-9e10-0b7546fd4ceb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2707df62-2e03-4b8e-a760-10985642463a", "sighting_of_ref": "indicator--c2973be9-81aa-4a3a-8304-7e7b3cbe0a64", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f8dbcd-3006-4003-99fc-2a234982593f", "sighting_of_ref": "indicator--c2973be9-81aa-4a3a-8304-7e7b3cbe0a64", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2e4ab8-2a8d-4e23-8c30-05eb3cb9b25c", "sighting_of_ref": "indicator--c2973be9-81aa-4a3a-8304-7e7b3cbe0a64", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2433d4-6ceb-4d84-8133-2ed98199e808", "sighting_of_ref": "indicator--64d42e9a-1977-4cf0-afc3-763134aa87b6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2bc8693-0a6a-4c70-9a77-afcbf01f744b", "sighting_of_ref": "indicator--64d42e9a-1977-4cf0-afc3-763134aa87b6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a915308-44ad-44df-9665-06b67c0114f3", "sighting_of_ref": "indicator--64d42e9a-1977-4cf0-afc3-763134aa87b6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ba9ca6-2f79-4c6f-a514-354cb86dd8e6", "sighting_of_ref": "indicator--03af2e61-bff9-4133-afa4-8e62721c0cfa", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29438773-dae8-4a23-8b3a-d265762812e3", "sighting_of_ref": "indicator--03af2e61-bff9-4133-afa4-8e62721c0cfa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49df194d-980d-467b-8737-f65047341048", "sighting_of_ref": "indicator--03af2e61-bff9-4133-afa4-8e62721c0cfa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6520933-38f3-4a8a-befc-bcb4ee6dcf0e", "sighting_of_ref": "indicator--61d04be9-6d4c-4fcd-9b42-8421e0907347", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9313059-cfda-48a2-89fc-ecc64fc9e2d6", "sighting_of_ref": "indicator--61d04be9-6d4c-4fcd-9b42-8421e0907347", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0654c469-ab09-4471-a6d2-4eae1e2f559c", "sighting_of_ref": "indicator--61d04be9-6d4c-4fcd-9b42-8421e0907347", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27fd57a-c2fb-4096-8f43-84c1dab40ddb", "sighting_of_ref": "indicator--3a7e7f7f-0418-486d-9804-d6bd127d6763", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3892619b-08d3-4a94-8187-5422e2679f56", "sighting_of_ref": "indicator--3a7e7f7f-0418-486d-9804-d6bd127d6763", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc31b5b-e1a2-4506-b178-be7740016142", "sighting_of_ref": "indicator--16c885e6-864e-453c-ad26-99f087a15b68", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b749b889-d1b0-4563-8f9b-6ba20d5ff06d", "sighting_of_ref": "indicator--02b3cafa-cf19-4e97-a324-4d43c91e81c1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24c3599-6d26-473a-b0f9-57a960bd4dbf", "sighting_of_ref": "indicator--dbf57669-d0a8-485d-9272-57e906fdf4c2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be897c07-d5a8-4be2-b601-dca6124495e3", "sighting_of_ref": "indicator--dbf57669-d0a8-485d-9272-57e906fdf4c2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa68a96-7284-4818-a53c-395e556bd353", "sighting_of_ref": "indicator--dbf57669-d0a8-485d-9272-57e906fdf4c2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b925b443-2f0b-4cac-9df8-d0e9fc856823", "sighting_of_ref": "indicator--326505d7-ee86-450b-bc5f-49c35a5263cb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ee8135-5bd3-4c3e-8087-9f23bcefaa8a", "sighting_of_ref": "indicator--daff1abb-b8a6-47c2-b483-44ae7bc09b1a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ed03bd-c62e-404c-b22c-d24d8e61eebb", "sighting_of_ref": "indicator--396818b0-1ce0-4bff-9aa8-c7c1022d6b88", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935f40f9-7d21-405e-9992-a92504ee09f4", "sighting_of_ref": "indicator--d094c0b1-b73e-41f3-8023-32ee481ac9f5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9f663e-0367-4813-bb14-76a2c0c5971e", "sighting_of_ref": "indicator--c47918ef-e78e-448e-a7ec-cd501d17b9a3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df6205a-7b1f-4ad7-b271-ce71b886eccd", "sighting_of_ref": "indicator--07884ec3-cb14-4a76-9a0b-652c541be736", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa71b181-14dc-4e72-9db6-7b64934796f6", "sighting_of_ref": "indicator--31590e0b-9b9b-4f03-a748-a9f3270ec083", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfbc13e-66cd-4127-bab2-dfc49fe7aae0", "sighting_of_ref": "indicator--e2fba473-f2ff-41e0-ac25-576746fb0bed", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794b2e48-5057-43af-9afd-211100e6d372", "sighting_of_ref": "indicator--e9379087-ef4a-47ac-ad64-4cc9fc719a1a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28430ab3-eb88-45ea-9675-857ba97d3899", "sighting_of_ref": "indicator--e9379087-ef4a-47ac-ad64-4cc9fc719a1a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e7be3e-cd0e-4805-a5bf-bf313007dbab", "sighting_of_ref": "indicator--6fa81ca4-e9b9-4dcf-b809-7a2cc1ae6ff1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f5fbac-0eb9-4179-a238-b3b5329827e4", "sighting_of_ref": "indicator--9c0896cf-b0aa-4a12-be85-9d1759041610", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae95c23-801d-4092-b6b4-c382b318a258", "sighting_of_ref": "indicator--10672a8b-a3bc-4a53-97f8-02f93fb5539a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a69bb5-f0f6-4f9c-9088-22eb0d35f2a5", "sighting_of_ref": "indicator--96c1625d-19f8-4f98-b261-ea003c0153f3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6659b451-224f-46f0-a75a-5c395d0d854d", "sighting_of_ref": "indicator--96c1625d-19f8-4f98-b261-ea003c0153f3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac205741-b0d5-4976-b44c-07aa1ee6e155", "sighting_of_ref": "indicator--1dcb1037-04c6-48a2-ae8b-1c7696ac9932", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1676b68d-7aca-46fc-be45-ceba3663ab72", "sighting_of_ref": "indicator--9e1856c2-0d4c-4271-84bd-181b27eefdb6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe9f743-4f9a-4a47-834f-0dcbb021ee63", "sighting_of_ref": "indicator--161bc492-4e65-4c6f-a947-2992d7065dc0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2011e631-7a2b-4a4c-925b-b3be13e65acd", "sighting_of_ref": "indicator--e74950a5-f8d0-463d-9bbc-5fab3e060dee", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab9b938-f495-4599-aade-33360cea7ef8", "sighting_of_ref": "indicator--39246f66-a4a5-447e-9fac-e4ee56e95602", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b759a6c0-0b72-41a4-8d6c-2897b041cbdc", "sighting_of_ref": "indicator--39246f66-a4a5-447e-9fac-e4ee56e95602", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ecbfff9-69d3-4f16-aba7-62cf5fb4705d", "sighting_of_ref": "indicator--c125be77-b89a-4a9f-abdc-a4c457a8fa34", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5971833b-76f2-490e-aeaa-8cb7218b84a7", "sighting_of_ref": "indicator--ced1a25d-43f2-41a1-af50-659674d437d0", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f59f957-a2c0-4a5a-bd58-c0c68112c919", "sighting_of_ref": "indicator--5e5ec371-af83-468f-9cec-6d8c4b7863e9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f66643d-c443-42cb-a87b-16b36a5d176d", "sighting_of_ref": "indicator--c236d211-f366-4546-8142-071f21fda6e5", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831fa944-b76e-4a6e-8d37-3204016ff96b", "sighting_of_ref": "indicator--c236d211-f366-4546-8142-071f21fda6e5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fec3bd1-259d-465e-b276-0c9fcd13af7d", "sighting_of_ref": "indicator--c236d211-f366-4546-8142-071f21fda6e5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa691f32-25cb-4234-9af1-164486c52716", "sighting_of_ref": "indicator--8476cdf0-4b4b-43de-bba0-d0eb54debfc9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb8be9b-512e-4d42-8e76-edb7e51c7223", "sighting_of_ref": "indicator--8476cdf0-4b4b-43de-bba0-d0eb54debfc9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e947fbaa-6d0c-48c3-80d0-2432afc00e4f", "sighting_of_ref": "indicator--8476cdf0-4b4b-43de-bba0-d0eb54debfc9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4ba907-4005-4db8-8b24-99d1f11fb3ec", "sighting_of_ref": "indicator--6c5b21a8-b2d2-4e2b-8fdc-1e6dbfc035eb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3df129-66cd-4ca1-9b5d-78ed147bdf10", "sighting_of_ref": "indicator--aec7b6c0-45e6-47a7-81ad-b58604ff1a91", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731193b7-264a-457b-b428-772e0a9b4e55", "sighting_of_ref": "indicator--1ca82cc1-aca0-432c-a379-24c9407d61ac", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00dc810c-ee78-46de-8d83-e5ae0580ff30", "sighting_of_ref": "indicator--a2aad9d5-fd60-4d94-a9cd-6451332890d8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094ca9b7-0d65-45f7-940b-5a022b782a0e", "sighting_of_ref": "indicator--151a9909-f69d-4418-ba54-d967b44418ad", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4cf5a3-5154-41d0-8f43-681922f2438a", "sighting_of_ref": "indicator--c02d9dfb-f610-4c39-8f44-185e9466e6dc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab68851-31b4-4195-80ad-349bec367d8e", "sighting_of_ref": "indicator--85c417e5-bc1c-48d1-915e-26cf9e10df4f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071712e2-b778-4544-9b3b-6f7415ffa29c", "sighting_of_ref": "indicator--cae4f575-4d32-4711-ac31-6bc45695c8cb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e63fefb-a7d4-4949-b579-0ddfba17003b", "sighting_of_ref": "indicator--d325e944-ab28-4007-b3ce-7a763c9f59b2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c548da35-1a98-4938-810a-a67d4fabd407", "sighting_of_ref": "indicator--bfb7d358-626c-4ee8-a583-9d59b0803dfc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0473cf-eaa2-4f03-af91-185929850801", "sighting_of_ref": "indicator--444b81e7-21ec-4de7-8645-2a7b0c2bf28d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a248114-8ab5-43f3-8548-4174f0f33a66", "sighting_of_ref": "indicator--75c25792-37f4-4e3f-a6d6-c9e77bf34f52", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723929d3-d9ac-43ed-824c-10d91f63aea9", "sighting_of_ref": "indicator--aa8fcb14-8e95-4498-8434-998527bb87dd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5abc2f2-b9b3-4830-aac7-51cad170c75e", "sighting_of_ref": "indicator--5e42ad2b-cd27-4140-a955-576ae76af360", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08dff496-9a4c-4012-aec3-5f5414521444", "sighting_of_ref": "indicator--5e42ad2b-cd27-4140-a955-576ae76af360", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a6ed95-3dee-443d-aea0-896edda20b34", "sighting_of_ref": "indicator--f5a5c04a-60a4-4b7f-8e2b-4022d4b6b95b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee51ce57-08ba-496f-8c41-ddc3f22b03c7", "sighting_of_ref": "indicator--869824ee-0b0a-474e-ab44-893f17450020", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d50d59-3594-4f90-bb7d-11fdbd0b8206", "sighting_of_ref": "indicator--869824ee-0b0a-474e-ab44-893f17450020", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1316b693-04ec-4663-bd3f-1ef870620349", "sighting_of_ref": "indicator--869824ee-0b0a-474e-ab44-893f17450020", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e69bb3-0181-4595-8850-eafab2de2986", "sighting_of_ref": "indicator--ada1c72a-a20a-4709-8793-7a069c5dbef6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b439829f-2bde-46c1-b975-24afef73c8d3", "sighting_of_ref": "indicator--ada1c72a-a20a-4709-8793-7a069c5dbef6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338f52fe-9f6f-4df7-98b9-8bf8945a43b3", "sighting_of_ref": "indicator--ada1c72a-a20a-4709-8793-7a069c5dbef6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29ee57a-fab5-4b5a-abe0-387c3ddde569", "sighting_of_ref": "indicator--8e55a7e0-7f74-4a58-a403-463b90b3f4d6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878cc8f8-aefa-488c-b25b-2d886b98b56c", "sighting_of_ref": "indicator--8e55a7e0-7f74-4a58-a403-463b90b3f4d6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98eae69b-9bfe-4085-b590-6219b0b7929c", "sighting_of_ref": "indicator--8e55a7e0-7f74-4a58-a403-463b90b3f4d6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e635b202-e399-4b96-8a80-61b28c5d0d84", "sighting_of_ref": "indicator--f852722b-55d5-4422-b23a-09db1ce401e5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58082734-bd5f-4c3c-94d2-de872191946e", "sighting_of_ref": "indicator--95924c0f-13f8-4345-ab20-950e1e3706fb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec780f5-9cad-4370-9929-02ae78eb34e1", "sighting_of_ref": "indicator--24b1e113-7c62-47d9-86a3-7f4bed547b7c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a147f0-f895-45fc-b0a9-3fb714899f5b", "sighting_of_ref": "indicator--515b2401-3ac9-41de-98d9-30118f82c27e", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa95ea0-a004-4ff6-bff8-d131851cdd67", "sighting_of_ref": "indicator--d6cf3ad5-1623-4a80-8ca3-ddc191694e84", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b919334-68b2-44ec-82e0-ffaed0228221", "sighting_of_ref": "indicator--7dd0e423-62ba-4b64-9a99-b1d37b317f96", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d58518-a3af-431e-99cd-4115356a3a12", "sighting_of_ref": "indicator--f73fba97-27c9-478c-a264-5738a17b4cb6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a90792-ad97-4f09-8d0d-a7792d62335f", "sighting_of_ref": "indicator--bf130492-2b5b-4dc3-902b-83c7a197aa92", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03301af9-8a09-4773-b029-9a932d07664d", "sighting_of_ref": "indicator--bf130492-2b5b-4dc3-902b-83c7a197aa92", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9990662a-0665-4611-8dd9-83ed6db9d9d0", "sighting_of_ref": "indicator--0b355b22-fee6-41d2-8a5f-11a823149045", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76141942-ec78-4e7d-8eb6-adf363008997", "sighting_of_ref": "indicator--0b355b22-fee6-41d2-8a5f-11a823149045", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65ea2ce-b81e-496d-adec-f45252fc287b", "sighting_of_ref": "indicator--04340faf-7804-4d64-af5e-91f3b747f6d3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be971703-1565-4b92-8570-3815c7216032", "sighting_of_ref": "indicator--04340faf-7804-4d64-af5e-91f3b747f6d3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e72522-a788-4eec-bd8c-ab4e39bce1ba", "sighting_of_ref": "indicator--8ac50fbf-ce12-498f-8aa3-bd4c438a64f2", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3b8bae-5c6c-4cd5-89ed-f956e5a2c6c8", "sighting_of_ref": "indicator--8ac50fbf-ce12-498f-8aa3-bd4c438a64f2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331e26be-3bd3-4a68-b4af-f10870dc3052", "sighting_of_ref": "indicator--f4cbf1a7-9cb1-49fb-85e6-294b0a7c024b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ca4666-32ef-4568-ba6f-760995cca8f0", "sighting_of_ref": "indicator--f4cbf1a7-9cb1-49fb-85e6-294b0a7c024b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612854a0-16d6-4aad-a6b3-65c535fb93b4", "sighting_of_ref": "indicator--d8b6f1dd-df07-48df-9db3-ae812d2aacd4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acae2123-2011-4489-8588-f24ec5ec61b9", "sighting_of_ref": "indicator--d8b6f1dd-df07-48df-9db3-ae812d2aacd4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64836200-32c2-4227-8b33-29bf8dc0421d", "sighting_of_ref": "indicator--a811eec4-0123-4764-80e0-f1a7f578c284", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d142d85-f365-4d1b-bf13-73751bef511d", "sighting_of_ref": "indicator--43f28c41-d2b9-41f0-92fe-e8d7d1e1915a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244c7276-ab41-44e6-b5ec-615b7b1d289a", "sighting_of_ref": "indicator--43f28c41-d2b9-41f0-92fe-e8d7d1e1915a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637074ab-a2bb-4d75-a1e6-2c0f225b8ba3", "sighting_of_ref": "indicator--f6f43464-71ad-490e-b58b-c024f9bb0d02", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13291db5-0e11-44f5-8f8e-e683bb8bca67", "sighting_of_ref": "indicator--f6f43464-71ad-490e-b58b-c024f9bb0d02", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc075931-26c9-44e7-8933-75fd8b6506a4", "sighting_of_ref": "indicator--24ee6ce8-30c1-485f-a8a6-dfbe0de4574b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2590a4be-c9b1-40ab-987a-2b470dfdccb8", "sighting_of_ref": "indicator--24ee6ce8-30c1-485f-a8a6-dfbe0de4574b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd24812-f4a3-4d76-839e-05c133070477", "sighting_of_ref": "indicator--66f8f334-6dee-4d2b-bd74-844a3dc1eda3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04030fb-95e1-4266-a4e7-3f18acf0a5f5", "sighting_of_ref": "indicator--66f8f334-6dee-4d2b-bd74-844a3dc1eda3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5826b67e-32bf-40f0-a9a8-0136f84d5b2f", "sighting_of_ref": "indicator--396a0e84-f845-43e5-979e-f6b9dd74ce9d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47b4c24-d7a2-45db-ae9a-85c5465b3e43", "sighting_of_ref": "indicator--396a0e84-f845-43e5-979e-f6b9dd74ce9d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124ced5a-8df2-4d3f-9b37-f0492195de53", "sighting_of_ref": "indicator--0299465c-3a6a-4fc3-9bc2-53706df15983", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc125d8-a67a-4e14-a47b-de2614b8ed98", "sighting_of_ref": "indicator--625eab01-32ac-4425-9fda-c4cb7b564f0c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e52afb-a167-4dcf-a796-da3a186dcf24", "sighting_of_ref": "indicator--625eab01-32ac-4425-9fda-c4cb7b564f0c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6727c68e-e742-4a3f-beac-31bba09ba78c", "sighting_of_ref": "indicator--696271f0-7b63-4fc9-bbc8-ea3cab75047e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b2d7b5-5710-4263-aece-54e1933a8ab4", "sighting_of_ref": "indicator--696271f0-7b63-4fc9-bbc8-ea3cab75047e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ecbbe6-e294-4fad-b16c-2b9b7f6452ab", "sighting_of_ref": "indicator--a4d896a3-3de4-4092-9da8-29c8fd12d143", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c251916-a49e-4302-944f-0756f3d58268", "sighting_of_ref": "indicator--a4d896a3-3de4-4092-9da8-29c8fd12d143", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9f3ef5-2c84-48e0-a1a5-5d3622e94bf8", "sighting_of_ref": "indicator--0c8cb2d2-cd22-462e-a5c9-dba699df95ba", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e738ecf2-820f-4749-9d40-d31c39289eaa", "sighting_of_ref": "indicator--0c8cb2d2-cd22-462e-a5c9-dba699df95ba", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d829122-2496-43e8-9615-879322d995cb", "sighting_of_ref": "indicator--ce062044-e6e8-47d1-8aa6-5468c41aef39", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a81234-79b6-4448-9563-3dbc1cad5d0a", "sighting_of_ref": "indicator--ce062044-e6e8-47d1-8aa6-5468c41aef39", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b2b625-15cf-4f3d-97b6-85f31e0e7d2e", "sighting_of_ref": "indicator--367444d6-b6d1-404c-8e82-9d24fe2f6a4f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bfdb8f-0ec5-412e-be35-5aceb26fb825", "sighting_of_ref": "indicator--367444d6-b6d1-404c-8e82-9d24fe2f6a4f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2d5729-e124-414c-98a2-9871f58ad268", "sighting_of_ref": "indicator--42556ea2-9917-4f80-9633-22e9336632e5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e80621a-2c15-4ab4-b4c1-267879eeff57", "sighting_of_ref": "indicator--42556ea2-9917-4f80-9633-22e9336632e5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31999e92-c294-4c6a-b7f3-2c5a52338f78", "sighting_of_ref": "indicator--b31a7f8b-0aad-45cf-88c0-5f661a220558", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6d953c-f53d-4b42-b8dc-f87eb6ebf46e", "sighting_of_ref": "indicator--b31a7f8b-0aad-45cf-88c0-5f661a220558", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228b52cf-963f-4313-8860-740809428fe5", "sighting_of_ref": "indicator--9f2263e0-af45-4e13-80a8-a624747a55a3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5365fb-16fe-47b6-9229-5a727b18f8ed", "sighting_of_ref": "indicator--9f2263e0-af45-4e13-80a8-a624747a55a3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--889d59d7-f3ae-4043-8f63-11c1bae3e592", "sighting_of_ref": "indicator--ae3dff03-2290-4d4b-842f-e2dcb70dee55", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be20860-e1c9-4c2b-8956-15ba54af6865", "sighting_of_ref": "indicator--a5b5f0ab-c4cb-4989-b13e-02b0cac33d41", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f96a5f-6af3-408c-9c74-ff0a963e8dfc", "sighting_of_ref": "indicator--f4d0c8da-59a8-4ff4-aeff-1fdd069a2996", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceceda9a-6255-4e07-a302-2d62324e8bc4", "sighting_of_ref": "indicator--f4d0c8da-59a8-4ff4-aeff-1fdd069a2996", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd60c30a-0025-4e2f-96b0-031d65137f56", "sighting_of_ref": "indicator--a12de4ca-226c-409a-8309-ce73da6f2da3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b969fa-a6a1-4f53-b290-8eaaa3f33c4c", "sighting_of_ref": "indicator--a12de4ca-226c-409a-8309-ce73da6f2da3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6394003-8737-44e3-a436-ef1c141c8848", "sighting_of_ref": "indicator--9de191a1-caa7-4ded-9789-517a4059d88b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61354fb4-dd45-493a-9470-5e2d3e57c4a3", "sighting_of_ref": "indicator--9de191a1-caa7-4ded-9789-517a4059d88b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b67b8f59-2158-4cbe-9b1b-17f7abbc9646", "sighting_of_ref": "indicator--3285c14d-0e40-4684-9ece-a8f9643e37f3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65dc5b58-c456-44da-8f04-59776de52bf8", "sighting_of_ref": "indicator--3285c14d-0e40-4684-9ece-a8f9643e37f3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f5ae37-4528-4577-a0f6-1fd8d0d452af", "sighting_of_ref": "indicator--15346995-06c8-4fa3-aaee-8e5f0039279d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e913cf-9174-4510-bac8-317a03c83cf7", "sighting_of_ref": "indicator--d9989616-3efc-4a62-bdd5-bd04bfdb4427", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3da980-6095-4b26-9038-c5d30b2d7908", "sighting_of_ref": "indicator--92378ed0-b029-4c4d-8d63-812b9f9ae1ee", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c738e2da-55ee-4cec-b1f1-947629c8bbd4", "sighting_of_ref": "indicator--c0aa4bbd-e650-4494-ad7a-f86666f30fa6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42340aa-8aae-4f4c-be6b-73eabacd5466", "sighting_of_ref": "indicator--c0aa4bbd-e650-4494-ad7a-f86666f30fa6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0c1075-20b6-48fc-916b-131944472143", "sighting_of_ref": "indicator--28c1076e-50df-4ae2-951c-775bf92e2adb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8240be4b-46d3-4f7c-aaf4-63cd1919c785", "sighting_of_ref": "indicator--28c1076e-50df-4ae2-951c-775bf92e2adb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29cb3744-1a84-40c6-addf-6096f1bb217b", "sighting_of_ref": "indicator--9c40d62f-538d-42aa-a861-e21aa74d930d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946ddb77-bd5d-446c-9451-35a237da753d", "sighting_of_ref": "indicator--13ed1532-456d-4d54-b3d9-dd66472a791c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5cb8b12-b017-46d1-961e-0e3787cc8147", "sighting_of_ref": "indicator--13ed1532-456d-4d54-b3d9-dd66472a791c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168a4503-7ddc-457e-8907-8c145e275488", "sighting_of_ref": "indicator--ba30cd92-2e41-4af7-a17a-8385c3cf1aaa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5948f3d7-1c3f-44a1-965c-2484ea4e456c", "sighting_of_ref": "indicator--d7cf23d4-2fa9-4848-b888-993f03a2d3e0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64174f20-ec73-4741-9d1f-73875ddbf72d", "sighting_of_ref": "indicator--043ee8d3-50db-43bb-916e-6679f4efaaf7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9e7d71-3291-4ba8-9302-b5ee8b7c7ddb", "sighting_of_ref": "indicator--9f5e7d56-f239-4dfe-a59a-5bdcee05b394", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c988eb-e735-4687-b418-321fb27d3b31", "sighting_of_ref": "indicator--9f5e7d56-f239-4dfe-a59a-5bdcee05b394", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9814fdbe-7bfc-4d1f-9075-177089abe633", "sighting_of_ref": "indicator--9f5e7d56-f239-4dfe-a59a-5bdcee05b394", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ff6c68-c3fd-487a-a4ac-0a9803fb3b27", "sighting_of_ref": "indicator--f77d786b-2d40-4c90-832a-a5d7a8c6bd6a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbb4723-7e28-419f-b7cf-c25adb43a76b", "sighting_of_ref": "indicator--e68ceaa0-2dc7-4583-97a2-e1270eaebe32", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ae02bb-3d82-4764-be98-1f69d8302d25", "sighting_of_ref": "indicator--e68ceaa0-2dc7-4583-97a2-e1270eaebe32", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b2bc53-d812-4e82-8f6c-797cb102c803", "sighting_of_ref": "indicator--83d8a032-e7c9-4a15-a003-deddd8766673", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade6796c-f645-425d-8ef3-99e352039cc6", "sighting_of_ref": "indicator--385c454c-22eb-4c5f-8477-52cc98b1f4d7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29cf47b-6f4c-4b16-80da-bc768c0482b0", "sighting_of_ref": "indicator--9d72e0e5-2072-4fd1-a04d-d8e3be067fa0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a979825d-7747-40b4-89ee-13cd7b48815e", "sighting_of_ref": "indicator--9d72e0e5-2072-4fd1-a04d-d8e3be067fa0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17fc4ca-b3a1-47f8-9c80-eee883ff5c82", "sighting_of_ref": "indicator--2ac5a604-2162-4e67-80dd-a9a354e6dddc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0124544c-46d0-4472-81ef-c36b84e5dca9", "sighting_of_ref": "indicator--2ac5a604-2162-4e67-80dd-a9a354e6dddc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5961f9-2876-48ea-921c-623f5dd9a8d1", "sighting_of_ref": "indicator--ad54d76f-0e5d-43d8-8fc8-fc0f46de6c17", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57991405-8aea-440e-a829-4d5120050f0e", "sighting_of_ref": "indicator--ad54d76f-0e5d-43d8-8fc8-fc0f46de6c17", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--342b4de1-5105-4473-8098-91e5c04b1079", "sighting_of_ref": "indicator--42840f61-c8de-4304-b619-964ebe5831e4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0916b2e4-0eae-4aae-ac44-2e538c5dba33", "sighting_of_ref": "indicator--42840f61-c8de-4304-b619-964ebe5831e4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c48ab6b-0114-465b-8078-7e52930b8d8b", "sighting_of_ref": "indicator--75c4571a-378f-4b36-8cb5-d4c3ac039f20", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6e3b86-715d-486a-82c1-b23894d28707", "sighting_of_ref": "indicator--75c4571a-378f-4b36-8cb5-d4c3ac039f20", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dcfc054-40c5-42b2-ae0b-f0ddea4a20ed", "sighting_of_ref": "indicator--62524581-f845-4fb2-b8f8-c11de65032da", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475f8337-607e-49b6-8c01-04cd56bf7500", "sighting_of_ref": "indicator--62524581-f845-4fb2-b8f8-c11de65032da", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9283b80b-ec60-452d-9642-5c764f6b5dd6", "sighting_of_ref": "indicator--44f721bc-1a8b-4859-a993-fc64fc1714cc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ce45be-ef0a-4a4c-b263-a82fdb747106", "sighting_of_ref": "indicator--44f721bc-1a8b-4859-a993-fc64fc1714cc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e3bda9-0068-40f3-b72b-d2d9f8bafb67", "sighting_of_ref": "indicator--9fb00438-9ea4-4b08-b873-11f4027182a1", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233f50c6-e249-4c9d-927f-a5306ef5aab4", "sighting_of_ref": "indicator--9fb00438-9ea4-4b08-b873-11f4027182a1", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6143586e-cd85-4915-883a-c022b3cb39db", "sighting_of_ref": "indicator--ad48faac-df6f-4491-90c0-966d9d56897e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a74c2c-78e7-41ab-9bd2-212265b80fc2", "sighting_of_ref": "indicator--ad48faac-df6f-4491-90c0-966d9d56897e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599d428c-76c8-4b14-94bc-4188a8547864", "sighting_of_ref": "indicator--a74e61b3-9666-4e17-a8f2-01068224ec62", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a58e814-8ba0-4103-a019-a0ab022488a2", "sighting_of_ref": "indicator--a74e61b3-9666-4e17-a8f2-01068224ec62", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd2e7f6-35f2-4e7c-a507-1d7ce898fb82", "sighting_of_ref": "indicator--807c0b32-9a02-4542-b894-831ca02f797a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0754a218-9ef2-4f53-876e-de516dbdfad1", "sighting_of_ref": "indicator--807c0b32-9a02-4542-b894-831ca02f797a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917ec8f0-2152-4ad3-bf6c-c7b1d257eb60", "sighting_of_ref": "indicator--16943e41-8cf6-4270-b2a2-879fabc1618b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9420a48-be36-4e2c-8820-11f808e1ef6a", "sighting_of_ref": "indicator--16943e41-8cf6-4270-b2a2-879fabc1618b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67c907e-70ba-47b1-98fa-1b979436864d", "sighting_of_ref": "indicator--9fdfa971-a7bf-4e06-9187-94731d46da9c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3846e08f-5474-4f71-a1c5-9e3af8829d0d", "sighting_of_ref": "indicator--9fdfa971-a7bf-4e06-9187-94731d46da9c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03313f5e-11de-4361-ad57-bdce63e96d0f", "sighting_of_ref": "indicator--0fb64c15-c39d-4edd-a2d9-016c39d87417", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206cb8c6-8709-4c48-98c5-d2be278e76ec", "sighting_of_ref": "indicator--1faada27-2f88-4c0b-9176-c27d6c468ded", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e01de94-c87d-458c-abc6-81e1359ca954", "sighting_of_ref": "indicator--1faada27-2f88-4c0b-9176-c27d6c468ded", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d860854-a9ea-4b2b-bdd4-6d1fa489a274", "sighting_of_ref": "indicator--a0562da0-2c29-4c6d-aa0d-985392d66433", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826fc121-816a-4d80-81db-d9873d98d179", "sighting_of_ref": "indicator--20e5dbaa-d0bb-47e4-a13f-349c5ac16964", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed525f3-f243-4d53-a7b0-11fdbe40a719", "sighting_of_ref": "indicator--6a72deff-c711-4be2-8f09-6ca207c15e7b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f44b87-5ecd-4c74-bb5f-a113eb9e9a52", "sighting_of_ref": "indicator--6a72deff-c711-4be2-8f09-6ca207c15e7b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c786ff49-4b74-4e98-bf99-f542a9a32ab9", "sighting_of_ref": "indicator--cbdf79ab-db72-48f6-9e6d-21c665c6fb65", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c1ed84-e9bb-40c8-97da-be5c573416e4", "sighting_of_ref": "indicator--cbdf79ab-db72-48f6-9e6d-21c665c6fb65", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119fd1fc-1653-4a34-8224-57191bb6f4ff", "sighting_of_ref": "indicator--0f186b23-f477-4f55-9087-55700f86970c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7bf8eca-d74e-4597-8688-e7a8b8dffe85", "sighting_of_ref": "indicator--b6267bf9-3722-4f97-ba68-8e4f4493a470", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf30c00-05ab-4025-8ac4-0f7ab38455d6", "sighting_of_ref": "indicator--4ba8ba9a-f84c-4e42-9300-fd4feb4e62e9", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b241244-ce6e-4282-a8bd-f77e9082aa31", "sighting_of_ref": "indicator--4ba8ba9a-f84c-4e42-9300-fd4feb4e62e9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8c1679-7768-4a56-b2db-fe26d785c85c", "sighting_of_ref": "indicator--41a83532-ae8e-409d-862a-b4464f30544c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59761d2-914c-4c53-9d57-00ff020c5628", "sighting_of_ref": "indicator--1cd24070-eb47-4619-8ccc-2aa7f19abde6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f67072-24f6-4209-bf22-ea474ef95d79", "sighting_of_ref": "indicator--dc8ca56f-7749-4e91-add2-e6cf46ed5d69", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe99cc5f-632a-42d2-a4a7-8ae29ebfdc2f", "sighting_of_ref": "indicator--dc8ca56f-7749-4e91-add2-e6cf46ed5d69", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ff56e6-e8e7-4a81-b8f3-6958ffb55d38", "sighting_of_ref": "indicator--40e6b51b-b8ad-4247-9527-43171432a363", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e4eefd-64aa-42df-bb31-f703f2dda2d5", "sighting_of_ref": "indicator--40e6b51b-b8ad-4247-9527-43171432a363", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83ee22d-c2fd-40b2-be3f-2cada149bfd8", "sighting_of_ref": "indicator--bfc525ec-8eeb-47e9-9a60-12bd9d5f6318", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd866310-8962-4312-947a-6be93f1fd162", "sighting_of_ref": "indicator--bfc525ec-8eeb-47e9-9a60-12bd9d5f6318", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad357df7-fc8a-4ee2-80dd-58d0cf5d67b4", "sighting_of_ref": "indicator--e5268d26-be25-45ad-b378-130eeb231704", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4450b7-da38-443c-8ad9-ea53fe3506bb", "sighting_of_ref": "indicator--e5268d26-be25-45ad-b378-130eeb231704", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d5df9a-9373-422c-aab3-5c0807e060d1", "sighting_of_ref": "indicator--3acec090-6429-4dd1-bacc-9e392f6c5d96", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10259c7-67aa-4d93-9785-d8b48b78034c", "sighting_of_ref": "indicator--d24c5b21-c50b-4dca-bc22-73ee1d314a85", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823ea551-652d-43e5-99c9-83e26df0c080", "sighting_of_ref": "indicator--d24c5b21-c50b-4dca-bc22-73ee1d314a85", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85cf5137-fb2e-445f-9bd6-4bf27aa8c1db", "sighting_of_ref": "indicator--1ea14f7b-f40f-431f-9f55-8f3db6d41aca", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950fb899-7b6e-485f-8a28-d4a9e447de84", "sighting_of_ref": "indicator--683d1754-1bae-4b8f-bcde-8005292ad2af", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4429adfb-b0a6-42f9-948c-66a37b153d4d", "sighting_of_ref": "indicator--2e5481ef-bf90-416a-b89e-b518d3164a86", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b2db76-1db2-49fa-a234-615267638202", "sighting_of_ref": "indicator--35873446-7af6-43d7-8bca-30727a5eda15", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d04b27d-92fc-45b4-92fe-61deaeed7a27", "sighting_of_ref": "indicator--88b1557a-ab80-464a-bbb2-95817b1e8e7b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a59c064-abce-4590-8335-d68fb16392d8", "sighting_of_ref": "indicator--88b1557a-ab80-464a-bbb2-95817b1e8e7b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3b7b3e-c8a2-4aa9-ac76-84f3db9f778f", "sighting_of_ref": "indicator--8110d77c-bdb8-4112-9d62-c2baa8d1988e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d11479-cdb8-4988-ac59-0d3d7d772c3e", "sighting_of_ref": "indicator--8110d77c-bdb8-4112-9d62-c2baa8d1988e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390ec035-5068-4ad7-98be-7670675e8cf3", "sighting_of_ref": "indicator--41657156-98c4-446e-b668-4e157b79ef7c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ff0f81-511f-420a-b21b-9885f9cd6cdb", "sighting_of_ref": "indicator--41657156-98c4-446e-b668-4e157b79ef7c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5935bfc2-81ff-44cf-b692-7993afedefe6", "sighting_of_ref": "indicator--8ffa2850-4da2-48c7-9979-421f4c477f83", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0801b02-7e3d-4de8-909a-857ffeafb148", "sighting_of_ref": "indicator--8ffa2850-4da2-48c7-9979-421f4c477f83", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb64ba44-b06e-4fbb-ac0b-2c538d03f70f", "sighting_of_ref": "indicator--d261188c-32fa-4484-87e0-0b69a45f8eb5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540e1277-c2c2-4c27-a286-f0ecdc390a0e", "sighting_of_ref": "indicator--d261188c-32fa-4484-87e0-0b69a45f8eb5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b96232-2ea5-4a69-b5aa-3749a7c12adc", "sighting_of_ref": "indicator--83344026-c149-4388-bb24-029fb8e6e2b0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31540e98-1c27-4f4d-8094-d4d0719e9aad", "sighting_of_ref": "indicator--a4108f6f-6040-4c95-b6c5-adf247a29bfc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb266e64-b723-408b-806d-b94f61176cb3", "sighting_of_ref": "indicator--ea39cfcd-07ae-49d7-8b10-9b2756ad5f1c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4205b47-7280-4ea6-8e49-8d5e6c88df82", "sighting_of_ref": "indicator--ea39cfcd-07ae-49d7-8b10-9b2756ad5f1c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b4cb8b-2fa8-4f56-ae8f-fc48ec044bc5", "sighting_of_ref": "indicator--07e50d91-d709-41f4-97a9-4c379bccd959", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db532dc7-3b08-4968-8b77-29eeadd25115", "sighting_of_ref": "indicator--07e50d91-d709-41f4-97a9-4c379bccd959", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b791bf7-2962-4b7f-a91c-c3edff73ab84", "sighting_of_ref": "indicator--3f45c79d-1b7c-4da8-88ab-754863c6c1da", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f010bfd-10f9-49a7-9a4e-472fd0888ef0", "sighting_of_ref": "indicator--3f45c79d-1b7c-4da8-88ab-754863c6c1da", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27f9fa2-c5ce-4969-89ea-bfa2527ce19b", "sighting_of_ref": "indicator--0cc53846-a82e-4c86-8108-08509128086a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec78e348-d79a-4a8f-930d-d331ca484dfc", "sighting_of_ref": "indicator--0cc53846-a82e-4c86-8108-08509128086a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad41daa-2b62-4199-812f-1e180b104ed2", "sighting_of_ref": "indicator--7ea68943-a9e8-4e46-ba61-2b953d37ee86", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9019b4-ca82-4d2a-bd56-6ad94428ac1d", "sighting_of_ref": "indicator--7ea68943-a9e8-4e46-ba61-2b953d37ee86", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10352afe-9336-45d0-ad7d-8548638f976f", "sighting_of_ref": "indicator--fb837f73-ae02-4c53-973c-1f49b01f2107", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8585b561-7e8b-4a06-9770-813c6c0f6ed6", "sighting_of_ref": "indicator--b630e5ee-91df-4b67-85b0-957eff503ca2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1b0daa-9306-42d8-962a-9733860154f7", "sighting_of_ref": "indicator--96213ad3-0e8a-41d5-bf60-ba63cbb4d076", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9f825d-396f-481a-8b6f-b4ace5a9caa5", "sighting_of_ref": "indicator--96213ad3-0e8a-41d5-bf60-ba63cbb4d076", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f036f571-a610-41d4-8bea-fa696209e453", "sighting_of_ref": "indicator--6e0b5c8b-627e-4653-8cb2-a17ea06560af", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ff5247-136f-4e96-aa8a-48761c2de295", "sighting_of_ref": "indicator--6e0b5c8b-627e-4653-8cb2-a17ea06560af", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeabb82d-f43a-4b03-9448-3a9762007353", "sighting_of_ref": "indicator--49a5938c-98a3-46f5-82e9-f5355a465606", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663a3e33-e47a-4af9-8d34-35598bf5a18b", "sighting_of_ref": "indicator--49a5938c-98a3-46f5-82e9-f5355a465606", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00187bf9-2a54-4c32-96e2-26cf5b01bbcc", "sighting_of_ref": "indicator--96bdcc6e-f151-4314-9673-c3cca6453e13", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a04304a-6806-45a4-aaa6-0672651a7128", "sighting_of_ref": "indicator--96bdcc6e-f151-4314-9673-c3cca6453e13", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dfd7549-e640-41c8-84eb-4a4d3619c35a", "sighting_of_ref": "indicator--16f3244a-0daf-4bd3-9f5c-a0ff3a6ecd15", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8097de74-e53d-4f36-86ba-73652981fce3", "sighting_of_ref": "indicator--16f3244a-0daf-4bd3-9f5c-a0ff3a6ecd15", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3c0945-67c9-45dc-8368-50f61894249e", "sighting_of_ref": "indicator--e1097c0b-8bb2-48c2-8134-91ef89eca465", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b8368d-5fff-4b56-abf2-a41aff28cf60", "sighting_of_ref": "indicator--e1097c0b-8bb2-48c2-8134-91ef89eca465", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e0513c-fcee-4976-8c0e-23148da27f9d", "sighting_of_ref": "indicator--873fcd7a-d035-4017-892f-c46720753ed3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03ea06b-ffbb-43e4-9c6c-d1375eda0b2c", "sighting_of_ref": "indicator--873fcd7a-d035-4017-892f-c46720753ed3", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d7a875-ce14-4ebf-935a-8fea3fe4b884", "sighting_of_ref": "indicator--f5d89bde-0048-40b4-bcdc-44ad482e38af", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7da8af4-a02a-4db3-acaa-4c263266f2f6", "sighting_of_ref": "indicator--f5d89bde-0048-40b4-bcdc-44ad482e38af", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae47f571-3b50-453e-b00f-b0040dc09b00", "sighting_of_ref": "indicator--ee8318df-dd1f-404a-bf9e-78ef0b345c99", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0931bac-f647-4257-84c8-27e557dccafc", "sighting_of_ref": "indicator--ee8318df-dd1f-404a-bf9e-78ef0b345c99", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0be369b-3f20-4dd2-9752-46c9016352af", "sighting_of_ref": "indicator--3f7e1bf0-3cfe-4ec4-ada6-af0f6a7c2a68", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8898b749-0ea4-4248-acae-d82d59f917d2", "sighting_of_ref": "indicator--3f7e1bf0-3cfe-4ec4-ada6-af0f6a7c2a68", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126a94ca-10b8-4a98-a733-0837577d83bc", "sighting_of_ref": "indicator--77113a58-eee0-4007-9df0-fe8c452a0a56", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd141972-8041-4a39-925c-a31a8299052c", "sighting_of_ref": "indicator--67551aab-690e-4fe3-8a34-3f71c650e503", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41024e6c-147f-4676-9d4d-576d23431548", "sighting_of_ref": "indicator--67551aab-690e-4fe3-8a34-3f71c650e503", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d22a70-09d4-469b-92ac-580b239caa99", "sighting_of_ref": "indicator--ed67133b-f6d2-49ae-9409-bfafed3cc4a3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ea2954-8f83-4d43-8cd7-2e4f05076197", "sighting_of_ref": "indicator--930d0e0c-59aa-4b03-a774-9afa97654471", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fc1f02-65b6-4c55-881a-3fc0d6e226b9", "sighting_of_ref": "indicator--7f758f5e-c9a9-4e42-b5c7-957b1cce3eb7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce065cc-6291-49be-9e6a-69e191031164", "sighting_of_ref": "indicator--78b11cd3-239c-427a-b8f9-32a625cd1257", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e26711fd-428b-47b5-8ec5-41642b9d5580", "sighting_of_ref": "indicator--409e99fd-c987-4920-a086-e80de590d80a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239a0422-fc7b-496c-800d-87d5352706fa", "sighting_of_ref": "indicator--409e99fd-c987-4920-a086-e80de590d80a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ea1494-6893-455f-9c39-5e40a13db532", "sighting_of_ref": "indicator--327d760b-20a8-4866-8c66-912eaafb990e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90550b8d-ec38-4574-9a09-d85d85e133fd", "sighting_of_ref": "indicator--327d760b-20a8-4866-8c66-912eaafb990e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b321a25-7eb7-46c4-94ca-0f4ba59c67cb", "sighting_of_ref": "indicator--b524934b-f9e3-42f5-8062-d233c50864c7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f060518a-da78-4452-a9e6-a7762af7536b", "sighting_of_ref": "indicator--b524934b-f9e3-42f5-8062-d233c50864c7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac640c7-0d1a-4790-a89d-e8dbeab95e05", "sighting_of_ref": "indicator--76420d1c-8149-4163-8749-3fe543ef554f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90896e85-0650-43ce-86e8-5cea28512bd2", "sighting_of_ref": "indicator--76420d1c-8149-4163-8749-3fe543ef554f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60230446-a012-4b99-ab19-7c7bffcd13fd", "sighting_of_ref": "indicator--35423f53-971d-470c-84b5-c63ebe12a42d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2441117-f073-467c-a8b6-813ab9f1ad47", "sighting_of_ref": "indicator--35423f53-971d-470c-84b5-c63ebe12a42d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f7c4ab-723c-46fa-8d27-96e7098e1c66", "sighting_of_ref": "indicator--dd9cb2d6-efec-49b5-87a3-145c0dc3c190", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1800616f-d729-4f93-a36e-6fdd77c2a85a", "sighting_of_ref": "indicator--dec4c4df-d064-4fcf-8640-908162504d77", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4b3100-46a9-42a6-ae7c-cbbea9441a8b", "sighting_of_ref": "indicator--719c64fe-53d1-4bab-8d93-b1090956059b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c80ab36-d70a-41f7-a6ae-5a829b4b6d46", "sighting_of_ref": "indicator--db94f8e5-ec4a-48ef-9795-40a586bad786", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390363a0-9e1e-4c77-ab35-632a7b7d3953", "sighting_of_ref": "indicator--db94f8e5-ec4a-48ef-9795-40a586bad786", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5056a19-3ab4-4786-b736-e0e5f1d1500d", "sighting_of_ref": "indicator--9054fc7d-265b-41ae-aec2-9e786be23c4e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3503feb4-3f5c-4a95-9613-00ddd306a6c9", "sighting_of_ref": "indicator--9054fc7d-265b-41ae-aec2-9e786be23c4e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5339f40f-53d2-4224-946b-f48a0978d79c", "sighting_of_ref": "indicator--090cfa25-1046-4fdc-ba24-fae8084205c6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce011fb-16dd-46c5-bef5-b0b06636915f", "sighting_of_ref": "indicator--090cfa25-1046-4fdc-ba24-fae8084205c6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07e1b84-362c-4263-b4c0-e2e624bb62ba", "sighting_of_ref": "indicator--c5abd8ad-5730-470a-b85b-b6f54d4f975d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ec6085-c9c5-40f4-b1ca-67d179323803", "sighting_of_ref": "indicator--c5abd8ad-5730-470a-b85b-b6f54d4f975d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b834dcc7-38d2-4595-a94f-f04b57b3a624", "sighting_of_ref": "indicator--c8f89cf7-48f6-4cb7-a38d-d44b43face0f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f566e8d-14f9-4b5f-9458-4f75f6c8d4c1", "sighting_of_ref": "indicator--c8f89cf7-48f6-4cb7-a38d-d44b43face0f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75016d1b-bc82-4fe0-b487-d29e1614e02b", "sighting_of_ref": "indicator--a79db8db-ceb9-410a-bd7b-2639fc296cf6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391ba99d-9df1-4dfd-be86-7e82fa9451e2", "sighting_of_ref": "indicator--a79db8db-ceb9-410a-bd7b-2639fc296cf6", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f3bfd8-79fe-4a1e-8d6c-f9686075d44d", "sighting_of_ref": "indicator--0a677661-d4c0-4276-8c3c-6d797573962c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a461dd91-ff96-49d5-b163-86c2ebf020e9", "sighting_of_ref": "indicator--0a677661-d4c0-4276-8c3c-6d797573962c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852e5d09-08a0-4de4-a88c-bba4abcf9f0d", "sighting_of_ref": "indicator--2a3308b2-970b-4e2a-b6a4-f85ab02e4243", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33811b46-3a3a-4555-936c-14b99644d089", "sighting_of_ref": "indicator--2a3308b2-970b-4e2a-b6a4-f85ab02e4243", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04a5ef6-992e-4498-b364-e1d648fce35a", "sighting_of_ref": "indicator--77a70ba0-9e3c-4620-8bd8-886bcb6ad0da", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460bb695-5410-4a7f-bf04-11eeb7f355f8", "sighting_of_ref": "indicator--77a70ba0-9e3c-4620-8bd8-886bcb6ad0da", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c089247a-2a65-427e-8e12-14cd91ca9edc", "sighting_of_ref": "indicator--12ffbb59-7848-4388-98ec-17a730e681fe", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1cded50-35f7-4ecd-964d-0287b55f6e8b", "sighting_of_ref": "indicator--12ffbb59-7848-4388-98ec-17a730e681fe", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0375cfbf-84c8-4d97-be7d-420ca6d94cfb", "sighting_of_ref": "indicator--bc75cbd6-9654-4cfe-8fd4-5a5d3e1a7b28", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb7d777-c789-4ee1-83ef-c959e81602aa", "sighting_of_ref": "indicator--bc75cbd6-9654-4cfe-8fd4-5a5d3e1a7b28", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf333a1b-cafd-46c1-8ded-a77d8d308100", "sighting_of_ref": "indicator--6b67bb8a-fb8f-417c-b95f-896b1ead16aa", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f55307-8fb5-484f-a5c5-79b94f4ac7c7", "sighting_of_ref": "indicator--6b67bb8a-fb8f-417c-b95f-896b1ead16aa", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548bda7d-698c-4f2f-bcef-a0601519d7dd", "sighting_of_ref": "indicator--f6e31134-bb6e-4f72-ab65-0aa792049824", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9889a769-c918-4780-9bca-0e94a10d56ed", "sighting_of_ref": "indicator--f6e31134-bb6e-4f72-ab65-0aa792049824", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9cdfdb8-4aaa-4a27-9db5-d7a2c69eab5c", "sighting_of_ref": "indicator--907f80db-fffb-427d-901a-28d04b882831", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6422859d-7d0e-427d-9f6d-6f3df2fe1a40", "sighting_of_ref": "indicator--907f80db-fffb-427d-901a-28d04b882831", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dcb4df8-54df-43b9-a7e5-40db414e384b", "sighting_of_ref": "indicator--67b762ba-0c42-4c61-924e-7d28b1c93255", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e731b3-2867-4c83-a8a0-34b7a5786291", "sighting_of_ref": "indicator--67b762ba-0c42-4c61-924e-7d28b1c93255", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3d1e78-842c-4d00-ae03-3434a51ca7c9", "sighting_of_ref": "indicator--123df104-1306-4d91-bb36-f78768a82cda", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6404a85f-2a18-4347-839c-3a80057b5a1f", "sighting_of_ref": "indicator--123df104-1306-4d91-bb36-f78768a82cda", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e8fad2-43e4-413f-84b5-29ed0190ba0e", "sighting_of_ref": "indicator--18847e34-0f8b-484c-8f6f-3a158795b9b5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ed2cf2-0c95-4abc-9f0a-5a01bf1b9918", "sighting_of_ref": "indicator--18847e34-0f8b-484c-8f6f-3a158795b9b5", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7457b9fc-37b2-4c74-9e1d-e08fb7d506bf", "sighting_of_ref": "indicator--b5ea1aa5-704b-403c-9df5-a8750cfedb29", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a702fe45-a389-44f7-a104-91e396c2790b", "sighting_of_ref": "indicator--b5ea1aa5-704b-403c-9df5-a8750cfedb29", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5150671d-a1c0-4b67-9b6c-6a94a342b190", "sighting_of_ref": "indicator--16ed9311-e4c1-45ea-a095-3c9e2fd26d6f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c41c7c6-5c95-47f1-807b-820baf85dad9", "sighting_of_ref": "indicator--16ed9311-e4c1-45ea-a095-3c9e2fd26d6f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a3597c-9600-4721-bf71-543985c60e2f", "sighting_of_ref": "indicator--62477086-6d62-45da-a13a-24c4bac088c7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88eab67-2c29-4618-bec4-9ffed8b32f52", "sighting_of_ref": "indicator--62477086-6d62-45da-a13a-24c4bac088c7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea484c99-f133-491b-ba00-0c29fcd47e3b", "sighting_of_ref": "indicator--510fa5aa-150a-4fa5-830c-8a455502d1a7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8205ec1-5dcc-4b68-af1d-115a969d6554", "sighting_of_ref": "indicator--510fa5aa-150a-4fa5-830c-8a455502d1a7", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c8b520-9e3c-4664-84cf-064aad860aba", "sighting_of_ref": "indicator--1d36bc6d-fc27-41bc-831d-2f0e044be695", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16bcec6f-0644-46f6-b652-c75098c58024", "sighting_of_ref": "indicator--1d36bc6d-fc27-41bc-831d-2f0e044be695", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1564875b-9b32-4517-87be-1e02257218a3", "sighting_of_ref": "indicator--fca7e831-d84c-47a9-8101-59afc36d032b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd55b511-24c8-44ae-9ed9-19bd6a719dae", "sighting_of_ref": "indicator--fca7e831-d84c-47a9-8101-59afc36d032b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c111855-6f71-43b9-b3ee-5b4fb1800203", "sighting_of_ref": "indicator--5423107c-0e15-4b9b-a25c-9ed39bfdda37", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07529a6a-4d78-4a0b-9eed-304b827148d3", "sighting_of_ref": "indicator--5423107c-0e15-4b9b-a25c-9ed39bfdda37", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f8b368-18c7-4cbb-acde-99e48f1227dc", "sighting_of_ref": "indicator--0fc233f6-f5f7-474d-a965-4cb1db1de561", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a140f2ab-a0bd-477a-980b-1fd44b575b0a", "sighting_of_ref": "indicator--0fc233f6-f5f7-474d-a965-4cb1db1de561", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e1913b-bfab-4179-a038-5fcc638c5dfe", "sighting_of_ref": "indicator--51e73326-5493-49bf-999e-741b62e769ad", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74ff04d-f230-4b8e-8444-59d06d235b34", "sighting_of_ref": "indicator--51e73326-5493-49bf-999e-741b62e769ad", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6d3061-cc4e-4466-aa57-7525d000010f", "sighting_of_ref": "indicator--d252d15c-519a-4068-b642-9b508e3dd7bc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40502531-2c3b-4a06-a2b2-4d10c68c8ef0", "sighting_of_ref": "indicator--d252d15c-519a-4068-b642-9b508e3dd7bc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1093efd1-0c9a-4a33-9549-4c1454e3d2b5", "sighting_of_ref": "indicator--cad595bb-430d-4100-8192-3fa3a99a0b8a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6465df5d-0311-44bb-b4da-ab23911c9434", "sighting_of_ref": "indicator--cad595bb-430d-4100-8192-3fa3a99a0b8a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439b96f9-4289-4143-9689-f5df22e12297", "sighting_of_ref": "indicator--15a49829-d359-461e-b919-196424849bcb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6ee6f5-a2ae-4dd4-819f-25ffb58aa500", "sighting_of_ref": "indicator--15a49829-d359-461e-b919-196424849bcb", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6a89b4-5a6c-4315-9c11-52e17e6e4c00", "sighting_of_ref": "indicator--b786d329-df30-42b3-810d-ad2da52ec7ad", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a83f5c-242f-4d6e-a478-080ac67632ac", "sighting_of_ref": "indicator--b786d329-df30-42b3-810d-ad2da52ec7ad", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ab7b69-72b4-4927-b2fe-e6c07e70329e", "sighting_of_ref": "indicator--84878d06-7692-4dc3-a155-5bf468b78ea9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d5c20c-699c-4bd5-9be3-79c9fbfea177", "sighting_of_ref": "indicator--84878d06-7692-4dc3-a155-5bf468b78ea9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118a31a6-7f00-4c07-ad29-f50713aaab91", "sighting_of_ref": "indicator--7cba420b-e10c-4fa4-9e6d-ce56030fb309", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288722eb-4fc3-44cc-9b27-3e51cd383262", "sighting_of_ref": "indicator--7cba420b-e10c-4fa4-9e6d-ce56030fb309", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e781ec-36e8-4508-bb0f-7b2848e12038", "sighting_of_ref": "indicator--9c00f634-b19c-4a23-acb6-76e3bb02c1c0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c050837-ecd1-424a-9b5a-bea558da36fb", "sighting_of_ref": "indicator--2ff9aebf-4dcd-4f4c-9913-a03f4fe8fe59", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195996d3-8d16-42e8-a565-eb9c82c7c3be", "sighting_of_ref": "indicator--c81b3951-92f3-4f29-a4f1-e4de0982d8ab", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4def5b16-cddc-4db4-bfee-080c7b18dc6d", "sighting_of_ref": "indicator--97a5e96c-d672-4159-a21e-06cd5976dd58", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716a397e-74d9-48ef-b7ee-bd6de2eaa36a", "sighting_of_ref": "indicator--52f3928f-4db1-44f1-b4ff-949283f35670", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3638771e-fd90-4401-a08e-5c4826b78c96", "sighting_of_ref": "indicator--383e72d7-767d-4765-8d3f-1900faa846b4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67918823-865f-4f53-ac5b-94954d3b6ea3", "sighting_of_ref": "indicator--383e72d7-767d-4765-8d3f-1900faa846b4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ccc4dd5-f59c-4409-b1c1-a06aa84c94d7", "sighting_of_ref": "indicator--1d0e1926-7bad-4637-ab10-1ff27991c76f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1115bd4e-922d-4fae-8e26-de7b0a389816", "sighting_of_ref": "indicator--1d0e1926-7bad-4637-ab10-1ff27991c76f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7d615b-33b0-4808-b979-be7b5e573b1a", "sighting_of_ref": "indicator--7830b76d-dabf-48e1-b476-b7ce7db3d837", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5e06a8-c001-485e-b542-db4a85a77226", "sighting_of_ref": "indicator--7830b76d-dabf-48e1-b476-b7ce7db3d837", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a36fbd-cc60-4180-be5f-3453600465d7", "sighting_of_ref": "indicator--5a03c475-3ae9-4970-8495-50ed8db61253", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1da1c91-4261-46cb-8815-5683c8850285", "sighting_of_ref": "indicator--5a03c475-3ae9-4970-8495-50ed8db61253", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2a3959-e0c4-48db-8d34-e71b63ad2402", "sighting_of_ref": "indicator--9ef4d5cd-6249-4f10-bc47-4e21e9b66739", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c763b938-b7fa-4185-9c40-391d46f87f26", "sighting_of_ref": "indicator--9ef4d5cd-6249-4f10-bc47-4e21e9b66739", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2245a7bd-0a68-4860-a023-ebbe73ea4816", "sighting_of_ref": "indicator--646ea028-d44c-4f85-8e86-ada58e4e89fc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b60d4e-315c-486a-b37d-df19b344c013", "sighting_of_ref": "indicator--646ea028-d44c-4f85-8e86-ada58e4e89fc", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c78437-a696-4507-b4ba-dc41e31150ef", "sighting_of_ref": "indicator--8d675cfa-d5e5-481e-a345-cffccf6768bd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17085ec6-7e75-4d2e-83e9-cbb56fbbf008", "sighting_of_ref": "indicator--8d675cfa-d5e5-481e-a345-cffccf6768bd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882df9cb-af69-4048-8d5f-58068aa13272", "sighting_of_ref": "indicator--06a762d5-ddf0-47e5-aaa5-369a1fac9886", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9e44e8-64e3-461e-9cc9-255ead542e44", "sighting_of_ref": "indicator--06a762d5-ddf0-47e5-aaa5-369a1fac9886", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465ae8c7-a38d-4769-97dc-69f06e804641", "sighting_of_ref": "indicator--622956f4-0fd9-4791-8e96-5e1cbf769f69", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2185f25-9e7f-445e-ab8f-569a56fd06a7", "sighting_of_ref": "indicator--fad99982-875b-45cb-9e95-9ac611092af6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e64495-e4f9-428f-abdc-9a9c424588d7", "sighting_of_ref": "indicator--7c6cec6b-8882-47c9-924b-bfa78516e56e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35da06bc-dae4-47c4-9339-d67603fd5fe1", "sighting_of_ref": "indicator--7c6cec6b-8882-47c9-924b-bfa78516e56e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3908bd55-b45d-445d-9972-84669ab22431", "sighting_of_ref": "indicator--d68e12d7-89a4-4b55-b170-ee95e38b616f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b54b9b2-6e20-403f-9c6a-245e74b43658", "sighting_of_ref": "indicator--d68e12d7-89a4-4b55-b170-ee95e38b616f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c015fcd0-5477-4ac7-89dc-1ba8e2798195", "sighting_of_ref": "indicator--85579918-1356-4bae-944c-776e45268e73", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f953c97f-404c-4768-b4e2-f989b089df12", "sighting_of_ref": "indicator--85579918-1356-4bae-944c-776e45268e73", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1252032c-1e1c-495f-89d3-589558d8efc1", "sighting_of_ref": "indicator--434e2154-319a-4862-89e5-0b17f59321be", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ca5cc1-733d-4621-868a-b9ab01106b9b", "sighting_of_ref": "indicator--434e2154-319a-4862-89e5-0b17f59321be", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2619cdb2-7b9b-415c-a2fa-2a3b82212537", "sighting_of_ref": "indicator--cd0d5609-4674-4437-8e73-107bf50b8296", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d0a8e1-88f8-414f-b96a-aebf12817098", "sighting_of_ref": "indicator--cd0d5609-4674-4437-8e73-107bf50b8296", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3a338b-6f58-46f9-897a-4b2cf7b1e150", "sighting_of_ref": "indicator--eee64334-34b7-4886-b149-5ced015cf14a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1384127-6a5a-4ef8-8997-0d8f0d5989bb", "sighting_of_ref": "indicator--eee64334-34b7-4886-b149-5ced015cf14a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d48974c-3b74-4403-befa-43227e9a08e0", "sighting_of_ref": "indicator--50cb3091-ea2d-4dd2-83b3-6d9ad351f73a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4981ef6-b481-4cc7-8080-ae4a6f1f03c2", "sighting_of_ref": "indicator--50cb3091-ea2d-4dd2-83b3-6d9ad351f73a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3a3bfa-db61-4f68-a1ea-42855ce356f6", "sighting_of_ref": "indicator--9151a1ae-17e5-4c14-8e9b-c73f53e95dda", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a589becf-8343-4407-a10f-c427ad3b74fe", "sighting_of_ref": "indicator--9151a1ae-17e5-4c14-8e9b-c73f53e95dda", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f0e7cc-8ea6-4fbe-82a5-c493af22936a", "sighting_of_ref": "indicator--d53de140-32c5-4339-9566-4925bd12d390", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73949ae5-2ed9-4917-9464-f77639ee810b", "sighting_of_ref": "indicator--d53de140-32c5-4339-9566-4925bd12d390", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60f7c5e-cb2b-473c-80d0-4e2e7e784968", "sighting_of_ref": "indicator--f6afd1b0-74ba-4cbc-a7ed-a54452a74bcf", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728b1763-cbcd-41f2-ae8e-7aa86aa26348", "sighting_of_ref": "indicator--f6afd1b0-74ba-4cbc-a7ed-a54452a74bcf", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a0417b-0ce3-4bb7-876c-b7234b7a0e5f", "sighting_of_ref": "indicator--6d0e78a3-575a-4733-839d-bd4923142834", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445d2400-a411-4c3a-ac75-4ce910210b94", "sighting_of_ref": "indicator--6d0e78a3-575a-4733-839d-bd4923142834", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c7588c-0d8a-4e2f-b9d5-dab0ef8ce36f", "sighting_of_ref": "indicator--c92ed83f-615b-4059-8aab-01f1ef1ffc9d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb65ae3f-9f62-4b27-bed1-766aa03d14b8", "sighting_of_ref": "indicator--c92ed83f-615b-4059-8aab-01f1ef1ffc9d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895fb3db-2c1e-40c5-80d7-1d6ff1bcf67c", "sighting_of_ref": "indicator--b5a85e75-0e47-41d6-9bb4-a16cf4f55ecd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6b7c0c-5303-49b8-bd7d-befe1fa0d754", "sighting_of_ref": "indicator--b5a85e75-0e47-41d6-9bb4-a16cf4f55ecd", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af960e38-05b1-41b9-b44d-0689477b29b5", "sighting_of_ref": "indicator--753faa7e-23d0-43ed-86b1-2275856d9e56", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3399ba1f-2014-4a07-8de1-13d552c81ea5", "sighting_of_ref": "indicator--753faa7e-23d0-43ed-86b1-2275856d9e56", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1e164c-9a2c-4249-aff0-1e6738c8fbeb", "sighting_of_ref": "indicator--b8fcf955-b519-4277-b87c-d3e24306a14c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a15c50-69ab-45bd-a12b-5576e7319338", "sighting_of_ref": "indicator--b8fcf955-b519-4277-b87c-d3e24306a14c", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ad9fc0-6494-406c-8085-e86d00ee0e29", "sighting_of_ref": "indicator--54903b83-3ca3-4a10-9f2e-f209a90bfeea", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf0091b-4a81-43c6-8a97-15164c7a0e0f", "sighting_of_ref": "indicator--54903b83-3ca3-4a10-9f2e-f209a90bfeea", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deafd78b-1d38-498f-bf39-01876688864e", "sighting_of_ref": "indicator--dd100938-badf-4fcd-a834-3e64ae2125bb", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59607d2f-f2c4-4534-866e-9b50f93bec35", "sighting_of_ref": "indicator--2b2fb31f-6b02-486f-b5af-36d9477db445", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d725370d-0ba7-4b08-a2a4-6930b16035ac", "sighting_of_ref": "indicator--2b2fb31f-6b02-486f-b5af-36d9477db445", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fd9b7c-2519-4a69-bc9a-b6c3c089f10b", "sighting_of_ref": "indicator--f3e2c2ee-557d-474d-93e9-9d3b03a2e37c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f7174f-05ed-4940-b6ea-6a39b15ffa7d", "sighting_of_ref": "indicator--3240f63b-2811-4da0-ab91-0c624a0d358b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2a7fdf-105e-467f-843b-49c796e7f012", "sighting_of_ref": "indicator--93770cfa-488a-4ff6-bb3f-16b9846d607c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2521b991-137f-4771-84ba-23098d9a605e", "sighting_of_ref": "indicator--4c46d0df-a190-4b2f-9e87-501a38953928", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03495d38-2146-4d0a-bbc1-041ac6669ede", "sighting_of_ref": "indicator--4c46d0df-a190-4b2f-9e87-501a38953928", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a6d62e-f247-4f37-8ba8-f82463a2da74", "sighting_of_ref": "indicator--6e470186-0f03-4573-aa8a-51db67064a43", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efebf52d-a7f4-4ebf-9ebe-53392c308bdb", "sighting_of_ref": "indicator--a04e3ed6-a0a3-4ec0-b32a-5fba5d47d62e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8ded35-c077-4c66-84d9-78a36b160ac1", "sighting_of_ref": "indicator--8115cda0-5ac2-47d4-b019-59fb34569896", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866a7456-fdce-4635-865e-7415788301b6", "sighting_of_ref": "indicator--8115cda0-5ac2-47d4-b019-59fb34569896", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714315f7-8896-4bbf-b25a-834200388d73", "sighting_of_ref": "indicator--aa8d5c09-0188-450c-af5f-234a043c3138", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385f98b6-51ad-41b7-9baf-6f394563e3e5", "sighting_of_ref": "indicator--aa8d5c09-0188-450c-af5f-234a043c3138", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471f781a-ccaa-4ce9-a77d-e581e78941bd", "sighting_of_ref": "indicator--e1ea3dda-43d6-4f1e-8a18-99175261bcba", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60a4b74-dfc3-4d6d-b066-cf1a9a6ab4b2", "sighting_of_ref": "indicator--e1ea3dda-43d6-4f1e-8a18-99175261bcba", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed141e3d-5027-4b4f-9a7a-38c4356af4ea", "sighting_of_ref": "indicator--5b4b628c-f8c0-4cb3-8cb4-1add22fa73df", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a264bafe-cfc1-4286-bb12-71e7613cdd86", "sighting_of_ref": "indicator--5b4b628c-f8c0-4cb3-8cb4-1add22fa73df", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b410a10c-5d47-49e2-b422-de4b9a9c4359", "sighting_of_ref": "indicator--afc22093-9651-4e60-8c39-9b8bc9939051", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79d8722-76a9-4052-9142-ca6a7db2acb5", "sighting_of_ref": "indicator--afc22093-9651-4e60-8c39-9b8bc9939051", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd4178d-c0ba-490c-982c-e094c291b821", "sighting_of_ref": "indicator--f4c7e35f-ce66-4c1c-be97-8bf582cdbbc0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c44864-60eb-4c98-aa95-b618c4791526", "sighting_of_ref": "indicator--f4c7e35f-ce66-4c1c-be97-8bf582cdbbc0", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d79fac-3be8-41e4-9c66-e7af6923b72d", "sighting_of_ref": "indicator--3b2ddbfa-9a8c-4823-81a1-f7aa48fa44e4", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51abadb9-5298-4cc9-aa34-50fd3ce555d6", "sighting_of_ref": "indicator--3b2ddbfa-9a8c-4823-81a1-f7aa48fa44e4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e12cdc2-d858-4c53-a835-1b6e9edbf7d1", "sighting_of_ref": "indicator--f092e389-5d3f-425c-8fd9-f314549a119d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10746752-2f0b-4899-a658-8e284df9f99e", "sighting_of_ref": "indicator--f092e389-5d3f-425c-8fd9-f314549a119d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908384dc-aafc-466e-ba48-e1fe9ddf93a8", "sighting_of_ref": "indicator--1df987b5-f0d2-49bf-b920-b218864d18f8", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f86ed04-89f3-428b-9325-705d1cff8137", "sighting_of_ref": "indicator--1df987b5-f0d2-49bf-b920-b218864d18f8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5ae531-ed3f-4b93-8f53-0c6a45ecdfa9", "sighting_of_ref": "indicator--c41dd9ba-8e8f-4f9a-854d-f2dcb44f989d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f2b7d5-1f65-4529-9987-f883fe679dd9", "sighting_of_ref": "indicator--c41dd9ba-8e8f-4f9a-854d-f2dcb44f989d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0307e3-4396-40fa-97d7-c406183ce611", "sighting_of_ref": "indicator--125c7490-8e4b-4b30-957c-0e860903b686", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd3a06a-9ca5-46ff-a9ae-e0592d4b6c81", "sighting_of_ref": "indicator--125c7490-8e4b-4b30-957c-0e860903b686", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f92361e-0614-4f24-9e98-4fa9ac7fbcdb", "sighting_of_ref": "indicator--8897863b-3220-460e-ae94-32a2d427a09a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f670381-1c37-42cf-8777-1022eca258ac", "sighting_of_ref": "indicator--8897863b-3220-460e-ae94-32a2d427a09a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a11e7b0-83f6-4220-a8a6-744d5b719f64", "sighting_of_ref": "indicator--511edbee-4849-431e-b342-64d4751e70df", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b95b271-e9a2-46a2-b2d1-8bdb3181b327", "sighting_of_ref": "indicator--511edbee-4849-431e-b342-64d4751e70df", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11781a43-36b6-4bac-9a44-7eb5e93aba3d", "sighting_of_ref": "indicator--b7a37986-6293-4547-a367-37521b359886", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da41fdaa-52dd-49f1-8936-7e39d6d9456f", "sighting_of_ref": "indicator--b7a37986-6293-4547-a367-37521b359886", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecbcefa8-5416-4021-b2a7-57d4a24dcb54", "sighting_of_ref": "indicator--f318e20b-fcbf-46a0-843c-d4ed2387ed61", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c792ea-fa26-40ec-8095-a0bfaea48c76", "sighting_of_ref": "indicator--f318e20b-fcbf-46a0-843c-d4ed2387ed61", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d165259-5a07-403d-8804-3eb1ced91bf7", "sighting_of_ref": "indicator--f318e20b-fcbf-46a0-843c-d4ed2387ed61", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18f9269-454f-4186-8f2b-1e2db96ad506", "sighting_of_ref": "indicator--4e2ad20d-be4e-4789-a211-0af05f56a257", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdec8f6-77b3-4cd0-abc8-0e36efb1d2b8", "sighting_of_ref": "indicator--d5c94d09-37e5-4620-a902-b58d0bad3289", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838b7c90-7ff4-4124-af7d-db2778f4fbca", "sighting_of_ref": "indicator--0ecec898-b064-46d5-aa09-87369436a808", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d45962f-3b70-4321-a706-7533d68ea8ce", "sighting_of_ref": "indicator--f457a467-e52d-42cb-b15a-14e4b92bb3de", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1178f691-a704-4555-8814-c60226a67a26", "sighting_of_ref": "indicator--2061ac65-78e0-4316-8952-4cc839f073e4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f607cd28-7ba6-47a4-a327-af20f6430907", "sighting_of_ref": "indicator--42ec9050-8822-4bca-b54c-abcdc00ff423", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4add0722-8370-4362-ab22-9addffe7ca6d", "sighting_of_ref": "indicator--09652ea3-9dd9-4a11-8650-41fe62717c7f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ddc692-8bde-45da-8b9f-3a23ebe4e29d", "sighting_of_ref": "indicator--cf784267-1b17-45b2-a42a-f848578926b5", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407c9543-7d17-4a4b-bec0-d8144713e854", "sighting_of_ref": "indicator--8d722104-bd49-4d0e-a419-7aed8a6cba29", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb73f42a-9ce7-4919-abef-7190eb3b17a4", "sighting_of_ref": "indicator--97438ca7-8a50-4363-818d-fc99fb3e282a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d217e92c-e38c-42f8-859a-c833e2944157", "sighting_of_ref": "indicator--c2340797-ae8c-4d0b-9e86-1044f37f46e2", "where_sighted_refs": ["location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65a2034-9d6e-4db2-89e5-da8cd7ec1106", "sighting_of_ref": "indicator--2ca1df80-1e5f-407a-982f-7a6d45e3a33a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041255a8-315a-4bd5-a491-e0f73cff8e03", "sighting_of_ref": "indicator--54397b73-c9a9-4045-b56b-d4da174b8874", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c98a77-785a-4026-b588-198ac6c93560", "sighting_of_ref": "indicator--0d515f5f-fd80-40de-859c-4193cfb7d8d4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b79bc18-0d5c-4550-bd73-20b1a1727064", "sighting_of_ref": "indicator--7ecd827e-3084-49a0-be18-46b4e4952094", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15afc0ad-d6d2-4c9a-9836-fb2412c6b303", "sighting_of_ref": "indicator--4902f705-baaf-410f-aac0-79d6c2b5dc66", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964cdf0a-91d1-4c65-a58a-e10e848d00d0", "sighting_of_ref": "indicator--4902f705-baaf-410f-aac0-79d6c2b5dc66", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbec755c-3194-4883-9edf-843204b3ab25", "sighting_of_ref": "indicator--33eadce4-e54a-4ab3-af12-ce17d520bd0b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46878e9-4f37-4bda-8c76-5dc421f59b80", "sighting_of_ref": "indicator--33eadce4-e54a-4ab3-af12-ce17d520bd0b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6aed00-8303-40dd-9b9b-5abc233b9c31", "sighting_of_ref": "indicator--f450e917-94dc-42dd-80a2-94bf736f71b7", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349f7b46-fcfe-440d-924c-0df558fa1790", "sighting_of_ref": "indicator--fdf88290-02b4-4e4e-8457-04ce47e011ad", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee674098-0be9-4aba-ba29-415248869519", "sighting_of_ref": "indicator--fdf88290-02b4-4e4e-8457-04ce47e011ad", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db3c1ac-ef8a-4ffc-8b10-f4af312ea01d", "sighting_of_ref": "indicator--fdf88290-02b4-4e4e-8457-04ce47e011ad", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488f6601-c3f8-41be-9c16-42d75664e9c9", "sighting_of_ref": "indicator--5b84d0bf-8b7c-424a-be3c-deec9a874f18", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b3523c-6258-4b61-8cb9-20437036148a", "sighting_of_ref": "indicator--935ab422-b353-479c-b833-43f27cc710f2", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4277a610-1044-458a-9bb9-a123bcbc5c82", "sighting_of_ref": "indicator--d2c10bb9-3581-4483-b9b8-f73a6abe528f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7df8336-033d-4d1a-8fbe-d1e70439b925", "sighting_of_ref": "indicator--ee16640a-2d5f-4697-a688-74ca615c4967", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad1bb80-6e2a-4eae-be09-b2ec655e7c0c", "sighting_of_ref": "indicator--35b2b211-d622-4099-8086-4c2bd344cce4", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac93b2a-334e-47db-b6e2-de896c2c3bae", "sighting_of_ref": "indicator--bb8c84ab-b109-4216-8fff-1c830eb858d9", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e391598-a678-489c-b0b2-cbd8fbc71457", "sighting_of_ref": "indicator--49f57d49-3ed1-4808-bcab-9ab8c4b40825", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426b74aa-669b-448e-a3aa-3a046f2f1957", "sighting_of_ref": "indicator--49f57d49-3ed1-4808-bcab-9ab8c4b40825", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e58152-a5c8-4527-ae9f-b7cf7ced784b", "sighting_of_ref": "indicator--49f57d49-3ed1-4808-bcab-9ab8c4b40825", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abc0ae0-bacb-46e7-bdb6-df18997f6ad4", "sighting_of_ref": "indicator--472e1ab0-2d7a-42a1-8e8c-1007d4c3a293", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff44ba2-df77-427f-8dba-cf06d8b92e29", "sighting_of_ref": "indicator--472e1ab0-2d7a-42a1-8e8c-1007d4c3a293", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd8ce59-0bc6-493c-a5c6-f359f9ca6e4a", "sighting_of_ref": "indicator--7f992907-0c69-4f79-b0c5-35816aa11181", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117a8d66-9aed-4927-afdb-34619853c87f", "sighting_of_ref": "indicator--6833e103-bf09-483c-9272-31f3cd07f7f6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07d09a7-0096-434d-a999-86420892dd42", "sighting_of_ref": "indicator--49b8f662-48aa-429c-b568-08d2a5e1e169", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6593c090-6505-4dda-88ea-822c51181f63", "sighting_of_ref": "indicator--52617ba2-c5e0-4c86-ab73-9c980024d27c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4ca329-fd14-4123-9661-de35f37cca13", "sighting_of_ref": "indicator--52617ba2-c5e0-4c86-ab73-9c980024d27c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5d7b1f-f620-40b7-bf98-86b0450afd66", "sighting_of_ref": "indicator--4ce22f86-7866-4fbb-a328-b1fc5380937d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9089eb-538e-4553-915d-040183b72f03", "sighting_of_ref": "indicator--abcf9943-dcfc-48d5-a3b6-73129faad833", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85cc81ce-433e-4591-9adf-a4e7386544e6", "sighting_of_ref": "indicator--abcf9943-dcfc-48d5-a3b6-73129faad833", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd0c48a-756c-4717-8577-7853318614b6", "sighting_of_ref": "indicator--abcf9943-dcfc-48d5-a3b6-73129faad833", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b05df6a-34f7-4e79-96b1-4a01915d096b", "sighting_of_ref": "indicator--c29f57d1-ba85-40e8-a103-1956519ec785", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37567368-3ee3-4587-a278-5e786e024a38", "sighting_of_ref": "indicator--c29f57d1-ba85-40e8-a103-1956519ec785", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7edef617-7c83-4192-b084-701b580d3e58", "sighting_of_ref": "indicator--c29f57d1-ba85-40e8-a103-1956519ec785", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63401d67-eddf-479d-895c-27083ca43676", "sighting_of_ref": "indicator--27c1410d-b363-4aa4-ac55-e0b509db1a88", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5530494-06d4-4d17-8ebc-15d09ff60887", "sighting_of_ref": "indicator--7b9eea78-c136-447b-85cf-449c88ccb044", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a82985-b1b4-4393-93fd-6961a297f830", "sighting_of_ref": "indicator--256aee87-f087-41ae-8539-6baf2c0162c2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af774aa0-ace7-4264-bd8a-71040ee07bae", "sighting_of_ref": "indicator--681a8021-f9fe-4022-920d-4ca3cc193b5b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2148df1c-d0ab-46da-8a6d-cb633fe81680", "sighting_of_ref": "indicator--d7dbeaf6-3266-4e71-b58a-52b1d6a7574f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84bfdad-3f80-4903-9f4c-e3ceda4913f7", "sighting_of_ref": "indicator--d7dbeaf6-3266-4e71-b58a-52b1d6a7574f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891ac8c7-ddde-4c3a-a66c-ad68d179b13b", "sighting_of_ref": "indicator--d7dbeaf6-3266-4e71-b58a-52b1d6a7574f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe03940-2f10-4b3e-98b4-40526b4b8087", "sighting_of_ref": "indicator--360cca77-e297-4fc2-8993-5aabc1191ea0", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7600691b-eec9-44a6-b648-6777ff845672", "sighting_of_ref": "indicator--31d2fc3d-9c44-4ed6-bef6-33985378e2b6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55b757d-8a3a-4b7d-81ff-b06445fb0361", "sighting_of_ref": "indicator--e5f9a855-0f57-44fd-96d9-4cedd3c6f000", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05693065-1334-4fa0-9b85-b2dbc623b449", "sighting_of_ref": "indicator--e5f9a855-0f57-44fd-96d9-4cedd3c6f000", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ad1ee9-aa02-4246-bd3e-770de17f8f20", "sighting_of_ref": "indicator--a1d61e89-952a-4a01-89e9-e41436db8e78", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0623ccd-3f6b-475f-801a-b6b6704c7986", "sighting_of_ref": "indicator--afc7d079-ebd3-4899-a1f7-40727a38341b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fccad58-77b2-491e-98c6-a74f52a012f6", "sighting_of_ref": "indicator--5eaa3d9b-946e-4f53-bc36-a6f936a4e08e", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e04a381-3449-483e-8c4f-d9b9d56783bc", "sighting_of_ref": "indicator--691b8c76-dffe-4630-b336-d78009cf7a7b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a699913-dcbb-4767-bafb-cc1c0b52daaf", "sighting_of_ref": "indicator--3383f268-2a50-4e52-beb4-ba885555dccc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b543dbaf-3455-4ce5-a0d6-6853765115ed", "sighting_of_ref": "indicator--3383f268-2a50-4e52-beb4-ba885555dccc", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b275d9a3-58e1-4941-98d7-4fbb4dd3c781", "sighting_of_ref": "indicator--7c81bc78-a418-4ba1-a76b-3f8492b85ae8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de16f284-d74e-4411-bc1f-986be0595b8c", "sighting_of_ref": "indicator--eacb10ae-8c18-4bde-9711-cfee9ed13c99", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b0f0d9-ec2b-4a28-8e54-c795be269640", "sighting_of_ref": "indicator--10aec57a-6881-48af-9023-3a89976610f6", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ad905d-4d26-419a-9fda-69fe479261ff", "sighting_of_ref": "indicator--d01a2575-afac-495a-8d90-90d767ff9a8b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615df468-dd8e-4313-a08d-3117b490639a", "sighting_of_ref": "indicator--42337540-2277-4722-bc1d-0ef202a6a49f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3148bd-4452-4f89-8686-fe8c14eac999", "sighting_of_ref": "indicator--25c48c34-3189-4a11-b3db-f609ce22786d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06700c19-b6a1-4053-aa13-c391f3adc11f", "sighting_of_ref": "indicator--c8466b38-0fb5-4207-b3e2-a5c232f8dd13", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ec1b72-67b1-4790-9cad-6fa5a01af6fb", "sighting_of_ref": "indicator--724e04b5-173f-4517-b3f6-8ed41147208b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c798a2d8-4a3e-4412-a01d-30fbd593a25b", "sighting_of_ref": "indicator--7588eccd-908e-438e-a89d-1da0c91ec9b9", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf4177f-0ee6-4652-a0b7-93e1e4d927f6", "sighting_of_ref": "indicator--f0e1b551-4c0f-4829-b545-716b7346abbd", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7edd7b2-5bce-424f-9b81-75741deb89f6", "sighting_of_ref": "indicator--fbc5c454-b7b4-4779-8b22-f33b2989942e", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf66bc4-1703-4fd9-846b-ab9020dfafbd", "sighting_of_ref": "indicator--6a4e7434-8333-4338-a3de-00aa141f1ac7", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0ec109-7f6d-4b55-b61c-9736a23bd2ef", "sighting_of_ref": "indicator--8b5a28a4-72d2-41a6-8d9b-966151383f4f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58316913-b1b8-4657-8699-db8291901d97", "sighting_of_ref": "indicator--8b5a28a4-72d2-41a6-8d9b-966151383f4f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e08f442-fc5d-46dc-ad3b-b6d1597c87ce", "sighting_of_ref": "indicator--8b5a28a4-72d2-41a6-8d9b-966151383f4f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f18291c-35de-4718-b680-d9043672d41e", "sighting_of_ref": "indicator--f941d84a-305c-4a03-9d48-cfaebf5f0661", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f2c210-e737-4e9f-a203-6336933c7c7c", "sighting_of_ref": "indicator--00ae1e7f-602a-42f7-b646-9da109a16939", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13376f4-4a20-46f9-b544-297247104964", "sighting_of_ref": "indicator--1f826cc9-d619-4586-a89a-5914b05a24d8", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5813518a-39e8-4bd7-8097-6c395a55c64e", "sighting_of_ref": "indicator--1f826cc9-d619-4586-a89a-5914b05a24d8", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff7c2d6-8e9a-40c5-8617-a432e77ae113", "sighting_of_ref": "indicator--bd9d80a9-a1a4-4a29-b5dd-aea5b4a0a47c", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2121e863-c746-4f41-94b4-790376651dd3", "sighting_of_ref": "indicator--bd9d80a9-a1a4-4a29-b5dd-aea5b4a0a47c", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0683f334-1d91-47ae-bcd0-7bc983b20e84", "sighting_of_ref": "indicator--f1b7b07f-b6ed-4c00-82bd-3cac97c8134d", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ea6ab9-fb01-4409-8d58-3b59898599f8", "sighting_of_ref": "indicator--f1b7b07f-b6ed-4c00-82bd-3cac97c8134d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c73f3e-411c-4d73-a19c-9fbb3f169534", "sighting_of_ref": "indicator--bfb1ebcc-adfa-426a-b3fb-68149d48a866", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d932820f-6b77-459a-a30f-4f12296fe4bc", "sighting_of_ref": "indicator--bfb1ebcc-adfa-426a-b3fb-68149d48a866", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d3b63a-dbde-4fca-bb5e-d71e041f6b1a", "sighting_of_ref": "indicator--bfb1ebcc-adfa-426a-b3fb-68149d48a866", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b29786d-a874-4d5b-8878-3e1c663e5856", "sighting_of_ref": "indicator--f0ac3984-1189-417c-ab15-26bdd053f477", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19064d4b-b7eb-435d-8b50-d22f58fe9b63", "sighting_of_ref": "indicator--ca915807-99ba-495c-8baa-aa211de62c3a", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4516aad8-2222-4050-bd6e-8fd561ea376a", "sighting_of_ref": "indicator--ca915807-99ba-495c-8baa-aa211de62c3a", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a476d9-db66-4b6a-b0e2-b1a91eebbffd", "sighting_of_ref": "indicator--ca915807-99ba-495c-8baa-aa211de62c3a", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c70e8be-0d59-40a9-978b-bcae122281de", "sighting_of_ref": "indicator--dc1f7a77-40cd-4d19-9ee5-daeb10cf8cfb", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b679b6-f74b-4076-bf6c-f23abc5b2753", "sighting_of_ref": "indicator--b1914985-1c6b-4481-a9e2-b76ba28a645d", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3851781b-d925-4628-a143-a33427c63f17", "sighting_of_ref": "indicator--4faa7dbc-8517-497d-ad8e-74c8abeecc7d", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2817680-128d-4f51-9237-59f5f8e94da6", "sighting_of_ref": "indicator--e1856f8a-c425-4b25-a6f5-43e33b78d025", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725fbe13-d91a-403c-ac85-634cd7dee114", "sighting_of_ref": "indicator--e1856f8a-c425-4b25-a6f5-43e33b78d025", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78c06a6-b546-431d-92f9-ecae55aeae4f", "sighting_of_ref": "indicator--52bbc7b0-42c2-41c6-82c7-2d6a165922c6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5decbce-9ba7-4bea-a68b-547a553aa912", "sighting_of_ref": "indicator--040050b3-1d7b-46af-9ede-06f0c25e3ac6", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd4483f-7088-47d6-b6bf-139692c042c4", "sighting_of_ref": "indicator--1a6397bf-7e79-464e-bac1-305168df8b72", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b601eaa-d010-4412-932d-4aec82eafa6e", "sighting_of_ref": "indicator--98ab4335-c802-4e60-9dae-21c6caf8fb5f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe3463a-ede2-4ce0-b7a2-a3f4adc0c22f", "sighting_of_ref": "indicator--98ab4335-c802-4e60-9dae-21c6caf8fb5f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f9dcac-dca8-4884-a45f-e0854d3dc1cc", "sighting_of_ref": "indicator--206bc905-a2b8-4dc8-82e5-b69ac6a0e3fc", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d99a9f-08fb-431c-903b-37a8fa109c5f", "sighting_of_ref": "indicator--21003568-6794-4288-be0b-36e9aa877774", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c00ffa-2a15-4c14-b40a-c2a0711f625d", "sighting_of_ref": "indicator--8ceea843-1483-4034-bedf-5a0bb3813a65", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b9abbd-d628-4bf0-bde4-4ada56f45f4c", "sighting_of_ref": "indicator--758150ee-aba2-4d90-ad5b-98d80f8d2a2f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f0b597-360e-43cf-9120-6b8085a25f7c", "sighting_of_ref": "indicator--758150ee-aba2-4d90-ad5b-98d80f8d2a2f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db2adf5-f15a-40a4-b2fa-5c1336df3107", "sighting_of_ref": "indicator--7b24329e-6b29-4fd9-a01c-99a8671713b3", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028dc6bf-3dcd-498c-a074-e9576846fea1", "sighting_of_ref": "indicator--7b24329e-6b29-4fd9-a01c-99a8671713b3", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e1a7cd-c54d-4f49-ab46-511c79133789", "sighting_of_ref": "indicator--42a32183-35ee-4ab6-a7a0-7caea3b1f646", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca90f27f-3ef5-4995-84b6-5913dd215270", "sighting_of_ref": "indicator--c93b46e4-0c3c-4230-8f84-3a4a18936382", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d572970c-b9e7-462a-9e69-338f9121da9a", "sighting_of_ref": "indicator--7d36d734-11bf-4b75-b042-a526e3c4f38b", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71fe860-ad39-4723-b4fb-c1df2cca22d4", "sighting_of_ref": "indicator--7d36d734-11bf-4b75-b042-a526e3c4f38b", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a66fa1-1d45-4737-8356-3b8798428d99", "sighting_of_ref": "indicator--7d36d734-11bf-4b75-b042-a526e3c4f38b", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb610afc-7dff-4788-ae6f-93d68b859633", "sighting_of_ref": "indicator--cce703c2-2ee3-4d8c-81f6-a0012e5dcc61", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a22f615-5101-4d5d-86b9-63d414e00f40", "sighting_of_ref": "indicator--2fde53c0-5a1d-42ed-9a0f-3997e7422db2", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e478c9f3-cc71-4c50-a376-998b074e5736", "sighting_of_ref": "indicator--9fa8b3f7-bfa2-41ec-a4a4-8296b6f21147", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5ec499-0ec1-4434-ade0-a69407766a0f", "sighting_of_ref": "indicator--9fa8b3f7-bfa2-41ec-a4a4-8296b6f21147", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b5ddb8-34b1-4425-8b99-b343556c4961", "sighting_of_ref": "indicator--ceef1be8-3ef4-4b01-a28c-98331e6657df", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d56b8b-d0e6-45b7-a46f-f64801705a2a", "sighting_of_ref": "indicator--277b0662-93c3-46f2-b6af-6bebb79c7d59", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083c4ae1-2ece-4e11-a335-095bc93fe0b2", "sighting_of_ref": "indicator--277b0662-93c3-46f2-b6af-6bebb79c7d59", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdadceb7-62ab-4a8e-a87a-35688fa64514", "sighting_of_ref": "indicator--d92874cb-335f-43f6-a082-22dc046145ac", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304d29b3-aa05-458e-b6b7-1e675f00a647", "sighting_of_ref": "indicator--42150627-0879-4567-8ab5-af8e700dca3f", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102ba9dd-d0b9-4c13-98f4-8dd52c041366", "sighting_of_ref": "indicator--42150627-0879-4567-8ab5-af8e700dca3f", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5bbb79a-e537-445e-aa89-bde9fab21af8", "sighting_of_ref": "indicator--42150627-0879-4567-8ab5-af8e700dca3f", "where_sighted_refs": ["location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0bc541a-18a2-4031-bee5-8de7235c730e", "sighting_of_ref": "indicator--aaad6a62-284f-4e6a-9989-3588bdf912d1", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a7ea3a-db0d-48bb-b7db-19128bd999ea", "sighting_of_ref": "indicator--854fa597-4ed3-439c-9a6b-6d88094871de", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b96a88-6747-43e6-be5a-8e8c3135b9fb", "sighting_of_ref": "indicator--854fa597-4ed3-439c-9a6b-6d88094871de", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c833acbd-dd63-48f9-a831-1c2062eb4226", "sighting_of_ref": "indicator--5021f6ea-84ce-4311-a38e-3c2f910a2f37", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7fd650-667e-402d-83cd-7e8d9ecae831", "sighting_of_ref": "indicator--5021f6ea-84ce-4311-a38e-3c2f910a2f37", "where_sighted_refs": ["location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6116a5e-1f88-40d0-a187-bcf859e923f5", "sighting_of_ref": "indicator--f71c7bf5-6bb7-46f1-a984-73dac4e1bbbe", "where_sighted_refs": ["location--bf3d5f01-c02b-4244-9a6e-26c71807f691"], "first_seen": "2026-06-24T00:00:00.000Z", "last_seen": "2026-06-24T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--31256860-24a6-42b7-bfbc-bc59b0b269f1", "name": "Threat Report for 2026-06-24", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-06-25T11:00:01.466Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--bf3d5f01-c02b-4244-9a6e-26c71807f691", "location--2b8956c2-2e13-4bc5-b697-aef93cfac3a9", "location--bdeaee10-b475-48ae-b9a7-f9aae2ff9e06", "location--7be81ffe-9b76-4bc9-af4d-d5014f6fe77a", "infrastructure--47461e64-884e-42e8-aaad-2d208d9e6bf3", "infrastructure--03e0852f-3c64-47f2-8f12-c039d720eb51", "relationship--94f15e8c-9bb7-469e-b1c8-626538e5c15c", "infrastructure--c9b85d9b-bf8e-4fcc-94ec-86f32ed1600c", "relationship--80c37d0f-d0b0-45ca-a1b5-0bd1296f587e", "infrastructure--f1a47422-d39f-4213-8424-77f0b57daad1", "infrastructure--14887674-4fca-466e-aa93-41c424ab464a", "relationship--2444cda9-e2d3-4e1c-944d-edb395d022e2", "infrastructure--a87f2e39-341c-4f45-9e43-0326b52b93d3", "relationship--95bcd7a4-c434-45ba-9cca-e7981fbf79ec", "vulnerability--8cf44e1e-4684-4556-adfe-18ec18689016", "vulnerability--32810b51-445f-43d5-aaea-a31a0abdef08", "vulnerability--1ae7669d-c0f2-43b2-b9c0-17583542f0e0", "vulnerability--1b54f858-1f51-4904-8b63-1716d46f773a", "vulnerability--aafe8ac9-890f-4583-96e2-3d3f3e6e9352", "vulnerability--604e7a91-4ab2-4091-a564-9069e23b10ff", "indicator--108df885-7464-4b69-96bf-65965e00ac57", "indicator--10fd2476-ee45-40a8-8890-41639960f28d", "indicator--e9f3e0d5-d7b2-4ffa-835a-4782e512a68c", "indicator--d05cb638-1ba6-47aa-8b55-92239d735bf8", "indicator--b9be3e43-3f39-4f1d-965c-e795e0d5dd89", "indicator--5bd6700f-3aca-4d7c-aefb-3ff1eebd56d8", "indicator--9796d934-ef83-4a32-b513-880b7174f1e0", "indicator--a11ff7e3-241b-4aa3-b72a-aef05a5447c3", "indicator--e7800ee1-abe3-4956-bd9a-238ab12da1cc", "indicator--6cabb787-7a7a-4dc8-a729-b4927dd33807", "indicator--9b799a27-1ee9-4200-8365-9dd663b24c2d", "indicator--e740a739-4901-4e48-a880-4afcbfd2d876", "indicator--8a1a8cab-bc28-4aa7-ac6c-f01e7be67e7c", "indicator--74d702e1-d339-4815-9874-8e3cdbc7db8d", "indicator--3c1ffc61-0897-43d8-9069-8f6f7a69280b", "indicator--3d0b36de-818e-4cf2-a5b8-c3d006715711", "indicator--33b95011-f26d-4909-97e1-32f84f857294", "indicator--e2d1dacb-fa59-4493-85e9-6fc221214128", "indicator--c26eac0b-bd2b-4de5-8cbb-d9ff20a23997", "indicator--f0bde041-ac4d-4a73-9061-7cad858d5d67", "indicator--c6111d3d-6c1c-49af-a1cf-1fca9df854fe", "indicator--4d76007e-74fa-4b1a-a05f-4f1b4ddd8fa2", "indicator--2ff5a9dd-52f0-4f4b-addf-291e866df5e0", "indicator--1ccdbd60-139c-424f-97d9-198707da327c", "indicator--7638197c-a4f0-4e64-8cd5-cc3a00606468", "indicator--383d26a7-1ee1-4d5d-9d42-6e9dcb30f6ea", "indicator--95089477-1585-433b-a376-f3392a7ab4d7", "indicator--bc64f5c4-0c4c-4fe5-adb8-4d1c2b77bcc3", "indicator--012a1c30-7faa-49a3-88c2-eeb4d8d561f2", "indicator--1194eae4-d679-4cb7-be8c-0012d66165b8", "indicator--cabe32e2-8fd0-45c6-af86-f2e7569ed008", "indicator--c70e4aca-2810-4f57-a750-e8a5fefba0b5", "indicator--e0b4f563-bee1-4902-bbf5-b48245ed8171", "indicator--899ba4a8-876d-4d91-890a-cc18a0f67e19", "indicator--e3fb4341-fa0b-4f21-bb77-1cd2b0f8aa98", "indicator--f3b7e2cc-afe9-478f-8391-05ad1e0cc21b", "indicator--58d61f82-93c8-4740-a58f-2bca73b82201", "indicator--17df3d40-121f-4bec-b7e8-0fb3af7d4fb5", "indicator--4d07cb12-1d4c-4eec-8782-601543196650", "indicator--77806895-a00b-44fd-8db0-038c41a468b1", "indicator--cfba5aa8-d262-471c-841f-67f54dd4beb5", "indicator--e1523810-6be9-475d-b2c2-58e7551fcd00", "indicator--73fc8ea9-e47b-42fd-8439-ff586885a23e", "indicator--4420e566-c9f8-48aa-a058-ca670ceee318", "indicator--2a0cb6f0-dec6-4e26-a23d-131d80c58251", "indicator--8667d9d5-41d6-411d-a718-7afccb1ea5e4", "indicator--96a0c7c1-c156-425a-8954-f3c595d3b45e", "indicator--e72a50e5-adcf-472a-b860-d221e221494d", "indicator--8d14cda1-4f80-48e5-845f-a0122fd7eed2", "indicator--97bc5cd4-ad03-4f6b-8e56-1d2f1849417f", "indicator--2358d77f-6440-49cc-9109-2019d91df83c", "indicator--b5c865bd-4e91-4fac-97e9-6d8685b418b5", "indicator--31fd3069-6cdd-4a2b-93e0-a8209ea3dae5", "indicator--e5402d60-96a0-4604-8997-86fac704c74b", "indicator--a09a8561-1ad6-41f6-a953-c8bd336bbc7d", "indicator--e1606d69-0c63-46fd-8cca-997768464b84", "indicator--592ab6d2-7483-4aba-a709-73a3e9aaef0b", "indicator--b22dcbcb-5650-4764-9a5f-5c334986179a", "indicator--b4925979-e2de-4cd1-ac81-6689bbf02da4", "indicator--73426955-737d-4605-ba13-2be7ce1f21d2", "indicator--4875318c-123e-47cc-b616-e404146933e6", "indicator--c6008379-c355-40ad-85cd-93a104245ed5", "indicator--6280e4d4-aca6-4c22-9ef6-a305a27ebf32", "indicator--a5edb4d4-2a6a-4b60-aaa0-251d7cd2ac3b", "indicator--8e8a35c5-a51f-47ea-8f81-9e803cb5a073", "indicator--c8e07534-00b5-4de6-a305-26496a1a65ac", "indicator--c6aafa20-2ded-44ae-b289-dc14ad893779", "indicator--b4517ee3-73f0-4c3b-98fa-faffaa05fc1f", "indicator--288528a9-fa2f-47d0-85ca-5b9b26c5d294", "indicator--c0436b83-b44d-40a6-8bac-9235bd0c3ab6", "indicator--75fc6201-ce72-4bf3-90fd-30d6208d16b8", "indicator--0bf3e784-d2e5-4683-9f78-c32ba5f5818a", "indicator--ed1ef8e9-4e58-45e2-8e29-a0cc875eb4a5", "indicator--df94045b-8c9a-4732-8292-90515bcd420d", "indicator--0adb55d4-bfa8-4606-8c73-10179c922a91", "indicator--c9447fb7-a22a-4a19-b94c-fa17775ba5e3", "indicator--09cfea56-8dbc-4301-b0f4-c17c9641c554", "indicator--c28376fd-2eb8-45c7-b834-88bf71747eae", "indicator--f2d5a482-52df-4d76-bd4d-4d359506ad08", "indicator--006525fb-1eb5-4929-844c-db0c567e5e6b", "indicator--ad72a496-1def-4a8f-a8ab-c5b0b1864816", "indicator--5e2fc98f-17e0-4f4c-bcc3-a83b89a5c578", "relationship--947c2819-5879-4b5b-a4c2-8eabbce010a8", "relationship--108e14f1-40bd-44b4-a7af-08914d3149e7", "relationship--27beda45-3f6e-43ae-b42e-a4a32b81c216", "indicator--f60eb973-a744-4591-98c1-3cce63cb6144", "indicator--a41bb992-fade-4285-8b05-efd7acaecbaf", "indicator--0b929c5c-dd1d-4637-8fc9-58ee450db471", "indicator--aea23d67-fb08-4844-a01e-3162d9807c4e", "indicator--2016dfa8-4a99-4d76-85c6-60abf2a8b7bf", "indicator--edaf2e9e-5d13-4cc5-8399-b0f7f57699be", "indicator--454be7bb-8b37-48cc-8a57-996e5c41c357", "indicator--3caf9228-f6ff-4355-93d9-1d24b20b7b58", "indicator--eb04eae1-8c43-4c03-b3c3-ef2e172b620b", "indicator--5e0e17d0-7afb-41bd-8093-9623862049aa", "indicator--1d3509b3-5592-4887-a6a2-59d0d376f786", "indicator--f66a8097-ffa3-4601-a669-f45381844a6c", "indicator--10ba943c-fe49-4cec-83fd-7e86b1c38d0f", "indicator--a206ad88-5013-4ba2-b309-98fb9c8b9180", "indicator--b8a01478-2d9e-4296-aec4-68dfe26d1a6d", "indicator--a747c41c-b01e-411a-b86a-77d075024133", "indicator--0aa86e9b-b027-441b-8f81-0650fb13ea2c", "indicator--54f44b3a-136e-4558-a4f7-db4f6266068d", "indicator--1e77a181-a4e6-4c02-8850-d6c46cbe44f8", "indicator--a16778a7-cb2d-4381-b06f-a37ee0b06281", "indicator--9f7f50c0-66b6-4696-9df8-ae0446e916bc", "indicator--70692f10-60e9-4b85-9647-9f769886c7cd", "indicator--85a18a62-8729-4aa3-9a1b-84452e1f2c11", "indicator--e5f8f753-8961-405f-bfc7-25247a5bc6eb", "indicator--46e12dbf-8b09-4ec3-a072-d74fb0d0752e", "indicator--6e8a8a86-6ce4-4470-8a99-4870619117ad", "indicator--016fff58-8fe0-4404-be21-1a10ca8c4a8c", "indicator--228f4f7c-4ce4-446c-bf17-54e7d84e47f7", "indicator--b571b38d-4648-40e1-a7b8-b4f5cd0fec82", "indicator--a6f81758-453d-4044-a780-87db17da473d", "indicator--77ab655c-824b-4f58-98f2-bb52e2edfc0d", "indicator--2cefb897-d6df-4c1a-99e7-7bcd6ac86783", "indicator--6b4ec4a5-4823-4b17-9287-2fae34bde113", "indicator--f9756590-661e-4265-873e-d9f2b7f2360b", "indicator--44f31187-a5c7-4c27-8477-1bcc4aafba36", "indicator--e41d12b5-e5ec-4cc8-b284-55e2f0f5dbbc", "indicator--beda7960-bf4c-4e03-9c9d-fd3cf64db039", "indicator--a5518d02-6db2-4df4-9f36-8349c89705e2", "indicator--4565fb60-8348-4357-a032-bbbf4a5aa749", "indicator--caa44930-3545-4068-82b7-ebd4c256b3c5", "indicator--f60e63b4-cce6-4dd2-b75e-e47f76019f4b", "indicator--039ec4a1-a1d1-4c91-95ad-8605848deff5", "indicator--5dd1000e-353e-4c8c-aee8-721d0bee8dcc", "indicator--0d23a55d-6e77-4773-bd78-2b4b1c438a8a", "indicator--5a413694-4ade-409d-aaf4-7a88786b6edb", "indicator--e15f1450-99e7-4849-81cc-278f5032f47f", "indicator--69a83022-40d6-4014-81eb-38f55d473627", "indicator--e6fcec6a-31a9-4f14-aead-8317c8b1184d", "indicator--4fadab9d-50c1-4e3f-ad15-abc7fa7c2e8e", "indicator--535ae3e6-8ec9-440a-a19d-b2311c0aafc0", "indicator--07915f05-3138-4a40-9294-75e6aacf5740", "indicator--7ce7be1c-b2e1-407e-ae6c-250f1ab9d635", "indicator--4ec9f88f-bd9b-448f-8723-bb7ae05f1635", "indicator--d690a14c-a048-4b5e-a1aa-8bec51bc7de4", "indicator--b83b2998-bc06-4183-891f-8c99d5cf1207", "indicator--ca835e57-4dcb-43dc-9259-7169bd50ffdd", "indicator--f95d41df-06f2-4138-bcbf-77294a2d69f1", "indicator--bcead2ef-8597-4523-9631-e6635eaf958f", "indicator--11ec3b22-3ac1-4e0d-9db4-33d21ab42fc0", "indicator--53a36aec-bff1-432f-b98e-6e04e226a855", "indicator--d6b563c3-fe17-4801-b177-ed54bf1fa35a", "indicator--43fcd1ac-891d-415e-8321-57681b7252cf", "indicator--db1eb899-e1a4-4aa4-bd1e-a02cda480b17", "indicator--9e33e9b7-e679-4e84-82d9-32a375b5b4c3", "indicator--d333fc25-3f00-48a0-aa41-41b13b7f613f", "indicator--224880fe-6515-4805-8e05-b9b2e0888de7", "indicator--ab727aed-185a-455a-8a26-a93d8012338e", "indicator--dc1671bb-1430-4592-8e74-dfa42a75ef54", "indicator--2434136c-07a0-4bfc-893d-46edd12fd819", "indicator--757b7ce5-34bd-4f3c-8d6b-b8896cc477ba", "indicator--5ec43b5c-bd38-42f9-bf5e-f18f9db6937d", "indicator--c984cadd-2385-49e0-ba50-9b1932a1d87c", "indicator--8c937c0a-48ba-4d2b-a8a3-273ee043c1b5", "indicator--3606f9e1-a33f-4fb6-b2bf-1368b885985d", "indicator--0e031758-395b-425f-be7f-ac166f5505c5", "indicator--852de819-4722-4879-be33-ffd8fc24698c", "indicator--4e3525da-1448-4078-bc32-4b19ddf66240", "indicator--04a847e7-32a0-485c-bfa5-e2dbc4632c11", "indicator--6f6edaae-fd9a-4da5-a8ff-23bf65e25d37", "indicator--9267cc83-4cb6-4879-8635-79ccf04deaa7", "indicator--32d4957c-47fe-409d-b13b-273c6c0c63c4", "indicator--031098c7-aee7-4782-a6b3-ef9e6fe55c53", "indicator--90026b12-0246-4e30-ac1d-57f5e74ad7e4", "indicator--a9e9406f-fd6f-4e54-b4b3-6d4bce492062", "indicator--01bec3e8-f861-4e7b-8eb2-179c460d1da0", "indicator--7637d1ed-47c7-4dd2-be95-6a5d7c39a7b5", "indicator--b3cfe2fe-5aac-4566-b369-aa2c0ff599d5", "indicator--505fc6e0-9ded-4713-9548-17f8aff2ba54", "indicator--7328dfa1-a6cf-4f6f-9be9-6e7606ff21e8", "indicator--5f299f33-b1c2-4d33-9fe8-75b954da9416", "indicator--7311cb0b-ae51-4480-b819-fabdbdd5529d", "indicator--6df76380-b8c1-47d5-bcfc-7737bd0ddd2d", "indicator--da61222e-8b09-4101-9fa7-34ab45829074", "indicator--991407bb-7c29-42c8-bd6d-bedf2f084aa5", "indicator--3633e52b-2d6f-4e2a-8234-90cfa462dfe0", "indicator--92f71b79-aa10-41b4-9513-ed5b276676aa", "indicator--4a3740ed-94f6-48f8-80b8-ff238f18f84c", "indicator--52b5d606-722b-4da8-80cc-d63437d76f65", "indicator--7da5a43d-c99b-47a0-8f31-5ced1ff2c6ba", "indicator--71b47c08-921a-4e1a-915a-15dbe02d20c4", "indicator--62e21844-ddc9-4466-9eb3-b94e74ea323a", "indicator--8ca858a1-349d-4cd3-bb46-6542f5210717", "indicator--f6064e41-fccf-41fd-baeb-2d5ce8a9c3e9", "indicator--3bbf6db5-7f54-4052-916d-7e653a525e4c", "indicator--93d6a5d9-46eb-4a58-96b5-c3d2ad9178c7", "indicator--1fd662d0-acb9-489d-901e-24acfb80cfa8", "indicator--2d92c4c8-84eb-4c55-ab6c-5f534daf07d6", "indicator--5ef7242d-a698-4321-a6e8-f53ba8747f9d", "indicator--26adae97-a958-4ee2-8f28-0615f58ae9d3", "indicator--30634499-094f-40d9-a04a-678abe3084d7", "indicator--05b93404-eb94-4e1e-a251-c46e7dd3cbdd", "indicator--1a76b41d-02fd-47d9-8c88-77ba44ebe6d9", "indicator--1f13889d-4672-4ce4-9d8a-aedd80a36306", "indicator--8c3cdbce-8b80-476d-9d27-b9f6116acd61", "indicator--c74599bc-e5fb-4fb2-856f-ab1d33309125", "indicator--b8ae280f-5575-42a1-bdbb-be3b7d821143", "indicator--fda82b45-d7ac-4cd7-aee3-5a82321a29b3", "indicator--dbe74cb9-19c9-4556-b738-4774aee5e1a3", "indicator--32dcc618-790e-44b2-a740-ee6f4f0013cc", "indicator--8ded292e-21b2-47b6-8632-2a9e7878f981", "indicator--1615e76e-eb47-464b-aace-57357787f783", "indicator--dc5f16a6-cab5-45f1-9648-19de6f6ca353", "indicator--26c32dd5-1e48-45ee-b407-50fd5a1521fc", "indicator--a51a9249-9286-4502-a279-4894396cc643", "indicator--0a690440-6565-4148-bc6c-def7e070528a", "indicator--9722daca-a719-469c-86f7-1408cca2dd42", "indicator--06021c9a-983a-496f-ac9d-c78b00ea3155", "indicator--6f17bb31-cb43-4147-a98e-3f271583e15b", "indicator--a4f5a130-e51d-4cb0-b09a-8b90e0c88f4d", "indicator--2c66e0b4-26fa-40d9-8566-0e90e8d2b1da", "indicator--b275aca5-8711-4f65-8587-7f46738b8e76", "indicator--c0397423-27d9-4425-abbb-e4b51a9dba2c", "indicator--fd96c496-2390-4c76-8622-bd729a9968f6", "indicator--a4418813-0846-45ad-bb78-c84783849f8d", "indicator--afc61939-18e8-40bb-8559-d6d0b6873d0a", "indicator--709bc305-dc8c-439b-b1c3-b7aa94eaf321", "indicator--7cf9fd83-6644-42e4-8cd5-461b286d6b1f", "indicator--89052212-59f1-48d7-bec5-cec2a348a236", "indicator--5b865edb-0be1-4a75-951b-f0af292f937c", "indicator--8dcb9bbc-5967-41a4-86de-df77ec28776b", "indicator--f892d647-1e58-4342-a213-e6e0676b65a0", "indicator--ed2658ad-6c2d-4701-82ef-d87085b33e3e", "indicator--37ef26cd-7338-429a-a6bd-022a2458b3cc", "indicator--918652a0-f460-4a0c-8a36-1f34bf70dacb", "indicator--ce52321a-d943-4235-86ca-a2a09854c837", "indicator--174bd21b-8cf4-4d61-bcf0-0b7d178474da", "indicator--c1c24b4c-14d1-47ed-be20-b4fb9fa022e4", "indicator--bac601af-913d-4481-a4a5-a4caca082d56", "indicator--2949badb-47fe-4e6a-866c-0c5c891867d2", "indicator--f09bde78-cdab-463a-97ee-039328c974b5", "indicator--6cc8fa57-a8a3-4785-b0a3-cc6b1e18c896", "indicator--f885a44a-b513-40c6-a06a-0d823153be69", "indicator--5a7b976a-44d2-48cb-92bd-5c2484a749f6", "indicator--682c2aa3-d75a-43f7-886d-c80f7bc5f5b4", "indicator--93a7cc37-c552-4f6b-b14b-c8daee309553", "indicator--7e8d3492-0457-4c03-b28a-1d3421ace7b4", "indicator--3e0ade9c-4f5f-4871-92e9-c68e3f7fea07", "indicator--0f491aab-21cd-4343-b8d7-01950afc1b8e", "indicator--095cd6b9-7aaa-4e2e-af49-51d28554b884", "indicator--bc5b02a5-b7d0-40f0-88ef-f2176dc00cd4", "indicator--e55f97ba-807c-46a6-89f5-c8eaa26a67ab", "indicator--41a4c066-d823-4db8-9650-a5ebb4ad400d", "indicator--5c88dae2-7120-4c11-868f-97c568af4223", "indicator--a0612d62-b0bd-4ea4-8fcb-43a92867bafd", "indicator--b25b4f1e-72c3-4afd-ad07-14a0fc4200f2", "indicator--c45eba56-995e-4e7c-a58e-cfd753435409", "indicator--5cd8c381-3f20-4927-9371-4b019f064e09", "indicator--a0cbee3b-b458-4710-aba6-4335b1842b5d", "indicator--5f5cf9d0-5166-4c28-87a1-80680819c318", "indicator--000cd760-db78-4032-8ba3-24f8d5fc388c", "indicator--04e538af-cd1c-4a85-b9bb-58aa74ceecec", "indicator--762ffe6e-bedb-414c-a843-8e82873a2b83", "indicator--677d15f7-82b2-49b9-9219-f3479507acd2", "indicator--710737e8-ed1b-46f8-be92-ba5d1c5ecdd9", "indicator--3922eea9-65c8-4cdc-9eae-c8cd37cc1cff", "indicator--f6b7f81e-88e9-4775-b6de-9b6bd5288ac0", "indicator--6c8e189b-5531-490e-a170-f4783d78cde9", "indicator--e109916a-ea0d-4c6b-916d-6b17cd35f6c4", "indicator--4ccb530b-be53-4593-b7bf-991fa6bd7a1a", "indicator--67a22a76-bb96-4a75-90d3-48a229b7eaec", "indicator--022e05e0-4ebf-43dd-aa03-174ae9e03731", "indicator--31541bdf-5eda-4af2-b25a-0f33df9ef07b", "indicator--1470b8b2-9c86-4f37-9f64-d60391e4ce65", "indicator--500f64e2-ec5d-44ba-8567-72ac3e927003", "indicator--9c3912f0-4b5c-40de-85bc-3af50c218622", "indicator--6f5873aa-24ff-411b-a72c-c5e9a8ae4d8d", "indicator--8fa52c34-9779-4876-9d62-eed645470155", "indicator--9c76a6ae-af8a-490c-bf79-0f8175b08e91", "indicator--9ec15582-efc7-4c0d-ae7e-04a2b27cf947", "indicator--0ccd72a0-9c80-4fdc-89bf-e8580836dd22", "indicator--6a712b9d-7265-491a-bd61-e07ff33403ae", "indicator--116d254c-39d4-420f-adb5-134b8ad8e4a1", "indicator--0c96df76-e952-4dc6-a568-d85491b2400a", "indicator--bd77bb61-9139-48c0-9cfb-bb060e9f21ba", "indicator--5e6ce416-83ea-48da-bd7a-dce17ae6d67b", "indicator--82b7a6cd-56e1-4b14-9491-5c42d64f6481", "indicator--df24ca52-0a27-4855-9189-a1f74a8f288f", "indicator--80cb16c2-5570-43d3-bcc1-f9f44b2f40e6", "indicator--46ece95d-e7b3-4e06-b434-52660ef15555", "indicator--08774ddf-4bd0-43eb-9f6b-62cb497b23c6", "indicator--47a54457-141a-4dec-bd20-55403bed4d3c", "indicator--6da2f130-7950-4896-9fc8-9b6ae4c01494", "indicator--f4929d12-9ebe-46a0-9a1b-de1f153213b8", "indicator--e365cba5-6364-42ca-a8c8-584e061f1408", "indicator--7d4a7006-d750-4107-854c-54ca06955cd5", "indicator--6544c130-3ee8-40fe-bc8f-1ff9e951dc91", "indicator--f1b66ac6-bc00-4fb7-8741-475f8c478a69", "indicator--9903a480-0bb2-4207-9cee-9d18150c1593", "indicator--cb795f2c-0940-4714-8b07-a0b8a2006d6f", "indicator--d6f72e63-22aa-44c9-b98a-60bdc6f4cee9", "indicator--2c987972-c992-4f1c-be21-3ebd92fee855", "indicator--e2fab26d-25d5-4655-8afd-03e75dba8433", "indicator--e2357bf0-df19-43fb-8326-0709cc9e5da9", "indicator--8b31b73b-830c-45e7-8457-6cc8e487728f", "indicator--5f3beb0a-7770-4653-8952-120e769e7c0e", "indicator--2ce3b676-afaa-4329-a1b3-af915acf45a7", "indicator--d6124faa-14f1-4d15-a433-180020cc65e1", "indicator--af67a74b-860b-4c22-8209-28d907b1807f", "indicator--68d20b7b-a05e-42c9-bfbd-9e87a8dc62f7", "indicator--4ed10a1d-d2fe-4300-98d9-49900ceacc6d", "indicator--a9df046b-6d23-4056-86b0-611e1b812b44", "indicator--542282b9-4242-442f-891b-1143ce0c3d81", "indicator--acd49c06-ad0c-48b4-ad86-fe13224f2fcb", "indicator--bab8c9d1-a1d6-4188-85f5-a135a6dd3e1e", "indicator--b1b83b44-8a4b-4069-8229-a86e0cecabac", "indicator--49f2af8b-ebff-47a0-b41f-b71aa5726067", "indicator--93b0a4ca-31ac-4645-962a-81be5a62c434", "indicator--730f0f61-26f3-4163-afb7-be81226767b0", "indicator--2c0d5332-9bef-4603-8c62-ec7bdc628408", "indicator--ce6435b8-2bc3-4c25-a8f6-20fb5549f6b2", "indicator--37ca7898-b011-4894-b421-9cefcf268df5", "indicator--0444cfbc-59e1-4575-bb45-c65c3bab9733", "indicator--f56e8c4e-92f6-4d83-9ab9-c34166b928d3", "indicator--2f1c515c-9f83-408f-9c51-86a9289886c6", "indicator--db69c0fb-4e47-41b3-88c4-eccb6c961b98", "indicator--f7f3fdc7-1b5a-4ef8-8ac5-09b6b134d6bc", "indicator--404b7091-b56a-4ba3-ba71-973229d0f68c", "indicator--d6dd6c69-3530-43dc-9a0d-655f35c48ce0", "indicator--eac76ed4-e1c7-414a-82c2-701197ec6c54", "indicator--d9dd7ea8-1a57-494d-a108-834babc75b08", "indicator--e024f079-bc63-47f6-bae6-5bb5fcb0676f", "indicator--40c4d3b7-1cc9-4f4b-9356-2488bf86e9ee", "indicator--3fcf53fb-c8fb-480f-9d67-6675d9f93505", "indicator--1622a9c2-c4a0-4c6a-8867-2bcb6f63a196", "indicator--b51f3377-2fa6-4df2-8a87-2fe0ec192767", "indicator--2a738262-eba6-4d76-b903-35dcd1b80986", "indicator--6c39ac56-cdf8-470a-b4d2-0a91b599db95", "indicator--49bb24f2-c4d8-4e1d-80f0-5eaebfb5d6e4", "indicator--5d516d89-3cab-4e39-82e4-904cdc6a8b5a", "indicator--075b6762-37a4-40de-9c8a-803482eeacc5", "indicator--f55ae178-a0f2-4f92-93d4-5d68233a7938", "indicator--5a51b91e-3820-4ba7-9f5b-38bb6b1dc91b", "indicator--094dc963-a923-4c9d-b12b-6351ed134284", "indicator--3d2ee1db-15da-4fb7-908c-5251198e3cf1", "indicator--e9e09bb1-17ab-4a94-bc68-57a334bedd46", "indicator--ff6c9a46-8acf-4649-b043-37442877ff69", "indicator--8f89ea4e-6db3-4033-b403-85d01e544f36", "indicator--7dda1953-268e-4e11-8128-fc8cc364c0aa", "indicator--295b3a63-c78f-4c5d-a4bb-750a8d8ab62a", "indicator--42268e75-7660-4666-aa88-c82c90b5e79a", "indicator--e46b2f35-8479-4f6a-9d35-1a312dd4edfc", "indicator--54c856a0-bc29-4f54-ae61-b755aabf6288", "indicator--190f2a53-5d96-41c3-aa4a-e4657ff1f03e", "indicator--027756a7-90fe-4e1f-8698-74f28874ac4b", "indicator--f7761250-9308-429f-a7ae-78fb96fe8a18", "indicator--30f62029-b1be-4716-b9ca-ebc086964b7c", "indicator--81cd6497-62f3-4f40-b05b-374c934fb1bd", "indicator--04dc3efa-b475-4367-894a-7f0ce929ceb0", "indicator--4f92f347-2005-47b7-9a0b-65c9be7f7cca", "indicator--d3a1818a-fb82-4bd5-98ab-e1e4a3a3aceb", "indicator--65a1aeec-3350-444a-9b39-cf914f9a4d10", "indicator--c5ee36f6-844d-404c-aad3-548db707ca8d", "indicator--885c31a5-86c0-4564-a119-071f98d776fd", "indicator--a90b27e5-399d-4023-aef4-f47ab3dfd325", "indicator--aedc1cdb-f0b8-417f-865d-05cd02403dc8", "indicator--0063ff2a-b12a-4cf2-a082-2a324c14a3af", "indicator--a9477177-6104-40b0-8f39-b6caa9ad280d", "indicator--4e294183-aa95-4043-8bce-92a472819887", "indicator--7203ca61-b947-44fa-a4a5-256f22f1c66d", "indicator--92415f1c-361e-4428-b7db-741dfcf03b8a", "indicator--9af7b0d1-986c-4be7-89d9-81ac03dfc8c2", "indicator--f022531d-70b0-4824-bb51-edbb01f49a5d", "indicator--a66e2b0e-c3fa-469b-b018-d44b4b99793d", "indicator--d496a438-4cd2-454c-b2d3-79839451d8f5", "indicator--c8b44cc9-5797-4d2e-a713-715b88e67945", "indicator--20256e99-70cc-43e2-ab56-265e493de647", "indicator--bf58c061-6ffc-4aa7-a804-ce7c5fb12d9a", "indicator--9189e02a-7763-4576-8fa8-71615581a223", "indicator--2b3c99f2-2743-4152-b9ca-c2f1c0f4a43c", "indicator--4a69ef3b-abd7-4934-8a9f-e4dcc0d47acd", "indicator--31544af5-83ea-4f5e-9962-3f833bf397ad", "indicator--4af11a4a-9551-4e0a-a53d-d999bd1bac59", "indicator--db92d543-3e88-4d75-98a1-d06717362b23", "indicator--0b704d26-e3f3-412a-a2d8-3eac9e1f4fc5", "indicator--eb1c3bd8-cf5e-4aa0-a13e-d69591f0327e", "indicator--32f515e5-b5b7-4c59-acd5-31ec13c5966e", "indicator--c794cef8-3301-4e4d-a002-39b8a4cd6cde", "indicator--cd59777c-61a0-4416-aa5a-7c50fadd175e", "indicator--012b8a1d-3fd7-4e33-886e-1cc179ee6315", "indicator--749c573f-dc34-4411-83c6-c5f6d70c92db", "indicator--f12f247a-90a5-44bb-8793-a111816546d6", "indicator--b11daec1-18a6-4688-a107-bf8eb1d991d6", "indicator--8e22afc5-99ac-46a0-8d70-7f40f96e1b5b", "indicator--dbeb7d51-80a6-4b64-9d0a-d42ba36935b5", "indicator--0baabd7f-3f1a-416c-8095-37b3b83501ba", "indicator--038f509b-df72-4934-9b85-c53207816044", "indicator--6bb77bf1-3ef7-4ea0-8b19-8be400a175cc", "indicator--d556ebc2-796f-4716-969a-0ed405ffd9ac", "indicator--0f921279-6922-4ec4-ab8a-18cde295c455", "indicator--ff3aaca9-590d-437f-844e-1099e844b586", "indicator--b261422a-5cf2-43e8-af6d-493b132d82af", "indicator--e3fd4c82-6f6d-440c-b637-9624e84be590", "indicator--544939c0-97da-4ac8-bd11-2025108c6158", "indicator--d7237df7-34cc-4785-aeb5-bb6cefa78b59", "indicator--fb59d6a9-9a73-479b-a7f6-147c9b727d3f", "indicator--25ae7154-5331-4964-9ee2-e4804830c5db", "indicator--8e7b6e14-afe6-4ed1-a1a4-9fccb47397bf", "indicator--72aa66a6-a28e-43ca-83bd-17d70d5f96c6", "indicator--d7cbaace-b778-405d-8a0b-02afd63cacbb", "indicator--1bda6872-9d91-4405-9d17-80003eedc193", "indicator--0c535f82-35af-4f68-b5a0-ce81369e1d18", "indicator--41d11e8d-2b4a-46b6-b5bc-b9cfa8998767", "indicator--7b3e11a0-f9f3-4cca-a930-c5a989ae0efb", "indicator--e1a9e058-d5f0-434b-a5d4-8b8071d21f98", "indicator--c94d20b9-2061-4946-957a-21a0e75f605a", "indicator--99dd035b-f550-4a66-983d-a6363b7c3282", "indicator--92f3a1aa-5011-476e-93f7-230c02353dad", "indicator--59a05c2d-2666-4716-89fc-40463cb8cd47", "indicator--6e11f648-0760-4d3b-9f02-818b40a4ef52", "indicator--98eb5571-efba-4ef3-8925-75fa3d7a8db6", "indicator--dd4de2f7-a5d9-4ff0-a4fe-cec07b01e31d", "indicator--bbe6ab41-e91b-41c5-935c-8d9f89a84e7b", "indicator--e790da3a-111c-4767-8de6-94d7263f5fa2", "indicator--5c570869-e17e-4d48-a4ca-aaf10a121dca", "indicator--b8fbdbbf-4c15-4c5f-9247-c7556d6f6e1b", "indicator--45544e7d-036c-4c4a-8e57-4b613e9a6883", "indicator--f115dd9f-37b2-4652-abba-0b50990215a9", "indicator--971c50f7-91fe-4a2f-abec-95818346c240", "indicator--1d6ccf82-f9c2-4b09-a4ab-3d4c685c289a", "indicator--8f993ac1-f5d3-47d2-9c80-aa9b7f155f00", "indicator--b9fee2ed-5be1-4e7c-878e-716773c18789", "indicator--9b3a69be-89d2-4e82-a67b-7854798c3bb4", "indicator--a8248df9-ed09-4c22-8a5a-dd496c7ba566", "indicator--8d30377e-dbca-49a9-b5ea-aad1523823aa", "indicator--3da80987-7d44-47ba-899b-d600db961dcd", "indicator--27848e72-171b-4600-b50d-509beb958be0", "indicator--a6b5dcf2-162f-44b0-af16-4622776c02a1", "indicator--0bfee3d1-765e-4045-9fdc-63c745f63301", "indicator--0fb502a6-4b7a-4c03-8e8e-37db5d944f51", "indicator--773f408a-67bc-4d7e-8c0e-71dc9d2bb792", "indicator--e2fcb2a1-b1e2-4da9-965e-46544ea16d72", "indicator--8f4f16e8-08c0-4be6-ba70-5580d33d2416", "indicator--22525f51-c877-46bc-9401-b43deda0c3be", "indicator--9ad14b9b-accc-4953-a666-b452a7151291", "indicator--b76ddc9c-f0f2-48f2-9b25-c9258c24c158", "indicator--4e3f0910-579b-4426-9b03-e144800729b2", "indicator--4cead0a2-3aab-4979-b86e-5bce4a1cff42", "indicator--37cfa580-674b-4c68-b2e0-cae4fe11feb2", "indicator--ce4bee65-4fc9-47e8-93b8-3a36b2814f0b", "indicator--d7fd6d50-6a3a-4fcf-949c-16b3e2fcb897", "indicator--0188edaf-ad4d-41ae-a9aa-ab7c6f306bc7", "indicator--51d03f33-f037-482b-b5b3-d48bc04c1d30", "indicator--5abe64b3-6f73-4746-87bb-0393f4627a1e", "indicator--c747111c-3107-4286-8930-6fd1ea108d5c", "indicator--40605288-6d8b-404b-8f73-77abe5abf672", "indicator--2da4fef3-1e4d-4f83-817f-0bd64927cef2", "indicator--956b5d47-b778-4d05-9c79-75297f976744", "indicator--878137f5-10b4-4368-aa76-c3d38c1a492c", "indicator--725a1de7-7bea-4882-9574-51d2fd02bdc2", "indicator--9cfae58f-9655-4bf3-bc49-af0b22706203", "indicator--c9b568d3-e57c-404b-b6f2-ca91192197eb", "indicator--385e2166-e7bb-47fe-8866-cd8cd70ad82f", "indicator--58dff838-aaf5-46cb-a954-e6d051ea6321", "indicator--cad4130c-ef98-4823-bd5f-088656d968d3", "indicator--adabb886-6833-48f0-80f2-f0525ceb20cf", "indicator--14982160-da2b-40a3-9a66-f1e2f15dd0df", "indicator--705a9fcb-975a-4feb-b7b5-9fd60589ca3c", "indicator--a0b18be1-ccb3-4718-86bc-7da7ee6d89f6", "indicator--3524b47c-23a0-43c3-90f3-9ae0ad3c8b87", "indicator--c8754df3-eb50-4efa-bbc2-22c5dd25c8f0", "indicator--3b61894e-09fd-4829-aaaa-6c5f45c56075", "indicator--8c7c92b5-b93f-4c72-b8dc-24295bff92b3", "indicator--2e14663d-d309-49ad-a1bf-4a14e7ccb158", "indicator--99a0b820-174b-43e2-9661-d5783a72fb6e", "indicator--c5671a8a-46a1-4fc8-998c-e4f64619b811", "indicator--28079c94-ded3-4c39-9793-4e120c968344", "indicator--3df790a0-3e1d-4868-bb4f-0f361d35864c", "indicator--990d999d-a563-4658-9981-589ad0416903", "indicator--640ec239-ee96-40ca-8fe7-bd1ad6f075ae", "indicator--a7051ad2-d33a-4bae-bf89-f495658eaab0", "indicator--782df0f4-c63a-415c-8ea4-93b67d87e62a", "indicator--7f6b5c8c-fc40-4001-9db8-b761810dd64e", "indicator--97604bf6-1684-4448-b78d-75869afab290", "indicator--f5869cf4-3e97-4c59-a069-a4fef0ec4336", "indicator--036adf45-e6ac-49a0-9806-572ecd8103fd", "indicator--cd629595-dd17-4631-8c58-bd8b1860b776", "indicator--e21410e2-c61b-41c5-a188-aad1391e7260", "indicator--b3735896-4136-4b54-b066-8b6f710d25fa", "indicator--298ee7be-fc1a-4f67-a73c-a4647ebafa64", "indicator--95e95d19-ab9d-4741-9fb6-3910f6e9208a", "indicator--c5f017db-8f37-4c5b-89d1-567ab76599ae", "indicator--402f2ea4-768e-4ff4-8d25-66fa86437308", "indicator--70dabfb9-69d4-4173-ab53-ae2dce9c0f88", "indicator--ea557d0f-5c39-4b46-84b0-f3acd023c421", "indicator--861c5a2d-6691-4190-8e9c-6c1f7c291b7e", "indicator--9482b04b-70c5-4057-8c5f-32873b6987c7", "indicator--3b22a69e-342b-4d3a-804a-5c1a35aa1885", "indicator--5af5b8e3-cee8-4e76-9c98-bd94cd2d2434", "indicator--dbbcc427-a8bd-4703-b153-a178ebfe1412", "indicator--ef418a58-7532-47e3-a780-13b6860717f5", "indicator--60f9a2c0-73c2-4688-ac5e-99ed179a29e9", "indicator--329dc76d-7397-4d8f-bf2d-e3a4308319df", "indicator--4c02db2d-874f-478b-8eda-9d09e3f03aa3", "indicator--c674b69d-6ce7-48ea-830f-604f5b1291c2", "indicator--ba29e901-1fa0-4d6d-bd0c-faf32d3536e4", "indicator--43f741df-2868-4e86-9fcc-1d64d1c5da86", "indicator--67d3f8fe-44ae-4be5-b193-6057ef611c55", "indicator--e57bcda4-8a23-4e7c-bbee-59517fec9464", "indicator--1ea6ee04-d44c-4c6f-ae05-bf8d7755737c", "indicator--abb96845-1491-461d-8819-11273f895928", "indicator--6e6b0da4-a40a-46c5-976c-7a0779ef5ddb", "indicator--7663d65a-8004-40bf-98ed-6777d27e4d55", "indicator--a857ca5f-b3cd-4072-ba25-54ee0a05138c", "indicator--bf2a9ef7-d2e2-4c69-9a93-262ef8764e9b", "indicator--88ed0783-d961-42a2-ab2a-55b88fda3b82", "indicator--94cc44a7-750b-45a3-b076-6c3b2a90d1ab", "indicator--d921e188-e33e-4c9f-b73b-f8f8e237c776", "indicator--328e5b61-ba4a-449d-8034-08c9fc4adf5b", "indicator--b6e6ebf1-3f50-4080-8da4-07ebe428bc9b", "indicator--5ee370d9-e13f-4329-9c40-21c0893992a7", "indicator--40a4f01e-877d-4f66-be09-20b05a4fdc11", "indicator--4d298c80-7781-4c02-b5a8-22ec404eb640", "indicator--a4c3af26-e9bc-4ffd-a74f-b19caf8cbbdb", "indicator--6a6abfd4-abaf-4350-ad56-10d6c4cc068f", "indicator--bcdf92d6-8209-46f5-898c-79c86bf20a2a", "indicator--9e3d3ce0-567e-4f5c-a030-ff695be2713b", "indicator--3e099eee-246f-4c76-998d-9c5bd16ec8e1", "indicator--046ff516-4f7d-4394-8d92-a1bfe470a787", "indicator--b8382f4e-291b-4062-b328-7aea73feca35", "indicator--40035fe1-92a7-47b8-b06f-63a6e76376a5", "indicator--6f856332-e0d6-444a-8e51-242edb6415bc", "indicator--01f13e6f-b3ae-4116-908a-76a5824e9b1b", "indicator--ae17f39d-ddfa-4807-8044-bc99e54dc93b", "indicator--c31ab3b5-fe93-40ee-ba04-881df6d1c406", "indicator--6e43518b-b759-4524-a02f-fc67ec5007e4", "indicator--363299e3-d809-4127-be58-2ea0fdc57810", "indicator--ad241b84-4538-47cb-ab83-6680d063e8d1", "indicator--e87e2d43-2363-4e29-af85-66564c3e7ba9", "indicator--856b46ee-d12f-41df-9309-813232c22c46", "indicator--0142b233-ce91-4a89-acc3-6c43c02e137e", "indicator--b7f08df1-ef5e-493d-854c-ca1809239865", "indicator--89ac7335-3fd4-419b-bed6-4dd8a29127bf", "indicator--0b8a778c-26f8-4982-bde3-77ba8e8b0cb2", "indicator--d2f963db-0b31-4739-82a1-176af08b8ff0", "indicator--a6d1ace2-706d-4af1-a6f2-676533af7f05", "indicator--812d1758-c65f-4c76-83aa-39f2a8844f4c", "indicator--1060ad1c-259b-4aa5-99f9-8c2e03519e26", "indicator--09ee9589-dba9-45cc-9150-133e025fff93", "indicator--8cd9b121-765e-4a94-9a5f-c12ebec604d2", "indicator--9207a46b-72d2-455c-8065-a1bf13ae63db", "indicator--d275e27f-a362-4887-b623-ae5a841e9368", "indicator--1e6943c0-54c7-4632-8983-f6a8bdc90e8d", "indicator--4bd4b66c-98e0-4c89-ae8e-bab77bfbef71", "indicator--6e7c2b01-b36f-454a-a178-845847ff9993", "indicator--fb9272a2-5432-4420-8fde-174608219755", "indicator--11c3a7f1-c871-41d1-94eb-71793f3ea34c", "indicator--cbd50a87-4760-44ab-98c5-5f973962a91a", "indicator--94826832-9b67-4282-bf72-396818c7a020", "indicator--29b21120-e495-4f21-9763-2e14460eed77", "indicator--575144d4-4bc5-4b49-8d2c-cca5fb6c9e1d", "indicator--d63cae1f-e556-4725-9746-073cf3f31db0", "indicator--0192daa2-9e88-4c25-b00e-2b387420bc91", "indicator--3f4b6305-ad23-4f5f-833c-44be69aaa539", "indicator--18573f91-5511-40bf-9141-a8b493827e18", "indicator--7ade99f8-1e2d-4cc2-ae8d-e8c532eef262", "indicator--fa2c05a5-8338-4dc2-bb89-13455eeb22a3", "indicator--b68994bc-05dd-4593-9fc3-8a2d6d4214ae", "indicator--10c460f0-1c98-4d2d-afd4-76d3b9ffe571", "indicator--4dce203c-6009-4683-87a2-4e6b287806bd", "indicator--2a4da10e-2d6c-4fd3-86ba-07d4e6201d3e", "indicator--f12dc195-a3c5-44dd-9f0a-d9b79066135e", "indicator--04c0655e-27f7-49ed-a998-497941e2954f", "indicator--dbef2ddf-3888-4cf1-a911-f7c3655115c7", "indicator--53a6b3b6-1cb2-4dcf-acee-ea504954d742", "indicator--b97adc11-7103-4cb0-891e-79acc377a917", "indicator--01244412-51e9-4015-8920-a1fc9fb51345", "indicator--948d0a95-6bd5-4120-b02e-803278702f31", "indicator--3ffcb880-16e6-487e-9272-bc41f0ce0cf4", "indicator--bd84846a-aabb-44f4-96ec-054016dff9a4", "indicator--26145e6d-9484-4235-863f-2f68051a0135", "indicator--11cccbbb-a742-43eb-b24b-90889278ee45", "indicator--e464de50-063f-4821-a02f-ac307bf10139", "indicator--a0c846b0-8865-44fa-af77-366276529cbd", "indicator--b1495b80-9028-4167-8d5e-99adaf93e64e", "indicator--3f9673fa-e4cd-4ee8-897e-d148901cb79e", "indicator--c8bffe48-b160-4c6d-a52f-3dcfda62d905", "indicator--01a10589-3243-48c8-ac21-0bbacd5a0dfd", "indicator--7570633e-0b45-4de7-b11c-534a2550c130", "indicator--b76515f0-9d37-4bea-9873-4d45ab940bce", "indicator--8f16e0a8-1e13-4761-b6c0-d5851597c404", "indicator--47678829-da15-42b2-bb02-51d9068184d8", "indicator--18e1e3fa-ba06-4ad6-b330-e8dd7850267d", "indicator--656f1598-1ba1-4173-b70a-45e58e834a6c", "indicator--a075ffef-82cd-4f07-bff4-8c37dc009b03", "indicator--bc83312a-c1fb-40d2-9e1b-80f0d8faa70b", "indicator--b8a1eabe-492d-45d3-8ab6-4c5a4d4d7702", "indicator--b521dcbd-2043-4460-a452-31b6ae2fc81f", "indicator--0f3278a5-87d1-4477-88db-b09143ffbf3f", "indicator--979d4dce-87af-44e7-8b4e-7d4fa35e346c", "indicator--95035739-5ab1-44b0-ae9e-405328e461da", "indicator--12d3f587-ba7c-4983-ae17-8b01c9552302", "indicator--38202ab3-9e1f-415f-9fed-b397d7c289a6", "indicator--be6eb768-57c9-4bb8-9955-9cc23b33e04c", "indicator--f8062aa8-e01a-480b-9e35-64ce01d9dbc0", "indicator--79896210-dbe9-4214-8fa1-f35696de972c", "indicator--14037b9d-d6ed-48fb-959c-9779d91c775b", "indicator--36d189bb-91ab-468c-a400-c9acb142a0a7", "indicator--3fa3e1d0-78eb-44e3-b3b4-af0792145b92", "indicator--c8efb49c-1aa0-44d1-904e-090c46df0f7b", "indicator--913b9c21-063c-4b9d-bcde-6c23c9d72ef6", "indicator--dfce20dd-f1cd-41c5-bd2e-46f825822037", "indicator--80a3b7ba-e884-4e1d-a090-02b332514ae4", "indicator--d7e8722d-09d0-4182-aa7f-00c5d398a1eb", "indicator--f3778cd1-9341-45b3-b906-cd92aaf13c07", "indicator--79559360-48bf-42d4-a8de-26d69554477c", "indicator--329adb43-e078-4b6b-be8c-cacbe7e6eccc", "indicator--9250ee31-d200-4e40-92c2-1c49d89c7db4", "indicator--bc0b4d13-5c90-4142-b27c-ebe63a8013f0", "indicator--6627c1d1-7d8d-42c2-bbe7-049c1cb2a4c5", "indicator--52260fb7-9a6f-4cff-9ddd-4caa9ab73113", "indicator--c27b9207-44bd-4722-a34f-b329981a83be", "indicator--4681be96-c696-4c15-9ef6-67920ae11880", "indicator--b468cfcb-3b8b-4c97-8ed1-da42463b769d", "indicator--1c8266ec-7a82-4057-ae8d-c5834e286716", "indicator--01a77e0f-7236-40bf-853b-5cdff31848aa", "indicator--dfd21237-f6bf-411a-8615-95e5e49940c1", "indicator--87075e10-3f9b-4df0-b279-b1d4bebcd50a", "indicator--9a31eeae-df09-46dc-ab32-fe1aae624581", "indicator--cc800b4b-1278-4fe9-8815-49cddf3d8d5d", "indicator--764f9a6d-80c5-4f11-a14b-fa500a511ba9", "indicator--1e799150-7150-4f3e-816f-a2e6d1f6db3e", "indicator--82474561-c1db-4a6a-9861-76d0eebb68c5", "indicator--43139d55-7317-44b5-a948-b7866c07ad5b", "indicator--9fd21a66-0440-450c-a107-06334d82a9cb", "indicator--c794d9c6-0bb3-430a-bfa2-a9a07234adb3", "indicator--1a2e4f43-29f3-47d8-b30b-5f3a15908797", "indicator--d8e9f705-5d66-4a6c-a5f3-34370189b1ef", "indicator--ff4b73b8-41e4-4021-85c6-3dbb38b32765", "indicator--89d22693-5f30-4e08-975f-ab38679128a9", "indicator--c615a8b0-e2f6-430e-a575-3f65c237f722", "indicator--4872f5c5-5efb-4cb1-bdbc-230c41ce80a1", "indicator--b9c53232-9a42-4e3f-a150-587619e2eb22", "indicator--b00270dc-e708-4489-ae3a-6f0eaec38808", "indicator--335cfeb2-ce09-4ef5-80e9-8c52e96cf664", "indicator--f1254b45-478e-4dde-8bce-5627ca02923c", "indicator--81d4ffef-989b-4a3c-9be1-5afefce129da", "indicator--2a35781a-5eba-46c9-88ff-933e9db16475", "indicator--474bc111-28e6-4671-ad56-fda16e349ff2", "indicator--18a023ae-cda0-482e-942a-6e253768e75e", "indicator--03e6ede1-1b31-41ae-99d7-a0f80f6a920c", "indicator--626818b4-7160-42e5-a578-7796cc8c656a", "indicator--6b169e22-b46c-43cd-8beb-85e9c6b9c8dd", "indicator--7b6f7b6c-4322-470e-92d7-d384dcff3c2b", "indicator--a47d1da5-db33-446e-a560-5b5a2ae47ec9", "indicator--6fd6efd5-3bc2-4242-b946-3c3da37e3224", "indicator--f012cb4e-c7a6-4713-8718-0e0e399c5076", "indicator--90862559-b310-49e4-b246-3b84087a0c6c", "indicator--dfa81686-db9c-47bc-9ed4-85946b49fc01", "indicator--1a491dda-6149-40bb-840b-e25494aaa802", "indicator--19aea5eb-7a73-4442-b21e-6a738baccbc9", "indicator--2bb6dd3f-66d2-48f8-adc1-15dbe3099e76", "indicator--47fafea1-49a2-46ba-9a71-d9a3fff3376b", "indicator--3f284d86-aee3-4259-835e-69414fefd003", "indicator--d1f34266-014c-4dda-85f9-edd8c0621a01", "indicator--7de3013c-fd6a-4840-a694-49fc648ce646", "indicator--81c3172d-4433-4166-8990-ad8b896a43e7", "indicator--bb376934-2506-45aa-8b0a-bd93d4fbfe8f", "indicator--ad84ffab-17c1-45fe-a162-0d9aecbba0ba", "indicator--fcf3ef95-432c-4b5e-aae2-a9b6b336a684", "indicator--d36a3f09-5aa8-4616-b8f1-da4a8842a742", "indicator--e9385691-a8d8-4b2a-8954-a28b0113e278", "indicator--e497e4f0-9896-496b-b0eb-81ec185b5022", "indicator--03d436e0-bb38-47cc-897c-a7505367b6da", "indicator--b154ae43-c938-4b5c-9e88-63340d1f6222", "indicator--91e496fb-167f-4da7-8fc4-9731272c50ec", "indicator--c8d3c054-22a1-414d-8031-f3e280e387a9", "indicator--8e574421-ac11-4107-8870-f6bc29198481", "indicator--9e90fbd6-e6ef-46ec-b595-3624e41d18cd", "indicator--e1f44b12-3dc8-4799-80c2-e397e7be74da", "indicator--75a07f67-0a3a-4ac0-858b-38da94007f54", "indicator--5cd76834-e52c-4bf1-be86-660924a475bf", "indicator--29564c30-216c-4704-83a2-784563a7cac1", "indicator--17a88440-fb85-4706-a2f3-24b13481baa7", "indicator--57b54a4f-fe67-4559-87e2-2ef14d6bc1c3", "indicator--537f3942-fad7-4ad5-b719-5261a765070c", "indicator--16f3e4b2-0a44-49a0-a5aa-96976737d8ac", "indicator--c3c0597b-1386-4df3-bef7-ee00c320d08f", "indicator--08e45716-ca0c-4fca-a3f0-00763b4283ba", "indicator--a0d127b7-d118-4cb1-b1be-e50f4cfa2815", "indicator--c04e5b52-8828-4e18-adfb-301b450d13cd", "indicator--44c0fb99-74f9-417f-ab5b-a3fba0b56461", "indicator--a0e80155-1667-4499-ac01-6d1632e5bb08", "indicator--1024608d-39fd-4def-bc54-5981d6d71671", "indicator--3c58dedc-8f3a-4edf-aac6-d8be476551d5", "indicator--dd9d1966-7eb7-459c-b894-7c0ecb7891c1", "indicator--beb60f02-ece2-47c5-896c-7e24cec1be56", "indicator--f76b8880-4bde-4493-b646-1030517218d1", "indicator--1cf9901f-89ca-4601-90f8-bbbdf5b0a7c2", "indicator--9b2c0120-7324-49ea-aaa2-d2edcc631ba2", "indicator--7add77ae-8161-4730-8118-a05097122eb9", "indicator--d38e797f-29c1-4870-a975-f8f045654b64", "indicator--591699a7-6a57-41cd-86ee-e2163c52be74", "indicator--ef17243e-b9f0-4040-af19-85e907cc0e70", "indicator--d0ba159d-039a-4cf9-9110-111c15b4aaac", "indicator--e596812d-c82c-4dc9-942e-f8e53df911d3", "indicator--c53154a0-583b-44c5-9021-a43ecfe6909f", "indicator--697d9ae8-3bbb-427b-a351-7c696cdece0c", "indicator--88447ebc-fdd7-4755-8912-73675d52f893", "indicator--bf7afe54-1b1e-45c7-af28-d72d4f03db31", "indicator--5dc770b5-7162-493e-b609-9bff5a8dba78", "indicator--a11eea35-e348-4b6b-a2ba-3963a1d5bf57", "indicator--0f1e6e01-0a0e-4615-99bd-68045a4048ad", "indicator--bdd59db9-bc98-4384-a08d-93e2eb50cae5", "indicator--ed039414-b86f-4766-86e6-f9b3e96d0724", "indicator--68a60504-34cb-441e-a1ed-3e74663da7c9", "indicator--ab74f9df-b7ae-4d37-bd16-54c229795bc3", "indicator--cc1e4d40-4fa6-40a9-b61b-f5e78149f05b", "indicator--b084d389-f1e6-4ca8-830a-32d9d3f37e4c", "indicator--656b766d-4029-4420-b617-510ecba8d18f", "indicator--59fd7b01-57dd-4f2c-b65d-9103124db4fe", "indicator--703bb8b7-1ecb-4d9f-9e6f-ef4017675203", "indicator--10521c10-a3fb-492f-9205-c905e7c1537a", "indicator--de2d8e79-ba0b-4936-8bcc-a9a299041812", "indicator--3c3191b8-efc5-49bd-bf01-b30b5f971c50", "indicator--503cdcea-bbb1-41bb-b0ef-e5e238dcceb7", "indicator--ee5e3070-e544-4e68-ae74-b22acced64f9", "indicator--9ebcc05b-adbd-4427-9c1b-5f583ee62416", "indicator--8f87777a-5172-4c65-8e16-2869f32b3364", "indicator--71d4171f-1918-4095-bef6-d9d83bcdd803", "indicator--ab0716e6-8e8a-48a3-b094-9732ffec6138", "indicator--8412c9d6-f57a-4c4a-ae03-b7309aacdc43", "indicator--fc39cdf1-b740-4e7d-88a4-165f8fb64bad", "indicator--d8330365-7773-415c-a4c8-48bae00bd8f6", "indicator--0ba026e9-d924-479e-bdee-5d113861dda5", "indicator--cd67f847-8269-4978-9695-09ace61baabe", "indicator--8fb68bce-766e-4405-987f-0b5290efb5bc", "indicator--da7caa5c-73d5-4c70-a85a-0fa836f2017e", "indicator--3e60f245-6d48-4e09-b7a2-d08e4a154f8f", "indicator--435f1361-75de-4edd-aa36-4e38433202b2", "indicator--f07bb455-7ce7-4ad1-89d6-d33331181ddf", "indicator--5d2adc8f-503a-419a-9bde-830ab221a169", "indicator--2678e209-533c-4d0f-adc8-7eb7cdb93b4e", "indicator--132f94da-c58a-44da-9923-be3abbb68061", "indicator--d2f9b6bf-7723-478c-bcf1-ce838774a999", "indicator--085ffce6-2246-4341-b598-82e0f240a291", "indicator--7738a847-7845-4a56-b8cd-1c831fe74ed6", "indicator--a5358bd7-b8da-4c22-8ce1-9b0a3edf4617", "indicator--40660d06-c372-4bd4-9e5f-aa7d1e420ac5", "indicator--224f4c60-7127-47e9-a2c2-2bd848219943", "indicator--8d51c69b-0e26-4aef-86d5-73a85950a7fd", "indicator--49e153e2-5eb4-4350-aba9-75138f712431", "indicator--908d88f1-7859-4808-a266-e98e57c821ee", "indicator--fd7c09a9-2cc2-47fd-a531-5c8a0a3b0c87", "indicator--ebade8e1-e089-4d88-bbf7-4344b710733f", "indicator--a0488cf4-902a-43f1-a3c8-eeca0ea1af59", "indicator--408afae6-7bd9-43e5-a51f-a0a4b85a0414", "indicator--3236c35d-d5cb-43b6-ac39-f7b93877a6e1", "indicator--3dca0ee4-d848-4620-aedd-102fed80d669", "indicator--b9207a08-b5d9-4b61-ac8b-45e806b6b4aa", "indicator--1404e33d-898a-471e-82c5-926151bfa260", "indicator--9f532ccb-4519-48fa-b3cb-6c66d79cd216", "indicator--eb5cb17d-de48-4492-8d3c-2acb249aacd6", "indicator--643b86b2-9099-4c67-aa54-61896242fb40", "indicator--83bc6f7f-0ea9-44a8-8b60-16f3c14b01d6", "indicator--374c673f-a9ca-4085-9d7c-96251a1c88f2", "indicator--4d2f3c81-dcd7-4e87-904c-e0ee1106325d", "indicator--30a7e27b-0257-44b1-b560-2d08db91f118", "indicator--7ae754aa-aea2-45f8-9517-9885256b58ae", "indicator--a5195f30-c70f-402d-bb3b-d6f4a79da4d1", "indicator--153bacaa-40a2-4f48-aace-555c1df60789", "indicator--4a3395fb-787d-439d-8091-c28814d79941", "indicator--a9b26182-72e9-40a1-a899-ea59a9487ad8", "indicator--31c0b0a2-1ad6-4573-bded-d4be9b47cce7", "indicator--3702551d-7e4e-46fc-85e5-10544439e3d2", "indicator--4e3fe706-b769-4fc6-af25-4cdf8b294aa2", "indicator--bca08cd8-65b1-4985-aa8b-f682a6bc61e5", "indicator--eb7a9cb6-caa8-4793-a8f6-47953442486c", "indicator--15020596-cf5e-4b4f-a353-949e7aff85d8", "indicator--227327dd-2304-4717-a7a4-eee676034315", "indicator--0be3947e-5e4c-4f87-9a56-9b8ada756ec5", "indicator--8fbb9a5c-2155-402b-9ed3-f88b213b8080", "indicator--c4843a46-bca1-4225-887a-443c0409b53f", "indicator--cddb27d7-84b7-4ace-b86e-45cb767e59c1", "indicator--86eef2c2-d2a8-47b5-b878-dbc79c9bde70", "indicator--d27b8cab-09d5-401f-b8d8-132e22f96252", "indicator--ea67b4cf-f0a9-4051-a1e0-41a076f6d51d", "indicator--02cb5018-4c33-43a9-9757-bf9bd1a116e4", "indicator--6e976427-5b0f-4d74-9e19-6b291303915e", "indicator--999a72f8-6b5a-4fb7-bc00-b588de78e522", "indicator--adc830be-19f1-485f-ae07-18d50271e955", "indicator--9eb88a0f-a3f4-4ffc-a5f9-3441ef95cc62", "indicator--ed3d6df3-4e65-4828-86a4-d4cc9d575039", "indicator--15b62f66-66ad-4353-ada1-9094ceca0456", "indicator--ae951d43-bf6f-4aa2-b226-0a95a0d59c1b", "indicator--6b6bb19e-f74e-4b21-8c61-28b6b4406ce3", "indicator--62f5ef5d-e6e2-490d-8114-e26e7e571430", "indicator--f29b1931-7a30-4a98-ac85-f75ac274dee4", "indicator--dbaa5e2a-5de0-45b4-804b-a7c789d3f4fc", "indicator--6bc65bf5-3e5f-4453-8e47-cefc6755f0da", "indicator--4c161910-2b81-4bbb-bdf0-5f5d5be57065", "indicator--7e322ad3-6b76-4026-b115-e38c864db9c0", "indicator--74e36c2a-2e79-4458-acc2-b57d43ac05af", "indicator--f420a202-4e2f-4dff-8d6c-72490e8d2be8", "indicator--6e6fbf83-f18f-4810-8782-795eacfcb853", "indicator--9dad2152-e73e-4fd4-8ab7-7ccf04dc6bbe", "indicator--c0c1ef71-7ee1-489f-bb9b-e1d75148c878", "indicator--6e639812-de87-42c5-ba5a-ad4e7c8340ec", "indicator--d660e5c7-43bd-4ab7-b474-ab5b856d892d", "indicator--726425d7-196d-4167-ba8d-b9e6ae1639a3", "indicator--0325ea0b-d147-4eae-8754-aaddcbbf118b", "indicator--4641dc90-cf84-498b-8ca5-279da49d1681", "indicator--4a2f95b6-192c-45d4-8d21-051438c0d9ca", "indicator--15c8b7de-7c2b-4a36-9f64-65ed44a82506", "indicator--87beeac8-c3c3-43ee-aae5-d5d43141eaf4", "indicator--d5aa2a98-6e4c-4abc-aaec-73ff325b7273", "indicator--3840973e-ac1f-4fae-9a99-c4044a1047dd", "indicator--528dce2b-795d-4b9b-823b-48edb5389850", "indicator--23a3b96b-0ccd-4b2a-9f4e-14896246ec63", "indicator--8afa26b0-64bc-4388-9f96-58d14f60403e", "indicator--325fff1e-5bcf-430b-9b1a-d8969e10dba4", "indicator--157dcfe4-4fb2-4a18-a250-5a6923f97d29", "indicator--bafcfdec-9c0d-46d6-899d-86d35281e874", "indicator--cac4ca55-f71b-42b6-985f-d16d533da9cb", "indicator--77c3d412-d74e-4a13-aaa4-7f39e6184c90", "indicator--b79c1d73-cd77-407d-a91f-2430bbd84da6", "indicator--41dfecfe-cfd0-4d22-bb19-89de368b11ed", "indicator--9c757b83-0d8d-4d9c-b749-bd8824d837f8", "indicator--46df240a-902d-4be5-a62e-2c67aebbb3e4", "indicator--4424d72e-793c-4cd1-b8b6-1871541030e6", "indicator--dcc93d74-1cec-4379-8879-040b8ee604d4", "indicator--fe3f463d-99ac-4d06-b27d-ba7f43166840", "indicator--64828a56-5046-4d04-b547-c35a9cb84757", "indicator--4b02975e-9334-46c1-bfca-7ff130ea5275", "indicator--e0af9a49-8786-4d06-b1b6-ecbe7c64227e", "indicator--c65857a1-2263-4b49-92cd-ae3d9bfa2dc4", "indicator--9b6352be-c366-432a-87c8-5f23c1c996bd", "indicator--f4d7d3d4-a95a-4931-86d2-ab923a93ebf9", "indicator--1df3a717-89be-4846-ac67-d480e3bea389", "indicator--0293b6d8-7370-4a60-81dc-8dde93c1d67c", "indicator--340df2b3-f36a-4a0d-b8f9-3c71ac624c15", "indicator--7433f927-baab-4b6e-a275-0311980c8254", "indicator--7e4d1e21-3e87-4578-a26e-96d8e4152f53", "indicator--be81001d-5c6b-469a-881a-483093ee56e7", "indicator--b5358c51-fe01-493b-8679-c5bf92d9d482", "indicator--332c6f21-9573-4621-a75b-509d7dfe56e0", "indicator--592fe88e-3ce9-40d5-919b-37beb8a9b067", "indicator--283109f9-a64a-4149-b337-43d38ad470d8", "indicator--9448f9bc-59bf-4baf-8b5a-b4ebb3c3d498", "indicator--0f9812fc-30b9-4ef0-81fa-df053b38d78d", "indicator--d0a67790-c0b1-4e36-b529-243814333842", "indicator--b2da1b1a-68d2-4cdc-9ab5-2fd04b231af8", "indicator--68f9a287-16a4-41e2-9014-d003b33ce361", "indicator--a63c8841-da7b-44a5-b8eb-00a62befc27d", "indicator--cd18c73f-3832-4bae-b1eb-15bd874e25c7", "indicator--c3aaa7c3-293a-4b1e-bbdf-5bfed32f32ad", "indicator--dc5099e1-f4fc-4e71-817f-6377635703d3", "indicator--48e33e72-d65f-491f-82eb-0213a52a0449", "indicator--0bfc017e-d8ec-4901-8efc-5290441ddd1f", "indicator--258f98e3-2914-4997-9c61-1f90743addc8", "indicator--3751f420-2fbc-4f95-92bd-62b26d4cab41", "indicator--f082e534-577e-438e-ae9c-c100e21dd6a3", "indicator--87f2489f-9c51-42aa-b9ab-90493022efb9", "indicator--8a1008d2-62ee-4520-abfe-2a0bb0ce3388", "indicator--006553ae-0aef-477b-b4a7-a1e9f2bb0267", "indicator--c81106be-f251-4f8a-bca4-1e8bc50056ed", "indicator--e1e2ec42-2ad3-4684-a4fa-ed9bc3f5e8ee", "indicator--9ed91acf-d410-4b1b-b750-676d7e7e5d93", "indicator--65aa51c0-2b38-4286-a0f5-33e0154c357f", "indicator--cd6a5c1e-c386-419a-a75c-d70654765d70", "indicator--a22a6e5d-7359-47cd-bd74-fc6d4175749e", "indicator--562bd26c-cdc1-48b7-9616-bbb85ad79e5a", "indicator--1b85060e-0a4c-4ce1-babe-3b8e27b8737e", "indicator--aad459c6-f3c1-4679-9ca9-8a380dd7f7e5", "indicator--669aadee-0aa8-48c6-a2c3-0044ca0c87e0", "indicator--efc955b4-b5d0-4a43-a30c-d40b9938a406", "indicator--155705b6-ed3b-4dba-bd80-5fe411f0bb4e", "indicator--b60a768b-fbd9-41b0-b708-43aed857a82f", "indicator--668f4aa8-d32e-46aa-b932-46b4037d7472", "indicator--5cfc30b6-9582-4490-8cf0-aa13c2222a11", "indicator--dcea3a6b-c7e6-40f7-8d29-33c282cdef56", "indicator--02ef44c7-edac-4eb9-a50b-b8f9e389ab8c", "indicator--dfa2d87b-4f11-4beb-b5d4-599e9d7d059f", "indicator--4a24107c-68d4-462b-871b-cd6012a761a5", "indicator--bc510f75-9e09-4278-8324-2be48111812f", "indicator--a40af58c-8afd-473f-a94b-43b39312bdac", "indicator--8f92c86a-b148-4c4f-b5fa-d93626f8c04a", "indicator--3268da26-b2c8-44fe-89df-048ffd001ef6", "indicator--b6d3203f-8f65-45c3-943e-34f8ffe5db39", "indicator--b50781ea-9823-4b96-a19e-8ed05240821a", "indicator--7b919619-6d35-4b43-95b0-7e92b9a1db35", "indicator--765a538a-35e5-42c9-b294-3028a92a6b11", "indicator--8649e176-b456-481c-91a9-319cb5fd2199", "indicator--e8bf6427-adc3-4914-9be4-8947f6e96667", "indicator--64ee964e-9bb9-4e68-84be-b341b65153e3", "indicator--57ff8cd1-9f52-4d83-bab0-040b4bc887f1", "indicator--671edb72-a9e9-4859-89ae-d802b2968efd", "indicator--3efb061d-2dff-471e-8910-bf228d4676f5", "indicator--64307250-f722-4733-8f1a-59121aaaed90", "indicator--c5ffcc8a-13bc-481e-bd99-25541424bdd7", "indicator--d44d94bc-63c9-4bed-88ec-fe856d43e708", "indicator--40b06e01-1e0a-47ed-8fc4-e0cb03449beb", "indicator--362b2868-dae6-4d49-8d0b-bb982df3ca24", "indicator--9cb8ab93-592c-4cc0-8982-bc4824c8ec72", "indicator--61b00f36-92d3-4ac1-80b3-6206a2e64d59", "indicator--f87d2f90-ba0c-4f51-8b67-35129a32bffb", "indicator--e850daf2-0010-4e23-94ee-992cbb86600b", "indicator--64b7cda5-ae62-428c-a8e4-0c9d38be5ef6", "indicator--7cd04349-e8a8-4e37-bc2e-028739003f90", "indicator--80561968-785b-4753-b5a3-a53411c99816", "indicator--2a01e83a-6ed4-4253-8a1e-b2f2c3cdc9f2", "indicator--8f98a04c-30c8-4f79-8e4e-515b6d80640b", "indicator--cbb40fd5-32fb-4b94-9ddc-d5cdd22f7441", "indicator--17ef0cfb-13a2-4b82-8745-11bf24308c8e", "indicator--e5106d06-a2a3-4b6b-8720-530fae459c36", "indicator--30be59c5-9f6d-4bf0-a583-b8aa3e5985a4", "indicator--744245d6-c070-42b9-b107-4edecaa67332", "indicator--a25f2658-976b-4bca-9083-c7cd0b42d52f", "indicator--5227bea4-6f83-484f-8027-c5301a1148f9", "indicator--d9c4ec2e-b179-43b2-ba40-67f0ede7b431", "indicator--9af16157-c682-4874-b181-492c121458d1", "indicator--1ff56679-653f-476f-853f-4be93b6cf2a1", "indicator--00badefb-b06f-4c7e-86ed-aa443ddfd44a", "indicator--68ee72fa-26e1-415f-8b2e-498d2f9f4d21", "indicator--897c4588-9be9-47ee-ad8b-14599a3483e2", "indicator--6815d548-8ea9-4cd3-a7b2-22523c5050ab", "indicator--a109a0a2-d3c3-4913-9d9d-a164c6f8009d", "indicator--c5677a9f-fd77-4300-80cf-16b13e818440", "indicator--da446a2a-30e3-4a27-8958-00ad45c538f0", "indicator--ab96d145-3842-4140-9051-aedf7fc1e0c8", "indicator--eba90940-1bfa-4be9-a826-2c05f26d3fa4", "indicator--41f574af-6386-415e-a8e6-85f411345a53", "indicator--c9bcd56b-a6a2-46f3-9c75-b20c5b3dd992", "indicator--9d63d353-dc89-4198-9832-5a5149b8cab4", "indicator--221db2a3-3a10-40ce-bfb1-7da00868851d", "indicator--4aa4503b-d879-4b59-aa1c-4d4562270284", "relationship--9efa2506-c649-4bb6-aa3b-6059a37e4a28", "relationship--f619e2aa-2d65-4cac-a311-5e3dc2868f4c", "relationship--219a61e4-33d6-4688-af76-30799ae194d0", "indicator--e00381d0-4420-4c10-a63e-b74559e078aa", "indicator--1b703b76-daea-4b58-9c63-8f7fb35e4817", "indicator--fe94fc98-bd1a-49cc-8e15-7bcae0ef4f4e", "indicator--15fe8a4c-01dc-48ce-b7ea-b7db1400f23e", "indicator--67e1ee3b-fa5f-4fc7-aa26-a054e09b5d26", "indicator--8c12353e-1f31-496f-b384-05d6c66877d8", "indicator--16b74545-6b5d-46ff-a7e9-23cb669e50e7", "indicator--ce9916b5-16f1-4fcb-8ff4-40e01c12825e", "indicator--b7b3ef78-b3f2-49d3-b862-8c0bbc27437d", "indicator--fd5a5ef8-b612-4420-8bbf-5d07519fb31f", "indicator--5a68a9a5-f5e3-4589-a3f7-5b49b74ec783", "indicator--038465a3-aad1-4949-b7fe-c40cadd28afd", "indicator--3d2e22a8-8dc5-4e16-af93-95a945b24d8e", "indicator--673af2ca-3f96-4f82-b065-72b1ce1c9709", "indicator--e7984107-3daf-4e8b-89f7-97c0d9b0582a", "indicator--2f3d8d65-a899-4fd4-b2f7-1957d4cb746b", "indicator--e9227d57-5e6b-4c3b-bcd7-12ff72515396", "indicator--251f69f4-b55c-4e3d-b3d2-7916d2277b83", "indicator--2e06da5d-5b3d-46b9-9a22-23930dc366d2", "indicator--db3adde5-e798-4bc9-8deb-71e28b9dd928", "indicator--8d33940b-5937-4e30-8af8-77824be28eb1", "indicator--2bd47fb7-9789-47f7-900e-f97eec98589b", "indicator--15071aa3-3a28-4c37-ae24-a389df2b3d43", "indicator--d749e452-0ca0-4058-93a5-7d02dfead0c8", "indicator--46a14bd0-1715-4330-aab7-e0f240599ad8", "indicator--e5782715-e446-4591-81de-0a69b3285f2d", "indicator--4d5c469f-8826-4043-b5e7-c4174845a1dd", "indicator--fb1c997a-6084-40ba-8c03-893b4e22b42a", "indicator--91bf5069-7db5-4a34-9fd6-a88c5cc9e1e9", "indicator--a6591318-d18f-406c-afaf-29e895fef711", "indicator--77914a62-26ea-4349-9e3c-10b999187fcf", "indicator--cbae2e37-354c-4c0e-9df5-da6ec61c538b", "indicator--64d1000b-3d87-45c9-9fc5-3cff0bcdecc2", "indicator--bf4b3973-1a56-4426-b0af-c1812c59ab92", "indicator--83d334e7-13d5-4fb4-a337-31b41d3ec70f", "indicator--8eef1af0-3ae5-448b-9457-5f939f0954d1", "indicator--fab0e5d1-28f1-4492-b4f0-b67a77921b69", "indicator--1cf23c84-ced4-4437-80ee-7144f5502d07", "indicator--da3b7af6-6bcf-4de5-ba6e-a8f74845de63", "indicator--e9543071-56d3-4eb9-bdc8-6a5c2fa748e6", "indicator--a21c9959-b09e-487b-a69e-bf9ec1617a23", "indicator--b46643b5-fe7b-4fc7-a6d7-08774ca8e1db", "indicator--0a3320a4-15f2-49ca-8cfe-16179a4faa41", "indicator--d2e20398-467c-4913-a933-d00f91303cf8", "indicator--e465b0dc-0e93-4e63-b056-fc6eaad553a7", "indicator--eca27884-b9c1-4c14-a92d-013c0c5a7052", "indicator--8b34d93a-3489-431c-9b69-7a7b68922db7", "indicator--0309bf98-9601-4d9b-93e2-2a872d72ee67", "indicator--613a7a61-8724-4a6d-8bcf-ef7bfe389453", "indicator--c6b71a87-d9a0-459f-a257-b3a2d71bed6f", "indicator--6ac49173-b845-4c0b-82a6-ec2fb177380c", "indicator--b686f4c3-e7c4-4ab0-9de0-40c79ac5947a", "indicator--cb0781eb-8201-4953-9e56-795c544f07ab", "indicator--b6d25b93-a386-4c79-af37-a4755b10ab2b", "indicator--3b433849-5730-4f76-b0ea-09455a1a5dc5", "indicator--aa7d7d3b-9a58-4901-b420-f71b1fdc259a", "indicator--03a83491-6245-4ba8-96fc-c049014ca753", "indicator--22a7be96-eadc-42f9-a148-58ecc1146806", "indicator--4f044ecc-781f-4937-933b-d90c11692bd9", "indicator--bb6ce2a2-ec6c-44a0-8524-db6932a13ea1", "indicator--8b02e1f3-3e7d-4bbd-a0ff-131cc134baaf", "indicator--5fbc392d-35e1-4c25-933b-add1a2f2dc7b", "indicator--25b984fd-e43e-4249-87d8-526517026921", "indicator--934cde59-bf2e-4016-990b-0a05b64aacb4", "indicator--c34987bf-ade0-4426-981d-b6919eb95e6b", "indicator--654f0b51-3113-41a4-955b-b8bd34ae1370", "indicator--f7ecba02-5e03-4453-ae7d-47b12a5f9da3", "indicator--4662c4f7-700f-4258-ac29-1bbf2d592735", "indicator--b3dfcbb9-10d5-4d2c-bf74-35c947314b1f", "indicator--8902c238-0d78-4242-8df1-f4b8253ebcef", "indicator--f37b9961-65fc-4445-b883-db5af26a76ba", "indicator--5947432b-5e81-4b73-99d2-449b3365e54b", "indicator--913c055c-b627-4a8d-b76f-7b0d02959d68", "indicator--5face34a-dc21-45e4-aa63-f0b6ee7c9677", "indicator--ef2c1e92-f010-4542-b8e8-984c6075385f", "indicator--b3081bd1-b1b4-4c08-8a29-c33c939ac6c8", "indicator--c7183dd2-86d0-457d-8cd9-b3db597d3e93", "indicator--d1a7d9e0-7c47-4bb2-9e0d-afac25e7f9db", "indicator--91a853f2-4ba5-41f2-91fc-b1af652bf6c8", "indicator--7043c2f0-f60e-44d4-8c27-babf9fd07b7a", "indicator--a97c6cd0-6ce7-4395-896e-bdf4bd356642", "indicator--dcae64a9-e7f0-4309-a8ec-dee6a2943b48", "indicator--3b3bfda8-da00-4d93-898b-e45ac2f88e21", "indicator--b2639656-9a4c-44d1-bfd6-559ec73c246d", "indicator--8fe2c62e-4842-49ca-8a11-1cecca645f29", "indicator--08b343fe-1e43-462b-9330-f58706859743", "indicator--abfffe4f-3e1b-46ce-92b6-fdd508db6071", "indicator--46f8dca6-10d9-46ec-b04f-016ff34fcfbb", "indicator--30dfed20-c779-4eba-887c-4e72d0571116", "indicator--4686b3ba-789b-4931-bfd2-a436f962c975", "indicator--23472384-f027-4ef4-a622-0fde9afdf33f", "indicator--f9c41560-d426-490f-8c21-005eb76d298d", "indicator--017f7bfc-6f11-4eb8-8ff2-52ff540c1f01", "indicator--1abdcb14-71e7-4a14-b2b9-94c22fb9b7c0", "indicator--b402eacd-8578-4b96-89f1-2e385c4aa550", "indicator--7a65aeed-07b3-4bfb-bb9b-47506aeb52a7", "indicator--1d9b1759-705d-4994-89a8-b18239ee68fc", "indicator--a83801fd-5538-42ce-938c-6faaf3a1ea39", "indicator--8a02c7f7-dd20-4f1f-bd3a-251b8cd50d7a", "indicator--cbd83173-b675-47bf-8903-f1392bc48176", "indicator--e0b10e35-3f1c-491a-973b-81fc8a5d77fc", "indicator--40ee3418-99ad-4068-be75-7492bcef766c", "indicator--165d35a2-1add-43af-9818-d4dffb0df1ef", "indicator--15e2c33d-e732-4a15-ae9b-bfbdc25d6b02", "indicator--67cb3455-7a78-470c-9b07-95c7f0381919", "indicator--163c431b-ff62-4b8c-be86-bfbd10220559", "indicator--0ff86005-dbb8-4bde-ad2a-6d1b3ca7dc23", "indicator--329d91d7-3611-4f5d-94ca-026bbbe4d0fe", "indicator--235fd4ee-e35e-480b-b5ba-e02df66e7dfd", "indicator--ccaccb02-ab93-4aeb-a8c7-bf3f4c0cd501", "indicator--104a803c-f3ae-4f99-904d-d70c64b4cbc1", "indicator--28986db8-22cd-419a-8ad3-f3844783fd9d", "indicator--138a0661-13c3-4e4f-baed-95e447644c76", "indicator--549c9dba-1e83-4845-a55b-84b6f8a3ab31", "indicator--900062b8-dc72-4cb6-ad6a-526539cc2132", "indicator--7cd093e9-14b1-4ec2-8d96-45900eac1eb3", "indicator--ce4a4f33-9593-4d79-b577-7e8a3ae83de5", "indicator--1a87861d-2024-4d8c-be52-036a148d3885", "indicator--421fe66a-708c-48f3-bbbb-de3c4285f2f7", "indicator--1380ce71-5b95-4b92-bd02-efcb215fd046", "indicator--71368af6-ca22-4e42-bb1d-95aa1b20cfba", "indicator--ed6273c6-3ec8-442c-ac3c-8a3ff9815944", "indicator--6ad22499-5014-42e9-b96b-93c7349c9fbd", "indicator--d3e5d1e4-2d55-427f-a24e-f112b5c5571b", "indicator--fcc242ea-91ad-490e-8733-14c7813454a8", "indicator--67961ce6-05e8-43e3-8c9d-74c19108ea88", "indicator--7c90a731-4c04-4ecf-bc82-d71f563bdd0a", "indicator--b7301da0-6ad7-46b4-93c1-0b9143b9d277", "indicator--fc31f2df-14cb-42b8-b586-c05ed80a387d", "indicator--58fbe0bb-2af6-4ed6-9110-ab40c35c42eb", "indicator--46e468ff-c124-41a6-bc3e-8c97b3599d01", "indicator--95d73050-2d64-4f8b-8822-ee658dad7160", "indicator--aa379aa7-7bf7-4d82-82a7-00db2d25dc89", "indicator--e6bd3a93-a4fc-497b-8f44-071521c0564f", "indicator--d48a2396-374d-47dc-9a0d-02f20aec114e", "indicator--ac2fc62f-c287-433f-96a5-28b6d338bc64", "indicator--c55a3a81-aa43-4730-a5b3-8756ce175b1d", "indicator--216a4c21-843a-4857-902d-847ae585aad1", "indicator--872d883e-d96f-417d-9171-31fa1a90d137", "indicator--e64093e8-6cba-402e-a09e-7f0beb2641a4", "indicator--5523fa02-481e-4eed-b96f-c42f85405d70", "indicator--6b2be5ad-73be-455f-adee-ca6d5b2e5498", "indicator--a19415b3-e156-4a60-9926-929b8bbda193", "indicator--8168229c-2d23-4d9a-90e7-8e7060c0fcf1", "indicator--a07b3b95-f013-4d1b-b0a0-434552cebcdf", "indicator--147f16ef-9eb8-4569-80fa-7d045a6e83b6", "indicator--4e53722d-8ccb-4022-b7a7-973e14f327a0", "indicator--b78f5533-2303-4eb4-ae54-55694b100d83", "indicator--90655b55-d82a-4d19-9170-c30d42d7ac1c", "indicator--3741ea6a-8a50-4190-b425-702a1e5eb12d", "indicator--61a4c46f-1b72-4ede-9f87-8e17f6b81db3", "indicator--1e50162a-b85b-49c2-8ed9-17057153fd46", "indicator--69170383-5ea9-46ec-8602-1a6a664f294e", "indicator--073b3c5b-ac4f-4f5c-934e-8be74be56cc7", "indicator--35a6cd27-d012-4da4-bc22-e91b5acfb3c6", "indicator--4fca30be-c762-4afc-aac9-9a92a0d19199", "indicator--483310cb-9d2b-4b35-afbd-c8f824c764f5", "indicator--26b705f9-e152-47fe-b89b-38323a0b2507", "indicator--44ffb717-7882-4d1a-b4bd-a32621a13503", "indicator--24230c9f-471d-4c24-a5b1-9fe39cc64e66", "indicator--a443a695-c507-41eb-b4e9-3c80ea838978", "indicator--8915e2aa-741a-49ca-8750-f57d5de8192b", "indicator--24f3e9bd-d370-44cc-af91-3524505b9306", "indicator--57026a15-0aec-4ad9-a80d-ec30b8c095d0", "indicator--73e6d239-9c01-4973-b417-aeb99a39170c", "indicator--93bbde61-76ae-490b-bf9b-9201d502886f", "indicator--e154d9a7-6065-43cc-9ab0-1fef64ea8671", "indicator--f8d4ae9c-ad8e-4d30-8371-09dad9d03e1e", "indicator--01792a71-9831-4639-8519-abd26e921da2", "indicator--00edc120-1b3d-4694-83b3-c1f327ca33fd", "indicator--79407f5d-a227-426f-8e60-189295d0cf85", "indicator--dd7b8ed7-f89e-49f9-a5bd-dc1c799253fd", "indicator--a2c1f1a6-4b4d-4e90-87d7-66e1c683ddbf", "indicator--c7a3cdf6-2889-4665-9bdc-8a22e1cae73e", "indicator--6f69d4bb-3721-4598-ae6e-ef54e4fef835", "indicator--16e165d4-d531-4a32-8997-a354cfb4a908", "indicator--501864df-f757-467a-8aa4-7320aa6dce8c", "indicator--88020cbd-7463-4c83-813a-71921caddd63", "indicator--dd94236e-4493-4e2f-96a6-1d6d29131ac4", "indicator--da5cc89d-8d89-4c38-8ba1-abf41b55706f", "indicator--9b72fb8d-1d1b-48d2-bf9f-2f86ea06904f", "indicator--c3306f3d-84d0-4007-973f-2dcee6719eb0", "indicator--c1da1fd5-b932-4270-b6c1-1d5e01ba48ae", "indicator--13a05e24-3bba-4fec-b080-9aeeb9e1ced1", "indicator--3c36c44e-6af4-4722-80aa-5281328bc329", "indicator--7be5b710-7eb4-46d0-b217-ad5d0d514f8c", "indicator--7fc13466-8b04-492e-bb77-425c1b0aa9ea", "indicator--aa7f0220-e9ed-4465-9966-17e05cd7d012", "indicator--d63a2a9f-bdcc-4a06-b73b-3bdb0f2e79f9", "indicator--3633ca29-66fa-47f3-89a9-6dd14234bd94", "indicator--03c99844-a5ee-4a6c-8ac9-9505a29349f6", "indicator--26700114-470b-45cc-ad99-357247b8fa72", "indicator--24b8159a-618e-4c95-a9ee-c53f5b995acb", "indicator--b30a23aa-11c3-47f3-8ce2-fa452f840c31", "indicator--afd89893-99de-45c6-9090-61f3de0d54b5", "indicator--a5989ab7-0504-475b-bf5e-342937e0fac7", "indicator--f28ded04-273d-4853-97ae-2cb4d6a6ed72", "indicator--6c3d2fef-d724-417e-b095-295f3977a9c7", "indicator--c852517e-6d49-4d30-906f-3888dd794124", "indicator--e65e1c98-8e0b-4a06-b8be-ac48f3d388f3", "indicator--1f80477c-1781-4bd6-bcc8-8a0c46b6546c", "indicator--c43e9019-6ae5-4060-b4a0-9d37cb4b1508", "indicator--904847d9-a872-49ed-96af-b32ec55bae32", "indicator--c1716f98-40e9-4327-b529-a162680368ee", "indicator--67b9ec6d-ac87-4ea7-88b3-6f0abdc86b84", "indicator--9da79cb3-2f16-44ea-8448-02096338c70c", "indicator--5d83d0a4-8c64-4631-972a-4614296aa1ba", "indicator--5551abaa-78f6-4317-b2aa-36be204dafc0", "indicator--760bc569-2773-4739-8d12-e70b7997b10f", "indicator--85074240-4efa-4051-93cf-295145d62998", "indicator--5cd2f15f-595e-4a17-9f94-f8deb977e84e", "indicator--9c0181cc-af76-40f1-ab45-a917dbae2f6d", "indicator--390ded55-3397-4654-9288-3804dde32af4", "indicator--32c65959-ab66-4ab0-87ce-5b52e79e5fc4", "indicator--1abdb59f-0444-4405-923d-451111f5238c", "indicator--6ef0bfcc-a64f-4d00-a9f8-fd22b06057b9", "indicator--6999c78c-580a-4365-927e-2a332d30b564", "indicator--43ec5625-b277-44a4-b566-a0910edab2ba", "indicator--446c7b49-b7b1-4563-b139-a651b20ea81b", "indicator--2b13d575-2619-4ad3-8f9f-59fae5268a20", "indicator--0c12c978-78ab-4d32-a52a-5e7e29830aa4", "indicator--b1f71d87-e4f4-4896-8d4c-b34ecb07bd4d", "indicator--e080f3f4-4d0a-4e6a-9154-29cfa7c31dcd", "indicator--2e5121a8-a95f-43f7-a282-031037a5e216", "indicator--eb44b47b-a5de-4e08-addc-d0c7ab91c705", "indicator--9e0f97f6-85dd-442f-8b50-1eaf905d4310", "indicator--f043cd9c-61b0-4f09-9b63-9139da8de34a", "indicator--39093426-25ec-4601-be14-679846f20a76", "indicator--f4d605dd-e98f-42c7-ace5-aaeaad494fc9", "indicator--8152d717-537d-4770-9852-7a0dc5ac3327", "indicator--66eba924-d17e-4c72-bc25-b415ac0cddf6", "indicator--63e689fc-fc6c-48a1-b73f-a5d1ddb48c72", "indicator--1e799955-1cf7-4928-bf82-1b7c80bc5796", "indicator--85b695f9-2936-419d-b135-197574767791", "indicator--2be827a9-5c77-4169-93fa-7252b7abed29", "indicator--e0b4bd62-c277-42c2-8cb7-325f22c1cbca", "indicator--4f0aa789-3011-4c2b-ae40-17c88f840f54", "indicator--926d7e7b-9493-4122-ac48-a60296215d2f", "indicator--3bf3a897-0f10-4d08-aba2-fc19d783e571", "indicator--a089b90c-b362-48c0-9c7e-90d2bb83d31b", "indicator--c3b73106-a3bc-4451-b588-7ec3bc9efb2a", "indicator--9d3cb79f-ee5c-4e74-a2f8-95f2bf5310b1", "indicator--26642142-4c49-46b2-a992-36cc5914a18e", "indicator--e235441a-17a2-4c15-94ed-0d902f3241bb", "indicator--6ecfe7bf-69a8-4221-94ec-8925a90636a2", "indicator--870220bf-43f0-4646-ae1a-7430b8c5f0fe", "indicator--a8a3d9ef-6bb6-47e3-90d1-ba185463fd04", "indicator--77d414f4-c465-4b41-88c5-8859be550fa3", "indicator--4c94b168-b0d3-41ae-8bf5-7a5413686840", "indicator--dab18d21-8529-4a33-a34b-83719553bd32", "indicator--35ed53c1-2e56-45a0-a3f5-51a90e9e0a8b", "indicator--d472ad64-d08f-4a40-a5e6-1b95678ed87a", "indicator--16cb1081-d102-4e1d-be34-9646edb8e1cc", "indicator--b05dd64b-3755-42d5-9364-ee20dfa7bb8c", "indicator--6748adb6-d04a-42b4-a548-293847c96ed8", "indicator--b67e7315-7007-4197-8576-992ca9f9cbb5", "indicator--36d52106-cea0-4cf6-8adf-84ba7e5aebde", "indicator--35a50880-aff7-4318-b3b2-ccf1e89cd50e", "indicator--032db8b2-1557-4f41-a16b-2368c75c3416", "indicator--eadbd32e-b205-48c7-89b8-65fa3e4523c1", "indicator--a2caf82d-0274-4ca3-9f2b-772fdaeca7b1", "indicator--693e6700-49a9-4154-b96d-b5baae6d2481", "indicator--d02730ff-0ed4-433b-83c0-c99e3a184e45", "indicator--50ba67dc-6f4c-4dee-aff9-8258bcc479ea", "indicator--a2ce9943-bf50-459c-9253-5e1be78e97f2", "indicator--5a655108-3e27-4b77-9189-f2ab376e41bf", "indicator--2f538117-1127-4ff8-9b30-c402bfc6527a", "indicator--34b177d9-b889-4995-80ab-4830ec6962f9", "indicator--a4589c5e-508f-4f04-aebe-5121b376df59", "indicator--9369ba35-0219-40f0-b009-9151eb26f60c", "indicator--15e07096-5ec3-42b5-9f07-789c5a7cee1f", "indicator--9dcc111d-5f32-4935-a040-752309c312d6", "indicator--6b0b0a67-07f9-4fc9-9a9e-0b0c470a90ec", "indicator--d06e96a9-e2ae-4ccd-9fc4-625c28ded45b", "indicator--defc27a5-f07b-4ec0-b926-7f57150c16c4", "indicator--f3939791-f1e8-4ab7-b5d0-f213c40695d3", "indicator--8e0499fc-6e46-4a98-ab0e-f7624f9c4b6f", "indicator--ae961198-2cd5-4676-8c28-da024c7b1a34", "indicator--c084f7d3-337d-4993-9657-77166df016fb", "indicator--4641a956-a756-41e6-bc61-46bc054b53e2", "indicator--39786928-02c6-4be7-ae86-152435bbb075", "indicator--982d6cbc-6b51-49e5-ba6a-407467b57d25", "indicator--357195d3-32ef-4edd-8a67-c7d03bdf2082", "indicator--ce6924a1-fca7-4546-a406-6e6dd3dcab7f", "indicator--52c32d7d-d13c-440d-b318-e3e555b8c131", "indicator--21703ca5-9fa1-462e-83bd-978ce8c608e4", "indicator--cd96b690-6707-4e61-9e59-7fdbb6c5d170", "indicator--ff396cc2-b004-4207-8d2d-30ae1c724f32", "indicator--7bf6c719-5b85-4bde-bf64-5a63940dbc73", "indicator--efc42b7a-fde2-45a5-945b-49fdfbd810e9", "indicator--1cd0fc38-3a5c-4b1e-a082-d2734d48482c", "indicator--4a961ebe-3677-491e-b2e9-1ae5be84772e", "indicator--66e02cad-88e2-4380-9127-d2b30ee6fd1d", "indicator--f0aa8f9f-b7e5-4659-a352-dc084158aeac", "indicator--624e4dbb-cc70-420c-a0ca-8b7e177cab7f", "indicator--7f4259f4-1dd6-4632-ae8a-6693ed1fda3f", "indicator--1ab79fe8-7a20-46ad-a32c-1e1a020a0665", "indicator--548a1be1-1ac5-472c-8f17-1220dde1543f", "indicator--95d5aeb3-07c8-46a5-b1f4-cc43a15a1da8", "indicator--ff7a491d-bf65-4c61-ada9-3452f8bf7c5d", "indicator--52f77482-3832-47f4-bfa4-e5b4fd674076", "indicator--72cb9cd6-b176-42bb-8a47-800e804f9dc5", "indicator--864c664b-f5b2-46db-bea1-582326311e22", "indicator--b281201b-350f-40cb-a058-7c96af92101a", "indicator--25e53fe5-5d09-493e-ac42-03f003d93f20", "indicator--230425d0-47ac-401f-b2da-2b742846d5e4", "indicator--69594b19-5f83-4aaf-bcae-56fc446e063b", "indicator--3226faae-15b8-470d-8636-d22ef0e7627d", "indicator--e339b9e7-665c-4453-9401-3c5d21cb6d60", "indicator--ad6d726e-3a93-45d9-98d7-19596536dcb1", "indicator--39836ac5-5f2e-4854-88af-b98cedc1bd18", "indicator--0d60778d-8534-4c60-98e5-a3c9ecc298f0", "indicator--a57316ad-b4c1-4397-83a1-e2075e21667f", "indicator--c16585f1-37e3-42dc-948f-622d504d8396", "indicator--9f0e0031-57a3-4e83-8e84-00385d1e1d78", "indicator--08f5ce22-5fba-4d98-8a93-6cd8c57fc8f6", "indicator--72499b74-dd03-4bd4-b48b-ef8fa1d673cd", "indicator--480315dc-cfe6-4d17-9dd8-f824a3ff7204", "indicator--852e463b-dfcf-4c46-9323-3bb0f7ea2655", "indicator--24c80aad-411e-454c-9c3f-918aa7411a0c", "indicator--9e25b69e-2244-4d25-a462-1d7f4830796c", "indicator--b66bcce0-9e5d-41c4-a1f5-27e31e52e399", "indicator--fb858e36-5318-4a00-a1a6-70d0262e856b", "indicator--36f10fdf-7472-478e-97be-568590be5407", "indicator--428e06ca-774e-4d0e-b723-fc8fdd2647fe", "indicator--e96e3522-ef1e-40f7-9412-897cac1e0251", "indicator--6a064a24-954f-4de9-971d-e6ccb5aac822", "indicator--c933f1f4-dd7b-4ba7-b50f-e74a42b4d6a2", "indicator--f9c33835-9b90-4337-9b85-298c409cc691", "indicator--5cb6faeb-b57c-4b22-8812-414abfb4dc6f", "indicator--0d6db7de-c44f-41af-9dff-ca81ce589795", "indicator--fb27108e-e997-447b-b33c-2fdaca99e10a", "indicator--c78c7f8c-e561-4004-935e-a7676686cb11", "indicator--1cd5f4d5-5bb7-4697-ab6d-c5df1581996f", "indicator--44979e0c-2f8b-424b-87e9-b8a66fa34e87", "indicator--709d687f-8b01-4d16-bf50-ac0c50dc4019", "indicator--b0fa7a04-300c-41bb-a19c-f7838d409943", "indicator--48642117-abba-4163-bdd4-6d1882087ab9", "indicator--6455b9da-1555-412f-be01-d6742fa6399a", "indicator--d680cae7-1f32-4479-8763-163654a7dbb7", "indicator--43105780-5d94-48ad-8684-36c853c9267e", "indicator--5dae4482-c8d2-4c37-bf54-4919c59320bc", "indicator--6c29a094-4c70-418e-9ac1-5766594ac581", "indicator--494d0301-7bd6-4fb3-bc09-0b0c80a27fc0", "indicator--9ee33f9b-28fb-4e68-97e6-a4e8becc68f5", "indicator--8b136404-536e-4b4f-b60d-5adcb147151b", "indicator--1fd86adc-bf7c-420a-a418-7ae4d45b1d17", "indicator--a0d8b2cf-dfe5-47c7-9d7f-50ce6d4397d9", "indicator--59fa344f-6527-4e2f-8b66-8271fe610f81", "indicator--e6e38a6f-deb0-439d-b214-a8ba99767327", "indicator--63909057-738a-440c-a832-c236bcd6fca5", "indicator--8000faab-36db-40cf-b903-2149f27a73f5", "indicator--523ad133-e6bc-4142-9ad9-0490a6294431", "indicator--7982f5ec-3e5d-4d17-a180-f594070130d9", "indicator--d2d57e83-8154-4b51-b1e2-cb613c7bb8cb", "indicator--90cc6793-1d77-4a3d-8eba-5b547d61b3f1", "indicator--ce9757b6-4480-47c7-a195-a3fc776bbfa5", "indicator--cfd0fac8-a4fa-4a78-aa47-d12739155bde", "indicator--ec667a43-89e6-46c9-ac67-283f1182781d", "indicator--d938f8d4-309f-4393-bcc7-477feda2d5e8", "indicator--9945f9f0-78e4-4c16-8efd-f6312ea2926a", "indicator--86339b39-defd-42d8-bb99-b50b9be96e55", "indicator--02546986-22d1-47a6-a817-a4897f7116d4", "indicator--1628201a-c5d4-4662-a586-5ea18b4fc01b", "indicator--2bc5d6df-b9d1-4c4c-8187-bd81aa3d3a0c", "indicator--a587dac7-4aa8-4d35-aed0-cff8b9598056", "indicator--ac51764f-beae-4c9e-bb96-719b248588b4", "indicator--449157ae-c6b9-4a47-bc65-072047026862", "indicator--42b5adf4-829b-4f74-9cb3-a7607e21d95a", "indicator--82f1793d-1645-487b-8b65-bd668b2082c0", "indicator--d6d3d472-c694-43bf-95f3-9d43a310b2ed", "indicator--f59f5a1b-6c3f-458a-99ff-ddaefccffd8a", "indicator--85126293-0fce-4915-bb7a-9b0de0bf6246", "indicator--9e2da16f-52ab-47a4-b257-e8c54d729275", "indicator--adf11a90-52af-4327-ad54-374f4d570ac7", "indicator--4e541292-de2b-4af1-a94a-15ad99df0c2b", "indicator--93ce46be-ec5c-402b-974e-990f7f78ce2e", "indicator--951036d5-b3ff-4510-86a0-a588fecd693c", "indicator--83cc80db-c757-4a61-8f0b-55e5a2dd095c", "indicator--96e0916a-9916-4860-b4d0-2afd9988b97b", "indicator--01c8a42c-4e90-4a72-a3ee-d00a8264a5b5", "indicator--55b8c91d-3e7c-4a41-958f-97605c8dd120", "indicator--a7294265-8c69-482f-bd6e-e3a2859a6224", "indicator--9b685b85-2a2d-426d-b3ee-54b64fc725d6", "indicator--c9f6feb7-1e96-47e2-ade9-65c9d2fc4d13", "indicator--41306b35-e184-4e5a-aad4-b0a5418d65f7", "indicator--e4a231e5-f810-4e02-aa2c-b1b40f3f32a4", "indicator--dd2d9e2c-4314-47ff-b920-df8c4a24ac31", "indicator--e462e555-8394-4c1f-a6d3-e55c7ec4416b", "indicator--a4e9977d-91e2-47f8-ba28-033411ad9cbc", "indicator--b4519ffb-9b0c-46be-ba41-5f7b49521af2", "indicator--7eba2685-1afc-4d1d-abaf-93bb80d6dd4d", "indicator--dea98ebb-f263-4487-8174-2bc2260083eb", "indicator--33229cf1-a733-4bd4-abc2-a95823c797d7", "indicator--7cee4cb9-3c75-4b3d-bae3-8a494b6f26c3", "indicator--a1575198-0cf5-4a1c-8258-b9abe6a71dac", "indicator--566b0cb6-310a-4e65-bc37-e7244bd5293b", "indicator--d24e1691-84b4-4148-ac81-ad8fcf0df737", "indicator--8fbf9c99-a89e-4af5-90a0-5868ba416a31", "indicator--69aaa4ea-1095-4361-b20f-7272c3e628f0", "indicator--a6b5f35b-64fc-4ae6-abbc-0ac50be11765", "indicator--9212dfd9-db02-4b87-b250-9ebd5522b734", "indicator--b4e9bb75-fea7-4a82-b22e-b3d3707b434d", "indicator--80b25cfd-b476-4567-8388-d5c2c057bce9", "indicator--f6833730-acac-4e72-bcdb-f919b9bdf2ec", "indicator--ea72c25a-b748-4796-911d-d745ea4c55ba", "indicator--d97ae236-4e8f-47f6-a633-1d0d7bcdd88e", "indicator--23385f0a-eaa5-428b-9b96-5ce0f141386f", "indicator--419cfa7b-2966-4cc0-96da-9f7743527d65", "indicator--01291f8a-818f-470d-8b61-fdd88a563219", "indicator--6a9bcc22-26b9-453a-9e4e-21c7f8fafaa5", "indicator--fdc35a85-3070-498b-8736-8de4cca5fbcc", "indicator--a44ac7a4-2a82-4dc7-880b-d9e34860aa00", "indicator--b952ffb1-413c-4833-965c-9583e0241f13", "indicator--09083d53-d37d-48d7-b2c4-f8ca74cb2e15", "indicator--113db4bb-3c92-443e-83c6-817ea9c84c1d", "indicator--5ee8eb20-9647-44cb-8bf8-7952ee5e36e6", "indicator--53bdfbf4-ce1a-4eb3-86a3-4e6dcc4efb24", "indicator--e1e4e6ff-4e6a-4f46-9923-ac130559c7c5", "indicator--c2561dee-32ae-4ee7-b7a8-25fc0e597237", "indicator--36e96c5d-fe93-4f6a-ae51-e5381efd43c5", "indicator--1cea090c-a063-428e-a564-f8d8c87f1795", "indicator--97dedf33-fd64-4e05-9788-63b163fccc88", "indicator--b3d0db05-a271-4cfb-a770-ee8b4ea454e8", "indicator--ece7631e-30e2-4af9-a70e-69cb3702ea58", "indicator--ecf851bc-659f-4e5a-8aed-ee58facc05d1", "indicator--a2e2fa98-36ed-49fc-b171-e3cba68d1884", "indicator--799b076e-8224-4efc-8825-3b78cd896056", "indicator--64f18c32-a034-494e-a358-1368e8e0fc50", "indicator--83ee6e8e-abc8-407a-9615-65b050689662", "indicator--0b60a16a-4c4b-4c25-b6ba-a48f5d8b7e92", "indicator--bd412ee8-3874-471a-8451-3a7a4845e1e8", "indicator--09e61305-40cc-426c-b246-6f69e3d76cbc", "indicator--571e468d-7c36-442f-8294-f28705e57623", "indicator--6e70d940-d704-409e-aecc-5feaadc9ad85", "indicator--d378e761-b95d-4c26-b2db-75e4af3a4b62", "indicator--68f99e53-ec3e-46fd-a0e1-1885f610d3a2", "indicator--27f9b8b2-9e58-4a79-8c43-8f397aa61c09", "indicator--d89c1c8c-6404-406e-aab4-5e5048906cf2", "indicator--e4fe0690-8e85-43b2-af5a-9d295343174c", "indicator--c8d53a22-124c-43e1-8b12-b8fa6719e5c4", "indicator--63234ed3-597c-439b-a6b6-923f4f27a19d", "indicator--0394c024-86f0-46e0-9df6-a6b7659b84e1", "indicator--ac757956-a690-477f-9a96-79e2d4c5eb39", "indicator--af4222ee-2d35-4e95-b92b-6711043707a0", "indicator--1cc102fd-5721-480f-8313-a47b54fb87fd", "indicator--8712e8e2-0889-42a5-9b29-e79a406620ae", "indicator--40c8de2c-4355-467a-8fa0-23fce851a42b", "indicator--0088b422-46e0-4766-8012-2c504428c080", "indicator--2cc396dd-582f-4daa-998e-3f2940e7db10", "indicator--4cd8c129-aace-476c-a101-a3b31d8e37a6", "indicator--a05a0737-853a-4276-8e3a-a64cafa3388e", "indicator--0310d8f5-59af-47ba-81a8-d3722e00b8c6", "indicator--c9cea61d-a51d-4dbf-95cb-0510dbc5b10b", "indicator--0deb69ee-99bd-4342-a858-d368d7a78f54", "indicator--f6b1a143-5b5e-449c-b607-8e26668b24a1", "indicator--f3ed92f4-a729-42d9-9678-ced9588ee3d0", "indicator--bbaa72be-fc78-482a-b2b8-3a867da3e026", "indicator--23e2a92d-b33f-460b-b15a-ffa82c3c6e2b", "indicator--a040120f-e90c-4dcd-bb77-535c3a147617", "indicator--4b39ca0d-83aa-4d85-9461-e76beb885f93", "indicator--defa1de0-d58d-4d29-8c5d-0aa2fd52c757", "indicator--1c7497db-2ddf-492a-9a14-1608964cc0d7", "indicator--98670cb5-d206-4027-8237-36f256e5256d", "indicator--2676acef-cf9d-4389-8075-b1ff038c5f2c", "indicator--f515e2b0-a319-408c-b9b2-f80caae52f49", "indicator--4bae7b28-850e-4518-ac8a-08063314ee3b", "indicator--11d51c77-a922-45ea-b78f-4434c3c03eb0", "indicator--040bcd82-93f0-4909-bf45-f2ad1572c2ee", "indicator--1330f49c-3728-4b7e-bd60-7017786029d8", "indicator--0b34e2f0-1957-45a7-bdbb-5d9fd08ad9d5", "indicator--8fdbdc6b-1ee8-46d5-90df-6d08137bfd64", "indicator--69945c04-3061-4f36-b0b9-5576d97d6ce6", "indicator--752f8e6d-513c-45c0-9664-8250b4e53479", "indicator--11c9a6d0-bc93-4c40-91aa-4ad0a9043331", "indicator--a275841f-8322-4334-8094-81667a2320e5", "indicator--605b2939-eeb2-4d03-9926-38ad69294a7f", "indicator--dee235f4-33fa-4925-9ff2-ceed09e2a536", "indicator--8cc21d4b-24d0-4f0e-bf89-7978b11a75ea", "indicator--44cedd97-56fc-4707-b8b2-7befc82e0f15", "indicator--525a0673-756d-43e2-b3a2-54e05a438408", "indicator--031672d2-8381-4f4e-8654-a1f951bd313d", "indicator--04fd55bd-5864-4bb7-842d-b7b30ee03b58", "indicator--bbb358c8-2d5d-436f-9fe4-4d189539e93a", "indicator--2944891b-74c7-4d73-a10d-4e2cc6f5ae81", "indicator--45446d6a-b38b-4038-ab6e-77098b4768ff", "indicator--0432be77-c4ca-402d-9112-2a1b9cc363f3", "indicator--1ea6abb1-1d85-4ced-8217-6c2b9e7703ff", "indicator--9ef126c2-df1d-4c4b-a3ba-dcb55ca9c6b9", "indicator--52da66cc-62bc-4c66-b4a7-b5645d556b87", "indicator--580337dc-1ce6-4e1e-91ae-6d594bd1a0ff", "indicator--1d747cb7-b51b-47f1-85ca-345576183c5e", "indicator--a256a381-6412-4636-a070-484a3cef639b", "indicator--0cc4e893-ac76-4b20-af94-a916b8a35309", "indicator--a3886b8f-61df-4014-a202-1dc8fbfe5cb6", "indicator--254f472d-ca93-4b67-9308-a6ff55c939ae", "indicator--2078f65b-6927-4fe4-9da1-cdd5b8318fdf", "indicator--1c939289-52f9-4722-a91f-f2aa3ea7434c", "indicator--cc553d5a-efa7-40cb-a7a7-aed835ffee04", "indicator--00dd74a7-39e0-4a89-b3ef-78bd1ac8f9a7", "indicator--aa2bbe7e-c660-4803-9515-3d5f5acca291", "indicator--d3d46dbc-8902-4275-8c98-53385cbaee36", "indicator--d936cab4-1755-47b1-98e9-08ee9ec0a6a5", "indicator--a879b99c-7c3c-4b6c-a35b-b4b88f73a191", "indicator--1b4520cf-9d9c-4573-8619-df46f723fe2f", "indicator--e2faae3a-27c6-4035-85a6-d85f9fdd1fca", "indicator--dd9bd5dc-00c7-4814-8b7b-67a790eae12c", "indicator--6410ad3c-d934-4dec-915d-2095c0be91dc", "indicator--c35cb97d-c6ba-4df0-9571-4a6418c85f32", "indicator--53095d73-33c9-41c5-aad6-d7205871cbf2", "indicator--10c573c5-e780-4a89-8a2e-350aa8ccf696", "indicator--32dd42fb-be52-47d3-9bb0-dbd758849475", "indicator--3e890735-ed86-47ca-9d12-df2f3371b0e3", "indicator--b324a724-4102-4735-9b46-ea8766ab0845", "indicator--d8b1797e-d950-41dd-9691-a42929054c61", "indicator--e249b26f-1400-4b90-a4a3-548ffc2827ad", "indicator--73e36770-507e-4405-9240-6fc9d6802e42", "indicator--d71cefe7-d493-4d37-a7c2-8441261ae436", "indicator--ee0ed04b-4e3d-4ffa-b0b7-615728f77052", "indicator--1297deef-df1a-4616-bf1e-943b04cd5184", "indicator--f13a1577-2933-4eba-8ea0-81c1f8873ffd", "indicator--d906ab22-9cef-491f-a2c1-1d1c7ab26eea", "indicator--e22be858-463d-432c-afa0-0b76e67b57f6", "indicator--ea4082e7-1663-45fe-bbd8-3420c4382e44", "indicator--cadf45e9-28bb-4f8d-a3c0-3e2fbb8867b8", "indicator--d378f223-aa0c-4e08-a472-e625bf0b96e5", "indicator--a41c9bc2-c117-427a-8ce3-81260af799bb", "indicator--c58e552f-2793-48bc-bf76-0242a8748342", "indicator--f63f3972-240e-49b5-80e9-a1bddb5c4020", "indicator--50039de7-40f9-47a8-ac38-7240065be66b", "indicator--a9c781cb-dd57-4a7f-a706-709a5e18b1d2", "indicator--43aa2c3c-d2bd-439e-9db5-397142624c65", "indicator--87f2b272-e6a9-4a95-91d8-449deefb0162", "indicator--aa1355b8-fae4-4db9-83c2-ea366b6e1547", "indicator--bf17df52-0b0f-4b4e-8397-8c3be8b4283b", "indicator--071a86b2-dbe2-4dcc-b89c-c806ebcdd204", "indicator--38c9bb42-b470-4594-82b2-064f9eb4ef73", "indicator--b71137ca-51c5-4498-af5e-ec5d3ea65b8f", "indicator--cd1d1336-5e2f-4ec6-a758-6a1a928b3fa6", "indicator--93bc0419-6944-4ea4-9980-4e4db4b775e6", "indicator--1c3179fc-ab74-41a5-b12e-8765006d90be", "indicator--8a76e0c5-b60b-4d12-b818-afb48d4e55e2", "indicator--5c5f1826-775c-4d1a-90d2-8a0feadfe395", "indicator--9b3211cd-b807-4d09-942c-ee24b57e0e8d", "indicator--4f31d919-29fc-4f2f-bb50-a6a44aa27fb4", "indicator--5cddeb27-c522-4a1c-be24-9aae5494a199", "indicator--23904333-fc17-49ee-a238-c488dafa29dd", "indicator--b6875a17-3781-47c8-9558-4834dcf9784f", "indicator--0f7f56c5-8cd9-472b-b53a-8327da84fb2a", "indicator--9f377706-3723-496f-85dc-2d57e266ccb8", "indicator--f3fa0504-7fbf-47db-a531-b43d5ed09be0", "indicator--6785b978-373b-4671-84af-2a23689e442f", "indicator--2c960a98-c2c9-4cde-a773-f7a73115b0be", "indicator--97dfd402-723a-452a-b3fe-ee68e4adee4c", "indicator--97a1bed6-d272-4970-bebc-73ab20bf4596", "indicator--01938c06-759b-4ca2-b070-4340aad82337", "indicator--3d5f8b59-65d5-4375-849e-7a3a79ae9ace", "indicator--9c5f85aa-06fc-4456-853a-1b4619e62e14", "indicator--20c8c821-df9c-4867-b34a-5bf4e2074c58", "indicator--cf3ec817-df31-404c-9919-6c51b8de60e2", "indicator--17c699c9-60ef-447e-be4b-4ee532855379", "indicator--d22128dd-5b15-40b9-940b-e55bcbe6a1c4", "indicator--59535b6a-7673-4d01-852d-2824ae5e933b", "indicator--5ac4431e-b814-42eb-9ae2-cbe98d73667a", "indicator--c4e70199-d583-4fba-be68-0429b08b9edd", "indicator--bf25348c-f51e-41d2-b75c-cfad4715b10b", "indicator--3226d1a3-d9d2-4931-89b3-6b9b3dc67ff7", "indicator--9713b8f7-c201-455c-be1a-3e012a3cccaf", "indicator--518fde57-14f0-4c72-8c07-e266abef1c00", "indicator--a4e2c546-8e6f-4ab1-aa96-d371f9367d47", "indicator--46f45187-f6e3-4caa-9020-1529c36911a9", "indicator--d36e797e-7471-4b54-b1d8-bd64d7551dec", "indicator--7285b4e0-7e32-446a-adb7-ec46f2333eb1", "indicator--0ea22c65-7336-4ce8-b846-1ee66c9824c2", "indicator--d1ef3d01-2354-434e-b098-2e623819d724", "indicator--defce204-55d6-472e-ac68-cf5777325e45", "indicator--ae083d44-7168-4343-ace5-514f21466403", "indicator--f726005a-88b6-4a1b-aed5-4f82dd82c4d6", "indicator--057f91da-06b4-45bd-bcde-c89315c8298f", "indicator--441b28f3-7a32-4ad4-a29e-c58eab00e06b", "indicator--791a8e96-f976-4a16-946d-69851d29c0ec", "indicator--224ae714-d235-4316-8bc3-07baaabae950", "indicator--55a8b78f-c7a8-4e1d-b7a6-8eb6b709790f", "indicator--8009ea78-b656-4626-8008-21cb2c4e1155", "indicator--7fe1736d-a4cd-4902-a4e3-7dc2452e1cb3", "indicator--dd76aab1-cfbb-47b0-9a14-181b84538666", "indicator--9c52ea8a-502f-4b2c-b737-9f6e31c7aaab", "indicator--78a33a09-1ccb-471f-8746-29d16e6daf70", "indicator--c545030e-760b-43e3-a79a-be46fa8ea24d", "indicator--16f062b3-5927-43a0-8c26-6ec211e8388a", "indicator--aa9f0129-a4ec-4156-8a12-7ecf9d0885f0", "indicator--db4034c8-f0d2-4c92-9e1f-7782a0f2dab9", "indicator--081842af-e143-409c-9c2e-5419a53480a4", "indicator--d79f0c94-341a-4abc-90ef-566e9017f094", "indicator--aba9a999-b45a-4fec-a5ea-63485c50add6", "indicator--15ab11bb-09ff-4de1-9995-29978c37d061", "indicator--8521e359-926d-4e8d-9f69-4a9148e0a245", "indicator--9d4b6c5a-6ed5-4002-8882-013f78d2e014", "indicator--7db7a88b-64f8-4675-84ea-7fd8f81ef4aa", "indicator--1543a2f3-6061-4e78-b95a-d8b53f6728b7", "indicator--71d79690-f910-41d2-afc9-986691421c86", "indicator--d9889171-d237-4a51-8891-5c8de1879b88", "indicator--4cac2d9a-0ea4-4a8e-8116-93aa8d0659d8", "indicator--e8dc6882-e3d5-408f-a3b8-37e74b82e90c", "indicator--7dc7c194-c2b4-42c7-aff5-e6de9fc1e1f2", "indicator--83b7b0e2-95fd-4368-86a9-b48733593d60", "indicator--323bd059-f21c-4e65-b3d6-995b437c657e", "indicator--cd0ca38e-92cc-45b4-9994-1c493f9e4db6", "indicator--ec3ba30a-17c5-4217-afd0-fa15254e95d5", "indicator--c62c3cfb-d478-4960-a2f2-3bc228850f77", "indicator--8e8c3f36-33c4-41b3-a9bd-076129f8dd3d", "indicator--b95232b9-357f-4f1c-bf09-a092aacc132a", "indicator--c36adcf8-00a5-40f9-b011-db8468381903", "indicator--e21e2d99-afe8-499f-b490-19a39e999e3d", "indicator--c896063e-231c-46aa-b169-8bc1e43cb534", "indicator--247a373b-d727-4b48-80d0-6ff90a700e87", "indicator--8a354f06-0c24-49b4-84b2-79a87e06a911", "indicator--40553dec-013d-4f3a-863e-92a50e1ea1aa", "indicator--ba18bee5-3e31-4527-9f64-a5f9c5e88a9d", "indicator--2a8888fb-5178-4156-aa4c-28766f976476", "indicator--e4c6ebf2-bbe2-4fe1-95e5-30847891c7b0", "indicator--a5d5dc85-dc5f-4e1a-8637-265acf86d8b6", "indicator--259b938d-53f0-41bb-8902-d292ffd83451", "indicator--6146eff0-6a88-40b5-80d6-9ef69de66cd1", "indicator--ab817dad-599e-4458-b273-49d25d0d70a2", "indicator--557040ff-2f27-4b10-88a0-44c9ca46125c", "indicator--8f5deb90-c868-415c-93db-bca9c620c48d", "indicator--7b5f230e-e8f3-4cd9-84c4-cd1e55077a8b", "indicator--d4d3beb5-9cea-4629-b299-6868da44c80d", "indicator--61ae6232-170d-48cd-a869-92f6987e2194", "indicator--8f8b33c6-a505-4d72-8cde-51a425f40d9e", "indicator--f4c8da9a-71a9-4f0c-b4ec-aae087b6597f", "indicator--12f1e80c-a3da-4990-a9a5-da17f79b12b5", "indicator--bffe68b3-886b-4b1d-bc43-dd248c462e5e", "indicator--db5f70b9-3488-420d-8a21-5f6ecd68bfa1", "indicator--572152b1-d058-404b-9a80-1d36f16cdf65", "indicator--4263a95a-d804-4c90-b3d4-78d5c522be5b", "indicator--a0b4cd53-bb5f-48ee-bba2-a230f202f474", "indicator--6fc98b1f-95b8-406b-b912-fa9469d9497f", "indicator--8bf0c4ba-644f-45d2-93b3-c0282a3a347b", "indicator--c6816dc5-2b46-4700-aa5a-50cd83f06616", "indicator--14f373d4-2e04-45ed-91db-2f93bdb955ef", "indicator--51d2997f-4de9-4a66-9859-47f40b4f1fd7", "indicator--12cc35d6-74f6-4e34-be5b-1f8ee3fd3c0c", "indicator--dc783ac1-2be4-4d6b-963b-43414df7be8c", "indicator--76f8602d-dfff-4f46-9a42-2701971ed78c", "indicator--bd3e77d3-22db-4c41-8333-4732b33d1f31", "indicator--5523cea2-05de-4284-8e34-ded6927d1a9c", "indicator--db2a03af-c473-4352-bbda-07b8bad8bc2e", "indicator--56726b17-7220-49f3-86e3-7e944ef408cd", "indicator--3fe0307a-ffad-41b1-a2bb-48ad0b549430", "indicator--b87cea0d-8f38-49e3-9652-2e72cef9affe", "indicator--c8336355-f9df-46e5-b323-9a8d35555041", "indicator--85572437-08d0-4931-9b05-f3080df6fa12", "indicator--783232b3-327c-4de3-bcc7-e4e936d5acc8", "indicator--c26db41b-99b9-418d-98d3-9a476335424c", "indicator--4c3420ea-9916-41d4-b07f-4f5e880a19b8", "indicator--c65ea4f5-d326-44d5-ace7-c0bf96dac6f9", "indicator--faa3d0c9-47a1-4d7a-924c-61a201afd714", "indicator--680c57db-56a2-4f50-9259-edb6dbe1e10b", "indicator--7c8cfef0-7a67-4133-97cd-0152f43c2784", "indicator--2f693a63-1615-4f4c-9ace-ea5140a0f172", "indicator--21a25f9b-c2d0-4206-aac5-cea5ebac6e94", "indicator--1bb58795-f44f-47a5-8e02-e5f12db1ee13", "indicator--0f520216-2386-494e-8a55-a5eaaedd7d47", "indicator--9b1f9caa-4993-4e19-931e-7098baca504e", "indicator--f9a24d32-562e-4240-9615-b38f8fd0eb60", "indicator--d685163f-db1a-47cd-b844-f3b565faff1d", "indicator--ca3ab99d-0801-4492-83fb-ad6be6f3f592", "indicator--9d49d16f-13f7-4cf8-8990-9d6df067d601", "indicator--e0a342a2-4f19-43fb-8de8-6fbd7189c62f", "indicator--83a9544d-5078-43f5-bf68-26f1911e348d", "indicator--57f790d7-02a5-4ec4-a42a-cedc143e3348", "indicator--25648aeb-b6ed-4eed-9de6-839c32283ed8", "indicator--0d8aed6e-5cdd-44e2-8b1b-27f969b7009e", "indicator--d7d6bdb6-1b50-4df0-8541-749efb4cba6e", "indicator--3e135a5a-966e-497e-8994-b05f591a1663", "indicator--b395e55d-7dc5-42fd-9250-995822e8e3db", "indicator--f3d83715-e58a-455f-bd2c-a4b2a6de809d", "indicator--f6181c01-2625-445a-aade-2fe5eedd4662", "indicator--3b1d411c-703c-4d0b-aaca-e5ae284a3dd9", "indicator--8822f200-eab8-4ac6-9e87-df0184033a4d", "indicator--bf8d98b8-6c75-4bf0-83fe-95e687b3a18c", "indicator--1e9c6e60-dfbe-49f7-8ff9-8b2c6830828a", "indicator--275ac3fe-799f-46cd-9099-708f6e37249f", "indicator--4491bb71-d0e8-4016-b9c6-05d9ff9eb3bd", "indicator--14a7e7fe-d982-488d-9164-02f849d7e33f", "indicator--bb1acd01-9419-4303-ae91-18043145af98", "indicator--551bcd5a-7cf9-4d44-9948-787cca104d48", "indicator--93f6877e-528b-4954-866d-9d3924886d5f", "indicator--37c12b13-10b0-4c09-9e24-7eb74d20c73d", "indicator--89dc2ca2-5f36-46fc-b8bf-224bb20d8400", "indicator--64acfd52-fb86-4916-a916-d2249e80ba23", "indicator--f20e4f3f-4708-4625-a2db-5e6914202d69", "indicator--551882fe-f6bd-4325-ac3d-c9ded43e3649", "indicator--278ab4da-9641-4dca-bdf8-275ad49cfe74", "indicator--c800d9f9-a4ed-4aaa-b068-fd5190ff02c8", "indicator--1b5bebf6-68e1-4a88-b0ad-31f4961793b9", "indicator--75ce66e9-f096-4fbc-b0ca-085e5bbb5961", "indicator--b9eca165-72e8-45a7-aab6-89eadecb9d86", "indicator--cd1d2ebf-8913-4781-a289-97b68e131c87", "indicator--8f0d19c6-f2df-4cb9-8786-9ba7e1781ba0", "indicator--05c88326-11e2-473d-b98d-2dc683b7e21e", "indicator--177de9b3-aa9a-4c2f-9d6f-41b5838a4e2c", "indicator--9301b9e1-c4d8-4f44-ac72-6ad371d75ddc", "indicator--5d94be07-8e69-41db-ab96-cd506037efd4", "indicator--c2b80790-c4b6-4f20-914d-26c06768ade6", "indicator--0b573b6b-23df-44fe-9897-95fa5fc3b796", "indicator--1a9a864f-9d98-4477-a709-fd480b99d715", "indicator--9c1e7722-8021-484e-a936-03307794ccf2", "indicator--e67e9039-21b0-40a3-83c5-fac290469906", "indicator--1723ea02-991e-4150-bfd1-04b59a528afd", "indicator--8d829267-5455-472c-9428-b1e84d8b050e", "indicator--9a3fb8b2-5457-42ca-b226-b7db53df607c", "indicator--c8736bd7-7040-447a-82b3-332e01669b2a", "indicator--a18d6501-d4a3-4c69-89a0-f3c8366d9dec", "indicator--9cf9aa1d-8b83-4f5c-ac1d-2573407ce793", "indicator--4c8b7d48-712c-4c0f-9119-de3b4679a996", "indicator--779fc2f6-bb0a-415c-9214-f0a968f664d2", "indicator--05d4eb24-0bfb-4aec-9f9c-9392745758e0", "indicator--f1bef7d1-117b-4775-8d85-2495f7c3b363", "indicator--64fa12c0-48c9-43a8-825b-6bccef0abc0b", "indicator--17492a7d-d1f9-408b-afab-db6bdb980570", "indicator--d6680176-1b4c-4552-9e57-e033fbefa3be", "indicator--98ecb986-5d3b-4964-86fd-7a3aee449676", "indicator--502029d4-43e4-4479-9124-23b85d678315", "indicator--491ba0e7-4e1e-44a5-b054-29d5f682195b", "indicator--812c5bc5-397d-45ce-a9d0-d15fa69f5149", "indicator--3f771857-a4f2-4c14-baa0-804ec95fb142", "indicator--e2271fda-3f49-45f1-812e-cc2bb40d0a4a", "indicator--1c9d3b3f-ce82-4faf-a4aa-92e515a5d7f3", "indicator--20e9b8a7-2b2c-46a9-8fe6-70fed9b5bff1", "indicator--72706a19-346d-46d7-afb5-23fa2ac11744", "indicator--a31c5d4f-a84f-4324-98ed-e9a07db730d0", "indicator--7ebeadd0-a7df-4a22-9e61-2aed93c13963", "indicator--f8581438-62cb-4d93-ab92-5b80757a72f7", "indicator--8b6a024b-7032-401c-a4a0-0bcd8ad69ddf", "indicator--a0462e59-892a-41b8-94b8-fdc0b8a304fa", "indicator--88b25457-6f89-4495-98a5-06319a7668e4", "indicator--8cce35ed-93df-4ade-a664-9d92257c0574", "indicator--edf67fb4-2a3e-4eb5-9db5-7cb5fefb35b6", "indicator--94332526-19d7-4ea0-8745-bbdad971b50a", "indicator--5a2889f8-f99f-4c9d-b338-34f78599fec3", "indicator--303428b2-b731-478e-86ff-a8cf00fbfe79", "indicator--11b84adc-4564-4925-ae15-ba6fadb6af12", "indicator--6cdcc509-6d4e-4598-9327-97ffa5c7fbfc", "indicator--f13114d3-14e5-4738-b8de-14ddaff34f09", "indicator--62c046f0-a8cf-4a66-a265-2efaf8abbb03", "indicator--0aa787a6-bb87-4396-a970-06e1b3542425", "indicator--5e8179ba-eada-47fa-9833-05cea9d11f57", "indicator--72239df7-90e8-4c1e-9b5d-fc5aaaecd015", "indicator--0e7d18f3-67a3-4528-85dc-ded559dcefea", "indicator--ed1bb469-1e04-4512-9e8a-2d1722c8a04c", "indicator--233d1c58-04ad-4f58-b64b-cd559f8d6be2", "indicator--220692c2-4816-407a-8a57-847a05670e83", "indicator--d67f4c28-6735-43fe-96d5-17935a3edbfd", "indicator--c0daf68f-1f79-47be-b2df-21f1fb0d63bd", "indicator--bbfd91d2-62a3-4795-be84-11eb180708e1", "indicator--69edcb14-9a0c-45c5-a7d3-e00e048b1239", "indicator--fe486eee-b2db-47ad-a462-e6963cf5f4fe", "indicator--c8dfff92-8add-4e0e-8a9d-1141a382cdbd", "indicator--48e4686a-5d96-4d8f-838d-2103dd59006e", "indicator--9e00e04b-69bc-43ad-a517-ddbda4e5f381", "indicator--75f5550b-fb49-4980-a294-9a8899ce4ffb", "indicator--30403dac-1e62-454f-858e-05f6c9b2ece8", "indicator--33a95e0b-a434-4548-ad3a-1234f989fd20", "indicator--cc479bb3-2014-426f-b200-070b2b802fcf", "indicator--646b34df-0f83-4b86-8acf-624dba333977", "indicator--0d4f2468-46dc-4c95-9ed6-0c973e714151", "indicator--4e8d9ad9-2e52-4d95-86e2-88dbfd81036b", "indicator--6cb9cc06-e49c-44c3-904d-d0254589bcde", "indicator--c51fd8a1-4423-4f3f-833c-df0fb329557d", "indicator--ff84cf6d-7845-4ef2-8865-fa3312e0e219", "indicator--4b4d1856-dc8a-4344-9245-73cc871d8114", "indicator--e86915ab-c7ec-4685-92be-fa966bddf4c6", "indicator--dea7430b-a7b3-4312-99ac-f8fa200f51c1", "indicator--cb60cdcd-945f-4b0f-9d54-43b4c1aff3ca", "indicator--1d623cd6-1e99-4814-ae37-597ad98d8808", "indicator--f1e2fc48-a8f7-49c6-bc96-de1943e3bb49", "indicator--406f01e1-9558-44dc-907f-d3c5ba67d664", "indicator--b39896e0-583c-4098-b8bb-9af468e010ba", "indicator--b4158b1a-fa1f-49ba-a9b6-d5b628198505", "indicator--98bb3793-88b0-4f5f-ba1e-ae2ae3b0e36d", "indicator--22d2b699-0905-4261-8b65-d97cd44b8888", "indicator--d42ac6a3-3055-4f90-8202-a7c542f3c5ed", "indicator--09c7b6bd-6e10-44cf-93fd-015164a113ac", "indicator--0332612e-ba3a-48c7-a34f-8bb54bdd2e62", "indicator--b3720fd9-084d-4856-b47f-66491462b7ba", "indicator--19fe7156-cdca-42b9-8215-055380812741", "indicator--a0350ac3-9ef3-45a1-9e98-30c07b69dace", "indicator--45f2523c-4b13-416a-a7e8-37bd8acc6929", "indicator--7fd5f9b5-06c2-492a-aee3-ad830625f042", "indicator--f6517000-edb8-4c75-8661-bafeff7e8959", "indicator--a5ef42d0-a78a-48c7-81a5-61bae1c3937b", "indicator--855032a2-edb1-4fd2-a2ec-0f4dfac93ab9", "indicator--1ae7523a-2d89-4a77-b874-dd7936a51309", "indicator--edc891ad-fecc-4782-994d-588d49077c36", "indicator--e7ab410f-dbff-4cb7-99cd-4b086c0fc937", "indicator--1bafd745-6b41-4c7d-a815-700ee8ca520d", "indicator--22a60f3f-f5a6-43e8-8088-e969b62f9561", "indicator--7ecb0e39-8ec0-414e-b5b4-ae4f7c554977", "indicator--9c801a92-a666-4316-890a-4662bc77add9", "indicator--8e88a2fb-a5c1-48cf-83f1-69c1ee2a5377", "indicator--449406ee-2d79-46de-8fd6-fb8068f9d70d", "indicator--3eac5683-58fd-42d0-99db-ac30f00469cb", "indicator--6f419bb4-f769-4d22-9e6c-116cb9c2e320", "indicator--667ad21d-9b5b-4e23-a238-757361d85a72", "indicator--5a2a7d7b-1103-4349-afe2-9b9441443833", "indicator--3988d653-b546-43ec-9163-6a5b899b5fcf", "indicator--53100137-d64d-46c1-a3ab-98073ed0a3fa", "indicator--de01e39b-3af0-4fc5-8daa-a416d477df6a", "indicator--a7133da3-9f64-4876-932f-0f5906b913db", "indicator--c99c4298-ffce-43d9-9746-d460653291ca", "indicator--2bcd7bb8-a267-48c9-9b4f-ec56ddaf606b", "indicator--71be7a9a-042f-4324-8875-dd63ae69bfcf", "indicator--6a004911-22b8-4d8a-afde-28441a67c24a", "indicator--525ca8c7-d6a9-4ed2-a299-05d1e81369e5", "indicator--f7127cb0-60ae-438d-a70e-3acfe4720484", "indicator--d649f439-d831-4ab5-985d-3a36cc16e5ad", "indicator--da212151-befe-4e24-aa74-42c8359d0557", "indicator--b17d58c2-c81c-46d5-a09e-77a6b1a9bd36", "indicator--c2d4473c-fa13-495e-a28a-fe83fe5476eb", "indicator--76c87903-f174-4f15-9c24-62617bc3ce0d", "indicator--c3bde301-f27d-4984-a8cc-b69576fe4015", "indicator--b296a258-ac56-4c0c-a240-6c857957fafd", "indicator--fb259a7b-b6e2-476d-bfc9-a8b541e0975a", "indicator--4863790c-2229-48a5-98c8-e1b7d663144c", "indicator--de938429-9bd5-44dd-aa5f-b8387e399d06", "indicator--95735bce-9731-4425-b306-d8261387dc50", "indicator--5f9cf6a5-9fed-42c6-9573-444731e76652", "indicator--d9b35483-2858-45dd-b8d8-ffba0cd0fa60", "indicator--e7299f51-5dad-4b46-97b2-834cf109863e", "indicator--cbbb9e23-a59e-479a-ada4-9027c16c12ae", "indicator--61853865-4e64-46ed-9341-3f769d4c2641", "indicator--b5f1a9f1-3c86-4a7d-a32e-b7182c345eb3", "indicator--50a23c1b-e748-4e68-8b3d-ddc6758ffdc5", "indicator--4314556b-dfc6-447b-a276-caab70ccc137", "indicator--68f790c5-b7ea-44ee-b593-8d4b867f619d", "indicator--44114774-b564-42fa-b32a-0d6bd21c9234", "indicator--42209b40-b6e2-4a55-bfe6-7e0e32d4160d", "indicator--4361722e-295e-4dca-8924-eaa5355ee405", "indicator--65d2ddad-66f2-4dbe-9bd4-f6ee1940b0e6", "indicator--16a93523-2614-4778-a72f-b702f18ffd69", "indicator--7b8c188c-9749-4079-b91b-235b735e1f4b", "indicator--cd00896c-4360-4bb8-aa1f-9700a5cee924", "indicator--c99b3077-41a9-462a-ade1-4fc908140231", "indicator--96e498c1-0bc6-400c-bd67-86ec5572a18b", "indicator--60b24646-7d07-44ec-a9d6-23c5fd790697", "indicator--6f148433-594f-4488-9625-611ba098baa6", "indicator--07706f69-3f42-4bed-a0d5-dfd410a7dd3e", "indicator--e98f211f-4dd5-433e-9653-fda7ea07d9ca", "indicator--93e38332-573b-465f-8524-5e12cc3eb399", "indicator--2214b6dc-d5f9-49a5-bda3-ac7e937c1cf3", "indicator--17c22244-0881-4d0b-9b37-ac8e5bdfa23c", "indicator--c762a07d-29fc-4325-81f7-c438c77cdd37", "indicator--a7777482-6f03-404a-bbbf-66132f4047bb", "indicator--2264fcb2-bb1a-4c7a-a103-88b9064e1497", "indicator--eed826df-b7fc-4649-b8ba-2d049cb738be", "indicator--68b34442-e27a-4c8b-ae1c-949106ef3268", "indicator--b434a1e5-4133-465e-836d-2fe1a5d26446", "indicator--9ae98403-0e27-49f8-bd0e-a51c9d943d95", "indicator--d1acf958-0744-46c1-8cc6-2c8e4e5f8afb", "indicator--85707d3c-19e4-4803-8cf4-00e85872842c", "indicator--85d8305b-b844-48ff-812c-4aa3f5a066ca", "indicator--a8575ffb-5c48-4278-bf3b-b2d5f931d0a5", "indicator--d00e0dc7-3a6c-4704-a9bc-1d4539f8e452", "indicator--fbc3c6ba-dd26-4a40-aa53-e504462f3747", "indicator--ae03450a-a7ce-48d4-8f49-30dc6b5d501d", "indicator--161a05c0-88c8-4d1f-9277-b02905285e3e", "indicator--282bc125-c338-41be-b9af-b38271dfaf89", "indicator--9eb9aaeb-d458-42e5-ab2f-7b7045a717e1", "indicator--dbe733d0-37cf-4be1-8ad5-9dd65b45da05", "indicator--f029b3ef-665d-4d1a-819a-0ab5790c4d9d", "indicator--c0dcac04-acfd-404d-ae9e-8369673331a1", "indicator--b07a8ecf-68bf-4236-883a-211a66430537", "indicator--ec50ee72-617b-4821-813b-51c93dbb312c", "indicator--fdca1615-f7c2-48f2-b13e-ef5cb46b33dd", "indicator--82c4032e-2358-4c7f-8398-5b4ff5935214", "indicator--4aea065d-5708-4356-bc17-c94a81d10ebc", "indicator--85abec62-82fe-4a1f-8acf-bc26486b9c32", "indicator--f667149b-7bb1-49e7-99b5-a9b3d81e78ac", "indicator--08afd64d-338c-48a5-bc9d-9bac6d91321f", "indicator--36586a41-6b7e-4f86-9295-ccf264c257c1", "indicator--cd12ac9d-c94e-4d16-91ed-7bc2b6d6147e", "indicator--0c650ac5-aba6-4aad-887e-091856d64e28", "indicator--e0d6cc58-1237-4331-ab34-9e3b312cedb2", "indicator--9effff95-b1f1-4cd3-a44e-988ef364afbe", "indicator--5b641aef-f4cd-478a-8d7d-dc0c7ab220c8", "indicator--39d999b0-bb1e-417b-bfe9-e055182295ae", "indicator--1836240e-f2da-475b-b900-c041bbbc8187", "indicator--21e7afcd-6251-4565-ae8a-b96ede6c8af4", "indicator--ba8dd112-f34b-444f-a4ac-8aa4e43b5f72", "indicator--6e6385ab-ca57-4505-af6d-bf8c2873a06b", "indicator--38bbf9ea-bd59-4045-a534-bf59574c15c1", "indicator--2122436a-e633-4c4d-b57c-2446727dd980", "indicator--6936bf72-2888-4390-8bc3-e0a96e0eef95", "indicator--a9f2deee-9c92-4bee-a2b6-8208853ab3d6", "indicator--2d33cae8-5d36-46fe-8303-f57fc9822183", "indicator--ce8ba7b6-89a8-4cb0-8a19-f3c6b0c06ff2", "indicator--77f9634c-2319-4fa8-8a37-1c8d7dd0a04b", "indicator--eb2664de-c995-4c97-9f98-24846eb51257", "indicator--a0207375-bb03-43c5-8adb-f8da5d8526ac", "indicator--2b8281ab-0747-490b-a8a9-c163ef5c3d1b", "indicator--1be87375-7c31-4150-a6f4-12d8cd46ca1f", "indicator--92d94538-266f-49e3-ac75-a53b7f724af3", "indicator--65ab2617-711c-48df-84d2-dfe0eea63827", "indicator--4b9cebf2-d616-4be8-989f-88bc8b25cac5", "indicator--c1d88535-aa2f-47b0-89e8-f3c2397df12e", "indicator--08dac6fc-9584-4f3c-836b-ffe4295a08ac", "indicator--98903ec4-d265-4013-9069-2af0c6dc52f8", "indicator--e719fc58-1d06-4ade-be88-01014de2e9f1", "indicator--cdaddff4-a7d7-4480-acab-2192afff593e", "indicator--ab323833-40d2-4486-accb-f9bbabcd7f4d", "indicator--27725d62-1517-44fb-8c66-b5dbb286d137", "indicator--fd595abc-a4d9-4bcc-a0a4-f36280446b7b", "indicator--d74be56b-b583-4d59-8d1c-27166caf3c5e", "indicator--b96d80d0-f156-45ff-96c9-5ed257d3c398", "indicator--bfe3f8a7-bab2-4d8b-b714-d48798929c41", "indicator--a320cd86-a899-4026-ae01-0d5f303dd259", "indicator--fec9d862-2b4e-4f12-bbc6-e44fa55e2185", "indicator--3cb98cd7-07e5-45a6-82f8-7f9b21a10201", "indicator--977ec967-b266-4d70-bf34-676a78a70695", "indicator--f2148988-b42b-4974-b276-5e424701936c", "indicator--3bdaab98-1fa3-4618-9f94-57a75a270e45", "indicator--6f5732ab-d61f-4097-947e-cc44db622513", "indicator--21cc41e0-7acf-4a42-b8e9-6aaadf6d878e", "indicator--9c1e67d0-4983-44fb-bbc5-acd83183a09a", "indicator--bddf08b1-2a8f-4520-a12a-c04934031b69", "indicator--2835340f-4b1d-4a88-8375-529dc2829ab5", "indicator--1f7fced4-b646-43af-a67e-a3eb65d9f833", "indicator--22c83dde-6f3e-45c4-a10d-08dc2418cf5d", "indicator--79aa60b2-5893-4308-adf8-aa74e4bc7f06", "indicator--6a2052c2-d2e6-4ab6-b512-4ec3667eaaa7", "indicator--6e936163-ac8e-43cf-b6b7-120417c894d8", "indicator--4fde5243-45c4-462f-8097-77bd531bd088", "indicator--9e75fa7e-d9bf-450d-974f-c75f7d01976b", "indicator--8c8a32ac-596b-4c65-9f52-bc37282217bf", "indicator--e64c12a1-30ed-487b-bf61-8b597a6172f8", "indicator--730b16d1-faa1-47f8-8968-dc5f147ce752", "indicator--d45a3243-c63d-4141-b81e-b25213f8f789", "indicator--1f90ed83-3781-4515-b474-c3b8aabd19c9", "indicator--4ecd449b-cd6b-4ff9-9bef-2ffd965dbe13", "indicator--69d00a47-69a4-4a03-9886-9f741936c472", "indicator--f3a1a6e4-c216-496c-96e5-136067bfbece", "indicator--de5e19ed-3849-437f-af9b-754bbcfa1d71", "indicator--ca5a8be8-031b-4ba4-995d-aed657cde0d3", "indicator--bc913dc7-0fec-4599-872b-29e8168c87ab", "indicator--83574bb7-a469-4b64-8ffb-07499dcd9cd0", "indicator--1e1acf96-a9ea-4530-9cb3-5785b3721dbb", "indicator--fde26fe5-35b7-44cd-a6ec-03f909444842", "indicator--9661a2b7-71f5-4956-b5a1-99e2f6690029", "indicator--2721de1f-0c7b-4521-a157-afbb98259c12", "indicator--ee7afa89-fa1e-4b52-a6d9-4d6848566316", "indicator--908ed7a8-298f-44de-a9e8-f42c77f1f23b", "indicator--508c9187-d25c-456c-84c9-ed7e070c8a7b", "indicator--ef58bbc2-963b-43ff-963b-cd1f49ca8083", "indicator--30d6206f-079e-4e37-8fb5-ed48cf8d21c6", "indicator--850b6249-62bd-4083-b370-088ad033c1a9", "indicator--11f22735-7d06-4b05-b809-bbfc7c26151f", "indicator--7e836ee3-ae2c-491a-a585-3104b73d1495", "indicator--410b4502-3ec9-4a4d-8ba9-0f818557b263", "indicator--7b732d96-dbb9-4fc3-b446-b269ee7a98b0", "indicator--a0c8ae30-39f7-4834-a242-8a7d51fcf489", "indicator--7faa6624-1e48-439d-9f81-c2ac063eeff2", "indicator--8027cb7f-159b-494d-b8a0-26c543fca944", "indicator--eeaa17ae-a096-4c30-8846-7f11ec1fedc0", "indicator--0aafce40-4e37-4b96-b144-7f262655ad24", "indicator--a3284919-b34f-47eb-9312-b465d8fdd4e2", "indicator--22997468-8121-4a02-a20b-e4f1eb9dbd69", "indicator--aefb69e1-753d-40b6-9398-578615ccbcf9", "indicator--ddaa8546-bc41-44a8-881c-ae4ccff36184", "indicator--42380e9e-9682-4ffa-97b2-3175d13dbaca", "indicator--d16067d5-5691-4776-9033-a5e3662315a3", "indicator--f7245dfd-a81c-42f5-af5e-352257ed5696", "indicator--f04c7a8b-6b11-4845-b2ea-4de0ac11ead4", "indicator--2ed29c3a-105a-460e-b69d-e94f8972ad03", "indicator--f4c87fbf-2572-4866-8a2b-cebd7093a7ea", "indicator--7869ab5a-8527-4f43-84ee-406683d2ca2f", "indicator--12258a86-5d8c-4761-ba62-ee30c17d9895", "indicator--feaa613d-1aaf-4783-bffe-3c08cf16c583", "indicator--8237b182-01f8-41e1-8881-5e27748c5a43", "indicator--186d7a40-100f-4680-be27-be53f578751b", "indicator--56845c38-ee8e-4968-9d2b-f4ac47c7c56c", "indicator--f095cdd7-9686-470d-91dc-c2cb0d44d24f", "indicator--a314de00-e79e-4265-bd08-e371fab63ac9", "indicator--31983f9a-39a4-42db-a18b-67c34fda60bf", "indicator--5ded987b-2a3d-4822-a6e2-d7dea46f0455", "indicator--2bfe1b37-8047-4e6b-9095-085352255548", "indicator--b036a555-508a-4294-9911-46a79f24ed6c", "indicator--0d4eaee5-50b9-4445-9a36-235eb44524bf", "indicator--85054ba1-85a2-47b2-8b95-03411700943e", "indicator--4c61db85-860b-4b43-866d-c10ec1389186", "indicator--c8121791-6dd6-413d-811e-bf81e8dd9895", "indicator--09715e2a-92f7-45f2-9c51-75193e6ea07a", "indicator--e147bc01-645b-4171-a2e8-7d1665471fe9", "indicator--3b7c758a-1560-4d9f-a3d3-677990ab68ec", "indicator--eeffda03-4301-4ee2-a8fc-77bc9999e4e3", "indicator--969dde35-9a83-4aed-be00-81e0a0783e7c", "indicator--a83be446-e076-4119-99eb-e60b2f6d9421", "indicator--9c4dd9b0-7f12-47cf-b1f7-2fc7fe4da1f1", "indicator--d4c20a3a-ff65-436a-a2de-8044155dbd2a", "indicator--c70f8132-98e5-4597-baba-43ecb4293419", "indicator--1f768cbe-f0d6-4173-b725-ee99ddacda82", "indicator--b06ec856-8e77-4388-9985-5addf44dd98f", "indicator--a91ef9f9-611a-4db5-935c-c918c6dbd73e", "indicator--77354ab1-df23-450a-8739-78b903b7c433", "indicator--1b266ef4-8f62-4ff4-9321-3a60e526682c", "indicator--072e6758-fc8b-4780-8d25-3a4a3d0f31b3", "indicator--5af5e98a-a643-4e5b-b5cc-5b241f2568b8", "indicator--f58d8710-0eb9-41da-93fb-2a5bf82c21d6", "indicator--33f608ab-b7d5-4a12-a9b7-d8d4217cb95f", "indicator--9879cc4c-b35e-4bec-b393-9a690beca38b", "indicator--c8cc01af-2ef2-43f9-bd77-6c22b3101d2c", "indicator--e0c982d3-f094-4966-86ea-19e4615d584b", "indicator--fb30737a-ec24-42fa-ab9a-7d4da3cfa9b9", "indicator--fffb8620-68ed-4ae0-aaf3-0a6c77a102e3", "indicator--a4eecb58-b172-408f-aa8f-d22bfa489dde", "indicator--8c6963e2-6f7b-4451-9142-6cc1948d9d36", "indicator--ba7953bd-4398-42fc-a19e-258a09add0e0", "indicator--2d7dd16f-ec40-4277-80ab-f1c82a8fb99c", "indicator--6e675390-3dda-47da-9de1-d04f4cf20c60", "indicator--33e739ac-4924-4ccd-982b-38c1b8c8b655", "indicator--32056b08-6cc0-4f1f-8309-e0fa8a1908b8", "indicator--aaead50a-aa1c-4e55-b697-0fe0f5305959", "indicator--bda5e2ed-f12e-41d1-a9f6-dfd0d21be814", "indicator--c8c6b02b-9e37-43fb-a43c-69154a93a30e", "indicator--ad71ef05-ebec-4884-b627-4dde9c99f3e6", "indicator--65239dda-80aa-4b0c-a437-96d48400bba8", "indicator--58fdc65c-a79b-4260-ab1a-c44c615c0f81", "indicator--7bdaba2a-7bfe-4ec9-86bd-3a5bb3e5122d", "indicator--22e002bc-aef4-4868-a906-da69039de3aa", "indicator--847b8bda-dbd5-41fc-b164-7abe3f11ec6e", "indicator--62f2de97-09ae-4c9e-b1eb-869be21a694a", "indicator--e9796232-2bb6-4fb9-b5bf-7e6710a00bba", "indicator--228af6e8-f232-44af-9b0c-ee9215fd845f", "indicator--385e40e5-6d84-45ed-8a71-ba9aa2dde6c0", "indicator--51ab4dfd-8663-4bba-9784-b8f16f20cc66", "indicator--bff6c103-be4f-4323-b3f8-5c05ad3db6c7", "indicator--19ffaf01-9a42-4366-8858-95ac76db5f1a", "indicator--626df0b7-3bdd-48b2-8e3d-a7f654433435", "indicator--c2feea2c-1a1e-4c66-a75c-af86154e7bb8", "indicator--056e4f0c-833d-4ab0-9ccd-5e5dfbb69972", "indicator--49c0bb78-2aa3-46b5-82a8-cb62e2ab972e", "indicator--9b7064f2-1783-4a84-89c3-37d009cb318d", "indicator--093d8987-e7bf-4073-8254-230b86a23d35", "indicator--a7cec84b-2f55-412c-8c57-cb4d2a6ab14c", "indicator--a4a7f764-7c96-4b37-8176-a52a85c74144", "indicator--156d9657-a04d-4045-a29e-e7bb3c6b351c", "indicator--004ed26a-3130-40cb-bb88-223c8571847e", "indicator--e47bf8a2-87e1-4ddf-b739-202d80e7d0ac", "indicator--ed534794-ef05-410d-918b-a61b418af560", "indicator--3c361649-0829-4649-87ba-71551ffbadff", "indicator--98003cf3-34fd-46e9-bb5c-b2d2a972ed2e", "indicator--e5752d95-3c35-4cc7-9f1d-7d4346dac7bc", "indicator--189f84c9-b2bd-4f62-b196-5dfa2f4c6828", "indicator--9243d4c7-34e1-49ce-b742-b8fd55fbca33", "indicator--a5bc9b77-573e-4e17-8e19-9849a3a26280", "indicator--920417f7-069e-4eca-9c4b-5544862304c1", "indicator--dfd81e2b-265a-453b-a663-3d00d2df1294", "indicator--e6418a90-59c9-448c-a91f-7269aee0bcf9", "indicator--1aeee78b-210f-4632-b5cf-8850cb6c0777", "indicator--fe1c0fab-2adf-48e1-972a-900b6f37ac26", "indicator--5d3f2073-0bce-4539-bb67-6cbb91c7a2d4", "indicator--ab9985df-b1de-4e85-a607-08b7f4806ec1", "indicator--c29f095d-c7fc-49c9-8cda-79957efbccf9", "indicator--84c46493-06fd-4bd1-acc5-453f7af3f56d", "indicator--7c294cd6-a682-408a-8713-ffc3ba3a8b8f", "indicator--06f1577f-1ba1-47b2-a8ac-529c42c8b604", "indicator--4e6f4371-2572-48a4-9027-88f0bff6efc2", "indicator--58ce9817-a61f-4299-8a20-968a58ecb4f6", "indicator--4ba8c232-80b5-4b42-96cd-57cc0229d9e5", "indicator--59b5c74f-e51a-4c0f-a37d-f4ae0ce916bd", "indicator--003332bb-c3d0-4bd4-b488-5adc4699e6a4", "indicator--8cf26815-9787-4a1a-9d7e-65e1cd7dc6fd", "indicator--8e8ff81e-a62a-4634-819a-17b49b7371f1", "indicator--6be9432c-0fcf-47db-acc8-302e97e37dd6", "indicator--68662152-e3f2-4687-99b6-aa295421306a", "indicator--c19baf1a-d39e-4d6a-9a9c-c91fd79e50a4", "indicator--075f8dca-c559-4fd1-962d-b20569223989", "indicator--174a0b36-51be-4d8a-ac98-e66ac1b9c0dc", "indicator--7494b550-68dd-4c0c-9560-993325d052c8", "indicator--5295378f-5225-44ca-97a4-e2ca753720de", "indicator--6a31f19a-ec8d-47a0-9ee2-19bcb6ac7efd", "indicator--6d04970f-77d9-4873-ad87-08e878db2a3b", "indicator--9b830d98-dbc9-478c-94f2-1d2f8258a24d", "indicator--b0adf57f-d0cd-44e6-a16e-0538964c2a86", "indicator--ec31b61c-0bf0-41f4-8edf-d16106e529fc", "indicator--b4e6f473-f4c2-40b0-9a7a-ffee4eba9223", "indicator--70e0bbaa-e6e9-4338-b5d8-a0ffe947ce31", "indicator--b75b1091-f707-41e6-b49f-f0f653b06a48", "indicator--47b0d3c3-41b6-411a-b667-3fa98aca1b5e", "indicator--36c52b7e-fc4c-49a8-98eb-12ed2c8029de", "indicator--b23766e6-c0c7-4b4c-bdb7-3f1ab7726539", "indicator--da612b6c-76fa-4d9b-b93d-2cf31eb71498", "indicator--8ae15941-6eb9-4217-b466-de28bd228fd4", "indicator--919b7789-b788-4501-8834-dbcf0f324e05", "indicator--c941f7a4-8cd4-465d-b6ca-2091fc0feb45", "indicator--63fb8b03-99fd-47a5-abf4-bd726629d3a9", "indicator--a677bb06-ea25-4386-b1df-8e237824b60c", "indicator--1081a0e0-b49d-45da-b88d-861ecc94e4f7", "indicator--d2708ea4-075c-4dee-918f-0a6b51034f0d", "indicator--0f4d7d1d-02a0-451a-90eb-78314bc903b8", "indicator--c0b68a09-ab52-4862-83cd-ef37a84a335c", "indicator--83ab3639-721b-48d3-8ba0-b977e4c4f56d", "indicator--0f4fd8ce-01df-43d0-b42e-0b56aea802d7", "indicator--92e9a07c-826d-4126-b0c8-3e847bde83f6", "indicator--58aba24a-291d-4eef-826d-db44d544820f", "indicator--6047bcbc-60f5-4e2a-a755-75fc9f0ff288", "indicator--14694ea9-9170-4d75-bb33-3efa5709af89", "indicator--fc8c1fd0-bf34-4a17-a52e-1bb13db1c2ba", "indicator--a720945a-5b9b-40e1-86d5-78848eca1cdb", "indicator--630c14eb-66a9-46d5-876a-aefe2f11d9f7", "indicator--938f8041-5771-4de0-b503-68f46a6135e6", "indicator--22289c46-5a10-4553-97be-7c2c0cf4d715", "indicator--a849d6e2-dc98-4627-a110-7323811c4cf4", "indicator--9df00c53-9003-4d05-8526-60f8fa52709e", "indicator--ccb5e780-5e16-4435-a1b0-b5261dab4588", "indicator--87346e08-b25b-451a-8628-53a950031118", "indicator--b2b19d2f-1a60-4099-bbe5-6ab4915c3ce5", "indicator--b6f16e4d-8c52-4e01-8e58-c332be2bda1c", "indicator--a015a836-01bc-4300-9615-19c6d0261ac9", "indicator--f6483f76-0234-4fc3-8893-8bc10feb7cb9", "indicator--69a2b939-1daa-458c-bd2c-377943bc7978", "indicator--02f8eb18-f648-404b-ac78-34e640223cd1", "indicator--ace97601-d3fd-45c0-8ef7-3089ab32d135", "indicator--16470d25-c9ed-47f2-8214-4c3be32677b5", "indicator--fb228d16-8cdf-4ac9-b4eb-0c258fea89a5", "indicator--5b1674fd-a15c-414e-8868-3bf4ce3d3509", "indicator--ce43f48f-b702-40f9-bc92-bf535feb0b96", "indicator--bd0b768d-7292-4cff-9516-afc3d54dae83", "indicator--0d70afd9-a5dd-4dad-8377-4b162027783f", "indicator--eada5b39-2a37-44c1-b103-6a45ef865837", "indicator--63f3d1d8-4a53-4cf5-a3c4-c892c13fba43", "indicator--bf829a23-61c8-48c9-8ea2-b45e9e3810c4", "indicator--585bb613-8e48-40fd-b2ca-695f746253df", "indicator--676e3d81-4c4a-4754-8698-5d1f0eec3736", "indicator--0e2c305a-4afc-462f-838a-5be9fcede80f", "indicator--95f3bad2-ef3b-423f-9d57-eca96d772660", "indicator--843444e8-f1ef-439f-af5d-64a9a9caef30", "indicator--6fa89a27-2015-4f10-a6dd-a6772d4712b3", "indicator--cacdd216-ac58-4bcb-87cf-574b3cf70d35", "indicator--4a77180d-2577-4fc3-bc43-85868f770808", "indicator--53288cd9-c68e-41fd-9452-07758a34813a", "indicator--0f4fb308-6db2-4600-8d1d-834723b392cb", "indicator--4a83a176-2846-4eef-b08c-aa0a079d3ec0", "indicator--1aa47f97-4b7e-4ad7-8034-d1b95f943821", "indicator--30a8c184-9972-48e7-884e-3f677d822367", "indicator--ca47020c-c0fb-47b5-baa2-c7592bc7ef1b", "indicator--16cbf619-135d-48f0-a2df-b5a011de7e58", "indicator--c33cadc0-2371-4d24-9e69-bb11d39982f0", "indicator--d2177f2d-fae2-4cce-acab-c3d651327b80", "indicator--1aa000b3-aebe-41a6-abb6-92e3758ec3da", "indicator--8b421015-4f2f-4aaa-b4f6-40235ad58a80", "indicator--b1aeb1e9-7f36-48c0-8be6-b62a3e67d5e0", "indicator--c1d6c418-db74-46e2-a440-b188611c43d6", "indicator--0de7863b-1aee-4b5c-9bb7-4d88a7753aef", "indicator--54ce06d1-befb-4004-82c8-61d3bc490ee9", "indicator--b156a57a-33cb-47ab-a70c-f2c14b2e3167", "indicator--0888756e-328f-441a-a76b-57bb7e76b2b0", "indicator--164a16c7-82f6-4e97-b002-3a6c7ed04d7f", "indicator--52d82763-871a-4a86-9af3-23f1b811f6de", "indicator--dbbe780a-ce39-4bdf-9ac9-2770db35f04f", "indicator--0041c5b2-3f41-4683-8b65-e46785dfcd34", "indicator--f0fbabd3-a692-43d2-bd86-cce40cf82ae7", "indicator--d1cefff4-d376-41f9-a6ba-18a3d6f3af4b", "indicator--989e404c-9aec-47ad-ab41-26236de208dc", "indicator--6daa8995-1dce-46be-9eaf-1d7e12b5a109", "indicator--4eed1c80-26a5-4cb5-9def-0d0b4b849f79", "indicator--24cea613-bc6b-4ff4-8f50-51411945957c", "indicator--15d6d6f6-4eed-4782-a3f6-e6e786a5e079", "indicator--a992d8f5-29f1-4cad-8c7d-1aeeb5b7a434", "indicator--88d7fa2c-4f39-46b0-9dbe-5f99dcd55d30", "indicator--9f03dc70-e269-447f-86ac-a22c2c1459d5", "indicator--92c00b87-10eb-4c41-b75e-457de869730c", "indicator--55c8cae9-782c-4cf9-9bb1-feac988e7a3a", "indicator--125472e4-6740-4992-81a6-edb0823d1571", "indicator--3ac26d67-4e16-42e0-ba55-5dd79d8ee0e8", "indicator--c527e863-5384-4dc0-93c3-12594f9791a1", "indicator--85344c88-d703-445c-9ac5-82a4f288260c", "indicator--10b292a1-ad0b-4bc7-ba27-e8e9f5835f8b", "indicator--a3343141-e45c-40b2-82d8-f78d77594c83", "indicator--dca4ed3e-24ff-42c4-96a7-f310bf83cc9a", "indicator--63150732-6bb5-4782-9c85-2050ca93efee", "indicator--f82a30d8-5a17-4273-8f40-4d29cd354daa", "indicator--35120881-16c1-4afd-951a-69b5e920ab74", "indicator--30dd4feb-c454-43ea-8bbc-4286bf98c620", "indicator--8ed1a8a4-a7c6-407c-8f15-65daf12ae63d", "indicator--d89d9a83-3177-43f5-b96f-209dee33cc7a", "indicator--9968c074-704c-42b8-b052-446fe3a24811", "indicator--c2412c70-e95a-4c96-8233-6775155a2f7b", "indicator--1a6c1a86-c119-4f93-af66-95da75e95cf0", "indicator--969ad348-49d4-4c69-8d47-5b6c1ddea868", "indicator--6030f7a9-25e0-4dc5-9e03-cf05011c31f4", "indicator--98980b0a-1717-4e5c-9df4-494ded887bf8", "indicator--991a6002-d938-4f24-b119-f821bb1d4e37", "indicator--c1f4cc5b-132b-4d0a-9779-384aaa7f83c3", "indicator--f0a33ad9-bfe5-4c92-91a4-96b50a531f5d", "indicator--69aa3b68-1130-4c5d-836b-6387f3bf3cbe", "indicator--a5ef8191-533e-48cc-b95b-dbf42e9fbb98", "indicator--853bf6c7-e1cc-42bb-9ce8-f334992cf9d0", "indicator--5ec5f8c1-56ac-4cd9-8a82-585d3b7d5262", "indicator--f138b6b5-0cfa-4bab-b8d0-9ff51b5245ae", "indicator--75991a0f-e75a-4115-9e1d-94f5166d23f0", "indicator--c10cd1e5-5dff-4242-a7d4-ec5153ac4cff", "indicator--fdb59cb3-567c-4d57-be91-b5132ac17734", "indicator--ab27a101-3d75-4cc5-b80d-ca2e020647bb", "indicator--1fafca82-9d44-4986-b44d-c3ffe08e2000", "indicator--98cdb470-3bce-4fe9-acc9-1a6bf22d1686", "indicator--ff3bacb1-99c5-47d9-b401-82a0b439031d", "indicator--93cdcf2f-b83f-44a6-8f9d-0485887e74aa", "indicator--3cb80027-3265-4e40-8a06-5fbb7c02e6a6", "indicator--ac9c3b11-bac8-4f51-91f4-007b922fd617", "indicator--8028c0d8-297b-4f64-b39e-15c5daaabadb", "indicator--2a8958c9-ec71-4924-9719-0b8c7da636c5", "indicator--60dcab83-31d1-48c4-94c4-64afeef202d7", "indicator--9708e74b-8a39-42db-bd63-12f5f5a21b4d", "indicator--e71aaf5c-78f5-4991-9f75-5c5ef19954d1", "indicator--e730f230-2246-42d0-bcae-fc057a6e093a", "indicator--5051f8e6-ba3a-4d74-80ad-40742a8482fa", "indicator--c403c969-10cb-4a86-95c5-e158d9b3746a", "indicator--1646fb07-ab04-4641-a2c5-1df0ab972423", "indicator--4c42bae3-b707-44f3-9b0c-a4b0e3e283f5", "indicator--a6bb2476-c6f4-41d7-ba8d-fc9a716b16e4", "indicator--3680cb19-160e-40db-b6f0-fd968b7236ad", "indicator--db2c8b69-e8fb-4438-8f83-f2e27a7e6003", "indicator--3d0c0593-6b7f-4053-8b0a-cf75c04cd40c", "indicator--7703183d-5b21-46d3-958d-857fda8a09f9", "indicator--45a8ab10-6b49-4f5b-9a43-14159fb4038f", "indicator--994ebbac-5b3b-43d0-b380-ebbb8b7c8c69", "indicator--6ab44fa3-1f36-4750-b194-f31150b68295", "indicator--0046ade2-e318-4cc5-b00f-ac01a2acf810", "indicator--32593067-cae8-4f44-9ade-1bcb3b442374", "indicator--dfc45f74-78c8-400e-b678-1ea023a392eb", "indicator--9c6143bc-56eb-42fc-ac82-3db8219939b3", "indicator--5b72a048-0a97-45eb-913a-efde24b25c24", "indicator--b076e17e-a1c9-4bef-aa05-ab0718f9f0c0", "indicator--5873591b-b051-4c39-8203-16d8d880a5b4", "indicator--31487d4a-8987-41f4-ab19-099a42201e73", "indicator--00886a58-cf99-4b73-906a-c0dd676e7cc2", "indicator--0c0becc3-598d-4e26-bdbf-0088fc3f0471", "indicator--739e20d1-cff1-4c5f-99e2-bbd6d8d5a200", "indicator--a6cff24b-1af3-4ac6-8ba1-9208a02b7e22", "indicator--e945fc45-5134-44be-bff4-677d0bd8c3ad", "indicator--d6855ec8-3a5b-42a9-ae2c-9f3b74bc7b9d", "indicator--a3d8281a-5167-418f-9010-6739e82c3851", "indicator--8d3d4e5a-36be-4d25-b598-93d03306a576", "indicator--0e8c1443-f9d9-4c89-a8a1-28802947d32b", "indicator--e96e7ac1-670a-4cd9-99c2-9d0f1123154c", "indicator--d6fe2be7-3ff7-4947-b65a-57d3412fa9a0", "indicator--a0365f54-87df-4238-9cf6-5c49d8ac4a64", "indicator--ee5e58cc-8a52-4821-9b16-7bd1993b8440", "indicator--9aa59de6-fcce-444d-b95d-f9ed55820b56", "indicator--b5330245-e067-4b1f-a252-268291bba155", "indicator--c2a2c231-716c-407c-8899-3e3b83721972", "indicator--5eb8a1c7-2fc2-493e-ba01-a4e0ab9ac41a", "indicator--7eb8e1a1-f331-4083-b1f4-ea8458a09a2a", "indicator--d7310b7e-8633-4750-bf43-1e5c6b481bd2", "indicator--f7c1f169-b30c-416f-81a9-6b6c5b0c5b1a", "indicator--16ed6248-4eb4-41d4-b385-9b26fafc4e2c", "indicator--53b7ca34-df82-45b2-9fe4-4675c69154e7", "indicator--ac3ba371-0e95-4273-99e2-ef5e5f7c71ad", "indicator--e5eb262c-7ebf-4362-93d2-406246d57b7e", "indicator--ef615ba1-cfa6-41ee-a9d2-fb5ca15df1e0", "indicator--c143053c-0cac-4e41-bc7c-c3a5708f35b1", "indicator--db8002fa-4a99-4838-bc96-474761c0b270", "indicator--01f2e801-d13d-49ae-890f-26d3ea8d39ed", "indicator--06e00ac7-3e4c-4da5-92b7-342f0ffb301a", "indicator--b1c4c870-2584-4361-839e-e25784d2612b", "indicator--acadad16-797a-4b8b-9d2c-80686bf70d5e", "indicator--246886ab-21a3-4fb3-9627-1e191058f059", "indicator--c5fbce3e-94d3-4a4b-b0fd-69154dc83541", "indicator--6818e2e4-e598-4ec3-be55-2c54f91f5279", "indicator--963d4a7b-6978-4c6b-b62a-1131538cec25", "indicator--a31f29f9-da56-4906-8b83-6040fb3d10cf", "indicator--7893ca48-a80c-49da-98a0-293faab7d038", "indicator--421d65c7-632d-4ed2-8067-ebb11c119c83", "indicator--98e02959-1360-4015-a0fa-33a709326a4a", "indicator--081f5ce0-a86c-4657-9bc3-dda834a5f6af", "indicator--aaed927e-3555-4b35-a471-e25f0c6bf605", "indicator--1ec63bde-c681-441b-ab6d-f19e9855a56f", "indicator--107a07e2-09a6-4155-8f7a-74343abb5d35", "indicator--727563c1-f208-4219-8ef1-e8ad5dc2a6b6", "indicator--0b64b01b-601b-48de-87b2-d985b208b8be", "indicator--1f69c5ef-cb36-4f88-99c2-f1b79ebc0eb4", "indicator--6e12676a-f452-408f-868f-f4a4d38b536d", "indicator--6dcb9174-b702-44b8-8fb5-1aae0c3dcf92", "indicator--8789c49e-69bc-4ba0-943f-7adf860a8111", "indicator--fd951674-76b1-481f-8f39-5eec542ee777", "indicator--d7055553-7bd3-4144-be81-1a90b230d3d2", "indicator--f957cc3b-1233-44e6-908b-45da458f5a73", "indicator--c7ae53c4-4bb0-4375-9793-9959d48f3053", "indicator--0679dac9-436b-4b8e-8465-5a177ea807fd", "indicator--68c69c73-4ca5-4c0a-8fb7-fea3def01fde", "indicator--47917c05-802e-427e-807a-1a655bf3d148", "indicator--e0011903-6a8d-490e-b6fd-3c29390d6207", "indicator--0320533a-f556-40a5-a6fd-500d129cc666", "indicator--33b9c6d5-5d8c-4a35-aaab-aec953914fcf", "indicator--fe070574-479e-4cfb-91bb-2604623e2ae8", "indicator--41397b40-0379-43fa-9a91-2666bea82a6c", "indicator--ce6585f4-5a82-4655-b82d-3805268cd15b", "indicator--8ea78a55-04f4-411a-b219-fb1346f3b148", "indicator--86e10029-de8a-4590-a5d4-60206dc08a59", "indicator--8d752a91-37e3-4d12-b153-864d1e08a23b", "indicator--b8ee444a-348b-4c4e-aa34-347a3b9454e3", "indicator--aabeca83-8352-49bf-b720-ecd1cbb1af03", "indicator--5a1cb324-7c40-4bdd-8c19-76a2470e6bd5", "indicator--095b2797-9c62-4287-946b-dcb5cadda4d4", "indicator--0ed36a80-9180-44c7-9853-806be661f547", "indicator--2ec99863-033e-47a9-9877-b25f9016ed22", "indicator--55404a43-baab-4cd0-b40f-41f14bd9515f", "indicator--6f43122b-4f23-4887-9815-97b6a99e60d5", "indicator--2b65fe89-0a6a-4f1f-acba-019e1d93b221", "indicator--fff595d9-3af8-4023-8f5f-6982366355a9", "indicator--205d4cd3-ca52-4772-a12a-2bc3687b1054", "indicator--8f8c1e9d-402c-4fa7-89ea-0ad2e180d520", "indicator--61eb4786-2a95-4b62-8ca5-3140a17c5ff6", "indicator--9bba4cbe-1b3e-4dcc-9d19-47f40028cecf", "indicator--1436e96e-9fb4-4686-aada-853ba0d87698", "indicator--46566ceb-dc14-4aaa-8ee6-1af6fa8e9022", "indicator--64d2cf68-17f0-46fd-81d7-0cada9d3ec01", "indicator--7249208f-f018-46a4-87a4-e2c3175a4159", "indicator--534f2db3-018a-4c7a-8a2b-54824af48fc1", "indicator--f075b9b2-ac93-4353-aceb-430d7f4fb585", "indicator--c07722c0-b4dc-405e-9514-53fa721fa5ec", "indicator--169fc92b-6981-46c7-b85a-6b24d0792cd2", "indicator--bde9c2ca-61a4-4eac-85e3-686874542f14", "indicator--bc1e5d4d-ca2d-4cbd-b4d1-3e39e1e52b1c", "indicator--c96ca7f7-4455-4ab8-9ece-91f82960267a", "indicator--0d5a6888-e013-4143-bfd0-485feb43abbd", "indicator--02fd8f6d-e7a0-43bb-9c78-94709372a1db", "indicator--7ea57b10-5dbe-4e8f-b0a1-f111ecc2e7ae", "indicator--40f53d00-f50a-4557-a753-f1e1ef9b00de", "indicator--f6c9f818-763e-426e-b680-61ae08e4ba4f", "indicator--944fc9fa-f3b3-4bd1-9459-5c102622fb6e", "indicator--7f9d8e25-1aa9-487e-aee1-35054068928e", "indicator--4781610a-1c5d-4f0a-addc-d38389b9ff9d", "indicator--8fb89085-ef7b-4458-9cdd-5d1e0bdd4684", "indicator--067edda2-3697-4f15-9a09-dcc889b54bad", "indicator--3fdc221f-5479-4656-a0b2-b400b8cefad5", "indicator--a8baf61d-d281-4bf7-a896-af298313fb1d", "indicator--066a4602-91b4-4b47-85b7-c70f211e2df7", "indicator--7303d4d2-959a-4c3e-88ea-d335c72bbdab", "indicator--fc6ef43c-6321-4a9c-9a7c-834871bba912", "indicator--5001f128-a43a-4e3b-82d2-add773b23aeb", "indicator--9a63a504-983f-4d8e-a61e-e0064c6c08e7", "indicator--860af9d9-5818-475a-894a-14e1a3537e30", "indicator--823098d9-370e-4d42-8fb5-9982f2298ae0", "indicator--99640dfd-082e-47b3-8652-973cc1721fdb", "indicator--924ae673-4fed-4558-94bf-c854ca363bd3", "indicator--3dc12185-c7d4-4713-8aca-ce71eb0b2e71", "indicator--e16cee12-6d8f-4e30-bf45-63029a8327b1", "indicator--1b464550-7eba-4521-9c1c-c3927c7f031b", "indicator--1f5a4d63-105d-405d-b232-ef9c0b824cf8", "indicator--0793a068-e419-4e5f-8e84-a22f77a9ee8d", "indicator--da965897-1992-4819-a804-824705d49198", "indicator--aaea4b0b-7f0d-41f3-a4b3-2d69b45bf28c", "indicator--c7b2cbd9-011b-41a4-b048-dd4ad96b8d36", "indicator--261e42d2-d30a-4bf1-ac05-75d370c404b8", "indicator--ef04ed6e-d1ef-4e52-9f32-f1f180e9d37f", "indicator--14f27e59-f818-405d-a340-4ea60cd17e2e", "indicator--81199ba7-9755-4236-984a-a4aed734d1fa", "indicator--eb24fc63-b761-4f61-8473-0dbd709f5a04", "indicator--d84e54f4-7ce6-4030-8374-0065db5d353d", "indicator--429248e1-c994-488b-a7f9-3817dc08b1c6", "indicator--5d698516-3b59-443b-a49d-9ed66c24c056", "indicator--f16526c3-48f0-46d7-9739-92a9dcaf8270", "indicator--81ccca78-28cc-4a35-8c97-32cece874165", "indicator--5f937ff7-e6d6-4518-9fa9-e9f4cfc51966", "indicator--28c05041-d332-4397-84a5-3152aa400d70", "indicator--dcd764d2-122e-43fd-b47f-a375ce3c3ef0", "indicator--9184a92f-28c3-47bc-a73a-a076b94cc7ba", "indicator--8045e617-8f07-4c5c-a2b1-b8ac510fed61", "indicator--21e654d4-6bfb-4a4b-bf9d-ffc51a5fb55f", "indicator--6548c7b8-5f6a-4330-b19d-6d0136cdbec1", "indicator--88f9d7dc-0126-40d4-ae53-b75721c9acf1", "indicator--d918de0c-7d46-4f7e-bcee-20de8fd27311", "indicator--b962e7ab-f2df-4296-bf25-b7e045249ed2", "indicator--0973ca83-9e48-4ddc-ab95-9352dbb1ed82", "indicator--992d1b0c-b2f9-46ec-827c-2296924d35b4", "indicator--91776a79-22de-4347-9e10-7fd4cf4a490a", "indicator--1d538a5f-5564-44bd-ac54-2886f363aa68", "indicator--e94442da-06b3-475b-9f95-32c07f81a1db", "indicator--2f3bc211-e882-4f8a-ad3c-6773d5cd44f6", "indicator--7ceba199-8cfc-427d-a099-0305824f24b5", "indicator--66280f5e-5b78-4da9-9c43-d6d607ca775f", "indicator--7b7e09b7-977c-4365-a034-4eb3e11b2ea1", "indicator--5a6c6627-f854-4758-907e-a61717cb1299", "indicator--e7503fcd-73ca-45df-b1b8-8802b8d84f5b", "indicator--7cd30a94-3497-49d5-b312-17396918a512", "indicator--8c6038ef-c6bf-46ad-97de-46d804b8846f", "indicator--e803e4af-1429-47cd-a605-9d019a42c28b", "indicator--7ba0c4bb-131b-4dbf-9483-6e509134caa7", "indicator--b6d1c7d4-393f-4a0d-82b5-aebf3a1e051f", "indicator--5c534c43-e13b-4f53-b9e4-a620a93f9ff9", "indicator--1785742e-b51d-4da5-831a-70a8928b1891", "indicator--91f74b61-eada-41fe-a237-4934ef666794", "indicator--5302448c-c9b0-4afe-87a9-a88f2c91cc5f", "indicator--4bb28aa8-82df-4c76-a636-e68e3f198668", "indicator--59eb9729-e2de-478f-a67f-0350ea88267d", "indicator--ae398ac5-4dca-4281-94a3-8ab7a64af8b7", "indicator--561f1e91-f55c-481e-ac8d-fde14cd2f4cb", "indicator--a5476f68-3312-467b-af10-462bd5f1676f", "indicator--e47cf2aa-7711-4039-858c-9435fb276fe2", "indicator--ab907196-8ed4-4a6c-8ee2-5ed60ff7d58f", "indicator--69a41204-8cf0-4ee2-8d93-d97f3fda8f61", "indicator--5af28ae5-83cc-4139-8771-73db64c343e9", "indicator--82361d46-6eda-47a4-ae6c-078388d3bf31", "indicator--7047dcfb-d449-49e3-b409-60378a9190f5", "indicator--55091e69-393f-4fb8-8a64-9f79d7cb8514", "indicator--e505ebec-3690-4966-836a-ce8fc42cbdd1", "indicator--59b5958f-1e3b-4afd-b189-e1dc20a5de82", "indicator--637f402f-4a6b-4309-a143-de07f46d43be", "indicator--b619e39a-9ae3-4f48-b5ec-832d26027395", "indicator--71bddfc2-c9dd-445d-9257-46f60a27e936", "indicator--b446c868-2196-47d2-9e21-cd3cc06362a8", "indicator--78300984-1c71-4656-abc6-560f3495e640", "indicator--d00ebb7b-76b1-4041-8ab9-236a5568505b", "indicator--951bbed1-4a93-43b5-b5c4-36ad6cba2e2b", "indicator--f3ffbcea-9be7-49c0-8d1d-a87bffed5ed1", "indicator--726550f5-7eed-4e07-a60c-fbecf57eb3bb", "indicator--72442be6-1510-42c6-95ff-8d63450c6e39", "indicator--a9295fe1-e0d5-448f-96ab-c53133a69dbd", "indicator--bd1ad5c2-4877-45d8-bd12-632b3340e2b2", "indicator--60fdbfab-a727-403a-a3c2-349a6379184e", "indicator--ed7a8a2c-9a89-4e2c-9b80-b28619abb79f", "indicator--88072694-849a-46ce-8856-8ceef20c21be", "indicator--c37ba335-d9eb-4002-ab39-ee687b287846", "indicator--00838aa5-f6bf-48fa-a33f-4a188ca66d63", "indicator--ca6f0c9a-f764-4352-963b-4381d1315192", "indicator--999ede37-e26e-47aa-9861-c3d7abf20af5", "indicator--5642a9bc-c042-41e2-92fa-a61d142e2b64", "indicator--bb0969cf-1325-4b9b-ac95-fe3bb8e70c12", "indicator--456a7c6d-8b9e-491d-98bd-164ca5348c2a", "indicator--f7ac9d66-7b69-4285-bc6b-b2dec08c5ca4", "indicator--6ee98e72-fa31-40bf-8e22-b6d485810908", "indicator--0322e852-33dd-4faa-a55b-cb37d944a1f4", "indicator--cfe4745a-6517-493e-92e6-846dcd1d3562", "indicator--ac2eb2ec-1b17-4d84-a874-0ab5aff8fd92", "indicator--8e6c61ff-7bb4-48ad-be66-73c255d43b62", "indicator--12ded326-0cae-4139-a77f-33cda0e34680", "indicator--9cb8ca71-6c38-4f07-900c-d1e306c5e012", "indicator--3872b8ae-5241-4320-bc69-7d1b399ae1d6", "indicator--bb61fd9d-33b0-4b88-9c2d-0e74bfb22c14", "indicator--7a234015-5ee4-4c35-a7aa-64d80f555c60", "indicator--306b9147-8f6e-459a-9cbd-7f6130f20bd9", "indicator--fdfa7e1d-9f1c-4b31-a304-95cd8a2c6f27", "indicator--2c1d35e2-9bde-4884-94af-561767e61478", "indicator--96a75495-d1d4-493a-b06d-c131c6230ee4", "indicator--056a4d8b-c57b-4ca9-9b6f-96b2941d1689", "indicator--e5732d42-5d72-45c9-91a5-a17f67c6910b", "indicator--77636618-03cf-412a-9c5a-3f805f63e0cf", "indicator--5bff0be2-abd4-408c-8762-8ab65daac36d", "indicator--0cfc732c-44e6-4766-b484-5f5b14b6c396", "indicator--84378a62-9014-4f4c-aa47-844f984d6425", "indicator--aed0e9da-eab7-4786-b557-7e2d0fae8fe6", "indicator--a647277b-cb80-4772-adc1-f6eb67ee07c5", "indicator--cc5e9726-05e2-4f1f-915f-1eeb61507e34", "indicator--db2818a9-c957-4292-bb71-8e28de6a5208", "indicator--890b9f26-dc35-4fda-a4e5-6e6d4d6e608d", "indicator--a4822a29-8511-40b1-ae08-481a82b38069", "indicator--1d5987f4-25dc-4984-999c-27174f622e26", "indicator--86192d6f-5a60-4b03-8aeb-b54f9992e205", "indicator--364df79d-00bb-45d4-95a8-767f515936b2", "indicator--f8cf1bda-2216-4838-acc7-61fdd3811d16", "indicator--949239a1-75cf-4bf5-b4d7-fd5da76b710f", "indicator--6e72f57d-5512-447a-beef-173bc85463d0", "indicator--281aa0c1-24c4-4729-9bca-3676ea85f915", "indicator--d478791e-e316-4fde-af0e-142d66097e6f", "indicator--9b9df846-429f-4b41-ba9e-080a1116793e", "indicator--433d9cdc-f841-4ff1-a5f5-4ef35cf3dd6e", "indicator--91f33dfc-8a63-4453-b59e-887037e3143a", "indicator--41568da4-e192-406e-8c1c-15ef98bc18cc", "indicator--6a5b427a-2ae0-4f4e-ae13-09cdf2665443", "indicator--b4fecb3f-9fdb-49af-8c5b-a88427ba89e9", "indicator--9d2628a0-2a15-452b-947d-df370c95abdf", "indicator--cd42cc45-f545-4dd1-91d8-4aa9d30594dd", "indicator--0a992a3c-d378-409e-be48-fceb95fa2b01", "indicator--be16cf52-cd9c-4aa1-8e21-2421a0ffde2f", "indicator--686a466a-5e1e-41ee-9c11-7f0e8cd57037", "indicator--e5ab1ac1-62e7-4ad6-8718-3138368c800f", "indicator--9a30efae-0ee4-4d4a-a6fa-f5712a1b53b2", "indicator--43851c4e-afcc-4fcd-ab02-7ff9f5adbedc", "indicator--2f11a14f-cdb8-4936-b799-37e487fcc618", "indicator--db122bf5-5c7f-4435-a546-61e3914da496", "indicator--a82ad73c-ba16-4bac-a006-128ef7bea18d", "indicator--fe52e31c-a059-4124-b3dd-3e15ab19895a", "indicator--1c2eea6c-d7f3-49a9-8a13-26ff20b74a45", "indicator--6445cf0d-d81f-4aeb-b146-195375e289a7", "indicator--fcc15bf9-2c69-43d0-81c7-ff82dcd52771", "indicator--72d6377f-9ce0-4cec-878c-0b25185fa3b4", "indicator--cfb3935c-b895-4d83-b82b-9fb09b231c65", "indicator--55702f97-0556-4a7e-aac4-f97d5d48d402", "indicator--2aad4b76-3aa7-4918-ae4d-2d1fdc59ba4c", "indicator--86dd9b21-9733-41c5-9423-69f516c81569", "indicator--4876b97b-76c2-412f-8010-2566338c7036", "indicator--553e0166-26e4-40be-b26d-238fc31bcd66", "indicator--6f9fa62b-bc31-4242-8320-8460f16219f0", "indicator--d58d3291-3e69-4654-806f-017fd3125c0b", "indicator--9699a92d-0882-4090-8cf9-a71b4d02dda5", "indicator--03c0b5a0-0680-4b47-8275-48eaad23c156", "indicator--19b579a6-a75d-4d06-b6ad-4ce778645231", "indicator--3f81e3df-d2e1-43e0-ad4d-c61487d78661", "indicator--f3dfa8ff-d84e-45ca-ac45-0748170f7bcd", "indicator--55cec6b7-e6d9-42d6-bb71-981485bbd9b0", "indicator--08ae53f5-85ec-49fe-937d-26d01eb50bda", "indicator--90d3085e-d618-4b29-b380-2d29ff6a8228", "indicator--ba0c3ebc-517a-45ba-82dd-8d69bf99fab8", "indicator--2d755dd2-917f-4f69-b3b9-e9bb24771309", "indicator--8a2febad-593f-441b-9ab4-bc91a2cd19d5", "indicator--c958a2df-f1ca-46e3-bb7c-9fee35f1eaf7", "indicator--ee911363-549a-4625-a87a-22851f0c7821", "indicator--319a26a4-32d3-4330-a11f-63a38f8975f8", "indicator--6254a700-315d-4242-9462-746007fb3727", "indicator--7da21084-4ab1-473b-bfc6-090f3dffc181", "indicator--a616c9c9-a797-43a4-8a35-4989179aeae9", "indicator--4eb7036c-ab20-4955-abce-ef6eb43797db", "indicator--78a00cb8-8930-4674-a570-603c14e93fb1", "indicator--1786de4c-96d8-49c3-be71-27759057a3f7", "indicator--1623e194-30da-403b-84e1-18decd99e220", "indicator--0073f749-dd50-479e-929b-0a805b99a022", "indicator--940ea44e-6f09-45e6-a434-060a68996499", "indicator--4f194e97-4c7b-45e1-94a4-04001ab7710e", "indicator--a44e5e2e-ef81-46aa-92e1-d5dec520818d", "indicator--1ae7bab6-dd44-40ab-89ce-f2946cb7cd0a", "indicator--58d2bc2f-e474-43b7-b023-ca551122f2a7", "indicator--7feebf85-8903-4477-ad53-39c03239750f", "indicator--946fb465-fda7-4466-be09-c9dad8e149c1", "indicator--3cf46e0f-eeac-47ba-8e73-88564dc8db0f", "indicator--a76d5ba9-9fe4-48e4-8665-5ee49fc00654", "indicator--79461c38-448c-4664-937b-7943cd01fded", "indicator--e7ccbbc6-581b-4cc1-8354-0666dc549c61", "indicator--b018e83e-1315-4716-b33b-a81b18e4ba75", "indicator--cc06f87d-8823-4073-b628-8ad8a21c7dc3", "indicator--6a937d57-176c-49fa-9d45-1978fc94da0f", "indicator--19e98308-cd63-49be-9c7a-3beedae6cdf5", "indicator--6329dfaa-edab-49e3-9b18-c20abbe8d268", "indicator--667f4075-ddeb-45f1-966d-97273f90cc22", "indicator--96fc5507-19e4-484d-824f-350e0022cece", "indicator--7953d7e0-6216-4cec-b9d0-ac6206967327", "indicator--53c68ee6-4b79-408c-860f-71713fef0d55", "indicator--7a556665-71ff-4ece-81c4-d14490432ade", "indicator--a448f368-cab1-4c6a-8228-df49e1b2dfd5", "indicator--2a86e2e0-c86d-475f-889e-d7d07d66e0ca", "indicator--9a2d44a3-5a0e-4ed4-9454-e6e693bf82de", "indicator--01dc1823-27e0-4d83-9ccb-abfa9e84a928", "indicator--66ac608f-4e4e-40f6-bdfe-ba003d53e80e", "indicator--77bb286e-4f5c-4db5-840e-2a4a1a367d70", "indicator--9a473ff3-4924-491d-9094-cc29f72e9e78", "indicator--b1d28a63-f0ef-4b9e-936a-f01e662ee884", "indicator--5c2fc951-d76b-4f68-8191-aef051c18e74", "indicator--eb7e3231-c14d-4864-bd02-f64d7bffda65", "indicator--6192bd6c-61f7-48cb-8bcc-7aefd7e22f0e", "indicator--d31d68b1-0826-4900-b4b1-676646dd1b4c", "indicator--5bd3332c-703c-486b-805a-91a7a659d426", "indicator--8ce9692b-8a69-4666-876f-5e68988e70ab", "indicator--9adf3548-d872-43f9-bfbe-11b49e862dc4", "indicator--3d9386d0-7bce-4ee5-8ae4-2eeaef03b35e", "indicator--08b293b9-3fff-4bd4-badb-359697a314d5", "indicator--01f516f0-3013-462c-8520-2dfb9b1b918c", "indicator--4d84aff9-b8bd-4de8-89e3-db581d373782", "indicator--0da0d2c7-c485-4f42-a777-abfd899b8615", "indicator--77b32487-0df1-4ea7-96ab-fb3b24d21c3c", "indicator--11ed6c24-fb0a-402b-8790-e9cf3d9cf8a6", "indicator--73d291a7-9f2d-44d7-94dd-5b395aa11ece", "indicator--4224c7fe-e3a4-41d2-aa93-e43b83730d48", "indicator--0f4e962b-b219-4688-bfda-b6085076efbf", "indicator--998f874c-5130-4984-ae55-9b3a39b9a308", "indicator--b85e0d25-2a68-4f79-99e1-c4cfe81b3bed", "indicator--c0cfcb2c-13a4-494b-847a-06badc558c34", "indicator--21647dc4-861d-4c45-9947-4d96419ba706", "indicator--10e7d1fb-62b7-42a1-a864-271257260444", "indicator--e2892708-5296-4f8e-b7c0-c02c795fcfb2", "indicator--797866f1-002f-4ed9-8bf8-fbd529c0074d", "indicator--d4c0b7b4-ed97-4d08-9c5a-07626ee53338", "indicator--7769bd64-6240-4167-962b-214dcf87a4a8", "indicator--709d19a4-bb04-478b-b7a3-0f3682a93100", "indicator--c025e672-5608-4c3a-baee-9692c8f76370", "indicator--233a4639-b704-4830-b4da-198c1e4e6287", "indicator--0c306a6e-e533-4be2-a8c9-21f6fbea0c9a", "indicator--58c7db88-618b-4838-b443-9aeb8b68d62a", "indicator--2a8f6a05-c94a-419e-aab9-0b0c84f4c70b", "indicator--55e66795-5a42-4b4d-ae84-4d2572147942", "indicator--b68bd94d-6f05-4899-9645-86bb597ada4d", "indicator--2d92fd7b-e727-4138-a108-b8043b44e0dc", "indicator--2f0978de-5cbb-4e37-96bd-ccb4ab492ee1", "indicator--27386253-ac53-43ed-912a-91a79328eb1c", "indicator--df4e7d78-6f54-4111-9589-487387e1a96b", "indicator--d5523fe9-d85e-4304-b7e6-f1c7dde5c80c", "indicator--d935a8ad-a6e4-4305-842f-cbad43508ac3", "indicator--f4fefe8e-88f4-4d76-80a6-224e5bc09a35", "indicator--2f37329c-300e-46a4-803f-c916ef3fa994", "indicator--ad117734-ee18-46f5-8829-9f3d71d39f02", "indicator--fa39ef0d-738e-4aeb-98b8-be257b24abd0", "indicator--86487211-51ea-4353-8fe8-5aa318750345", "indicator--99c78a35-4f32-4d95-bc1d-477171147c94", "indicator--06a0dd0a-f4e8-4331-93c1-c631e9079c74", "indicator--a965ef4e-7e52-4572-9709-b4568c46264f", "indicator--a638e534-36bc-4785-b3e3-15f3f111b528", "indicator--0c6b2db9-6889-436e-955c-954aec30690b", "indicator--0ed5e86a-e24e-4255-aaa7-2e502e8dea5e", "indicator--d151ea13-2b60-46c8-82e5-f170842b986c", "indicator--db586c1d-9ad3-4032-bcb4-ccc01f375602", "indicator--73a6d1bf-78c5-4e71-98df-aeed02984b5a", "indicator--4a073d63-b3da-42da-8fe1-e35458b0d8ee", "indicator--cbd454c0-ac61-4e13-b6b6-8bbd8b3526a4", "indicator--711d9d25-a4c2-4c68-bb6c-88f72ba9ec2e", "indicator--5b459bc0-e86a-4e0c-a8d8-f89836a3682e", "indicator--5408a7bd-52ee-42f4-a046-92fb821278a2", "indicator--3e8550da-4cb1-48f3-abd2-3a67d1984b49", "indicator--7eb9eed2-04e9-4a75-b31e-cc1d75381bf7", "indicator--350e7951-e232-47eb-9018-35763cb74429", "indicator--8370fa19-72fb-4fdd-856d-b81c0e1f197a", "indicator--b661c902-40e2-487f-828f-025c7e062d7f", "indicator--3763564a-d57b-4a95-90db-5db7df190ce9", "indicator--d9245318-4fbb-4b22-a2ce-f2b3540ffe33", "indicator--77efbf62-df20-4ced-b1f5-618287a99e2a", "indicator--0c2766d0-b907-4fe0-b59b-1a4011a40d9c", "indicator--fb5d0c18-e18e-4c4b-a7a6-0b48fb2ffa8e", "indicator--557bcd7e-9c7d-4d48-8a20-ea40c71b3fe6", "indicator--da80f714-1fe9-44e3-9672-fdc8cb3469f7", "indicator--c6bb52ca-e881-4661-bb43-7a9711a80c42", "indicator--6dd86ba6-14e2-41ca-ac72-c8e40649d71a", "indicator--8196a436-9046-4d50-aa2d-94ab2127944b", "indicator--2058d2a8-6465-46b8-ab75-d1fb541cc272", "indicator--b9d09b1e-6ee3-4e5e-bc09-11d8f9278cb4", "indicator--5bbf2b93-8555-49a3-bd3b-41694351e0f3", "indicator--bc8c49a0-4877-4678-83df-426b7968119e", "indicator--6ff9436f-9f26-44e1-8014-de8ecd433f81", "indicator--6fd685a1-30b9-46a2-87d5-ef23915b7012", "indicator--0f892845-de17-4f08-b434-ae6c16728c29", "indicator--5fb6f514-d1c5-4325-999a-df1d21d7c5bc", "indicator--8c6de32f-707f-4e90-9c02-e6d39a536b48", "indicator--4227b932-6489-422d-9d52-a55d26b0640c", "indicator--586af803-d72d-4321-84a9-4f0274fb0c19", "indicator--dcd6f27f-af98-4ec9-9691-e935e470c2a6", "indicator--137d98e0-75de-46db-93f2-ca852bf74621", "indicator--99795aa0-ac13-44f3-ac49-49a1551e0087", "indicator--ee764a23-e899-45e1-ab03-2ab0c3271ec2", "indicator--2d13b397-5e26-4c3e-a28d-eaac7e050aa3", "indicator--8e8db34f-5b87-43ef-b8d1-68a21ddd3374", "indicator--17dd37da-2a91-4ca9-ae8a-5dba4b300c33", "indicator--2b0a9501-3c94-43f5-a0f9-9a9f28792342", "indicator--d5405a43-c3f9-4c3b-a8fb-8279bd9bdbef", "indicator--d5caf048-c6b3-4fb8-9e5d-532db0b61c7b", "indicator--f046542d-498d-4960-b8df-f59f48cdf549", "indicator--65667acf-9cb7-4ba3-9d50-1a5e9bab7654", "indicator--4d2f4a8d-0b8d-467e-a4d5-e19d7ef10a23", "indicator--530f3708-3910-467e-b037-44d1b896ecd0", "indicator--cc93dcd9-91db-4aa2-8345-6e1d35a36fc4", "indicator--298ff0cb-ee66-4c55-88a3-7706f4d80046", "indicator--78907302-1f07-466f-aeda-598045af6483", "indicator--8f1c7141-69a3-41c0-af98-56b5d386ce67", "indicator--495b4b96-ea03-4c6e-b4de-152ccae2fc1a", "indicator--f71e2168-bea4-47cb-86ba-1239b69dd93f", "indicator--532e4ebf-2226-450a-8451-6ac6dd337402", "indicator--549744a8-ca0c-42e3-aabf-eb360212fe29", "indicator--e1b9340c-1277-4c4a-abe0-b160e651e57c", "indicator--2809c2f2-5b81-46a3-bafc-997ecb3d9b6e", "indicator--83074f79-3989-48e6-8bb3-de8802868215", "indicator--4e8a9b08-89f8-45a8-8545-1d0ca7f1b283", "indicator--aaef5215-f83f-406a-aa2c-42a180299db9", "indicator--76fdcfae-f898-4576-8632-947bf855c742", "indicator--173ac6bb-f8f5-458f-b0bf-ead6f4586547", "indicator--16276d8e-ea71-47a6-ba27-7d8085a1cf87", "indicator--be93b6ba-bab6-4abd-9ff7-124262c1cd8f", "indicator--c702b8d6-7999-45ed-a1a1-9294202e5cef", "indicator--54d857ba-91b1-45b1-abc2-da147a049d08", "indicator--a1ff3bbc-6453-4756-a62a-8f7639e683c9", "indicator--91518a6e-8ae7-4c9e-aa56-2534a06f3c2a", "indicator--9dead84a-8864-400f-9ecb-c49b63e41a77", "indicator--8369f372-9082-4ce9-83a7-41929d374724", "indicator--e34c29e7-80bd-4370-8c2b-0f2f33bf2f85", "indicator--bf5f01c8-47e5-4a50-ad47-d01825c093ec", "indicator--0435cd1b-d63f-4327-98b7-d792551a6dda", "indicator--ae32f106-44f5-4253-a0bb-545d5d64f206", "indicator--2ca9a79d-1de7-4044-a4b9-2945832dd61d", "indicator--8c01e98d-705b-42dc-9f79-b9f953d46b4f", "indicator--2adf16b8-7ae8-4312-85e5-2b77a9972b70", "indicator--331b35a4-6d56-4eac-8161-f10d5ec0643b", "indicator--b6dc1bf0-fbe9-41f3-8e81-1ac9535be1a3", "indicator--1494b4c8-daed-4ce0-b87b-e9de8ffe1f9a", "indicator--78a4af6c-94e0-49cb-8365-e64db21a533c", "indicator--13fb0500-8a4d-469c-99de-020540193a5c", "indicator--f951cac7-9408-4382-b0eb-d09c68c53548", "indicator--7571d936-c592-4b4d-ae53-6f2f59390154", "relationship--8111ec3a-aa55-473d-a334-f367da05d1b4", "relationship--c965820a-dc20-4c30-8ec4-19972269f679", "relationship--9081d593-f37b-489d-8965-ad67278e4a07", "indicator--cc1eaa44-1233-426b-9852-3ff11be2970f", "indicator--4d170bd1-1476-4de0-be5d-75d1410149dd", "indicator--2746fc2c-5ad3-485f-98d1-40d8830c41d7", "indicator--034784be-19f3-40bd-a909-5cebedd8d5e1", "indicator--b43a3595-39ee-407c-95ab-0234daa52915", "indicator--acc79f02-64c3-486c-b788-4665195255e8", "indicator--84f22c0e-9f37-4ab2-a878-5ad7a3d14d01", "indicator--4d23ec5b-8cdf-4c0b-b35c-25d39b1f25a7", "indicator--fe04a4a7-4a4d-471d-8765-78504be53c2c", "indicator--fd4ef9b8-44ff-48e3-9e25-5a3d5f220d9b", "indicator--d0391e49-ad00-4adb-9900-d6365f7006a0", "indicator--66ae8166-4bb6-4bc7-a7a1-360b89e2eef8", "indicator--786baf5d-4895-42d0-800b-ec2acfc841c1", "indicator--7fd42659-4443-4ed5-87f3-9c404955c282", "indicator--2ba08421-f20c-48ef-828a-f7085a18e14e", "indicator--f2854209-7855-497e-9f0c-3be0d51e50ae", "indicator--eb35280e-f411-4e1a-b386-2d0894b619d7", "indicator--ce500606-f98d-4cd6-9b95-62af0a217153", "indicator--2cfe5eb8-4a31-4de3-82cb-563f489be977", "indicator--97bf7a1d-1bd9-4a3e-941f-2cd8257ffcf2", "indicator--29e20c41-7a71-4ed2-99f8-6d7c59961763", "indicator--a7d94ed2-72d3-430e-ae7c-a28d0bd8ca68", "indicator--a044181c-5103-4813-9efb-13836d693831", "indicator--efbaf325-08f2-4115-b57e-e7980161e5ca", "indicator--cafab66a-fb05-414e-b0a0-ec34e4736e6a", "indicator--e87e18de-1eaf-4667-9232-3ec7c57c9ee3", "indicator--e883b16c-80f6-4125-97e6-b960839fe863", "indicator--3a62483f-7c1b-4ac1-bc85-bb3a1f1bc894", "indicator--de9ece96-2431-4327-91eb-366658c1ac73", "indicator--5583d552-7a54-44fc-84ec-cc3d11ab5e54", "indicator--199efb2c-8438-4f21-90a1-0c135ba7b62e", "indicator--95ace17e-3a15-4018-9db2-71db68fc008d", "indicator--b7edbf63-2bac-4686-9aec-f6d502c11e46", "indicator--7bc1cbd4-d737-4dfa-b752-5abb2a482457", "indicator--e7b45a8b-f666-4c46-82be-e97f4cf80daa", "indicator--88311150-47ed-4be5-a06a-ef9c8942b5ff", "indicator--9e9d39cc-ca63-4164-af6a-711fdd6b5136", "indicator--403190bc-564f-407f-bcbf-c552e816773b", "indicator--47a34b15-91cd-42fb-9258-0168363c1a95", "indicator--e0015299-44b3-408c-baa9-0a87ade5f903", "indicator--1cf73515-0265-4324-95aa-9bfd0ca428d5", "indicator--f90ec6ac-5203-4992-a128-585552ff56f7", "indicator--2985c1a1-f065-4616-a205-6a2df22d9577", "indicator--39be240b-7991-4c8e-be26-429c9fc6da70", "indicator--2e0e83d1-478e-49a7-a987-658dc2e8ab12", "indicator--a7606349-0614-4e16-8fa5-da2533826c33", "indicator--4dcf4b67-bbcc-4281-a894-fbd3e399e960", "indicator--33ea6a25-fe02-4341-8077-8ae9840e24b5", "indicator--c4986b9d-fca6-436f-a61b-e8089fe06ce4", "indicator--dd060e4a-d690-4ce9-8423-ad5893dc1e23", "indicator--2b2e1f78-56a7-4eb4-a4a2-e88be36eaa6d", "indicator--32f236c9-295b-4ab4-a8cd-df3738450de4", "indicator--b56f583b-b84c-4e82-b74b-5a58eeffa374", "indicator--a021c516-1e1f-4dbc-940f-1184b5e11bca", "indicator--479e80f8-c6a8-488d-ba53-ee4422615e1e", "indicator--d4b56e1f-3e92-496b-9e49-70be95a83eb5", "indicator--1a04435e-be84-4d77-8b18-6a7bd3d35ca9", "indicator--a55652d0-25ff-48c8-b29e-4c36dccbca52", "indicator--dd712f31-021f-4ef6-900a-c61994ac3bae", "indicator--3237673d-be47-4db1-b5f5-07c694fa66cd", "indicator--c769d50c-7f23-49a9-9989-19d36158d553", "indicator--a3c39e86-aefb-4e8e-a55b-820232198b14", "indicator--0749f29b-9a0c-4b52-ab30-50c7a90af827", "indicator--5dc3b02c-2a5f-4054-b16e-925a3be9af09", "indicator--fea963ce-2c31-4b1c-9f48-94302af62256", "indicator--3c5f0e48-24dc-4fce-8e40-990a5195aad0", "indicator--de445504-4cfd-41d3-8702-edf542586ea4", "indicator--5b2da348-021b-4d6f-b796-9395f20435b9", "indicator--4a422e0c-6017-4e34-afea-0a91b8d8bfed", "indicator--4f5fdbf5-7b86-496e-9b95-e2bdd74d16fa", "indicator--a19038b7-2561-4784-ac6c-b0003e3dd220", "indicator--7c7cb34b-fe5d-4f51-87a4-e272d81ebf67", "indicator--71d47b26-82fa-4116-a24a-1b5c2ee127a5", "indicator--ab68bfde-e4d3-4880-9f40-6c86ed542ace", "indicator--f961917b-4fe3-48e4-9fb9-7d4ec2b143c2", "indicator--eea0aa02-4d8c-4743-be33-ceea2a9a26f6", "indicator--7e6dd0d1-50e9-42e2-b3bd-abd8fe762d3e", "indicator--025f7c27-5afd-4ad2-91ba-1121f873d8f3", "indicator--1b6f003a-5966-4430-8036-ccecaf335cfd", "indicator--16583eb9-6f4b-4df8-a96d-d2ad84c1c6f6", "indicator--837d9d9c-532c-46e8-9738-9afc2f4183fe", "indicator--cbf1ad26-1055-4a52-98db-a0c911e72d20", "indicator--44e975f4-c9f7-4665-904a-3c0d84e404c4", "indicator--ff6235a1-cbe6-4105-94b4-065b16d00a93", "indicator--f4b1c48d-e700-428e-a8dd-a1c950fab752", "indicator--f77d1caa-703e-4fbd-bb59-d8ecabb58d07", "indicator--bf86ac68-2872-442c-b186-cb458d343375", "indicator--29b1a8df-905f-4ee6-88b0-b59d1b6bbedf", "indicator--900a5ff1-b9d9-4273-9d40-2fa18b04887d", "indicator--faa6b5c8-29cb-47d8-91f9-a9cf86309927", "indicator--00e32bb0-6454-4d32-8769-e54f1bb80e63", "indicator--7b14d7fc-6ec6-4d4e-a7e8-7d0250c80d56", "indicator--afe8679a-c90c-404b-83d3-50adb0c84d29", "indicator--343756e7-09c5-4ae9-af97-68d3df1ca30e", "indicator--08ac060a-8917-4578-8911-12fb72e4bae9", "indicator--2b723f40-155b-4a08-9ac1-8ad1cd9068fc", "indicator--7e72d8cd-ce52-45f5-a8c6-060b638ea00a", "indicator--f65ed0c9-ff8e-425b-a06e-50e20419144b", "indicator--4d1a4d8a-959f-4414-9430-d4c9a3ebcdcc", "indicator--3b0f32b7-5e77-44f2-be27-497a8e46e6f0", "indicator--ced85fb4-8df7-4729-948a-6f43e24b0521", "indicator--ea2064b0-de51-4beb-8b92-ebe9fb81200b", "indicator--099034a0-6759-4536-b6c7-a9f3dcfd23a9", "indicator--97642685-b4c8-4beb-bb41-9db3b18690dc", "indicator--76ace894-5044-417e-b8ed-783e8e7b759f", "indicator--f9b893ad-2d43-433b-b1ce-4f78f41d7313", "indicator--9d890cca-b30f-4d30-8fe4-e458c8230aaa", "indicator--adf3b739-9590-499c-baa8-49037a073d0d", "indicator--e41fc967-427b-420c-8fc7-540c652eed2d", "indicator--b44cc428-ab47-4a55-9e20-03abf980d010", "indicator--27f07405-5686-4ebc-aa69-88eb2d087a7e", "indicator--9b3e4a7c-dcc1-4cf4-8219-37bb76d3a2bd", "indicator--48e47e75-fc8e-4df4-b4d5-f379b3275bd2", "indicator--706991f9-d36b-404b-b191-ec2583aff243", "indicator--a9c9a05d-ee33-466c-ad45-f167fde14d1f", "indicator--8b9dc0fd-7410-4285-9236-2ed2708cd59a", "indicator--55ee015d-35d5-46c6-ae6e-0c0723c773b4", "indicator--0c7dc809-f4e0-43a0-97aa-d266a4763417", "indicator--c7373ff9-caf0-49c3-9d61-7f919afd194a", "indicator--b1e1389e-b296-4502-914a-9c8a13075dca", "indicator--a22ab4d3-b5bd-4b25-a732-3e4c742e2fdc", "indicator--1aa9451d-400a-4008-bc02-ddda50d9ca35", "indicator--f81debe4-c5d2-4e80-a9b0-cab06d6888e6", "indicator--27458950-c4f3-427a-90dc-94b01bb00385", "indicator--5e9d06d5-079e-48cd-ab67-3df0431a7a53", "indicator--45a56975-6462-45dd-b4f8-606d816e197a", "indicator--eb62a1e1-e54d-472d-ad71-eae2736f9dc4", "indicator--5617c0d6-377b-45b2-8105-1e328fcc7ab4", "indicator--82568d73-f364-4a45-801a-9778dd77ab32", "indicator--9908474c-5d66-417c-8ea5-d786fc8e0192", "indicator--fb550297-44ea-431e-900e-e509ce84220b", "indicator--0266092a-5cbb-4f6c-bb9d-40527654f4c5", "indicator--2e4c9d4f-fa6a-4575-9343-dcaac76522b6", "indicator--18c0d81e-adfe-4fec-9ad7-5bf40aba840a", "indicator--e894c3e9-e0b7-434b-869a-b4611a8fa879", "indicator--bd341736-e282-4491-a242-88ef08ed221c", "indicator--5c146a02-1b77-4a74-b94c-f905546bbe0d", "indicator--3d7e629f-da32-4de8-9684-f23305f14c87", "indicator--be2739f9-2e7a-4863-9c9c-68b993729966", "indicator--1a070079-3897-43b6-8a7b-5246e631573a", "indicator--60a6b7c0-ddd8-453a-9257-94bd958c1f84", "indicator--26b60572-f06e-4c6c-8ee7-640da406198d", "indicator--a4e4730e-f170-4aa5-b825-0576bc4258db", "indicator--efca97cb-2d5e-4c57-b9bb-9922ffa2a53b", "indicator--a8240fa3-8c55-4b43-a2c6-eab4f6351454", "indicator--b10606c0-9dfd-4295-8ec0-2ff1efebb245", "indicator--d0f690e3-0db5-41cd-bc70-fb7adc5bae59", "indicator--be1a949b-2208-437c-8f58-3a3de258cc99", "indicator--b970b969-2cf7-41ef-8fec-ff020e970c1c", "indicator--2e09eb69-a22f-40dd-a850-abcfcc8660d2", "indicator--71bd96ac-1597-462f-a6e9-175d707e3f24", "indicator--2966710a-b132-4bcb-b76c-97b8b322d568", "indicator--c5100202-ec78-4a64-a1a2-bc9da1a7ae81", "indicator--95ed1913-4127-4258-b800-4cf96666fe38", "indicator--10baa3e0-6c85-4622-8969-41fe664daf18", "indicator--036ca276-3786-491f-8f51-2003b77194ed", "indicator--b3bb8d95-81d9-4f2a-aee2-40850144bc30", "indicator--7a261af3-2592-46b6-9fa9-925fc9a79f4e", "indicator--84ae72c0-8c53-4ef6-ab00-9f801ec8f225", "indicator--3da921ee-1512-4430-89cb-61fa61703f6f", "indicator--18897947-0c91-4852-936f-82baf28d56ee", "indicator--3af978d5-c1ce-4c90-97c9-f3d8bc96254a", "indicator--e0756fd9-ff1d-43ef-8bed-731bc949c6e8", "indicator--f27689a0-63d4-4429-ad4d-469c09c8dcc0", "indicator--e2b42e22-b359-4bd6-a60c-7681692515ec", "indicator--c27c4c68-da1a-427e-9e21-8a0573f3e54d", "indicator--302a32a4-121e-4aad-9ce3-7220722f73dd", "indicator--df90c371-21ab-4541-b2f3-d157938886cf", "indicator--1bb3bf67-7327-464f-9f78-126245acd1fb", "indicator--9dc596d2-37b2-4b60-9ca7-1a635ebc1e42", "indicator--1f61ae33-c03a-462c-878d-2daf42076383", "indicator--dd1b142a-0924-4122-9f4f-ed589d612887", "indicator--1c8ea060-f761-491f-a3b7-01046d7c5be8", "indicator--50a96bd8-82ce-48ae-ab03-23e45a6e5568", "indicator--a8ebf2e4-58d4-44f4-afb4-73518181a9fd", "indicator--c626b882-78b2-4aa4-8b74-5549509367dc", "indicator--3c7db174-b89e-48ba-8971-bcf755db8eb0", "indicator--b16f2c6d-0f9f-4e19-8472-7e59dee9a8b2", "indicator--ffc24da9-2d87-464d-b682-6a7867f78484", "indicator--ca0d0606-3f68-45a5-a896-43f88ea760cc", "indicator--a81aca2e-dc2d-468e-aecd-7d5ad8622ece", "indicator--03c2e88f-5977-4f38-9316-0a2be9907236", "indicator--d31af189-884e-4451-8bf6-9fd21f78e149", "indicator--3aae1f09-86df-4580-8e65-da636c9d90d4", "indicator--5f815117-8aa2-45cb-89e2-eaed91b662df", "indicator--cce63e5d-1f7f-498e-996d-05c8e3958ea4", "indicator--cfd82b0e-2e8f-41c4-a43e-5ab6132f43a7", "indicator--b5f60d85-a1b6-460b-b84e-5bd810273a2f", "indicator--8a2418ba-0121-42aa-8c5c-0a2bd00ed08d", "indicator--b4f69673-cb00-4593-b473-b14d317ca8ce", "indicator--cfbf9197-b3fa-4cdd-aaab-e4ec2fb9ca04", "indicator--0ea9dd47-838b-4149-a48f-577dbb2e0682", "indicator--139feb6f-667a-4bd0-a007-bfd643dd50dc", "indicator--d0a4292f-48fd-4c69-a288-12bbd40af5c8", "indicator--3754b7f5-af51-43a6-9a2c-8a03806c3268", "indicator--0f84ba03-9d30-45df-9920-b6a670343bcc", "indicator--cac29cda-02cb-40f6-abcf-189219b5ebd1", "indicator--eb5c7393-aac5-4c95-be87-ed13b485a26f", "indicator--4cb0eab9-b0db-4f74-9e14-4eb34eb3b7aa", "indicator--b800ccc1-a1fd-408d-9d23-28463349b1c1", "indicator--efb9ee64-0062-4174-bcb8-93a3ed86c3df", "indicator--b18a0600-d021-4e20-8af0-ef7aff03437f", "indicator--d24dfd1e-b748-4a1f-b272-3b7b6de59864", "indicator--cbb35656-a152-4854-81c5-ac40c746bd36", "indicator--8de8c6ee-23d3-432f-8338-7a40f7c30d1a", "indicator--34b0979b-65da-4d45-a32a-14a80244718b", "indicator--ce99a660-015d-4391-bb83-827bdeeeb68c", "indicator--9b532510-7a9e-4701-bccd-2124f6e01e01", "indicator--fc4ead90-690e-433b-9ff4-37ac76a0b881", "indicator--9644d21a-a997-41ec-8b79-d7b7b59b75d8", "indicator--7749d232-3c56-4431-a495-1d93c8f061b6", "indicator--9b9049d1-752c-4430-a1f1-b10613c18fbf", "indicator--e9d48943-97a1-4708-b206-217796312ce1", "indicator--97455a90-f730-4a83-8278-e6c16a7b1156", "indicator--3004f62b-f9ba-4115-93db-d7232c55c52e", "indicator--5b03504e-aa5e-45b0-8b13-aae2b44a64b2", "indicator--219025ef-4606-49cd-b18d-b7232ce8ea23", "indicator--f88a7e02-870b-4a54-8a4c-a15de63daf6d", "indicator--82f85b15-3625-42b7-8a0e-d49b7ee33c15", "indicator--9409ebda-fd4a-44d5-8f8c-5dc4eae929cb", "indicator--1dc843a0-59ba-4c51-a8d3-815a4a012e14", "indicator--9117b7ea-5b55-4843-a547-791eaa9e7cab", "indicator--8344a2c7-ea8e-46bc-8ce5-d464892398f9", "indicator--4bfb3a6d-d75e-47d1-a93f-c8a1bfbe4974", "indicator--6bfaf2de-99be-4cdf-b517-e17a424e1268", "indicator--b77d1795-22a9-46b8-8eac-d8f35a2b8fed", "indicator--33e1ce9c-af8f-4250-9d9f-143e92ff012d", "indicator--24ec3b74-a7c3-4f1d-96ae-6ef03476538f", "indicator--aec514f9-5ab8-4b1b-8b21-eff67dccc0f4", "indicator--c08b85f1-b79c-4563-aaba-7fce20819421", "indicator--f2294f6a-e3e4-42ce-8b92-f5ba42aaa447", "indicator--c10c221a-a0b1-4d06-a5ff-b380d996857b", "indicator--bd1aa4f7-b123-4d80-b72b-433195832d7e", "indicator--2a729572-9c18-4eda-88b4-b94ca55ad56a", "indicator--3a556daa-45a8-4e7f-9238-cf6d58d3990a", "indicator--9455528c-64ee-41e5-9cc5-f23de289c915", "indicator--1ad30cb7-53af-4e59-a5fd-8d59ea77eff3", "indicator--379fea22-b891-4a50-8eaa-0bbebf94b446", "indicator--766d8295-044d-42c9-bd81-b0cd78a98231", "indicator--4d9a06e7-b241-4893-b338-7b25556bac66", "indicator--c24191e1-ead5-460e-846d-126f1bb29c90", "indicator--cb87ba3d-f7bf-4fd6-8279-d200faaa4b81", "indicator--24227a9e-af3e-4b19-af97-1573d38547d9", "indicator--4679954b-d08c-4b0c-9953-54d838e5ac74", "indicator--7abb2ad6-8636-413e-aabe-a6c1c16083ce", "indicator--4a1bf4c8-1e93-4ca1-b523-2188505195d3", "indicator--a670b9b6-ca7d-42cb-89c3-309242b9a19d", "indicator--1d7e0b69-ddb6-4ac4-b3bd-bfc159ca04df", "indicator--6caafb5f-6ea9-4337-a7eb-b602411fc333", "indicator--4ae8f874-bda2-4f56-a55e-94b113a10053", "indicator--ee229572-2dab-4ed2-9581-e30acf66d5a5", "indicator--904f5026-2a3c-468c-b474-ed4ed42499de", "indicator--43254f88-3880-474e-99ce-9673cbc6e1ec", "indicator--b41c4a12-eb07-47e3-9ef4-a23dac31f55e", "indicator--15a7b33e-066b-42bf-b0cc-5f42ab847f00", "indicator--9069c984-d7c6-45a5-9ed6-ab127a9afad9", "indicator--aca07f9a-8343-437b-b1bd-11885f18c3a9", "indicator--1f235f9e-3aea-4d13-ad23-636eb021b22a", "indicator--3a353051-96a7-47f6-a0c3-a7c0118ebfac", "indicator--d7987c14-1df9-473a-8ead-2c43f92ad477", "indicator--99f5bcc6-91fd-47c1-a23f-939a7458889d", "indicator--4796e808-87e1-4e09-a847-1f4c02fa80ec", "indicator--996111b6-1e69-49ba-a4f8-00e57dcfee87", "indicator--03514e97-3c36-43cd-a798-f506c40a2dae", "indicator--15e50847-c39f-44df-bcf4-ec1c3c297ffb", "indicator--f6e478e1-7b1b-463f-a713-f41a182cfb11", "indicator--ea0f366a-34af-4f65-a6b2-ace108bbe533", "indicator--d8f5f364-bcc8-48e6-bc1b-05a1a96b7626", "indicator--d83ddc66-b96f-4b43-8d61-13008cec9cce", "indicator--1ccb40d1-274e-4227-980b-93b034cfcf57", "indicator--fc4563c4-d266-4e56-b7d1-2cdbb99a70bf", "indicator--173b9989-0898-46d3-8882-bd92af8162b8", "indicator--5d78d30b-ffcc-4a41-8385-a86ae8ee6ea1", "indicator--149422a5-dbf4-4d1b-b614-2ca3dd115ac5", "indicator--9dcd50eb-f710-41b2-bacc-d65c2a202a1b", "indicator--83df1bcd-8e13-415c-a096-02f4dbe2d34a", "indicator--be5b8729-c70b-4f87-9477-119d81b61cc7", "indicator--c5157085-3dbd-4cca-9990-c63b39d5d9bf", "indicator--482c0965-6ec7-4266-a453-146cd7b4f515", "indicator--fd9eaba1-e5ec-489f-8906-ac28f09d2e07", "indicator--1bb3cc3e-7858-4e8d-a60d-d922506f0b0e", "indicator--ce252d41-3d7a-4de6-8810-71596b4a88a4", "indicator--1e48e196-0643-4db6-9681-6448e9b0293d", "indicator--c07fd50e-26c3-4c2c-a6cb-5f16baba9106", "indicator--6d4ee66b-5f53-4db7-a0e3-79c01e6a124f", "indicator--728a3129-7b68-4300-8f44-0a372fb98e5d", "indicator--15ae4e9e-c1ae-4988-a3ff-810212012710", "indicator--8f84566c-1b89-4da8-8569-5cd1fdb227fb", "indicator--519405f0-249f-4116-aa63-7a752ce1f631", "indicator--cf42319f-f27b-4223-a6df-7214ef1e75ca", "indicator--3b40966e-6764-4eae-82df-2f3b7a463785", "indicator--b8d0bb4b-327d-4485-ba5f-8db21f139507", "indicator--ebd3f863-a217-4459-a402-49a90e6e7443", "indicator--17ebb910-4297-4805-966c-053f74d5cf6d", "indicator--47a4f746-bdbb-416f-9ee0-8ff55aa20f66", "indicator--c809d86c-752e-4eda-853b-8d14859263c0", "indicator--6ca45761-2204-4948-9ffa-7eccc0b6764f", "indicator--3caa4f0a-1461-4267-aaca-9395c45db00c", "indicator--25b9d6ce-1714-41fc-b169-26635a60271a", "indicator--a8bfe6a5-8ec1-4936-8844-04ae9b1cf0cd", "indicator--1851adbc-ce19-4d31-a5b3-ea657c3206f6", "indicator--6a61a715-9600-4bb4-9c44-6b15b4dcdae9", "indicator--6d84c620-ed05-47f4-968a-49af3b430595", "indicator--af0a712f-86f7-42bd-85a1-4204faf35310", "indicator--df8e9fd0-0689-4efa-b849-e660db440f8b", "indicator--da324cd6-f207-43e6-8dfb-d441b69e61f8", "indicator--3474d625-8aec-4b29-be0d-33c02c723fb7", "indicator--04df8ed4-fa87-4222-a54e-78f6e2541411", "indicator--65daada1-ec2b-4087-8f69-16067a28c44b", "indicator--a27cad50-f795-4aff-b443-8f4229188035", "indicator--fcce6523-e351-4560-98ea-d15181e2d063", "indicator--6547c564-a69d-4793-b6f6-3b101cd667a2", "indicator--da7c5c04-84db-4560-b0a5-866470dbedb1", "indicator--4170e5ca-5c68-4e60-a672-7315dc3432d1", "indicator--cc17449b-2570-4ee2-ab15-9a81b03d4152", "indicator--2438d0f7-3abf-4c21-acf9-360704419d4f", "indicator--b68bf7b3-6506-4678-b4ac-385ea055244a", "indicator--68b9c2f6-a8c4-45de-8d46-3ff548408088", "indicator--063edfa7-7c12-4b73-b835-414ebf2585db", "indicator--9cf23575-b4d0-43ad-bf6a-0426cad6b67e", "indicator--a1dec80c-93b5-4c79-b567-d5e4f162ece8", "indicator--a6f6137f-69ef-442b-8690-de6829949a87", "indicator--6714221e-c113-497f-920e-80c5e1e34d1f", "indicator--1ae51e05-c085-4502-935d-50d6141e8810", "indicator--dd3bfe5a-c83d-4a62-badc-b9d687377f97", "indicator--0c52dfa6-98d1-4f9f-8ac0-f114b9b38884", "indicator--029b3c43-8c5f-4ee2-929e-b6462a21b202", "indicator--a53bc2f0-48aa-42df-9005-20a582afdd74", "indicator--3044c2c8-c90f-4575-b5c9-69475110d7a8", "indicator--3c0904e8-7f2f-40b0-9d98-3d0666e42454", "indicator--22d0a437-2287-4d0e-9bf6-afb03586ae36", "indicator--4d35775e-2964-4234-9aa5-4017a024c141", "indicator--4e057a01-098b-4868-8a92-7f91cdf9f431", "indicator--9b71d94a-f474-4859-8def-596f4b7506fe", "indicator--4f009ca0-c94e-4003-b29f-ca772f7806b0", "indicator--40f4298c-8a52-4e98-b088-c9969f9ab088", "indicator--adc40e55-5b98-4c34-916d-a6c2791695cf", "indicator--fbb597b5-8a3d-43da-be34-d7e9d93fdc6f", "indicator--31f49317-237a-468b-b0db-6ef9f3bc52d5", "indicator--3d749989-e713-49e8-97dc-5d8b88a91985", "indicator--4fda6d3a-933f-4774-863d-21903c5ae462", "indicator--1b2fae1b-16db-4fe9-aaa0-26afe21a998f", "indicator--75609812-8c8c-40eb-bf2e-2fa7af81be51", "indicator--93403cd8-c2ea-45cf-85b0-fa475ad880f1", "indicator--67bb1939-ff9e-4919-89d8-a49eb4db5de0", "indicator--567864d0-9cab-4b44-98a2-13909c6b39d2", "indicator--5c0d195f-231e-46b9-8ce3-9a2221538bfd", "indicator--6db131e9-af88-4934-bfe3-c96da23fe7fa", "indicator--363a7e83-07fe-4a66-9cc6-e1e7032dcf5f", "indicator--b21c7f87-5121-4eb7-8141-b43443f813c8", "indicator--07fae094-ec5f-43af-bc0e-49d7542eb79b", "indicator--502d1767-3cea-4676-8a60-2abe3961d701", "indicator--1686713d-3133-4939-a5c1-e4af02582bf6", "indicator--67250fca-36ce-4ce9-bc8e-56be836607a6", "indicator--7881a665-1ef9-4f37-8067-a393f440475c", "indicator--1ab88196-eeb1-4fa3-8194-afd63b9129cf", "indicator--2c4073ce-919a-4171-91ec-71dc7345ef2a", "indicator--ac3db3a2-a2ba-4123-9ab7-928860bcb70f", "indicator--9b1e2364-0e2f-4fb8-ab89-a275920fc29b", "indicator--0a829f06-3f0c-483c-a216-f8dbb596db43", "indicator--497dc103-11f1-4e27-9fd4-4c640843f359", "indicator--6d65f5a3-e5d7-42d4-a172-a43fb51def65", "indicator--660d52d8-72b6-4e1a-a13f-25dc384d6d04", "indicator--78553fcd-257c-4ef6-a77d-961b8b40c78c", "indicator--1327cb53-b3ed-49f0-b3c0-447c1d08b0d5", "indicator--adfdda88-c209-4e15-b6be-d20d2342fed3", "indicator--feb2b48b-b0c9-4c7d-8e74-81516bf918c2", "indicator--c4ad1204-6da8-4143-b69d-dae06f55a819", "indicator--bc0549ed-f587-4960-a5a3-1c84caf51c14", "indicator--6f934f83-3daa-476d-af4b-0566f3b4961c", "indicator--18884ee8-875e-450f-97cc-c5481058cb22", "indicator--75397973-b63b-48ec-bf52-c4e682fb79de", "indicator--1919ef8a-5ba1-4602-8cc2-5c997cbab9c8", "indicator--61a1e0d2-4dc1-4a87-a7cf-88a6cb507b61", "indicator--c7be670c-b5c9-40be-bab2-1e99db62cb8f", "indicator--b72f22f7-04fc-4ddc-bfc7-98f9a18f6eb8", "indicator--7c01b132-320a-4875-bafe-08b0fe9ad01c", "indicator--39ee3a97-9185-49c3-8575-af01cb11dfcc", "indicator--e88e8111-a525-4df0-9b01-d888a42371a7", "indicator--ee45e9a7-e31b-4532-8822-03093f93cacb", "indicator--9a2e3a8b-e75a-40a0-aa05-cbc85f03748f", "indicator--cf335f88-e796-43c7-a46b-fc17a5c83916", "indicator--adc05da7-6efb-4450-9b1f-876c196501e1", "indicator--93fd05fd-8d80-448d-90b2-4dceced1dc69", "indicator--75ba70d9-7e1e-4ab8-8e61-0d9a9e9a6518", "indicator--fa4ce747-2489-4e42-a877-3a032ff8df91", "indicator--8c66dc63-c23b-4af8-a7d5-82b4ec2fa410", "indicator--78a5bfec-a93c-41a0-a2e2-19b7c16ce930", "indicator--afd08db6-082f-4618-ab31-f8b44ee97fbc", "indicator--f57f5181-8feb-48b0-b6f9-a94e288e22c1", "indicator--3b0abd17-5f61-42d9-adac-da2f1d16b141", "indicator--a2c3b661-d5e5-4f95-891c-7895686a17d7", "indicator--917dbdc1-1f8e-4742-bea1-bc2709750f3e", "indicator--d09cf88a-b46e-460f-8d2a-8461199a74f6", "indicator--c1ec73c7-c3fa-4c77-8aaa-e090de4affcc", "indicator--30598c9b-aca0-40aa-a63a-20e9ab766799", "indicator--cb0250f2-d739-4ff3-8939-78828c74bfd2", "indicator--9c0f0b84-cef3-4c5a-9a82-15ed886da2af", "indicator--734bc955-f804-45a8-9978-9f47092c28d9", "indicator--d424d941-44a4-4f65-8049-24b91a063e15", "indicator--6bd6b8c5-a7be-4d5c-946d-784ac3c638ae", "indicator--0455b90c-a4e5-42ed-851d-928c6e1c351b", "indicator--9bc6b7d5-c6d9-494b-8c17-462df29aec46", "indicator--c930f687-c630-4f40-8187-df2a4ef15823", "indicator--94979a16-5a5b-4469-a1c5-0d80cbd07173", "indicator--48547e2a-c4a3-4142-9127-4f75016dd940", "indicator--fb63d8a0-e7e4-4b87-9653-f33b276ed4a0", "indicator--e9b57422-8384-449d-a8fd-35de6910ceea", "indicator--ef8ee5c1-fcb1-4fa6-b294-1f0d3fb559b5", "indicator--880c789d-b3d1-4cb6-8015-cb13b46317a0", "indicator--d2639b93-2f23-459b-9eee-8ee987f56485", "indicator--6a8dd441-9f4c-4d58-9751-3cdd6b2c24eb", "indicator--61c87c4f-27a0-4435-a0b6-c0dbd789bb70", "indicator--147aade9-231d-47c8-bfa9-f36c94b7e827", "indicator--2179c8b9-777f-43ff-ac9b-436c5c97c8dc", "indicator--fb3458f4-d36a-4cd8-a8e6-3b1b0fd3ccc4", "indicator--32390244-d613-4a10-8355-d4fa3a34ae2c", "indicator--3e863853-8f41-4191-9b9c-2bd7ddaa259e", "indicator--6d9d9961-c00c-43c9-b38f-1ca9d28ecd2f", "indicator--686ee155-4e9e-41e8-9313-16ae88f8e97e", "indicator--349a4064-3bad-4810-948d-267bb2a56d34", "indicator--b4a37838-96f7-41e2-9c4c-d27ccaacba13", "indicator--4921e4ed-201a-4f76-b24c-e0d20169dcf2", "indicator--b0a749dc-9aca-4eb3-8047-ec9f0d2c1adc", "indicator--4cfaf40a-8698-4772-956b-bf6f007c67a8", "indicator--5336c19f-5ab0-42fe-8308-cd2458b5f654", "indicator--178c7b87-0ea5-4d53-ba5e-897180b77807", "indicator--e0835d86-5850-4029-8cbf-7cde1e0e11e0", "indicator--fd75643b-d445-4664-ad54-cacae7436c50", "indicator--eca23abd-b772-4e39-94bb-3d0b71dc3eed", "indicator--15b1e714-9560-4b52-a6e1-70551aa2d962", "indicator--1bde730c-fbee-4f4e-a3cf-60f8934d1de2", "indicator--57aa4e5c-9da0-401a-93dc-be2359c611a7", "indicator--2b7a8020-96af-4c8c-ae1b-ab37e3322bc6", "indicator--9a6b51f9-f807-49b9-a20a-5aaf835bb660", "indicator--911397a0-9918-4d29-845c-8f3334bb0253", "indicator--fe65266a-2cc7-4d13-a1c0-176b29e31e20", "indicator--49a52ec1-d1f8-4714-92e4-e85b0e789fa5", "indicator--833c02d1-3bdd-48bc-b78a-42e30bb0e4d3", "indicator--014c0ff8-1ae1-4277-9976-855f038a51af", "indicator--37a2d1e7-d96d-44f6-b210-65175f87f61f", "indicator--ee89c68a-c419-4124-be05-e046fd22f973", "indicator--c226cb59-b248-4454-ad08-da2f7ce628ec", "indicator--adb8145a-311c-4106-8de9-78a14913d243", "indicator--07647f0a-c1b2-4614-9fd4-d699756a352f", "indicator--afae7484-3404-40e4-a5e5-021ac76ddc6a", "indicator--2497cc50-464c-48ab-9c32-187fbbf43b35", "indicator--97c96e5d-9fc7-4848-aaed-7246b5f3bc37", "indicator--324d6448-9091-4939-b67a-dc7b38431d9b", "indicator--a68365db-7a25-4149-b3cb-4baa058a3a0b", "indicator--e0a43034-9535-42bf-a0c9-a2db7309b872", "indicator--3ee744ef-f807-4c98-b59b-37eac9ef8588", "indicator--6b47fe68-356e-4f68-ae19-36ab92498c42", "indicator--a9c07e2e-99b0-41f0-bc5b-30f7a4007da4", "indicator--fe9adb87-d89b-4e28-921b-d1ec7ac2e9fd", "indicator--99020d64-58b3-44fe-9901-8bdff763cd8f", "indicator--e7b8bd93-8567-4899-a175-3aa8d4459aa7", "indicator--db510712-7e07-44c2-88bb-6cb38d8d3db5", "indicator--a89b5e8a-2fd4-494d-80c8-20e3cc4b7d45", "indicator--4f8d09f0-8cc3-4246-b58d-71f8a81da4ab", "indicator--89a2b4c8-6445-43ad-935e-23a9d9e4e653", "indicator--cafda810-8c45-46c7-b652-063851115a59", "indicator--4a751d58-14d1-4757-a7a9-4f894dfff578", "indicator--15624873-0b99-4840-8b87-e8a243cccfad", "indicator--e91a8cc1-7da5-428b-bb6e-a11789dc26a1", "indicator--0d252602-af22-4a15-b4e6-adabf02f5da2", "indicator--1dc25aa0-4079-444b-9704-917c7c0182f3", "indicator--448064d2-cd29-4b2a-ba8a-82cc08ae800f", "indicator--7e8d2d80-f196-4877-a2a5-9741ecbd2c63", "indicator--0ce2dfee-7dc3-4988-85ed-b0fca11ab49b", "indicator--29484576-2ac6-40ba-b687-dee3e6ba8eae", "indicator--57d16141-ca13-458b-9380-5da657fac40f", "indicator--ae1a6b8c-eb57-47a1-9f26-c8cec4166352", "indicator--ebf183a6-c34f-4f96-b0b6-281daedaaaf2", "indicator--99f827df-2e03-4e77-ade1-3d4272f0e243", "indicator--ce127899-4976-4554-b125-ad8938278f37", "indicator--be0b3304-02b4-41b4-aece-11ab6e32a0e4", "indicator--e377e1ad-71bb-4f07-9706-59236f3111f0", "indicator--f64719f9-4417-4c28-b789-addf05973bef", "indicator--588ecbfc-ee6a-4358-bd6f-95c084b43a94", "indicator--20d1942b-ecf9-41e9-bb50-4d5174294ded", "indicator--483792b2-8280-44a2-970c-3a051510b978", "indicator--ef75364d-7936-478b-a5e9-a928678bd1fa", "indicator--a447ca1b-4bdc-4c80-9942-569e2197bbda", "indicator--41f4a347-6d6f-4f84-86e2-218f7e5f6c67", "indicator--03ae4470-6997-451d-9e57-5aa790b3ef0f", "indicator--d2f22667-5838-4654-a8d5-17b757475b38", "indicator--9146ad68-cbdc-4c3f-81b7-e3f706471995", "indicator--6ce758b3-a59b-427f-a865-9f0f8f6f2c8a", "indicator--1c3e29e0-4050-43ec-99ba-145121880218", "indicator--3968f337-acb8-4e78-8839-81168c0d0a0f", "indicator--e95ce08c-b907-4b36-96a1-3d1e3ba1f812", "indicator--35dd24a0-4729-48fd-a695-254a66ed4b06", "indicator--fcb62815-aa43-42a9-953e-6749a8b85ed9", "indicator--af2819de-6568-4505-8fe3-07dea17fd02a", "indicator--3d2fa629-b1e6-4d86-a61a-a404ca305773", "indicator--2d15584f-8aad-4214-bd97-5524988bf950", "indicator--0c15543c-59e9-4aa8-83ad-515fdc40bf5d", "indicator--097011b2-05ba-4d7e-bfc9-1d0e5ecab203", "indicator--5c296d0b-ac88-4c61-bc16-6697cd01dadc", "indicator--964ef53f-ada5-47d4-9c96-96d949a426f5", "indicator--336cac12-3961-4b07-9f56-e32dfa192512", "indicator--192f2720-4525-432b-826a-422befc7b2e7", "indicator--892eeb05-3574-4abb-909b-b6e76826e311", "indicator--e1fc96c5-dd33-4fda-bc06-69c26604793e", "indicator--10f8051c-336c-4805-aee0-8f639202a2be", "indicator--319d77ef-7ddd-4286-9988-f3d6576312df", "indicator--c160d0ff-3d8c-44c4-92f3-bc663329931e", "indicator--f82b7f96-621f-47ad-a4d8-773468eaa13d", "indicator--13c7ff24-7373-41be-9410-f01ec708f04c", "indicator--7cfcdd21-e1a9-41b0-8037-2068e9c2d73e", "indicator--f3b5f988-5eb4-4aa5-a8fe-78d9d2df0607", "indicator--a87698af-4f9d-49cc-b94b-e7a544fb1870", "indicator--b2f58b4c-3102-47c2-8479-4621b9e4e424", "indicator--9ca4175e-b360-4800-bfcc-7836a703ed03", "indicator--c3be8cd6-36f8-4035-8097-0c2783a6c365", "indicator--9d627d9b-8874-416f-918b-a1419681f1e0", "indicator--09dae51a-c512-4eb3-bdb9-f89de278f2b1", "indicator--c6fe7ace-2333-413a-9278-2f9f663d73b1", "indicator--1d97c29a-13ee-4905-87c1-e554a32cbc52", "indicator--4dcd01cc-5294-4a1a-9035-bdd8b99b9678", "indicator--68c4a260-f898-4c3d-98cf-4e53e31e954e", "indicator--69dd498f-6245-48c0-a6c9-dcc17c5252a5", "indicator--2ede6a64-0f67-4b26-89d5-2e7718973910", "indicator--d56987e3-7009-4347-9371-12cca73a96fa", "indicator--7d5dd196-1428-4e9e-a82a-77b91b7d0665", "indicator--7aaebdd9-20a9-437e-8488-aa39e6a94823", "indicator--7151b7ab-dfa3-4b60-86dc-3cec1a605461", "indicator--d1f8851f-55df-4225-822e-045422b2edbf", "indicator--e8b8024f-5031-4713-adf8-4dd5d83073c5", "indicator--e7953744-6e7c-45d3-9a05-9eec80d989fa", "indicator--1a7db995-5be2-4502-88ed-1cafe5042b1e", "indicator--44ab1f52-1658-4464-84a0-b5982847cb72", "indicator--c9332f11-3396-4f89-b01c-f60f8a7dc57d", "indicator--3aa3c239-795a-47c9-bc63-7413deaa6aa9", "indicator--1b544442-3c15-4fcf-8a7a-6e40c3760bfb", "indicator--39e78e48-6480-4c8a-ac07-0777358a39d7", "indicator--5b1d261f-517b-473e-a42c-4ccb336ce021", "indicator--e6018078-8a68-4982-861b-5001be02c6c7", "indicator--4f4b230f-e554-4318-b766-8181a79a4fc3", "indicator--b6b3fbbc-89cd-4534-840a-ee19d8dead8f", "indicator--adbf2677-7545-43a8-9f69-9c7c920853c3", "indicator--b64fc1ce-9b7d-4e3c-b33a-cbd40e18db46", "indicator--30beac12-d656-4ae4-9aa4-bef1aac6562b", "indicator--ce70ffa9-cda5-4f8b-b667-50194d39a284", "indicator--aa5a18d2-95e0-4fc5-9435-6c63f81045a7", "indicator--a6c029dd-fa0c-49bd-8641-4a163000b27c", "indicator--e4d00a26-62b9-47e1-91e5-e1f1fd878025", "indicator--b78934d0-9a4c-49de-ba62-70766be04636", "indicator--3869634e-1c08-40b5-9252-48db5b8cb9d4", "indicator--f5d25bc3-6bdb-48dd-ab66-c8c135e2e053", "indicator--a7d57b0f-c1fd-47ea-870f-85a1bca713b2", "indicator--e09330e6-cf1a-4cf5-9ddb-1a269b11c2fd", "indicator--4575ba85-dad9-4244-8d12-98d21b1bbf8a", "indicator--9833691e-822c-4ff4-a961-6664d84f9679", "indicator--faf4f3dd-71ee-4330-966d-0568edb38534", "indicator--797f1e1a-7c56-42f8-ad48-d0acb1ff13ab", "indicator--69b57e22-3b17-4c34-beb3-af5e7cc795b2", "indicator--60525bfd-ce0b-462f-a821-a2bfd874b39d", "indicator--57dac9b2-94f2-491a-909e-2137d2aba2dc", "indicator--99f1af20-6c1f-4ddc-a347-01c710688d64", "indicator--1a2dec10-ed90-483c-b3e6-6af13ab0d829", "indicator--8b1f2bb8-5ee9-4d26-8989-d8ce99cf6c3d", "indicator--0df20a69-dbf2-45ba-b7ff-3c1554de6f0e", "indicator--eea7e322-511d-4856-98c1-871931c0e580", "indicator--d497a0c2-8afd-40e0-a044-6cdd95b62a76", "indicator--a3dc6049-7d9d-49a6-ad50-68e747025bef", "indicator--9ac40fc4-12f8-42d9-8e6e-ccb6541bdc24", "indicator--5e4e7e95-1e36-4f03-a2e5-febd2cf3a122", "indicator--12e9a25b-62d2-4c47-9405-4a15f1ab77ae", "indicator--bfcf592d-3947-4fb9-9ee7-e05c2d29180d", "indicator--108f358d-0064-4c12-b49a-1945cc144138", "indicator--f5eb8958-a264-46e1-8cb6-90db96dd81d9", "indicator--5b345068-feda-4f00-be71-61b8a942130d", "indicator--cee4b3c4-c7a6-4575-af2f-27c71f8dbdb1", "indicator--61f1e31b-524b-4d01-a488-bb2d96ca924b", "indicator--1c5e44c1-2ddd-4445-8a27-a3a557d4f319", "indicator--4fe1ce5a-416a-4217-b5ff-d88c743d23c9", "indicator--c5324215-c2e5-4262-93fb-cf61bca70b64", "indicator--fcbe8c2f-c632-4ba6-8c36-fbf8ace807f2", "indicator--ce2c578f-d467-4415-85c5-b35a73f1f654", "indicator--43e0aabc-dec4-4045-b92c-e248abd9479d", "indicator--d34658d6-5054-4509-8595-ab9c06893f02", "indicator--e1079762-73af-4d00-9172-60403449afe9", "indicator--c2220059-250a-4480-8b79-5e7db40085c5", "indicator--16807d5e-20f6-4d12-a3fc-ed23822281b1", "indicator--aa16a06f-c133-4d82-9268-74d0617daf7e", "indicator--5cb10b0b-81fa-42a4-9912-d102e6dc7529", "indicator--1e5d3104-8dae-4c3f-a376-87973ad517f0", "indicator--14b319cb-617d-46d2-af73-972dc5795280", "indicator--c239d673-d85f-4866-8121-696d46aaaf8b", "indicator--84a90213-58c4-4b6a-9c32-904d09d01466", "indicator--29f199ad-2c06-4b59-8d59-3a9435d91a56", "indicator--34035065-c60a-4499-a7d7-81e6c3cd94d8", "indicator--d02ac370-ff02-405e-afd9-bde955a84f60", "indicator--26ef11c5-d58d-4efb-8a7a-ad8cf9956a0c", "indicator--ba4e20a3-6fde-4ec8-9d05-e3bef9625388", "indicator--afdc9584-24bf-45f4-ba87-05dd5851b7af", "indicator--3e832e9c-e2dc-4b92-a10e-8a3528d6cf6f", "indicator--2a1aaa8f-1882-4d69-b2b2-c797d051996d", "indicator--75db3ed9-1eaa-4229-97a2-b8dcbef8ac46", "indicator--054ad3ab-bd9e-4baf-984f-4f1ac3616656", "indicator--041006ab-2631-41ce-80a8-09feb483618b", "indicator--348f8484-a8cd-4a08-940d-457beb928cfd", "indicator--fdb4d3d0-901e-4602-96e9-fcc53b45fc42", "indicator--a0a5eb00-8319-464f-b657-8ee3027c0c69", "indicator--017e7262-0544-44d8-bac3-0d7cb5efd50e", "indicator--5a64c43e-fb60-4775-b4cd-50bbb057811e", "indicator--df6ac023-c421-45b8-8c39-808ce59cc91f", "indicator--58d113ad-0b97-4458-9918-4b710943994d", "indicator--179c75a6-5f0d-48be-80e5-1d711487958c", "indicator--122f0cf5-e5f4-498a-95a4-d3f2293a4dd8", "indicator--1bc9b4eb-071c-495a-93d3-e55b68f1e7f1", "indicator--8ba1a6d4-6861-43c3-a3c2-2488dff14d1f", "indicator--d7fe0ba9-e7dd-4103-b734-7597ebc981bd", "indicator--18e35545-ddf1-4284-91e2-c163ef305723", "indicator--98be80ad-70b4-4dd4-b7d8-e2d42efe3a7c", "indicator--7783f00a-d31d-46f8-be97-447dfa9bc116", "indicator--6b2fac07-1bb5-4b3e-960d-19e912204a16", "indicator--c66f143d-613e-4ab3-87fb-6851fd097bfd", "indicator--044bae85-3966-485f-813e-590420ded872", "indicator--d93ca333-c557-475f-a9e3-4689cee96a28", "indicator--1fc6e2b9-8baf-4869-8c67-d82d42483bdf", "indicator--138429cd-4dc0-44ef-bba3-6fbe4e210b1d", "indicator--e3c40fbb-2558-45a9-9b2b-22ed767c9f36", "indicator--e38117ae-a6b4-40b6-b348-3df06129a2c0", "indicator--3e67ac70-2a59-43ae-91c3-79972fe2fe6b", "indicator--23f8bccc-dd24-4712-9516-8cbf392d3aff", "indicator--b735e5e1-256b-4c93-aebc-94cdddb701f1", "indicator--4dcd77d4-c132-423d-b897-97c28c811f33", "indicator--600b13c6-e2d7-4df9-8c70-4657428dc360", "indicator--fa55f810-cb72-4dae-a832-ddd2593f8f4a", "indicator--f619f660-d73d-4ba9-af2a-a9b4362a679e", "indicator--292c6d56-f3ec-4bc9-af50-2cd5d440ec2e", "indicator--72e1d35b-7f3c-4249-82a7-e20d1cf199f1", "indicator--0a42cb01-f549-45cb-a246-8ac12e915742", "indicator--61a1ec19-b659-4c6e-a15b-a180eff1474f", "indicator--e62fd31a-e0b1-42a9-8fd9-8705d7b52605", "indicator--e9b95742-2c1b-4a4b-92d6-bb4f7e9fe659", "indicator--0453eb71-fe21-46a6-875b-f2a9f75b9889", "indicator--55c0e9b4-68db-49c0-a883-3e47320f027c", "indicator--68e4a444-38af-4a96-8062-d069f8203d00", "indicator--80f79650-1f6a-4ff2-8b8f-8abe7f2f52b1", "indicator--457dc56d-2fae-423b-9c09-4a5f84e3aa35", "indicator--4e9b5547-c6f2-4e7a-a6c4-2dd1c698423a", "indicator--d4122430-027f-48e6-adad-8fbf74281b1a", "indicator--1911c3a3-fb5d-4a32-9848-6bda8b6123b9", "indicator--86b9b744-990b-4713-82b7-b6c333a50f23", "indicator--dd380552-5673-4850-bd0c-fb2dcfa2cff9", "indicator--d36cac2e-afee-4eb7-8517-0607e64ada4e", "indicator--d487ed06-0d8f-41eb-8ca8-e49b77e2ccd3", "indicator--82964c0d-f46c-4ca3-b366-86e7f20250b3", "indicator--1f25304d-61de-4169-883f-9b6b21c331c7", "indicator--232d9055-2698-4645-8300-207dacaae8a5", "indicator--170c6f1c-f7d0-457f-a37d-87e0c4aed1a3", "indicator--1dd84fbb-a0fc-4c8b-b553-8a4b4e0ee272", "indicator--5f1b07ae-5a20-4233-9923-460227da6138", "indicator--fb381812-5a75-459a-baf0-a5c2d52d2e9d", "indicator--e11c6a18-747c-425b-8f6c-503ce548de77", "indicator--4ad82510-a54b-4490-930e-fb51a677efa0", "indicator--4742b00d-0072-4019-ad9d-944322aa030f", "indicator--9284e5b5-e7bd-40e4-afbb-19cd159e4efe", "indicator--c992709e-037f-4696-9421-2818571f4c38", "indicator--d00c32c8-c018-4eb5-a2da-85f846ed26af", "indicator--dac47e9b-061b-4702-a635-27b1e7abec3a", "indicator--8c1acbcf-92f1-4a6a-a1bf-a3d396aa7623", "indicator--8af6f8e2-afdb-4b7f-94d3-b622b8f16f26", "indicator--7eda0070-9374-4054-b8b9-16c1812869c5", "indicator--cf225d7b-f82f-45f3-a1cf-0f43c620cb7d", "indicator--587f3580-fc1a-44d7-bbab-358fda95ffa9", "indicator--7e3cc8e6-66c0-45cb-afa4-51d219106662", "indicator--93fa52ab-f721-48f7-8fdc-3c189848e0c5", "indicator--8dc4907d-f3af-4994-97cc-36604794ac34", "indicator--7dc28a0b-b40e-4374-9f49-e5360c2f3563", "indicator--9f6b2bbd-8a5e-49af-a76e-75c4524004f9", "indicator--ede54836-7adf-4d08-af95-84d08202ef1f", "indicator--7f28fec5-b248-4d4f-9f4c-3f7b37403a6c", "indicator--1afdae28-a3ed-4847-823a-9c7513e5bc76", "indicator--c2253692-4719-4a85-b841-3a39c33588d5", "indicator--be475d0d-983d-4673-a393-4ac0d520d553", "indicator--a2193a2b-fd0c-4417-a575-71614959c18e", "indicator--771caa4a-5c62-432e-990e-da00c085c78a", "indicator--d99342c2-b9b3-43a6-b330-f0214843535c", "indicator--b3bf8360-89dc-43bd-ac1a-b97c0ec61035", "indicator--de9aadb9-ea4f-45f8-a131-9e8b9d04a822", "indicator--260de078-d338-49e8-b6cf-3db7da5044e2", "indicator--8ed99ba8-c2dd-4657-95f8-5d108b6ddadc", "indicator--54133856-1863-471d-87d9-993ebe56c4c4", "indicator--4a5ed07b-9bde-4d72-b965-9638b0ec998f", "indicator--b8560ac2-bbf5-4481-af0f-3e186a13915a", "indicator--0e1f6076-c89e-4800-930d-b4ae809ab141", "indicator--4854bf0d-77df-41eb-8f12-599e90f057ab", "indicator--a1bb4ebb-52c2-46e0-b3b0-b0766c31fbe7", "indicator--aacdb228-bc3d-4b1b-9fc6-1762121a341e", "indicator--d585ebc7-e35a-430a-845f-6f981174dcdc", "indicator--907dd570-6f61-454f-8f7d-6ecb39dcef94", "indicator--b30b4b8d-0d4d-4baf-a73e-55f02a5d98f1", "indicator--95bc7532-6db5-4e37-bf6c-de91e013621a", "indicator--d6dad550-354f-461d-9107-4d5abdaafad4", "indicator--8d7ace06-8b63-4a06-8b0f-8230c20756e5", "indicator--2f4c88f0-a5f4-4aa1-af01-3ad5ad530f09", "indicator--ddeaf9fc-a820-4fc7-af01-9837b248dc48", "indicator--5e2d7541-2321-433d-ad9a-ffe413b67f54", "indicator--80a4754e-2eec-4553-a37d-bf1392a91e8e", "indicator--0961cb0a-1c2a-4c81-9aa6-61030488f682", "indicator--b6a53005-ca7a-44ef-8e94-cdf0ef04fd28", "indicator--b02aab44-4c5e-4825-85f1-b77717c98a9c", "indicator--3cc8f6de-8b16-4dee-9817-2ab86d269bcc", "indicator--b7b185c1-4d12-4a6b-9915-9063b12dd137", "indicator--840c9408-9ce4-47e7-b245-598d26c8bcdd", "indicator--b26a4d08-70f8-422a-a636-89cf7182258a", "indicator--38fe1734-b7e5-4722-afa7-6b02367316b6", "indicator--3080ec1e-17f5-4cd9-9cbd-a66c21764c6c", "indicator--6c0f3e13-a3b8-4682-964f-1458a32141cc", "indicator--468ec4a6-d97b-4d05-b877-fd02debef7fd", "indicator--ebb99a5b-ac2a-4f0d-82cf-963695e8bfed", "indicator--4573b824-bb4a-4f9f-9464-ff17a33fd357", "indicator--64f062cd-f37f-482a-99c5-da356c5563c4", "indicator--6332efab-a329-41ba-9f3f-4d02e18436ae", "indicator--a0b6acf0-c74c-4efb-b151-6cd96fb3f3cf", "indicator--7c36c638-04db-4265-a998-1586a9db186f", "indicator--d5605902-e982-4f39-8f39-96f2913a207a", "indicator--ac5173fb-c185-41c4-9535-2e31f4f14dd9", "indicator--7db629ac-d137-4467-ba6d-f69ec9dde18f", "indicator--33a74d4a-dcfa-412b-8258-1c5a2594f4a2", "indicator--50e6a2bc-19f9-4eb7-89fe-41fe81c52a6e", "indicator--6d6f5eef-454e-40f8-9ebd-f80aa3ef9d0e", "indicator--ab8a9619-6a6a-47e0-8d3b-6899f7a288d7", "indicator--0867cd78-e6d0-4871-a3cc-cd77b0914c02", "indicator--966362ad-dfd0-4cd1-9e30-f7fb9f790fd7", "indicator--4d5296bf-bc02-4db8-933f-f6b19a841596", "indicator--50292f53-2149-4863-851a-93084d31fcd6", "indicator--ddda8188-19ab-4752-9a03-3fe8c5b76489", "indicator--eae9af03-48c2-4816-bbec-f6d4271e80fe", "indicator--0bf3d4f0-010b-44c1-8b35-8c7088e79b8b", "indicator--53dfaef5-953e-469b-a65e-d660bb2316ce", "indicator--3e374a1b-20d6-49e7-a09f-849b2099d851", "indicator--fb9dbb5e-2d16-4186-aa6c-5dae82e53b90", "indicator--6912ede8-19b0-4e91-a5ae-ea5ba454ddb2", "indicator--7891ceb7-dff5-48f9-b971-be1d9fa3debb", "indicator--1db13365-621e-48c1-9c00-18890b5efabb", "indicator--048a5977-ee47-4720-97c1-2fd8c5aa9516", "indicator--77656268-d09b-4d74-93b0-53f6daba0f73", "indicator--1050a905-c77c-49c3-a2c8-e613baab11e8", "indicator--4b3abb1c-f513-4428-be16-33ae32a30881", "indicator--4aa3f092-37c1-485d-ad18-f6882a2660f8", "indicator--32cc5c6d-9c50-4ea2-910d-6c9af5be215c", "indicator--76d1c45e-fd05-4b2f-a561-28af4efe2556", "indicator--872f1ed5-d06a-4909-b4bd-a8f49807d940", "indicator--75919d1f-5bf6-4dfa-b101-43f94ca5404c", "indicator--acd844c8-3a8b-499b-bcac-e82f23b3a133", "indicator--031ec7f7-17fc-41e5-8839-15cf6390b254", "indicator--6d901331-73e0-4710-bf25-607fd6d73e6f", "indicator--9c4fd214-3478-4b3e-883c-975b854b339c", "indicator--c26d1d73-da4a-4378-8c1f-b7d4fbaa5f82", "indicator--83c9af12-f25d-4abc-aca6-ae0174b870d6", "indicator--64f45212-a22e-4419-986a-a01ff5de695b", "indicator--c8933d53-4b62-48a0-927d-738acfba1acd", "indicator--922e8054-1e77-487a-b5ad-453a911c1f3e", "indicator--43eed0fe-953c-46fe-aeac-c90c82525b30", "indicator--32e36e19-89fb-462f-8f19-2518d4bb8386", "indicator--c7eae9f3-7e79-410b-a5b8-e6def2b132be", "indicator--64e04cef-c279-4a90-a967-eb82864acda9", "indicator--80855f10-0c67-4608-bdfc-b1f0f88e8562", "indicator--dd495b6e-988d-437c-b6d5-3c767ad651c9", "indicator--47324832-8bdb-4d25-9e5d-52bf90afa3a7", "indicator--670773e6-d6c4-419a-8cb9-e2d18d2c4982", "indicator--fc2e18e3-d4c6-425f-b8b1-e922b7a95859", "indicator--e6b2b218-ce88-430d-b85d-a583fb84bd06", "indicator--e40297c6-6f73-4a31-a67a-529fb9915ace", "indicator--6a0026e3-0c4a-49d3-b2d1-4dbba1de2dd4", "indicator--f19c6d3b-5c0c-49bc-be4b-da6073e31881", "indicator--1627f088-204b-4d95-88aa-c8f07303faf4", "indicator--c314eb2a-9ee2-4d72-a0c8-73de12c75157", "indicator--31a39229-3d49-41bc-b26d-14f30dfecbff", "indicator--f72e79c7-f177-40ef-a9b6-276e5dad46fc", "indicator--2394fe6d-b8b0-4f2e-b571-142434cfc827", "indicator--7b8feb84-314c-4298-8169-944cab2499de", "indicator--c2cb808d-8aa5-4b9e-8d64-ce759a65c5aa", "indicator--73751936-eb47-4ad8-8efd-28fa236800e8", "indicator--09d953c0-1c1e-4322-a2d7-7903c8c463e8", "indicator--11c697c6-3dd9-48e7-99f5-2788decc094e", "indicator--a9bfe307-9db4-4978-a4d2-c377edd6c1de", "indicator--cd9e4291-5d86-461b-a2b5-1bced1b2ca91", "indicator--4cfc680a-0efe-4a45-bfea-647ce713d9c0", "indicator--96150c91-845e-4969-b91f-6c34b7477ddd", "indicator--42e862e3-d26a-4457-868f-0c1555115d38", "indicator--be36cda3-50c6-43cf-9200-a44c45e67231", "indicator--e462b725-cbae-4fb7-8baf-01b8fcc58af0", "indicator--79d15721-a8fd-4f4f-b605-24b9e59b4a98", "indicator--c0411cb3-9c5d-4078-bda1-e8fb100030a5", "indicator--7f99fcc1-81d0-4752-9b86-b26dd5347471", "indicator--9992cfd7-c0a7-48e7-a1ac-2aa4950420b4", "indicator--5f7eca8a-407d-4a9e-ab4b-942cd431c2f9", "indicator--c0a6c4d9-baa9-4188-a40f-2b75efaef7a3", "indicator--82bb3dda-0bf0-4005-b010-104e6363e64a", "indicator--e6e92109-2884-4516-8150-9734411a5f41", "indicator--553b4124-ce48-47fe-bcef-dee3fef15489", "indicator--a9f22536-259e-4085-bb3a-fad83f3eef87", "indicator--515beb89-c4f5-4d9f-b8ca-e8f3726d6282", "indicator--76f70f28-3f00-4aed-9b95-d4e68fefbf08", "indicator--c239e792-d6ff-4533-8b04-141205627bd0", "indicator--65c3a8cc-51b8-4e6d-8e9c-f35c20978b7f", "indicator--cdf1b113-5f17-46cd-8bec-8dbed8d530ec", "indicator--feeab002-292f-4a6e-b361-7817c9ed36ae", "indicator--fbb4adbf-e74d-4969-a3f3-a3a8c9002c67", "indicator--c8bf4a12-925e-4ee4-85a0-df16ac6bca7b", "indicator--ad92cb91-1057-47d6-b143-6bc73f8c4123", "indicator--a70762f5-ce8d-445d-ac18-f3c775b57f01", "indicator--66dfb2a8-f514-43f1-96de-835d87f29b56", "indicator--cce997d8-6987-41bc-a788-3ed97d857669", "indicator--6bc0904f-005d-4347-bd0c-d0060548864d", "indicator--916f41c5-5be8-4022-9bbe-7fb7e7c47ad2", "indicator--034f16f5-d14d-482f-8b1c-029f8a65cdef", "indicator--7197edc3-7814-440f-81a7-f23f7048cf61", "indicator--c2db359f-730e-425b-bfee-b53c5adb0103", "indicator--55c46ac1-80c2-4840-a0b4-035363703368", "indicator--83ca6454-345e-4007-815d-d4edc3b14298", "indicator--02115b48-96ff-434d-b923-fe0e0e2f17a4", "indicator--d41547eb-08f8-4ea3-b3ba-7558845db248", "indicator--7e346025-a786-4248-afce-58de880df0de", "indicator--d21dfec1-62b6-46e5-b0ce-f8fc6d86aa9b", "indicator--7c2d1624-2bd3-4082-8cf8-1d817d06adb3", "indicator--a1d31f0b-cd30-49e0-a7ef-8d021d3c677e", "indicator--d3968130-f8e1-4e52-9982-9095801fecde", "indicator--db6de514-da10-430b-829f-7c960ee8faf3", "indicator--9920b457-ce2e-4647-bc49-c49c6e381862", "indicator--4c746e9b-3ed0-46be-a219-f68af495dc05", "indicator--c7f07276-7bd7-42ab-9031-40fe31798a24", "indicator--0afcb6de-2b85-46a8-a062-27ad68c20572", "indicator--5de64c90-912a-4a87-a436-27f894aa143f", "indicator--8a386ab8-790d-4d15-b97d-9464dbc07082", "indicator--b276915a-6b80-4a95-a947-00a69a082d71", "indicator--f955de16-7fe5-44bf-ac6f-f3e4ca2de8a0", "indicator--97957f84-8fdb-44f0-ac3c-017506ce2b28", "indicator--b41ebbe7-cf73-4358-a74b-9310b8b964c1", "indicator--64c6d048-451c-4535-8824-f90807009e0a", "indicator--ebb73a8e-74bd-4650-b469-4ab545d48e45", "indicator--3452ca13-6ea0-40ba-9b15-ed3ce36d6cfa", "indicator--11e8eebc-03d3-4f1e-91d0-bf554d9294f9", "indicator--edcf453d-a3fa-4b65-a5ea-3b255bd85331", "indicator--9228b22f-418e-4685-acfd-946013fc0753", "indicator--edc60750-67b8-4718-8595-b0d220e6cc08", "indicator--f3d814ba-ce30-4849-b908-e0d54c9cd696", "indicator--a649f3d6-9830-418d-b14a-858adeaa6f9a", "indicator--5a43c270-285c-4c94-b7f2-721f68e3b7a2", "indicator--4eec6bf5-ed2c-4636-8a25-0a83b03a998a", "indicator--8a281586-83f8-416e-b228-428fec04e7f3", "indicator--839fd0b3-d17b-4d02-adcf-6d66a22459c1", "indicator--18e47d73-0a2c-4f52-ad41-99a886f7fb18", "indicator--503de102-81e5-4b4c-a564-1afbb7705045", "indicator--42062b3b-697f-4bb8-b91a-421f882151e0", "indicator--6a0dabc5-cf56-4bfa-bcf9-61778ba90a0c", "indicator--03f66312-3488-473a-8d54-c5686bfaa65e", "indicator--de11695f-66f2-452e-81c6-365cbeaa266d", "indicator--f314b737-1f62-4142-b239-638eea15c77e", "indicator--ff0c08b4-c98c-47cf-ad1a-bd7819f311ed", "indicator--d7dde4a7-5865-4b73-a2f7-9e5d58ddd2c1", "indicator--969737ea-29f9-400f-a71a-340c7a3ef77f", "indicator--e57ec4a5-355c-4ee9-9176-b295df46ffbb", "indicator--cfc130a8-5cb3-4377-a3ff-644c9567d7f3", "indicator--00687e00-4b01-4d3a-beb2-f5b0248a9863", "indicator--2d6a5bb1-a694-41d0-a812-98c1229b6fba", "indicator--5c41d6e5-c5d0-4d99-a492-03b570c33e60", "indicator--1f2e0f5c-453e-4a85-a6ad-48690a5a94c2", "indicator--322fd2c1-2651-4c64-9fe7-f919890e49fa", "indicator--efedbca0-b98e-435c-a2cb-f8c678e7be50", "indicator--2db08e37-7440-4cd0-ae23-931743ac1287", "indicator--b9cf0339-b29c-4dd5-874c-ea862e89620d", "indicator--318574c6-b3a7-4a4b-ae0e-13e11f3286ac", "indicator--cac028b0-73aa-47df-b919-3b905d74bab6", "indicator--b6d12e96-77b9-430c-9b59-c98c3ace74b9", "indicator--9076f5ab-0d4c-46e7-b162-1de3b7cb27fa", "indicator--3bf2b5f2-8cf6-4a68-8660-9688901ca313", "indicator--a94afdde-5ede-4515-8d4c-3d09982e8589", "indicator--bc3404a7-5e9c-454a-bc0a-972dee202ed6", "indicator--861ce5d9-0739-4c54-b3fa-b2eeb28be79f", "indicator--c3a87880-0cf7-42ce-91b2-978b3dc81c7a", "indicator--c82f6f08-5526-4e36-8174-11bb800c9385", "indicator--ab599d4e-ce7c-4eb4-bf75-50a481a14079", "indicator--b191c25a-bfa2-4e92-b8d5-5f0c1c3fca46", "indicator--3d206f15-fe9a-463d-bb1c-5b6749040096", "indicator--4a647cfa-7787-4ad1-84d6-4516c722ffbf", "indicator--162e3948-ecb4-40d3-84dc-8ca42c1b9f57", "indicator--3116ae2a-4d55-4f61-ac4d-ca20c947828c", "indicator--a14e8ff4-3986-4638-bb3f-edd640b2c62c", "indicator--7eaaf6c2-57e2-41ea-ac12-056e73ed260d", "indicator--5fb5755f-5fb3-40a2-b2a4-fa678af04f73", "indicator--c25f0dbb-670d-4dba-8f77-c0f4f9d0c1b2", "indicator--8f39dd2b-2b18-460c-bd9d-bf243256c260", "indicator--c40c6a9b-5714-4187-ae92-f9db5a45bb9f", "indicator--b5770032-088d-4b6c-af98-9d9b569337d9", "indicator--256fdc2d-500a-4199-9c23-ca3f53648c46", "indicator--5d99d109-6813-44af-b265-b254ef75be96", "indicator--bf0a60af-a1bb-4d52-9256-7a2a5a7b0582", "indicator--add5f52b-870a-4c9f-9600-756c4c4079e7", "indicator--7f4caf3e-766f-49c0-9866-740d205d3cdf", "indicator--65ecd382-56a6-4ee1-ac08-0a72294f5463", "indicator--08ae747a-a8bc-495f-97ee-f182ab43096f", "indicator--cbeb7706-f9ba-438e-8ba1-fdee4a8c170c", "indicator--f1d62e04-e253-49df-86f2-2dfd3ce5d186", "indicator--d9d04cfc-a1cc-420e-9e0e-7167944cdf56", "indicator--ad9456b5-c686-4b35-b979-f14f75900ccd", "indicator--23a59864-56a9-443e-84fa-0993f785ab4a", "indicator--352da80c-7b5f-416f-9a99-93f66f9abcd4", "indicator--0e1bdb6a-f592-494c-bcfd-2967b912e570", "indicator--ac2dcf80-9171-41ea-96e6-4c6d8cb86f06", "indicator--d610783a-1149-4c50-8401-c1a484d2e6fd", "indicator--51ee3d5b-bd72-40ab-a71a-268d8dfa7350", "indicator--0f0d46a3-5529-4a26-a9cf-237cab5536e4", "indicator--bb06b490-d578-434d-ac14-bc736233ef65", "indicator--d68ec8a7-c5cc-4595-990a-b63816e6c3c5", "indicator--a1289642-b588-4238-8db0-8cbaed227dda", "indicator--22b21e52-93e8-4486-849d-00b13fcd8974", "indicator--512d7cc1-080c-4d2e-85d3-2bd3b8bab206", "indicator--2404722b-465e-4373-8c32-0345c7aeec6f", "indicator--ea4f0d60-57be-41a3-9588-5b11b5e7d6b9", "indicator--78fe1110-3423-4574-a527-1d568f794903", "indicator--049c865b-0852-4d0f-be41-0d5cea1793ab", "indicator--b971b33d-c35b-4c4c-9ca1-790e727dcc30", "indicator--4d57c1ac-8799-40c0-8905-02353656b4a1", "indicator--1afd635d-3f9d-49d2-a11e-b33d3b51ec18", "indicator--4e9050eb-202b-4e96-aed4-b3394e0c1215", "indicator--18ee83b8-3d13-4116-935f-0e655af1002b", "indicator--e68c10f8-d047-44be-9ab8-2ce46a3c46ff", "indicator--98664c4e-0299-47b1-ab8d-903dc97968c3", "indicator--fd39dd94-329a-4a7d-af1f-8f01af503c6a", "indicator--8d000791-a42e-49fb-8093-021b31a4e28a", "indicator--01b8646c-8531-43f7-869b-5257a5c86c0b", "indicator--52a89f80-4940-4b08-94f3-5e0d477fd5c1", "indicator--fde77597-1c16-478f-a300-9f52d7ed4475", "indicator--0846dfde-f2c6-4d2e-8bc7-7baa7b82651a", "indicator--2adb19b5-b462-4de9-98e0-6c6717bbad00", "indicator--62afc25b-57e7-4d92-a228-d3494610e94d", "indicator--c35a0bca-8e77-4494-bbd9-acf7c6d817ff", "indicator--76cf3df2-af79-4554-95ee-6c41c579c0a1", "indicator--7423f057-b6e2-48aa-ba92-e6bff6caf173", "indicator--4c6ae924-9be8-41a8-a957-3c24261efa28", "indicator--2cc19e6f-38f5-4959-8f2a-58ee9f199e10", "indicator--65ecafa1-de54-4f22-a90f-895924e2a38f", "indicator--156a77d9-a35c-4965-b2a6-fc01403a9d70", "indicator--e6134e57-2277-4d1f-8475-747439947b52", "indicator--70d453df-0b8d-47e7-95e6-9a2a9cffb545", "indicator--d8c41460-21a6-4179-a076-477242467e02", "indicator--ddb9e4dc-38b2-4b04-9bc9-67db16c5a4f5", "indicator--80b52cda-3210-43bf-8827-e9feaa5647b7", "indicator--a195ec65-7c01-433e-be3e-4cd9a058c2f4", "indicator--2d296219-7d5d-45c5-b19b-61e20f7ff6ba", "indicator--715a4207-a9f4-48d5-8508-dcf7c6c003ac", "indicator--642b35ef-ec4d-4829-92f4-8a05d03f882d", "indicator--aa7817fa-d373-4af8-b4c9-d604ba08b37a", "indicator--34cf2d28-c44f-47da-86e0-dbcbffd4a69d", "indicator--b450e3bd-ac22-44f1-ae7d-de5f2c910669", "indicator--507f70d8-3fcd-4124-bdd7-81c73c184186", "indicator--79658841-c73d-4711-a2d5-968b9c9eccd8", "indicator--887e6a20-7d18-4d77-9020-940d1d9c5fe9", "indicator--0e52e83e-76c7-4e44-9197-6cba21d254d2", "indicator--566c4dfb-6944-4778-b042-d3b68c2b4d82", "indicator--0ca10120-709c-4603-adfa-bbeef2d85987", "indicator--806138bf-2fc3-4847-9127-ebe505183102", "indicator--da8c65b7-4824-4b2c-a739-e1f3a9c85bf9", "indicator--8a1158b8-55d9-4cb4-af13-6dd56b1e1da3", "indicator--a273d1fb-b1c8-4517-996f-a2384b33586a", "indicator--f90a5514-cfcd-4132-87a4-e9eeb2413144", "indicator--2c0b09ac-2ba4-4c43-bd13-bc7f7b93e10a", "indicator--3a9c31dd-4c08-4708-a6e7-e49569bfbf25", "indicator--2332150e-ee05-4910-a575-e8d011b38f75", "indicator--227295cd-be07-4539-9a7d-a5b8a7dd08e5", "indicator--f00c7572-e18e-4892-9c2d-5d0c4c716ed2", "indicator--89687486-0245-47a1-9e9f-33abf76ea6e6", "indicator--34d49eaa-859d-4436-8475-a6f46af220e5", "indicator--d6f73c91-77c5-4f5d-87d0-10d70ca98618", "indicator--b066b929-ecbe-4dfc-925a-1823e6888323", "indicator--d6dd0035-947a-46a6-8a67-63f219e8d67d", "indicator--f223b1eb-5a77-427e-b459-b4063453e3ba", "indicator--86e81bd5-1878-4f26-b3ee-0f2c8b0d1c6b", "indicator--0ead97a4-2476-423f-a1b5-98c8f7240bb1", "indicator--e4925ff4-a154-4e3d-9b35-4b66e0dcac8b", "indicator--6ff33cc3-6cd0-40f5-8cc4-f20276c415ac", "indicator--8e26cdfa-c599-4626-b4fc-5d386254ef00", "indicator--7e249975-087b-4915-bf3b-2f181702a9b9", "indicator--4466857e-e473-40cd-97ca-0fae27f89b2f", "indicator--51f66d54-ea80-4dc6-a04c-878643019dc3", "indicator--1793e4ae-0eaf-4c9b-8e29-35500bd2617e", "indicator--107c3f0b-d458-4993-9f9e-a7d8fd13bdac", "indicator--d1feb033-21ea-4866-9602-22f557ca6010", "indicator--4620f67b-665e-4c30-9526-90bb93d9cee7", "indicator--422e772b-3ff3-4989-8ce3-ec8aacd92bcc", "indicator--1c61637a-8532-44cd-925a-0cba3d0c1ab4", "indicator--74048308-d738-4a6d-b5e0-a81f714f406c", "indicator--72aa7a58-b5f1-47ef-aca2-70bcdbf1cb81", "indicator--9bc7eb0d-ad89-4ace-98d0-2468380d2f25", "indicator--2ea87c0a-9b2f-4346-bbc4-371177c065b1", "indicator--256b20cd-1dd3-44ec-a7a1-133cff2cdf41", "indicator--9f8bd984-8cbf-4740-ab15-7685d919bbcc", "indicator--2f303640-937c-4ab4-8614-0113de6d54bd", "indicator--3fc8377f-b75e-4718-af2e-56afc64f8ea3", "indicator--e507962b-2a46-4939-99fe-94628c0c2f23", "indicator--fc8a775c-d1ef-40ba-bb89-69e305008048", "indicator--dc85db12-5a6f-407d-9d83-5b013959a333", "indicator--b085e177-4224-40f7-a80f-9a5e7aec47c1", "indicator--207329fd-24a8-414e-9478-1d779d24c805", "indicator--727e5da0-8b03-4f92-8def-c01af6c57a96", "indicator--141fe54f-a371-4686-a25f-c19f1e8ad758", "indicator--ab6b7ad0-1889-49bf-b599-c2df77519668", "indicator--0d454563-1240-47e0-bc98-b00d0cad95ea", "indicator--ddfc06c5-ee73-4d8e-80a9-94fcd72aab0e", "indicator--a8edb35b-7313-444c-a9c9-ac74039edee5", "indicator--57019bf8-489b-4077-8460-c00feec19f2a", "indicator--10e73667-f1e8-4f71-9649-831be23347f7", "indicator--040d9416-15aa-4ba9-93f7-2fb3dc032229", "indicator--c5cb55df-9591-48c5-927a-6486ca932e5e", "indicator--f6769987-8288-4239-8ba6-9943ac26c313", "indicator--f19489ba-78a5-4459-b021-b69b9f6cbaae", "indicator--a2448a3b-4fed-47c7-bc9e-bd2710811afd", "indicator--e5ac1784-3c95-4c01-a7f9-c90cac2ca69c", "indicator--44be6ef0-3442-4629-935d-455b121ec559", "indicator--7cac45d0-fe12-4e4c-a2e5-41713612a5a9", "indicator--0d346338-0102-41b0-8d4e-7283847c2a41", "indicator--1b308284-0547-4f11-82eb-e0aa5fa42476", "indicator--7aef7a77-1c89-4dcc-b11f-b9360a9a0b3f", "indicator--4871649a-0318-458a-85c7-f86408fbf7ec", "indicator--d57b7546-682f-4bd1-8959-9b87a66f1769", "indicator--eaf6d44e-341e-44d1-8ea9-77c614be0d04", "indicator--f768f1f9-b856-4940-bbca-2aa9f943dc06", "indicator--352404e2-f19f-4ad2-a76f-ebf7522b08df", "indicator--de83604e-ca5f-4697-94f5-280032d4f150", "indicator--24cd955b-0521-4be5-8eb6-7519c737ad55", "indicator--912be44b-8e8f-4896-9ec4-f58678ded4a2", "indicator--caca8cec-2b8b-4495-89dc-a530a244f67b", "indicator--0692cd49-c3fc-4467-a9ae-07a95266cbc9", "indicator--1c60a768-52fa-4466-86e4-a6592712ca82", "indicator--75075487-1d10-437d-9efb-bf490691574b", "indicator--d908408e-0989-41c1-941d-66297325fd31", "indicator--243be1da-611e-4106-9ac9-95c243d05bb4", "indicator--4340f1f9-13d8-4ad7-b48b-777952c52ea1", "indicator--2da0ea3e-bd93-48d4-a576-4da637a8117c", "indicator--59b35da6-3783-497f-8287-652fbcc7c717", "indicator--27dfff34-f164-4ee3-95d3-346f29812c01", "indicator--5bce5ca9-3c90-4ef7-b975-9dd703c2aecd", "indicator--0704383a-9b30-47f3-96b5-21b000604958", "indicator--7636861e-bf76-451f-84c2-cbac68717b88", "indicator--d125d95c-4deb-4c8e-89e3-f22d1c5eabc0", "indicator--c45d0634-dda6-4b01-8394-e695b2777827", "indicator--928591f4-93d1-4ad4-80cf-c6da027c1339", "indicator--92dccf88-cb5c-4e28-abb0-93f692eecf82", "indicator--30e1f720-2861-419b-8310-18a5485499cf", "indicator--8e98df0e-3e3a-4975-b3b7-20f876040348", "indicator--84d81732-8737-47b7-b0c6-a221ef73052e", "indicator--024611e0-5bdf-435b-8e44-d00813d2701c", "indicator--7cc3f336-e5a3-4bd4-9e86-c6cc398825aa", "indicator--ac0f7688-9741-4be2-9b44-3c2bf629dff8", "indicator--c28173af-c691-42fb-af48-46bbb262b5eb", "indicator--b68c4976-a42b-4436-8db6-cae4c598e962", "indicator--b70979c3-3902-4e11-a1be-220f36685e5c", "indicator--6a0e0e55-87ca-4e55-b1dd-5b3ada3fefa1", "indicator--29173449-1ff0-4613-92e5-3f0df093c97f", "indicator--baefa978-e723-4e63-8fcc-9327d503d109", "indicator--a15d3e4a-a95c-400d-a564-d704a42617d3", "indicator--36f791d1-8f66-466a-ba0a-1b2fbae84ded", "indicator--5403e94f-c856-4403-839d-bd86a26a9413", "indicator--51017d94-7a7c-45ac-99f6-9335ea7172a4", "indicator--e30db50c-d991-4fea-bbb4-4083e7928f4a", "indicator--c0d1881b-5fc1-4a00-a287-d2b5e9d96570", "indicator--2affef6e-eb93-4cff-9d40-ad363d09316f", "indicator--2a6c4ac0-11be-4a54-89bf-e4662858b7f2", "indicator--bc5092e9-aa1b-42af-b5bc-259aec4d9ef9", "indicator--377767cd-ffc7-421f-a8ae-de18ba2e7780", "indicator--a577b16a-f5b7-44bd-b226-d4896ae91e96", "indicator--3db95129-8d9b-4965-afaa-8dd37c6b6543", "indicator--0cf380bb-c659-4cb6-83f9-3f1029aba5e8", "indicator--9a1379b2-6dd3-4782-9e01-819067f3fd6a", "indicator--565e79bc-c716-455e-8ce0-c62c26f3c566", "indicator--9c6b6ee6-d82e-4816-b22e-702809f0b157", "indicator--519be2aa-e225-44fa-8134-e68c706243d8", "indicator--bf5a2b96-eaa2-462e-818a-da00bb6ded08", "indicator--3182dad8-cc1c-4d68-81a4-62786c7ff085", "indicator--700accfb-3123-4662-ba03-23c08aebc823", "indicator--c1f24107-731c-43e2-b280-3d61f3273557", "indicator--30124dea-ca14-445b-b760-e8486ffdf15b", "indicator--21d0b755-ac44-4380-b09d-8ebadf28cb73", "indicator--554edd2a-8b15-4385-b7ca-1442c009e7d5", "indicator--e72823f1-296f-4afa-9fe3-8f01605a9958", "indicator--70620a03-1de0-4280-9134-acde89ddb9ab", "indicator--0830838e-2ed0-43f2-86e1-2260c63be39f", "indicator--fa2fd886-d685-47bf-991f-feba02d4fc89", "indicator--ed86d234-7f7a-4240-943a-88c0fa90086d", "indicator--0302231c-6f7c-4bd0-92ce-b01e6001bdcd", "indicator--06c4a1c7-2ab2-4274-9999-e586cbe74676", "indicator--f759df6c-29c8-476c-b62d-c78ff9735236", "indicator--6d37a426-0b42-4743-8319-a81f696923b8", "indicator--cd1de0d8-565b-4bcc-b8ce-61d30532691f", "indicator--da67248f-06ca-4ef3-b81c-998b75981555", "indicator--247d6fa7-88b2-45d0-a523-c1747e7fa098", "indicator--0c379544-bf56-4906-8a52-f7b3adf89a88", "indicator--14c7e53f-61cb-4a96-a3bf-11060408c463", "indicator--8f4a03e9-16bb-4629-904d-2528cd2abb0e", "indicator--1e9fc048-78bf-4602-aaa2-81ab3a46d9ec", "indicator--1887731f-2cde-4bfa-a2d0-089a41122cb0", "indicator--9af2cffc-cb7b-4f02-9538-7175214c40a4", "indicator--aa8ab5a8-db57-42b3-950e-604a17a25686", "indicator--5c1e7566-90f6-45d5-9b1b-3fe1ed2ea427", "indicator--c9077c80-f233-4828-94ed-639fcbf3b855", "indicator--c956f0fa-d525-47b6-97d9-d1982d1eaabe", "indicator--54b588b6-3c6c-403e-83d4-18d1aab85c63", "indicator--9792281d-9b1a-45a8-861f-04965b026818", "indicator--f9b8bc4d-26ed-4942-abe6-10ea0656c728", "indicator--010eb0e8-b375-4cce-9fa5-1d836e413e51", "indicator--f6afc4fe-1c4a-4fe7-b88b-ab9adf896acc", "indicator--891f9653-1fc9-42b1-96eb-7489cba25686", "indicator--30ee4d4b-566e-48ca-94cb-6277588711cf", "indicator--d4d4565c-7a92-471b-b393-7e82029a5037", "indicator--c1c24da8-3cfa-4d84-b41a-b6a3e767cc67", "indicator--5ebb7b99-7aa5-4f6f-84ce-a776f26ff7c3", "indicator--9ccd6d81-ecdf-4915-9d1a-12b998a9a71d", "indicator--295ab781-3bc8-4788-ac3e-5500fa1280f2", "indicator--ba8882d1-43f1-414d-8869-0f38f04c848f", "indicator--ac7300b0-6c69-442d-9dfc-e3581b7e8988", "indicator--7c46643e-e9e3-479a-a673-4afe3320179e", "indicator--dcb72005-0519-4bd1-ac28-1c81fe2e5017", "indicator--ef68ee21-68ba-4eb4-b46e-8682c0a52d0f", "indicator--274cdb56-2651-455e-a422-20ed4c424913", "indicator--17c381d5-f0a0-4b57-8128-20d268f56628", "indicator--26ccd3f7-164a-47fa-8bcc-aac623f0d382", "indicator--3cb4d2f1-9c31-4be3-9df7-964884e67277", "indicator--628ebf4f-3af1-4efb-9fcb-1c60cf908e33", "indicator--7f51bb4e-5ed8-49e5-9671-2a0aa077aabb", "indicator--f3ed9dea-9cce-44c9-a791-f2738cca7e32", "indicator--b4154beb-4b57-4514-9040-8510048681cf", "indicator--a4f90b7f-5296-4361-8ee5-322e22ffacbd", "indicator--0472cf88-8fca-421c-a6c6-4e0f3222197b", "indicator--2fcb7f97-c5fa-43b1-b4ba-37f37ce2797f", "indicator--a6d611d7-a255-4549-b3e4-9db04d4df744", "indicator--430894c3-38f8-4792-a091-1f4205a4e31d", "indicator--90735f85-aede-4d33-b530-29fde0441946", "indicator--19685e44-ccca-4000-908e-8c819eb1a485", "indicator--c3c85876-48fc-4565-af9a-a8a933739074", "indicator--f5007a86-a043-4ce1-9958-b8c2721ba9fa", "indicator--4e004800-d3a5-4a07-a1ab-3a8794667286", "indicator--29d759d8-46f5-4e8b-a529-4ab62c7f4d6c", "indicator--3b0a8f43-c949-4d0b-857e-d8f6d06a7e77", "indicator--54a1d67b-b251-4b10-bd28-9fb50c45e9d2", "indicator--ba9b02bc-7ca7-4b58-8223-d1b9e3551026", "indicator--35405d4f-5751-4181-b3af-8f3a8f6777e3", "indicator--bc6cc27e-d58e-4d7c-8390-482f60fb7d63", "indicator--db493c9e-2b1a-4670-bfe6-5f9d2e903ae8", "indicator--4c9dde69-18f3-4ebc-94fd-2f4ee55483eb", "indicator--0cafc023-7b9b-43ab-81a4-31033c8ae1fb", "indicator--a7686f3b-97e7-4805-b673-f3f9030df090", "indicator--13e894bf-c132-4211-9879-5bdb9d0e7eb0", "indicator--740e824f-cedc-469b-a46f-62761d2d73d3", "indicator--40e412a4-6ba1-4013-a6e8-4301bf5ebad9", "indicator--5c2b0944-735a-4e36-96d8-bf65f082337f", "indicator--95b27bf1-f796-44d2-8586-b9134d2a7196", "indicator--2ec506af-93cf-44f2-84a4-9faf5442e175", "indicator--826e533a-1b68-47d1-89e9-35e16699ea4c", "indicator--2f7d706f-adbf-442f-92b4-5d0e86193639", "indicator--ad148861-ed82-4cb3-bfa0-4c5e67de5726", "indicator--1800226e-cbb8-423a-aaba-41856dc99840", "indicator--a7434ea2-5950-4cf5-9579-4eeb31fcb39c", "indicator--39faf994-708a-4cf1-a975-1356ee024923", "indicator--5caee6a7-0c5c-408d-8b0a-866ee9586ae9", "indicator--6c9b9282-6ab3-4e6a-a987-ebafe2fb1b7b", "indicator--8a120b37-03c1-45bd-9942-2281e41a3054", "indicator--06eb0b14-9dd1-4366-8bfd-40c0245f9a7a", "indicator--22905038-db8e-48b7-965d-6ca7e9547115", "indicator--e20be373-8812-4c60-bc34-a538e3347fa9", "indicator--680522c4-0c08-44df-8cdc-20eeb2f22104", "indicator--3970e781-1423-4741-9402-652fb5f4e132", "indicator--116246ca-2b23-4035-bc40-6ab5cae9c60e", "indicator--9c786d8e-f4d1-4303-8754-0f2e080f96f5", "indicator--c9c27bd3-5e05-4387-bde0-1b11f47c75c5", "indicator--9a6155da-ddc6-4319-9cc4-3b666373659e", "indicator--d414ebe3-0629-47f4-9aa1-c1224455a846", "indicator--2a5c0f0b-afc2-4775-b3a5-c458ade2e76f", "indicator--152f5088-0d12-44e1-ba67-769566aeb5cb", "indicator--60050dcd-84b2-4016-974e-6ee96198ef6a", "indicator--41501085-de0d-4276-886d-64da7842ea46", "indicator--dc2ecd68-9a4d-4c15-bb70-9b5f9cd9e8d6", "indicator--ab3cc471-a4eb-4bb2-983c-359d0d3dcbc2", "indicator--8af84cd1-6dd9-42f6-b7ab-a71cb9d88bf5", "indicator--ff06e14b-d218-4978-becc-7131c0276a36", "indicator--610e1b67-78d2-4533-ad89-1f6d269ca974", "indicator--bb743e5c-7b95-4fe1-8330-174971e66c43", "indicator--725e7196-a184-46a9-a43d-cbbe3dae1330", "indicator--337412a2-7e78-4b2b-bcaf-c3fe0d5cfbbf", "indicator--fc6c333d-4913-4b78-ba8c-cca95350a438", "indicator--2eb4d859-d81d-4eab-b1f0-fa5d11c706f8", "indicator--d1e4e0ee-198a-4252-970d-f3bfbf2e1a82", "indicator--72500eb0-70cd-45ae-9bd6-69e5d7fa9d72", "indicator--fb401e07-2565-40d7-9374-964aea7ac028", "indicator--2f2f50c3-13fb-462d-8037-c1efd2d06d0b", "indicator--d84cde85-a2d3-4f13-aa60-254d8df6bd0a", "indicator--9bbe04e2-476f-4087-926c-9db546e545d6", "indicator--b49f08c3-ebbd-4965-8854-4f4426367033", "indicator--7dda83ff-1fcc-463b-9e1f-6b8ba59d8828", "indicator--af135e24-4bfd-4c76-89a8-4377a2b15666", "indicator--60698d3f-e73d-43fc-a8e6-0572d6dce1c5", "indicator--22768dd6-81a3-4ea5-ac8a-98788596111a", "indicator--d2be549e-d7c9-42c3-9ef6-66df0da48964", "indicator--b918e897-b0f0-4869-8029-c58d89eaee9e", "indicator--d831342a-e59e-435d-8010-f67ca10f5d2d", "indicator--e3335ef3-ab2b-40a8-8010-c3b81dc067a1", "indicator--f1d0d452-4039-4b5e-a444-49923725bf7a", "indicator--eaa7176a-a6f6-46a6-a08f-45deb6076b1d", "indicator--4f278ea1-04c8-4f70-ac3d-25ecc546696c", "indicator--eef96ee7-b7b6-498e-b4ef-f3313e12fd05", "indicator--76f25c93-fcd7-4913-a280-c419367e993b", "indicator--96af419e-ee4a-42b5-8218-b0ac9a18ecd5", "indicator--9bf90d68-68b2-4239-b89c-383e050bcd6a", "indicator--59babad6-a1b1-4a93-bb2c-c82f04a9205b", "indicator--d35f173d-af3f-4696-9a30-337a273cabfe", "indicator--a548e873-b6a6-46a1-b3da-645da6f9239c", "indicator--d0529c53-bf6a-4682-a2f8-dc4ff9267bdd", "indicator--971c4cd9-014e-4c6a-8030-39216c403cbb", "indicator--c97456b1-cfb8-4084-8708-6622beeda22e", "indicator--5d807294-f773-4393-a156-d12bb40eb689", "indicator--8b4b9316-9dfa-4cf2-b15f-e30d377f4f76", "indicator--de52604a-7e6d-4789-b31a-56764f0ff9b7", "indicator--bb539601-b819-48c0-9bb3-06dc3c91b2d0", "indicator--5465361b-5537-4494-b258-1c962fa48ae2", "indicator--21e31ee4-d87e-46bd-9f51-e61d01525cc2", "indicator--94063832-69e3-4fff-9622-79aba1176736", "indicator--49f548b1-056b-46e6-8adb-bf897e11efa6", "indicator--07d7431e-daaf-431e-875e-a89e89631d58", "indicator--041a5158-f07b-4ae3-8615-2c0f034e46ae", "indicator--b5b1c28e-3f1c-4786-b6b1-4d691e3393ed", "indicator--a836358a-1738-4713-a0a1-155c92f2516b", "indicator--ae24ad91-4560-4bcb-b8fc-bfab105d3f5e", "indicator--6323b163-fdd2-4707-81dc-c2231c0bbbcd", "indicator--51bf9831-b430-4293-a8b9-7758ac17e3e4", "indicator--e4be61e4-0d1d-4e96-b9f0-e0ea1b6e1269", "indicator--baa7f191-4441-4582-952f-fb19a9a030e9", "indicator--8a523778-de54-4946-ac76-af9c9d654a2d", "indicator--be77f661-f537-4b90-bfb8-1ecf5f18a23e", "indicator--457e0c40-6049-484d-9b83-7463cfef020c", "indicator--ca469442-37cc-4f7a-afb0-0075799c43b9", "indicator--004c892e-2c16-4fcf-ad48-91d31d70c8d4", "indicator--c536cc01-813d-44d7-88d2-a84dc362252f", "indicator--ad2957d6-cd18-42b3-ba39-b67631966efd", "indicator--97d5f6f1-4345-4a63-a13c-f1134c489c49", "indicator--fc3740e2-6f68-4a9f-8e55-1d99c240eeaf", "indicator--8a764aa4-2407-4b9e-9e16-16d5d52021df", "indicator--358fe0eb-1f86-4c2b-8d5c-e0b5f14642d9", "indicator--fd1710b1-31ac-45f1-937d-39f635f73031", "indicator--52da6338-a809-44fd-a0d7-053e4fd7cf50", "indicator--968bc789-0534-40f3-a0f2-a2d35b907add", "indicator--09322708-590a-4fb0-9bbb-559eeaddfb42", "indicator--8836b437-870f-40be-8582-749c1377a75c", "indicator--7427837a-eea6-42d5-9d0b-39ebdd28f5b5", "indicator--6f2cb8a2-d2fd-4273-8e0a-4ddec1d26b4a", "indicator--95fa60aa-70f5-4854-9d43-147f6f616716", "indicator--e5d059a2-3b75-4cdf-bd11-b6b994db498c", "indicator--de884263-50bc-4aa9-917f-585312defd43", "indicator--1dcc7f63-503e-4cc6-97f4-4c758069e584", "indicator--6868ede0-19fc-4f96-b396-216b00167363", "indicator--d34fb909-5970-4fe4-af1d-2edbd72fbef9", "indicator--d800e872-9b71-4b41-a73e-b48fd033a743", "indicator--9070dc15-ec6d-4d78-a3d4-dfeb8520e5a2", "indicator--7b9869a1-2166-4cca-b695-4e7b344aaa6a", "indicator--69631bcc-8ee2-4142-88e5-ff601e08aff5", "indicator--24e8d12a-55ee-4e6a-a666-4243abdf78f3", "indicator--267b5551-dea3-4a40-b4b2-59660f320274", "indicator--b1a92872-c736-44da-b201-443edb6b594f", "indicator--f0d6dedf-70cd-42e6-8b44-99aa532b501d", "indicator--5c85a4bc-100e-4cff-9e4e-6354bd1a3e85", "indicator--05f418d6-60e8-4352-95ec-f18460987335", "indicator--c7a8812c-d790-40ca-9a39-b0a801df0523", "indicator--18c9b51c-0f4d-4183-aa15-faebb07986bf", "indicator--64628e87-5e43-44b9-b5b9-336f9b7a09c7", "indicator--63939bde-3bb4-4af5-bfd1-8de822dc81e3", "indicator--a096238b-93a3-4019-9e82-d8c9b09875ab", "indicator--b6c00e7c-f00a-46b7-b1eb-ebea28cf15dd", "indicator--5c2f5711-2e2f-42b9-8d75-66b6582ccf99", "indicator--a0c6f413-ee03-4244-a206-0de4f7466455", "indicator--c5fe2376-2ab9-45bc-b760-647aeb010601", "indicator--fd128d9c-f483-4c29-83d0-e4dbbf09195b", "indicator--23983f8a-de04-43ca-aaa4-81d1f41ec1f4", "indicator--2883dcbb-2183-4e3f-9f74-a94616b739d8", "indicator--ec1daf08-08e2-4eb7-8c54-94205ee3fba0", "indicator--7544ff4f-41ce-40e1-96ee-d2aa94190038", "indicator--553e4cc7-7573-4d90-96a3-1f681e547332", "indicator--0aaf4180-b002-4c73-9c6e-b64a978bf58a", "indicator--e4844ea9-36f1-4945-89ff-528b3006e8af", "indicator--3697ef5e-971c-4d06-9bd4-be03c9626158", "indicator--6dad51eb-f7e8-4ff0-bf6c-f0b893e3fad4", "indicator--2bfd0e17-2a33-4881-8a12-b1ad749ed3cd", "indicator--da3963e1-47a7-46f5-b6c7-774730dfd352", "indicator--303c310a-9706-4fcd-aaf2-273234c2f2e0", "indicator--6aae1dc3-375f-47c0-9f2e-e042dddd0870", "indicator--b78878d3-925e-4c31-9586-2bae14e508ad", "indicator--874a1944-770d-4238-ad0d-3fba15ee55d3", "indicator--709b0fdc-0796-4fbd-8678-c2ba1c7f7e30", "indicator--6e2625bb-834e-4669-a8f9-596c9d6e85d4", "indicator--6b9f25ae-2123-4116-bb70-bb9c7107b06d", "indicator--c31267d7-55cd-4226-aebc-81d20176619e", "indicator--d523b1a6-a4d1-48fe-865e-d7450dc858e2", "indicator--ef4a394b-2a68-4faa-ad59-0bd999a49e06", "indicator--9e8dbc65-0545-417f-b467-d7ff82d73fad", "indicator--b4623509-635f-44cd-963f-71ed74d25f79", "indicator--f29af035-78c5-4274-bdec-96d621c48f14", "indicator--eedc3035-2ecc-4270-9c88-7445ddd19087", "indicator--52e6669a-f55d-41a9-b995-a39e0cd7324b", "indicator--14d31f3e-d3cb-45ed-8691-99f7a9648a03", "indicator--f508d742-81fb-4748-8c8f-b7dd6809cbfa", "indicator--b4050456-6621-4333-8035-ff6ba4fcbef3", "indicator--fd869272-65b2-4070-87a4-790d83f610b6", "indicator--a7a48986-7630-4316-ad19-0cffab1156fd", "indicator--9502dcc3-cf9f-472b-8cdf-ca9232a588da", "indicator--8a474e7f-72e0-4381-9e8c-96aac60d83ac", "indicator--3f74c9b4-f82e-4db9-ae31-d0fa4de72d01", "indicator--7c6d8e01-8a33-4dbf-9b16-c16c7a3afcd2", "indicator--df9a9106-6448-404d-902a-ad628f5262d1", "indicator--d66feef9-554c-44a1-adf0-2e60d8d5cbc2", "indicator--80dd34aa-6e50-4951-9729-889493e42231", "indicator--6d2afabb-d2b1-4dd4-a1a3-c36f4af42055", "indicator--f6e67376-7673-44a0-989f-8da79baade88", "indicator--1a489adb-dd39-48ed-ad89-101b599604f5", "indicator--fa2a5f7e-a9e0-453e-8b43-4d826fcf868c", "indicator--0f94e217-196c-4094-8409-0e130e76e9ad", "indicator--ffa0f8d4-466c-490f-bec9-a796963f7810", "indicator--62880ef9-f46c-4c9f-98db-4e9cf3ba5a90", "indicator--ce587521-983f-44d9-bb57-98fc2f8f124a", "indicator--b194e4d6-dae3-481f-ace8-ac5a38ac05ec", "indicator--69b6e954-551d-4fb5-8a13-1d296944c5e3", "indicator--45311c34-ef55-4d22-88ab-4a6154b8bf5f", "indicator--9f5bb6d8-1b2f-4fbb-90a3-12f76e03a464", "indicator--30940a51-16b7-4d4a-9336-c497fbcfa1c5", "indicator--f75ea9ad-fc00-4f7f-b336-08b75338bdfb", "indicator--c745424a-fa1c-4bc9-a36d-31082431e289", "indicator--7aeaf46d-8290-452e-a19b-89e5986f3d65", "indicator--7da0b1a7-582e-4b90-9aaf-24f578fd7e6e", "indicator--94be333c-f6fa-469d-8db8-70688e935cfc", "indicator--c360cb0f-cfd6-4366-84ee-5761d9286a9d", "indicator--d3f5326f-25a7-4a63-8007-880950caa382", "indicator--72b4376e-2509-4dc3-b4f8-7aef90644171", "indicator--fbeb90d6-4d0c-4a14-b656-4fa16eba0160", "indicator--3d7eb882-3c39-47a3-9143-658dcac18c45", "indicator--8c62ddcc-759b-4bdb-821d-d6e0932e6f88", "indicator--c20a59bb-41a7-481d-b874-e047fb851258", "indicator--e57e2947-369f-4635-9936-7c3245bfb937", "indicator--fe31aa35-a820-47cf-acfb-0d01bb203600", "indicator--855c3128-5249-4b04-95ae-9c3235de5d6b", "indicator--770e7cf9-54f9-462f-b789-0de9b21f121f", "indicator--aa0471cd-b01b-45ae-af15-a9fc16a53fe1", "indicator--abcbd654-02eb-4f7f-a08a-9396991e1089", "indicator--e89d3625-ff61-495e-84ce-a4a59ce01260", "indicator--52ca0ed2-4f3d-4433-80d0-792005aae620", "indicator--a91a3079-e0a8-4935-8da8-2bf4a9885830", "indicator--bc830f62-6de9-4881-805d-c82cec5d59f2", "indicator--83a52ee0-0601-456f-8265-94f6d736dd0c", "indicator--efedb1f3-beaa-4de5-8214-21bd17034d94", "indicator--66584893-0940-4710-add6-f92074143c3f", "indicator--8c89724d-da81-427a-9a7a-260591225657", "indicator--683094b2-6f8c-4df2-a83c-6dd6de0018a4", "indicator--9e2f7811-5942-45e5-8ad7-36af3022b9cb", "indicator--602ae1fe-aab5-4b7f-828b-640c68c16f1f", "indicator--2ba32631-5a5e-4038-82b0-7d74075c45a4", "indicator--1079cb0b-1825-4f5d-84f7-5c7528299ab2", "indicator--54bc2a2b-c06b-40e6-9243-31b223e4b845", "indicator--d4398115-0727-44a9-9741-87e8d391de92", "indicator--71bb890c-acc4-43ee-930c-0937d36b1397", "indicator--afa6316e-6b58-4968-82e7-af67469f1ddb", "indicator--6ddcc646-b2dc-4212-aa2e-1b52813fdd21", "indicator--185ba857-d104-4b38-baf2-2a7e086bb62c", "indicator--bccd05f1-c1b8-48b1-aaab-be450b95e116", "indicator--5a96728f-9da8-453f-a2e2-6918256e39e3", "indicator--147959e3-71ee-454f-a21f-10f6d87379d1", "indicator--1c258a40-efd3-4dc6-bd32-f24eea9b7b93", "indicator--6da49aa0-5dbc-40e4-b175-ee6cf735d0bf", "indicator--761ebf3b-c8cc-4884-a446-42fcb4d9b259", "indicator--daa55c46-69c5-4ae7-a71f-1d1b12f68098", "indicator--76abf68e-53bb-47cb-bcb6-bbf3230eb9d6", "indicator--5a4d5278-2001-46af-b716-4a442d97d38d", "indicator--d406cce5-3b50-4342-b103-aed962f76f95", "indicator--9b166fbd-0f30-4a73-8d6d-1757d497095b", "indicator--f3651935-c3bc-463d-9e65-23472082ff72", "indicator--475b6be6-91d0-4c32-986e-1227ff102c95", "indicator--e0d9b016-3815-4d96-817d-5471bf397a10", "indicator--dc721585-2d27-4ce4-8725-245fc451c111", "indicator--59758f03-f4c1-400d-b4f6-39a4ae060b62", "indicator--55fb87c8-85c3-4766-9b4f-08ffde3ef8d1", "indicator--361615e2-aaac-4c10-ba16-144b41474788", "indicator--9a375bc1-7225-40c7-be8a-3152bfadb50a", "indicator--680ba86f-62a0-4c44-9ad4-7a9ae752ec4b", "indicator--cf4b8083-9698-467c-a71a-79125fa415c3", "indicator--ce4bda34-659b-424f-9a06-f74c24056e2a", "indicator--1bfb098a-b02c-45e5-98a2-eecfecf46f2c", "indicator--254ac515-b272-456c-bc4a-f3b591ac573d", "indicator--51a3e331-4ed6-4c59-a45c-89946e20ca06", "indicator--cdf568b0-66ba-4509-be2b-f04f7bce7185", "indicator--902f798f-9cfa-4c20-9119-b25c10761aad", "indicator--fc1cec2e-8333-4bf5-b72f-aa9b97340c96", "indicator--c6ed44ed-34a8-4842-9cac-affa104952bf", "indicator--cf07d090-e49b-4567-8c5e-832556fc2bdc", "indicator--1a2b5e03-33a8-4950-9d33-f5ce918bd8a8", "indicator--8a1890ff-237d-410b-aef2-f70e9503b82b", "indicator--cdfbd27f-b477-4e4d-848d-d51d5ba912e7", "indicator--1b3db4ec-1aed-47fb-b199-e910d38d1015", "indicator--f342e5ea-87cb-40ee-a402-36175c36c031", "indicator--dc1fabcf-9649-463e-b2ca-5988c78334e1", "indicator--e04f0c64-d0db-482e-81d9-3954e88f77d5", "indicator--4a1d9d6a-6b90-4fa8-bcfb-75cc652cde8c", "indicator--ced1eaa2-2930-4a8f-a832-dea89696b77c", "indicator--86e5e496-d2a1-4a50-915b-7287791875f7", "indicator--cd23f18d-4aab-488a-b854-dad8ee2f11e9", "indicator--acecf579-e40c-4bbc-bbca-a07719b1c2a7", "indicator--4c42fc0e-db88-45ba-a1f5-f7ff33af9e52", "indicator--b53c04b0-2c36-48cc-9f3a-03efe9545167", "indicator--6e46dd02-8344-4f62-91ce-94ff38bd36ac", "indicator--a67bcf0a-2387-44b4-ae92-5639b07702f1", "indicator--b26a39aa-5252-402a-ad2e-0db6fb8d12fa", "indicator--6298712d-5929-4b66-aa07-f75311a70c80", "indicator--840b7e2d-d4dd-498e-9ff3-efd3f28220e3", "indicator--195f27a4-7120-48db-a4da-5726091e30bd", "indicator--e7b1fc9c-ebf3-473a-9267-57dca003fdae", "indicator--81b71429-0fbb-4d54-8a2e-70aabf24cccd", "indicator--4ac47b2e-72d9-4b00-a4da-9af6002a8bb5", "indicator--306ca2ae-d8bd-47d3-ac42-a4d51537fa65", "indicator--1468dc8f-1cfd-4a26-a5b0-a8bba02a98d4", "indicator--10eefa1b-b153-4970-8560-b2fb64c7d5c3", "indicator--b5d144bb-08e4-4573-af6f-da7ed3cf8ecc", "indicator--6520fded-00cf-490f-9844-4c957475dc60", "indicator--617929cc-3afa-4606-aee7-f891d80f5605", "indicator--32c4b20e-7783-46b5-bbff-3010902a6c31", "indicator--61bc51ea-e995-4853-9201-033d9c32f9fd", "indicator--49aad0d5-4d5e-47d3-bb82-a7cde8867f45", "indicator--01623b88-f40f-46e3-b588-60f7b3a0f487", "indicator--a0cbd533-80c4-4aa6-b7ef-ed4294150c27", "indicator--2dbf0131-9b58-4d10-80f1-9179f028d6ad", "indicator--99994ce3-7832-45b5-8757-2934fa335a77", "indicator--523f7fb7-712d-4bd3-a319-4287d45fb0bc", "indicator--647a6072-1573-4412-803d-0fd3621d1740", "indicator--f84f13dc-590d-446f-be1a-083d6276108e", "indicator--bac871a0-202b-4a42-9dfc-a33b8d24d493", "indicator--1f8ecd9a-b516-470d-b598-bf158a5403a5", "indicator--00abe86a-9f57-4da6-9457-c9065ec7bd7b", "indicator--206940d4-70f5-4590-a09f-861f430f7da1", "indicator--44cfaa13-54fa-4a6d-8ec3-a3490e97e7f6", "indicator--763b5204-effe-4f02-bc13-1085777e79f6", "indicator--858983a3-9620-4893-954c-eb2cdca1c9e3", "indicator--94e285c7-bf2d-45b7-a894-3b1a3b6724fa", "indicator--d7d510ab-5b63-478e-9a5d-14b9473d50b8", "indicator--cba73e84-875d-402e-b5d2-c855d6367b8d", "indicator--6ced674c-9233-4465-ab3d-6d764d74b5eb", "indicator--607a4547-5b36-465f-ac4a-8fb5d3cb629a", "indicator--15d8c7d2-b5e6-48e1-9a6a-dad1432088d4", "indicator--ba8e1e9b-418d-43b3-a802-d1782a0ca190", "indicator--e79da5f2-2a61-4dde-9098-730bcd5dbcee", "indicator--d27d44c9-4608-4a59-8743-b356bc77fe07", "indicator--ba1708ed-c838-459b-8553-a3e21cecc3a4", "indicator--5d3b5f75-8eae-4911-8e6f-e9164d3e06de", "indicator--28c9306d-d6b8-4714-9a53-0e1639b6897c", "indicator--ae6e320d-b1da-4ee5-91cd-56cd005ef6ec", "indicator--0562f501-8973-4da2-9842-5a9f802062b2", "indicator--f88a05d9-8435-465a-8861-5609df7d6cd5", "indicator--922cfb49-2aa0-48b3-b18c-e89810697718", "indicator--9233fc77-8ca2-4f65-9619-330ad8eadf67", "indicator--5b62efc1-69be-4d8e-bf29-455e0c5b28c2", "indicator--f59e0e91-29e8-4090-a2f6-85b07c4317c1", "indicator--7b203f65-24d3-43a6-8546-af6bc2a594e9", "indicator--54d2114c-4bd0-49d7-9c23-181ac62c4807", "indicator--3a4493a6-800e-4425-bd47-ed0575fe4454", "indicator--a9362a16-eb62-4b6d-ad84-261de08759dc", "indicator--6a3f2fc6-4e3a-4852-94fc-ddc8d4d381f7", "indicator--f870efd3-dfc2-45c0-a75f-8b8eb7797e15", "indicator--ef2ecf0e-3c8b-4ec4-93a3-9236c5106ac5", "indicator--e666aa5a-1a5a-42a6-ba4c-b234c08d81f6", "indicator--32f2e888-76c0-4c4e-963a-de69e6973101", "indicator--3e6fdeef-b6d5-4217-879a-9cd508969454", "indicator--6cf7f27f-bb38-4247-8b55-c93a553ac638", "indicator--01c09dd7-b659-475a-afd2-74fa7830e401", "indicator--4a4d5e64-edd1-42bb-a67f-c73fa75196ae", "indicator--89b6d974-aae6-484b-8125-9472719cf5e3", "indicator--5d4508f4-910e-4240-b998-f4e2d9ebdfff", "indicator--b51269ac-2481-48e0-84bd-dd9b5a0369d9", "indicator--822bd16c-0dc9-4858-a70c-abf83b906dcc", "indicator--d2cdb59b-67ab-41ac-b872-8149d1573016", "indicator--d394ac04-df87-40bb-86f9-3a9fc26e3471", "indicator--73d03928-4fe0-4d14-87a1-579232cdb3dc", "indicator--8d436aa2-a898-4713-8097-beef134239fe", "indicator--519cff95-56d6-4fe3-a3df-b0b4cab9406f", "indicator--029d49bc-9181-4d1d-acef-66a400471d21", "indicator--5d8327a7-85ad-4c33-9b1b-a5c6752201b6", "indicator--f3d13b64-5465-4c37-a387-1b7a8e2541d7", "indicator--3497008f-8758-4817-9980-099281a0327d", "indicator--df13caf3-093b-48ef-b488-8e42e6f068a6", "indicator--f6772033-63f8-49c2-b760-4bcd0f27519b", "indicator--1b9c353b-c158-405a-8951-a33217c11750", "indicator--c9eaee68-5eba-4d74-b97f-91d26244f2ce", "indicator--3e710db1-d718-4980-9e5e-be85cd2b3ccc", "indicator--730df323-b5d8-4caf-8931-7c6a95e15697", "indicator--ed2d4024-de1d-4b68-8395-bbee55e6136c", "indicator--505cbb9c-0863-40a0-ae9c-0e1fd0098b52", "indicator--5210e8e0-1914-4439-8f1b-30edad9d9ee8", "indicator--55504596-911b-41b4-a9d3-36ca70ae735f", "indicator--903c3aed-04cb-4764-8128-5b11f992609f", "indicator--0885fd37-1f37-4957-93d6-69ae888999de", "indicator--d5220c8a-6000-4b35-9b34-50166192df2b", "indicator--b7f0ce9b-aba6-447e-b10c-fd73414ec742", "indicator--1fcc9731-6e96-42e1-b349-262eae14a78a", "indicator--c92def01-6c62-4dfc-a900-8020076ca7cf", "indicator--1585d049-112a-456b-b136-8fba37db24e5", "indicator--70ff574d-9122-4e3d-840b-4f9d2c6b39e1", "indicator--97b4e538-a08b-43e0-b311-69e530b55182", "indicator--c22eb16b-ef78-4685-9c58-89df6698c138", "indicator--70a3c53b-269b-40c8-8de1-24a82ca72796", "indicator--4cb22a24-32c4-4e3d-9467-e1a7dbd953a1", "indicator--ca278712-7bb2-4f6c-97cb-12f13a42d251", "indicator--50f3940b-1a40-42d5-a982-182f6636db60", "indicator--806aa868-7073-4748-b1ce-d835f4843bf9", "indicator--45b40112-bf2b-4095-902a-3f7f5d00834b", "indicator--374dc958-7d23-42d8-b36b-35d937f965cd", "indicator--f5bd4f4b-af19-4bed-968f-5c3228d28b27", "indicator--097ea5ab-38a5-4947-a671-4bcc25cd732c", "indicator--93933fed-5d64-47ae-90aa-70f1a0809a44", "indicator--14eb1978-23c6-4613-ac83-175c8f41de3f", "indicator--f57b4e60-1e40-431f-bba3-de2fe9e78aeb", "indicator--4b25e182-01f6-49ce-8fab-186479d2d8c5", "indicator--7ab7a731-033c-444e-9a77-e06e59b9b437", "indicator--5bad2a54-ca6e-4c7e-9222-f5314d448995", "indicator--9e8f521c-3f1c-4fb2-87c2-e6d441767882", "indicator--7b67df00-03af-4e4c-b127-e16c37c8a1e8", "indicator--f00008b7-c52f-44a3-8a85-5e42e2bfc7a3", "indicator--b4c42043-fb3d-4103-b9a7-83d98bda2ef4", "indicator--4f7b5c39-6fd1-4918-9d81-e68ddfcf1144", "indicator--925b7983-6e03-43f5-a512-fdb7e5e590b7", "indicator--9c131cc0-69d8-4414-b215-208b2e7d88d9", "indicator--2ff2b86d-7c8b-463d-9852-4b8ea37fc02c", "indicator--3220ca66-687f-44a4-8f8a-39effe1b857e", "indicator--3111f7cb-98d2-4c6b-8543-79c741430442", "indicator--488beddb-61c5-41cc-ad24-92ea0452a448", "indicator--b4f9cd92-1c3e-4f59-9bbc-56b6b4e6eadc", "indicator--76a5dbf4-4c42-401e-9550-1c5f8b31d767", "indicator--74640ab3-9fc5-4278-8164-8180adbc17b1", "indicator--0a69f3b1-320d-41ac-a780-c0152ba1cfcf", "indicator--2b5b5682-95f1-4f35-8f57-a17ce16a764d", "indicator--bd80408f-a6b8-404d-8c3f-7751f62808b5", "indicator--fba0c57a-7a8a-4517-b46d-0839b157faa8", "indicator--09641df2-8766-4a44-b80c-cc3d26ea6e0f", "indicator--4570d0af-5a27-404e-9311-4939f354cef7", "indicator--d66f97be-f717-4c8f-a362-d121a94a29cc", "indicator--ddad2071-e19c-4231-9b36-3c5999ee60b7", "indicator--7ecc202b-3689-49d0-b3ab-58b60f235cb6", "indicator--c0f38d2f-1ed3-493f-926f-3db6134999f2", "indicator--6ab8a0e7-21d7-4525-8695-45a8fef45d0b", "indicator--b8b1a6aa-b535-4266-a085-307b134b093e", "indicator--19990c6a-0a43-47cd-82b9-e8933c73ce4b", "indicator--2e0f839d-4cd2-4cdb-b8b1-2280232ea40e", "indicator--9a264981-c38f-4482-9cac-4c64db0386f9", "indicator--acaf3842-c9f1-43c8-b170-b3fbc77ffab3", "indicator--f0e3e5d8-859b-4679-995b-5168833e7427", "indicator--1c925245-91ee-4b78-ad0b-859b4a978609", "indicator--8559df6c-d0af-47a4-aa70-62a721145f96", "indicator--f0390df2-981d-42c8-b556-85dc774044c7", "indicator--e416b65d-4a75-4c9e-917e-e4b2e5799f9f", "indicator--50b63ea8-1be7-4841-82b9-457eea52acbf", "indicator--78907141-1c11-40bf-8df3-6c24c4f2ae82", "relationship--5e636fdb-ea91-4d55-a5bb-abec1b0dfd6c", "relationship--cc408afb-0b29-4666-8df1-0127a8d8c71d", "indicator--ba1f778e-1c3c-44e3-84e4-2b40bd09be98", "indicator--267b93ff-bbce-4f1e-a4bd-a8498a1e7fac", "indicator--50c61ccb-7a9c-4896-bcf7-96075eb14e75", "indicator--1f55faad-d51c-4541-86f3-fc4fafe67d33", "indicator--51b32a75-1900-4c36-98a1-bc7cb1ed8bfc", "indicator--b9e58123-1b5a-45de-aa28-0ac54c1fbfd4", "indicator--d320787a-5493-400e-96ae-b21b68f9cf8c", "indicator--bbda95bb-a255-4553-b18e-9dd66b0fa024", "indicator--dd613429-360f-4dab-ad6c-d6588de0a0b1", "indicator--c9eef5c7-affb-44e9-b9e8-d7b95eface4b", "indicator--d05c7512-7a17-49ab-8676-6b75fd7f52c8", "indicator--83b8753e-c457-4717-975b-dfadbdbf74af", "indicator--77b7e9d2-bc9d-4444-944f-47fa25303709", "indicator--ee74a765-a36c-456c-9544-146602628ded", "indicator--8b8c2edd-1a7d-4bc0-84ae-013d778a0f35", "indicator--84f51eb0-91e2-427c-90bc-562f1a853b04", "indicator--a5c402fd-379a-4a72-8cfd-2f90ff506f73", "indicator--98102ba8-92a1-47ea-9dce-358a3e99bab3", "indicator--b0ece9a4-e088-41ce-92da-a753828c35d8", "indicator--0b982e97-8581-43d4-b97a-6d766b96ee4e", "indicator--61c38805-7fac-4ba5-9697-fe49bec1120b", "indicator--744d913a-678d-455f-8c2d-f6bf33ed8d91", "indicator--2bc4c526-0d96-47ba-bf86-debc86979685", "indicator--437742ab-26ab-42b8-bf07-e85d673218ee", "indicator--d942e5eb-e16b-4d99-b66a-b7becbd3d1cd", "indicator--7853bc45-e744-47d4-9a25-9c92eb954006", "indicator--d33fe9d0-7c25-404a-9a7b-91f9f3e0b0a8", "indicator--ac04851a-dd98-4227-a1cf-b41baf9843c2", "indicator--796838ec-60fb-4f23-8ad8-31d025a3427b", "indicator--a02384a6-e38f-423f-a87e-ad41b981f915", "indicator--063428b3-4166-4745-bc48-c539908295cb", "indicator--e2d1ee96-fff3-4f6f-b652-1ddc3754f927", "indicator--2c089f1b-dd1a-47e5-899a-2f38d3848ba4", "indicator--9f954fa1-14cd-4070-9cb3-19e0aa0f8ba7", "indicator--23569cce-2535-427f-be0a-1d3b5638ae6d", "indicator--662d7c87-f661-4f9b-966f-33e19d382bdf", "indicator--365ea3c9-e8ce-473d-9ac2-9bd6baf456bc", "indicator--0bfd5eb1-dce1-4d94-8173-52e4aa6d5687", "indicator--4615bc5f-b883-4ef7-a5cf-098a4c89c6f0", "indicator--b2b973c3-226c-42ce-beec-e6c2a5b5c384", "indicator--7d689273-2d6b-4298-8dfb-0406c078de81", "indicator--8c39f43a-aacd-424f-812c-df123c9ca1bb", "indicator--af80d806-eb72-4593-a409-db8e49eef1ce", "indicator--b37ccade-f51b-46b3-a10f-c4ec4333b4a5", "indicator--67a4326a-1cfc-4b59-9eb3-41334106617a", "indicator--5b661c63-e98f-4ed9-ad56-02ce257b140a", "indicator--13e42fe8-800d-4962-b3bc-28acb5ef1af1", "indicator--3bbb30a0-2a29-4c1a-a450-361cd3dceed5", "indicator--a1dbcc33-f4a6-4b54-adeb-71e53a95b5c0", "indicator--aa8db9c7-bff3-44a5-b19c-3de719d6367c", "indicator--4e26ee6f-a0de-4d61-a100-62da666c458c", "indicator--f0ed2f96-a7c3-4b28-a93c-4b69029cca01", "indicator--37ace95c-bd90-481f-bc94-4005084e734d", "indicator--6b00e96d-3c4a-4e3f-9e83-3a55d7a830b6", "indicator--a85f2cbb-4506-44f8-add8-fdeeadd629c6", "indicator--ce260357-ad27-4f6b-ae41-f338322e1b39", "indicator--14e25ef6-ebed-4923-963b-166f739a4abb", "indicator--b70a13e6-567c-41b6-abfb-6c171a09e574", "indicator--b2791c76-9897-4355-b95c-2a7fcadf8649", "indicator--862de119-5f44-4124-bd99-62e4ab406ab0", "indicator--7bf65b4c-d27e-4ea5-a035-a5f0fec2880a", "indicator--8e69f45b-7c8d-4093-bc62-8aa55d9fb3dd", "indicator--afd73c16-1b19-4474-97f1-53e0992f07c9", "indicator--35163c93-f0ad-4629-9572-a5eb2035dd7b", "indicator--d30d3a1a-3b29-4f88-b772-99843e69143a", "indicator--bdc1e1dc-4506-43a4-b41d-87d7b96f7d1b", "indicator--059d800c-73c4-4a29-b4e7-2f831951e71d", "indicator--f37400f9-ca8d-4b28-9bda-a01b6d3e7a61", "indicator--85c2ec8a-926e-4aae-bc3a-adeccb8d3491", "indicator--92e6723b-c9da-4c6e-946b-e8f054b8f800", "indicator--45be353d-d6d7-4735-9587-241b48ce82da", "indicator--f00ac8fc-0be2-46ef-8598-f33edaebc818", "indicator--0b4dee2b-d06a-4234-89d0-25bacd9c475d", "indicator--7a7fe167-9793-414c-83d9-693beab0f9f5", "indicator--331aab98-f883-4150-9934-e6d51780c9fc", "indicator--5a8b91bc-c2ac-4ba7-857f-2e366062488c", "indicator--51f40d5f-a490-4003-b988-7a6dd9ff7ce3", "indicator--cb81e389-985d-4902-b968-591ea8d027c1", "indicator--10f3bf54-9371-4fe7-a3a3-ffbea4ebd1e4", "indicator--6661afd8-a5eb-4b69-a078-cc8bd738c2fb", "indicator--ab424f89-a0ad-4f1f-811a-5e92e6811dc4", "indicator--501f8ea9-e85d-4ca4-8d36-8a94c4204dcd", "indicator--656e2bc8-945d-460b-93bd-247013fc9103", "indicator--f262b26f-5828-4731-a7df-c087196c8aae", "indicator--ad84735e-478b-4830-95cb-2ac85bc450a3", "indicator--ebd57508-1127-4418-b0f5-3fcb62226972", "indicator--ea4d8c72-3741-4475-9fd4-cdcf6c444a1f", "indicator--5bb2e2cb-75f7-41e6-8f81-55d8e8b07892", "indicator--381a734c-20b8-43c2-85b8-f0f807b6f178", "indicator--0eda7b81-16ce-4388-a94a-6d4fee8231dc", "indicator--9a4f3f3a-fc92-4b3d-a9bd-f9d327f1eefb", "indicator--325afe0d-528f-4ef9-8fad-07c8082f7717", "indicator--bb708a39-fc62-4502-8888-4c09449a5947", "indicator--c7ba60c6-1a15-474f-a799-89d15beda0bf", "indicator--150b884e-3efe-4fcc-b031-b503c8da7551", "indicator--150fc5fa-3bcb-4601-86d1-2be8b36a9f01", "indicator--3766a41d-1988-4a4c-9ca6-550a51df9b84", "indicator--4067b447-3eee-48dd-851b-0615c5a38504", "indicator--d3990925-c227-473c-a16c-f9472073f7d3", "indicator--df359db9-b7da-488e-b920-dc25447020dd", "indicator--0b4c28ca-e85b-4b06-88e7-ee2f9813d423", "indicator--1a20ec75-a9a1-432a-9be4-3f1bcc0fa4d3", "indicator--8185ee42-5cd6-485d-a02f-f51ea915b239", "indicator--1b13f84b-7d27-4f29-8d2e-fd1394fb5d54", "indicator--62a46909-c9aa-4a3d-90b2-c31014adbdd4", "indicator--c7c91bf7-5196-4e8a-bb51-2b7f1ca8380e", "indicator--951e3ecf-a22f-412c-86d7-c42f2123f173", "indicator--e255f429-561a-4827-a8e7-a55ba2fd4504", "indicator--242588a5-b338-453e-a3c1-97b1eaebd503", "indicator--cef30e44-fc72-40f7-ab88-6c31a8e6084a", "indicator--69b82fed-82b9-4ea1-9a79-8c6eb5d86b11", "indicator--764c157c-c132-4cc7-b25e-62ed6af6b122", "indicator--658e7e7a-60a8-45aa-bc06-943c6da31ddc", "indicator--f45c6a78-a1c7-43f6-bd3c-5da45d2ce3f2", "indicator--d090d57e-01f9-4936-a01a-3297fe79845a", "indicator--79fb7cac-281f-4c54-8cee-1349e3fbce93", "indicator--4a28184d-a09b-4117-a5c4-698610d90544", "indicator--5a47c80e-1756-4a96-82ae-f6abf371f38a", "indicator--7ef5f3f3-8c7c-4032-9954-3ff944f7de99", "indicator--7b04770f-90da-414d-899e-091b7a04e882", "indicator--9fe192e4-89e5-43c1-8935-5c1f3e868aca", "indicator--f3aa7a26-202e-4868-80f1-384758ee54ab", "indicator--3a99a005-a954-4fdd-8ed4-22c563d5a2fa", "indicator--9af5d873-b02a-4ab1-9d0b-e952883a2a39", "indicator--1059b803-18bf-4d49-b1b8-e5c22ca7b889", "indicator--8de52ac6-d2cb-495d-b612-9187679bf833", "indicator--0bc9e643-17c8-422a-8062-e21e7309bfaf", "indicator--7936a492-a18d-485a-986f-74daa1071a59", "indicator--39483447-a034-4bf2-986d-50d8da9e7e8d", "indicator--7e3da04f-d678-4e4e-a972-df60316567dd", "indicator--89ed27e1-7291-409a-be74-0f5277bedd62", "indicator--ec914b83-9f9a-4bf9-92e3-61f5380445a6", "indicator--e222766d-959c-4cd9-9eb3-e506d18177a4", "indicator--90cc969c-1f2a-4a83-b68b-1a158060b20e", "indicator--30bc3c7e-73cc-4841-a7bd-1e823cb40723", "indicator--471790a9-6389-4c2f-9ac0-a00d1f45463c", "indicator--cd35c104-3423-4a6c-91f0-57a0c376d694", "indicator--e1316247-0dea-4ec4-858f-eb710590fa1d", "indicator--adeeda33-0996-4812-9aaf-3e79e3470053", "indicator--b117153b-1e92-4ec0-9ce9-13219672f945", "indicator--fff7c096-67e8-4825-8bdf-dbb9eade7519", "indicator--c3080533-87d3-4b8b-9993-a75d91e87513", "indicator--15ffc37b-aec0-4148-8f4b-a75a9587009d", "indicator--a7d6f431-01b7-4b29-ba45-2159088e02a3", "indicator--234a4b3f-a1ad-425b-baf7-d0a823cd1d67", "indicator--5cfce33b-08be-4ac1-b42a-4fb9bec62e99", "indicator--4e6f37a9-c5d7-455d-a7fe-e5bd91f13235", "indicator--7ff83fca-1943-4e37-9975-89b8eb6ecbb3", "indicator--88acaad6-ef6c-4ae2-9480-b18874026f1c", "indicator--9c033eba-5dbb-4323-828b-0dfd04321340", "indicator--06a8a7c1-296d-497a-ac9c-56bd1bd8a641", "indicator--74240b48-9178-4457-acfa-1989ff968500", "indicator--92a26449-fbb4-43bb-bfef-ddf5650c54cc", "indicator--df76c06f-9ac6-4c8c-96a2-16818fb2393c", "indicator--10e0ff1f-5446-4a0d-a6d2-d7a9769b4bcd", "indicator--61274ba3-9695-40f0-bf21-acb79b6cb814", "indicator--1031c367-8b62-4941-9ea8-982c2ecfb90a", "indicator--f6c02e87-4d34-4518-9336-99b34138c6b0", "indicator--6fef5361-2a7e-487d-94a0-753dbe263961", "indicator--98fcca54-b431-48eb-93e8-5b9f6b08cd01", "indicator--11eb881e-6242-4f5e-97a2-6bf30c0b0431", "indicator--22fdedfc-e42c-4999-a021-0d86475351a8", "indicator--2c1926f8-2e58-453f-910f-dcd5b140260e", "indicator--67ef6b64-9a17-46fe-beaa-45f30dd3676a", "indicator--0252af57-b84a-490c-b4df-3c8bdb93017e", "indicator--04ad68a8-ce1c-46a2-9a76-e4ad1bb613dc", "indicator--8bf83d9d-4a65-4690-a002-dcbebc037b00", "indicator--f1576379-11d3-44e2-bdb4-5b57263a202c", "indicator--51653126-c5d3-4957-abab-29aec07fe7be", "indicator--def63354-1b0c-41e3-b0ea-7665c35f9963", "indicator--9a8cfccb-71b1-4372-a69b-46d0b24b0e5b", "indicator--a0f8e742-fadf-42ee-b160-c61bf25f557d", "indicator--3dca3630-cdf6-4504-8b06-a7981908a583", "indicator--f39834a2-93b6-46b6-a310-ce87f98d6487", "indicator--258b8d56-fe26-4069-8858-7b0785691a08", "indicator--165a481b-a90f-4d81-af42-a7375bb5bd45", "indicator--be286448-12fe-4119-8b1c-22b94a55b212", "indicator--1ea20d56-85f6-4541-96cf-ac3d903100e3", "indicator--2da2313a-97c0-4678-a05f-74c51da66184", "indicator--d714871f-4154-4935-b867-a14c6b730476", "indicator--eb048ae0-18f2-402a-8fe3-ab4f54b3eb1f", "indicator--35868086-0571-43f0-99a9-8f4368b59002", "indicator--e74e8829-6a59-4a90-998a-6c4d309818a2", "indicator--15666c8b-87fe-4f95-938a-c3ef01f8c6cf", "indicator--e8c10164-ab40-4a00-8e9f-84f1bdbb29af", "indicator--ff1614ae-3a75-4829-9083-8a3360deb72e", "indicator--2cfdef79-fe0d-470e-b5ad-216dad59b872", "indicator--8018b6d4-7399-4cb5-86d0-eb5e1d7db8d6", "indicator--34730557-4f9b-4f52-8bd0-54284eabac97", "indicator--3ce06340-66ac-46a7-8d46-49dba888037a", "indicator--b32832ed-3186-4d1f-bac5-383cfa8cbd9b", "indicator--d468b1d8-a337-408b-90f4-c193a258d104", "indicator--e844a853-ed14-42b4-a438-f2823ad2fe89", "indicator--1216bba7-60e7-4507-b6fd-151b966ed067", "indicator--956a9e51-f575-4b6f-848a-821a76f76163", "indicator--54f5ec6f-f790-49a1-a06e-f7bb0605f89a", "indicator--1a25d06f-18b7-4561-b57d-b97f3fccefaf", "indicator--9e244cbd-2849-483d-9f64-9af81b59363e", "indicator--c2839fab-afdd-4a9c-a861-7191b67bd39b", "indicator--07d2ce23-e404-428e-b0d3-3db988cad46d", "indicator--9a475f93-b4cf-48f1-a2b8-f6d6b9bf0d57", "indicator--ea6041ca-d16c-4f52-9c39-f5adfc93a1bb", "indicator--b1556a24-fd17-40e7-ae42-e8717050c34c", "indicator--94b90612-35d2-4e1b-a433-5ec6502bd9eb", "indicator--bf1827ed-7b59-4090-aae3-c6ecb4cef712", "indicator--ae32d281-4f4a-465c-8824-b46e1eaf3b17", "indicator--9bc87859-70e5-4aed-9081-e8925b070325", "indicator--5e0a1e0f-05e4-4bdb-978f-ac2f54f1810b", "indicator--356bd9eb-a63b-4e94-9197-408c925c28df", "indicator--4dbd66e2-e916-4098-9f4d-7133f0792953", "indicator--5857ab4a-3669-48b3-a304-a4516b663831", "indicator--76319e19-cf1b-4f8e-a0fb-9115d054ca0c", "indicator--afd56ac3-21c0-476c-812d-21ab7a481bef", "indicator--43c0d52d-5b4e-470a-872b-3d163bd061d5", "indicator--7cb4ae61-cd60-4bc9-8d4a-ec376ae830e2", "indicator--b9bdc7b2-d2ad-4bc9-8ae8-3dc54108b33f", "indicator--357e6a86-8218-4368-aedd-1fe19fafc2ea", "indicator--ae442b58-8604-4e4c-b1d1-48581c6ee489", "indicator--98417dd9-45b1-44b6-ab6c-9eace1a9d7b5", "indicator--89830652-91af-470d-8814-e69d129353a3", "indicator--19fde3d8-da25-40cd-aa8a-36330d542e6b", "indicator--994681ec-d9e9-4dfc-8bf1-d55b5a0d838c", "indicator--bdb39ea1-a477-4b91-b9e4-9211e5af6ebc", "indicator--5cb3b7d4-260f-47a3-8542-01b4695876d4", "indicator--3b124fe6-2934-41de-a5ca-d2f0b49a17f3", "indicator--3e090ab8-7ac8-464b-95ae-3c53fe5564f3", "indicator--8f56d292-450a-4077-ba56-26ea79b79e39", "indicator--7750ddfe-78df-469f-a7da-13d2e296c9ad", "indicator--dccb1afd-78fc-4786-ab9e-9fc44305f3c9", "indicator--c6ed61b2-b80c-4efe-bb64-4ea9bd155c18", "indicator--cc015345-a911-4a2f-af8a-ca65011dc1d3", "indicator--4a59d912-9c7d-4b49-ba45-7ff8dd436f8f", "indicator--a8b2c5f9-bd25-4ebd-a910-d7c32ba6df21", "indicator--5c529cab-8079-418f-9eb4-62549361ea14", "indicator--595c3404-3d26-4bd8-8a05-5597a45c6a22", "indicator--f9db8317-5254-4060-9b59-bf66bca1a0e1", "indicator--a2ca5740-1b2b-49e1-9162-5a8c3abc1499", "indicator--ba72124c-2440-443e-b1a4-d8e5bef0e8e9", "indicator--97143b74-00b4-4972-9fd2-108bb19f6a78", "indicator--d1b2bf6b-b3c4-42d2-82c5-de4dceebf000", "indicator--5a5fc684-a9cb-43f4-8f9b-ba9497c20c0f", "indicator--fab09855-0e1d-47e9-93e9-95a87da6b499", "indicator--b95ad690-7457-48b4-b69f-ba94d7c5105a", "indicator--0d412dd1-52bb-429d-9b7f-0214450e7477", "indicator--b935c31a-6641-4d52-9933-44ea7a1b8289", "indicator--d85cfb36-26e6-4db3-8e7d-739ce2646c94", "indicator--6ab2f689-6f55-4dc5-9e24-a133ae6ee6ab", "indicator--5751c52b-884c-4313-9707-263b40a3e4e6", "indicator--ca6421f5-a1d3-4a59-8f55-8c66bbbc841f", "indicator--c25b5d5f-ae01-4cb9-9054-7631fe0fd484", "indicator--cac0ca0b-957d-4eeb-b1f9-d8e971df0dcd", "indicator--7b9283bb-bf47-4a47-8c79-afd3769cd95b", "indicator--294387e3-4337-4b64-bdb6-ed8add6e00a2", "indicator--f49569f7-b6c5-4bb8-b14c-f5cfe42099ca", "indicator--262f7f13-692f-4d72-90ae-8cfa9903e2ab", "indicator--490a4856-d6ae-43b4-9c0f-07b38406c51a", "indicator--734f0cda-f1b5-4389-b2ec-5d978c1117bf", "indicator--5266ebb3-be0d-4fe2-8ccf-23d463f66b43", "indicator--858964a4-6ce1-4935-b0ab-28ac0117d2a1", "indicator--0edbd4cf-bc47-4f04-ab97-88c88d9cda30", "indicator--357764d1-b048-44fc-bbdd-9447d549ac0c", "indicator--8d175645-0b34-4bef-8081-6e967bc81e1c", "indicator--aea7714b-319b-45b9-b0b8-f1d46474a302", "indicator--a468dbfb-ec7f-4e05-8d95-68c6b69b1e5d", "indicator--63759053-b39f-43da-89c6-5e503d033e6d", "indicator--ca776b56-2643-472b-a25b-ac51589f7944", "indicator--57b1fdec-6fe5-415a-8a2f-10b5b107f33c", "indicator--99796dd2-846c-4f31-abee-ad54eafe731a", "indicator--8843cb32-05dd-4d64-a37f-6524625c5fab", "indicator--2137f9bb-c59a-4f54-bae5-989b6020ab48", "indicator--9abcf6d8-c2fc-4da0-80bd-7b2dafa0bef0", "indicator--aa961709-986c-47c4-9c4c-c15fe05d295c", "indicator--e5b0fd64-9351-4a62-ba38-3f3d1fd601e3", "indicator--1abd4398-914e-40ca-b3e0-2037687085cf", "indicator--9755ac2d-a697-41a1-b1d0-30ffed83bf4f", "indicator--f6471ec4-4d7e-41d9-9c74-626f9cac18f4", "indicator--6b766cdb-9f5e-4bdd-b798-06d8b68bc92e", "indicator--48cfe8e7-e175-4ce3-a89b-4a1c3ca671c6", "indicator--8c3e158b-b762-4190-a687-b858725c61b5", "indicator--65ec7975-8640-4e76-ae19-d25b142bacca", "indicator--3797939b-aaa4-41e2-8dcb-942563793d67", "indicator--24c9a9af-42b8-4df6-b27b-753d766d5073", "indicator--96b8d8ac-201e-4db3-886d-b48059b0b0c2", "indicator--7e9ce06a-52f6-4f8e-96f2-afc2cb9b720d", "indicator--fa78594b-ff6e-4f55-ac47-36a5e481665b", "indicator--9ea9517a-8eb3-4bb9-a207-6cb224777c0a", "indicator--af55781f-d55d-474a-afe9-afbbfe6c6e0f", "indicator--19c3006f-5e65-4ff4-b702-84a431b9fbc7", "indicator--557d9ff8-ac56-4bb3-9412-37d435a5d883", "indicator--eab5aa06-a38c-4262-a1d8-8938cb6c0e6c", "indicator--0e34abc8-0bc3-4b23-aaa6-c1778094d7a4", "indicator--2c150999-fe70-43a9-bf99-619725e8b381", "indicator--c482840c-64b1-4e18-b914-9fc7d59ec083", "indicator--a668bfad-9fb4-40cb-b73b-a61e246eb7db", "indicator--daa0a347-2f4f-46f2-b69b-1b70576c2fb8", "indicator--4f557302-60b3-4d6b-9fe6-b45021c51603", "indicator--02893086-7ef4-4611-bf0b-9d90f83f04a7", "indicator--a3b341cf-bd94-4e57-aff5-cee65b2f7a7f", "indicator--4ef2e272-b11d-4a11-8385-26a23dfa292a", "indicator--6ec6f90c-d656-45e7-93dd-8c1e2736633c", "indicator--f7b0679c-74c8-4f81-b682-0e893c487ab0", "indicator--7f2225b7-a567-478b-89b1-4a8c71c387a4", "indicator--c1f0b85d-3796-4f25-bfeb-87f639db13a7", "indicator--63796c7f-f8e8-4ecf-bb70-b54223e2d645", "indicator--6ca0c4ee-d6b2-4a1a-8267-d9d24473a9bd", "indicator--a8190a11-51f4-4fcd-bd49-3d4165b7f361", "indicator--6434dced-641a-4638-8846-d5e82d9a1af9", "indicator--c1b4e83b-43b0-492b-9dfe-71dec4fd09c4", "indicator--3e9db281-3119-4d6d-92fc-6d3367b5ae32", "indicator--77778076-6d36-45b9-a73c-46dd3964bef4", "indicator--8e0f11d9-b69f-4777-b0be-25eebf2b32f9", "indicator--ea1ac32e-62cf-49ba-ae83-0e8d9e39e2f3", "indicator--e130c44b-8f89-4137-a2f7-0fbb268a9833", "indicator--3f9cf245-1501-4170-bbe4-51575e101a98", "indicator--971b769a-ed80-44c8-90ac-fc930807c9fd", "indicator--89d2d96f-ffd4-4b53-a54a-565d9fc5647c", "indicator--00f35122-49b0-4031-8a7e-058fdfa8575e", "indicator--2c6e235b-2d7e-4523-870c-dd5cf5bd99da", "indicator--ea384299-d7ad-4e07-bb7a-9ba5c673bc70", "indicator--ea01886d-4eb7-4bdd-a173-fed43a239355", "indicator--f4157aae-50b1-4798-9ebc-d1b36ba802d9", "indicator--7793125a-5767-458e-af57-645529c3481a", "indicator--8df50d95-90df-4d57-8911-f25681e7f1a8", "indicator--e8fdc506-5cff-447b-88bc-6c393b7b2691", "indicator--865318cd-c1ea-4894-b708-d061d52ffac9", "indicator--e0e9b7ac-74c7-4b47-84fb-2d46a4a87b21", "indicator--47d1c5c2-95d2-4f93-a4fd-52a824a9bd4e", "indicator--7278963c-5e55-45c0-bdc8-1fe48fef4e88", "indicator--ab291ce1-fd3c-4f86-9356-a09d8842397f", "indicator--c9e1336a-649a-45c0-8eca-5f8098aff6d0", "indicator--3334d89d-e4eb-42b1-980d-3bc6a05a3534", "indicator--3f2cd4a4-bde6-47ac-a292-6268f8be1bb8", "indicator--b3e0ba91-147b-4cd9-8b5f-022b93655c63", "indicator--be604df5-bcba-4da5-99d3-6cc3f2a9bad8", "indicator--bc7b2970-acc2-4cb0-a1f9-1377ddd25930", "indicator--6a634ee2-d8b0-464f-b291-3d072fc11615", "indicator--9e84c0fb-6898-41d5-afd0-e8c63599843d", "indicator--80f4bb48-45bd-49a1-b9b7-1f57de3b5a5c", "indicator--031ad503-bd2d-4d25-b3ed-203da5a6b28e", "indicator--7dfe946f-84d3-4fc2-95d8-257a97e1a431", "indicator--5a4e31ae-1481-4a97-8027-d95f3ede51d0", "indicator--d172cd8d-e80a-4b0b-9fd3-fcc6e8fc3685", "indicator--0c98b507-de23-4522-aeb9-91d8c033eb19", "indicator--e78738f4-1508-47fe-8b54-8a1d9e2cc2b9", "indicator--0c535963-cf2d-423a-9e7a-700209ea652c", "indicator--4a291552-6787-4c4f-a900-63c4863fd9a0", "indicator--6e96b71f-26dd-4e59-a0de-07d2777878fd", "indicator--659ad47a-7612-4e34-85bf-ef68a972b5a6", "indicator--e793b448-5c25-4f6a-97af-9888be488522", "indicator--abd0380b-b261-43e8-9fa3-811f46bec1c5", "indicator--8bb922cf-eb93-4128-9a8f-dd519a0a97fd", "indicator--735d7b13-59c6-423a-9f7f-d35452ec0cac", "indicator--f265e9db-e5da-4897-ab3d-9a98e75ad2ce", "indicator--1a5f7e26-fb7a-4dda-89fa-ced352524845", "indicator--2cae4be8-171e-4825-87a9-5507c4bc390c", "indicator--16634b06-cf11-4371-9310-4b585e59a5cf", "indicator--9c02952c-17b3-48ec-be74-edaad392da9e", "indicator--53665a2a-a887-4b7b-bbef-cf3fd32033c0", "indicator--9f9f5c52-6770-46f4-9844-1244636f3d08", "indicator--771553b8-2dbd-420b-8f26-fbd19d4828e3", "indicator--625fe46c-16e0-4753-8d4c-035f073e9eef", "indicator--70a16ac0-2d1b-47de-ba38-220cc4e4bbc5", "indicator--50862883-11bc-4626-b9a3-268dce9199f3", "indicator--435ef122-358b-4fe5-a333-d0d1212eeaa7", "indicator--1ee0e8fe-8285-4a29-a6dd-bd4db32276ba", "indicator--ebf89dd6-88fb-4f3a-acd8-5868fbd99fc0", "indicator--143aa5cb-54b7-4b53-ac9e-dab6e8df3e3f", "indicator--f46047de-3a44-4ea9-a202-501bece4d5ab", "indicator--b63eec96-3030-4360-95a4-474d53c52f4a", "indicator--daf6029d-e7a1-41e1-8e0a-adde61aead0e", "indicator--04affcd1-308f-40eb-9424-b0ac07c5708e", "indicator--4bafec05-5dfa-48c7-964e-c6e5224f84f3", "indicator--0d2b0387-d833-4f56-9aa6-fb37ee00aee7", "indicator--003896c7-ddaf-4e0a-a860-990b997caa98", "indicator--2cdea82d-8e46-4247-b9f9-5e47d8ca859b", "indicator--fd4f5de8-7d73-4625-ac69-66e88c707ec3", "indicator--392c8509-d479-433c-97de-2c9ac15b5f27", "indicator--d7a3cdf4-36b1-444a-95bb-4fb23ef0fb21", "indicator--b3c57424-1948-4371-a4e9-eeed7b107bc8", "indicator--eef92564-037e-4d1d-9b47-9ae97fa7f7c0", "indicator--d7af1282-249d-40f0-b619-5d31b14dcc78", "indicator--76af03e8-0c75-4fb5-8d3e-48e854404c64", "indicator--a11dca26-8daf-47a4-b004-fecc4f6eeffd", "indicator--b8637dcc-b23a-4db8-8a54-fc352bdae090", "indicator--445f5a85-7c51-4c3a-a438-6ddd3f28adda", "indicator--6d617fa7-4461-468a-8e92-b2ef2bd49a11", "indicator--923c9cc5-46be-422d-94e7-77101318d407", "indicator--f69c97ca-b860-43e4-a9da-ebd413bccb59", "indicator--b543021b-2037-4544-8cab-34537fd6eef9", "indicator--1bc358ff-fc91-48b7-b021-d0b0d1bc996d", "indicator--d7db5a9d-a1ea-4d47-acec-a30f0daf1258", "indicator--90eb0005-7e9f-45c5-9a6d-d21f91220f67", "indicator--71490d89-8c9d-437d-954c-41d11c181222", "indicator--06e13275-8ca5-40a7-aec0-50fb47bc645a", "indicator--d0e28ecd-b3e1-4f6f-a9f0-125a8c766da7", "indicator--d04fc28b-8caa-4d67-8488-80a842b11cde", "indicator--bb30fe1a-7ef1-4e77-80fd-88198da405d6", "indicator--c8730c0c-4508-43a4-a37a-4e53ea4a9c8c", "indicator--2a7893ef-d2c0-4e7f-ae08-93bad02f02ec", "indicator--5ded8fc6-1898-4190-8b1b-1406d7245501", "indicator--cf330777-4ed0-4a90-bb8e-e4d68c24079c", "indicator--e06aac9d-ac2b-4543-b209-c146ab6b24f1", "indicator--4d47ea24-0139-4c5a-9f58-8e7d2b7cf4b5", "indicator--306943dd-d1f7-4b98-a0f9-f45d8386b4ba", "indicator--b6b3579a-894e-4f41-82b7-cb67dca6f13d", "indicator--eb5b22e9-a818-4dde-8b99-32090b80ec63", "indicator--9a9e5b88-387a-4793-851e-19a8fe82439c", "indicator--a79f77d1-37a2-4c32-bba1-83192dcdbc03", "indicator--60bcb858-3a75-4a14-a15d-aeba7ed63730", "indicator--685db06d-1342-4f2b-972e-635dbddfd295", "indicator--f4320067-5107-4aad-9b85-95bdeb6139f1", "indicator--6a779e4d-5c6b-4063-80e0-651b30997604", "indicator--bfc476dc-3899-4a45-8ef6-c6cc6672daeb", "indicator--2492e36c-fa47-4795-9132-c7d25353c865", "indicator--76c811b8-4410-4475-934b-5db95c98360e", "indicator--6ac2f4f2-fe28-46e5-9da7-31c57a965222", "indicator--051433a1-f953-436b-a491-8a6a03ade91c", "indicator--d00a7054-445c-4cc5-ba8d-7a4a5f71043a", "indicator--33b48019-e55a-44a5-ba85-1ba164ec98f3", "indicator--97a73af0-4486-4f52-a6f5-e84bf88dc201", "indicator--d9c9fb11-5eb9-4ea8-88e1-129f978962b8", "indicator--8fd5fa8c-ab5e-4c15-b97b-741f640d031e", "indicator--0fa344ea-e8db-46cc-8936-6b0b37ba4d4b", "indicator--59b36c15-bda8-491c-a643-4dececbbe586", "indicator--f7d15010-4598-4b9e-8690-328b29640a90", "indicator--3f3910aa-69c8-458a-83f7-70411b893168", "indicator--6b9d5320-7f31-4daf-aa61-e53408dafcfa", "indicator--3c33cbc7-5072-4b6c-a7e7-97525a2cacf4", "indicator--7c0e4f95-62e7-49ea-a5fe-9c1e5691a108", "indicator--adfdb4d3-5847-49e5-8500-df57afe8c963", "indicator--051ffd88-23e9-4b46-af0d-0f64e6e11065", "indicator--d2339616-5750-4d98-9ecd-7764b7e48700", "indicator--f75f12ba-0a34-4717-93db-db58fc454e2b", "indicator--053aa64b-b785-44b7-b76a-14b227d607e1", "indicator--0cb01ef0-c001-40bc-a642-5b3b622018e1", "indicator--34e23b7e-4459-45bd-a7b7-6371705ab8cd", "indicator--71b1d8e1-08f7-415c-ba65-a7768e7fcd5a", "indicator--88e63c23-1ffc-44e9-a3e8-b4917a4fc2c8", "indicator--d6aab50d-0202-4842-81e2-a93374e2e4e2", "indicator--838c56e1-142d-48a2-a48a-7d7cc8ed8194", "indicator--11a19580-582a-4240-ba20-58c955b25c17", "indicator--352b2ae9-40ba-44f2-90e1-ab210fff8fdd", "indicator--f796cf8d-f1e8-4820-9738-5a40249bfe0e", "indicator--e7ef9c1e-acd4-42a6-a3e3-b7fe8ede0738", "indicator--0468f9e2-fd0a-4e6d-84cf-d0218072a96d", "indicator--0d5e9ffd-d934-487a-9058-0e3abfa97878", "indicator--b0781ef1-6066-4abf-ac71-08834c3c9cbc", "indicator--f497b11d-b387-4cb9-b82b-794a0cf36d77", "indicator--4e57588e-c35b-42ae-8517-701982c8e8aa", "indicator--f4936aa6-20b5-439b-a656-b89de5838313", "indicator--789d3a4f-6ac0-4cbd-8b6b-a0d311c2473c", "indicator--e5879e32-2f2b-49d5-ac6e-06789b44c49b", "indicator--a1ac16c4-5491-4eae-b30b-f67dda75270d", "indicator--2e8f87a5-d12d-4834-9555-0baf3f27f01b", "indicator--bc8aef93-a647-44dc-8eab-5b0deb4626c6", "indicator--322cfd5c-d7ca-4a0d-b2b5-61ca54d883d4", "indicator--73d51a07-31da-4ea2-90b9-1d972ae95ce7", "indicator--ec51dceb-0ab1-4b83-bbdc-e1adf943a472", "indicator--bbc5e6b4-7656-4d4e-b543-d49089573cde", "indicator--b08385fa-357d-4208-bb41-23ea3dfcd6cf", "indicator--74c11394-4c47-4fcb-b6ca-a1e3b480f15d", "indicator--bc24278b-7acd-4edf-ad5d-33ab8a0f2b66", "indicator--5957d52c-6293-4b1f-bb29-f3a5b3ccc585", "indicator--0abd490d-a5a3-4571-be4d-86a569d68212", "indicator--5a126a31-3e68-4518-8057-b348aed38472", "indicator--192c5699-56ff-4df7-b60e-3dbd96937df7", "indicator--5ee42a52-54e0-4076-b77f-fd70632dd2df", "indicator--754dd20e-e472-46c6-959a-89816a399943", "indicator--7101d106-9264-42ec-9d9e-881cd8c91fb8", "indicator--008db74a-f8af-4b43-a3d6-0453712bb40b", "indicator--770a2d81-5cdf-4365-aa8a-9578f578f9f4", "indicator--44666584-4aa3-4f08-ab43-90e23e7d2c88", "indicator--958fecde-9f89-49f1-abc0-19a540f0cafc", "indicator--de7199ad-617a-470e-9f07-1ce81d08f3cd", "indicator--e721b883-525b-420f-ac25-143b2938bf1c", "indicator--f62e3103-0607-4be5-bdf0-8c508e3af7b1", "indicator--c297ce76-cb87-4a1c-b159-fe903791f3d7", "indicator--ae4e231c-8232-4446-958f-0d344f3df61a", "indicator--b4d285e9-0124-4b37-870c-51e0a6c90673", "indicator--ebeba621-c9b6-4c9f-af5b-24cbbc98f40e", "indicator--c9b55898-2b19-4bc2-849a-c7f7d6fb9174", "indicator--99891014-8084-4541-8ce6-1b538b36d39a", "indicator--9d4b17e1-1cea-438f-aff2-389a987c1814", "indicator--ef5910c7-a069-4dd9-a5d8-040ca6806c7c", "indicator--ddf91a84-802d-4ecd-bb97-fb782e2e2880", "indicator--649583a5-5aea-4490-9f0a-97e39b72e99a", "indicator--f4df06cf-f0ea-4edc-91b0-000e761585ba", "indicator--46b63ba9-a276-4a57-806e-0151db16470b", "indicator--b0f235df-b161-4f9f-ab60-6d6bf7328620", "indicator--8d111219-dd32-4ad2-9482-1861d4954d40", "indicator--8925ac29-5d13-4959-9894-5952b1d89003", "indicator--c3ebf45d-8c9a-4bed-ac74-9b02bf9d2afd", "indicator--9886f28f-0343-4551-bb85-cc02e1244416", "indicator--f95dfd34-3a02-4d8b-8830-038621e80421", "indicator--f1748f44-4c61-40bd-9ea4-537ff9c0393f", "indicator--d6d4311d-91d0-487f-8bc2-7160f6c5f5d8", "indicator--2df6fe55-f7bb-4ea3-adeb-c32ff82d1292", "indicator--5519e648-55d9-4551-b726-ed354ebcc833", "indicator--aa286cdc-543f-4313-84b3-9516214a2a10", "indicator--95248cd7-77d1-4fa4-a1d5-85c35930314e", "indicator--75d48ffc-749e-4572-ad66-3502ebcd1bdf", "indicator--ca0ca66f-c176-4b3e-ac63-d60520c7daa3", "indicator--7dcb114f-c44c-4665-810c-38592d3cc23f", "indicator--b90243b6-291c-4112-bdd0-e7086d3bb9b8", "indicator--9185abe3-14cb-4961-8544-7acef56d4f79", "indicator--c223479f-ac1c-4868-b640-0343c65db4b7", "indicator--46e0fcd8-6fc2-4749-bc11-5ed8dbcdee24", "indicator--e6dd5f14-1fa5-43aa-af6d-7ed6cc5ba269", "indicator--d53d6552-3f45-40d1-98cc-ab2ed7479609", "indicator--351ee64c-3d38-48da-bb13-eef9678feced", "indicator--94f2924f-4276-4711-a654-3c227776a89d", "indicator--ed78b960-446b-43dc-8b9c-824114f4d5dc", "indicator--ebde6214-e8b4-44ef-a102-041c56731c53", "indicator--f3dd4d3c-9c19-4204-a182-db61fb5d33ac", "indicator--c7bfb875-7ecf-4b23-a2c0-4295e58281a5", "indicator--8a93a367-f6dc-40cc-b7f2-1fc03dc93ace", "indicator--5e7cd2fc-efb0-483f-b71f-e1985725670f", "indicator--d17db057-28a0-4ba6-9036-08ca4badee00", "indicator--0d611482-8e6b-4c46-9014-48ffb6d94fe9", "indicator--60cf65f1-9a22-4ed4-9d88-9c3212d457d1", "indicator--55f2f162-8f00-4adf-9886-b4ad77636aaf", "indicator--a16dbe05-adff-4b11-89d7-e87c65149a8d", "indicator--a7eda6f4-117e-489d-8ba1-a5ba32065e27", "indicator--8ebf8cda-a468-4378-8d8f-7f68042aab35", "indicator--5873709d-377e-44e5-b33e-2b8e8dd3ac3b", "indicator--d6a4e264-a78d-4826-8c8a-6d81580a7472", "indicator--120ad2ab-067e-40bf-9060-f7f35afb3293", "indicator--f3132d31-6507-4953-8b66-1512d3b9416d", "indicator--7ff128fc-9e25-4114-be6f-e8b0d3e34ac2", "indicator--c5f7aa42-d0b7-4ed7-8f5a-112a2b887949", "indicator--95d19f90-f826-4a06-9956-1ba884cd9351", "indicator--d528d75f-d3ca-4cc5-9285-ea3ef312cf0f", "indicator--66151b42-06d3-49bf-b715-69f959e918af", "indicator--7ce18a45-c3c4-426c-a969-ac93e8926056", "indicator--3cf01254-c066-4a64-8ecf-3cde0d3cbd1b", "indicator--09605799-7bc5-4ea5-8189-221bb82f1475", "indicator--7a6a5a72-b79c-461c-b47a-71f143bd19f4", "indicator--6109623f-eed7-4b31-9f5a-431694e266c0", "indicator--28a94316-0258-40c6-96d5-d49513df9c6e", "indicator--49bd3012-a01f-4b89-9c6e-6c20fc47c024", "indicator--dd08fbce-b076-4666-abb4-6f4a0c7110c3", "indicator--31f3282c-9ee4-46c1-b46a-6ad8a0922a10", "indicator--4db83cc3-4815-46f7-9dab-8882e06f2a7b", "indicator--33d6ea48-ff7c-4cc5-82fc-5dab00c0c5a3", "indicator--9aa2a9bf-5802-4695-b052-5d6b6a4473b0", "indicator--7df46aa3-214a-458d-8bd4-f677f8f4e602", "indicator--d9b3dc4e-2cd2-409c-8a0e-55e2531f29dd", "indicator--57c55f8d-770e-46e3-8a02-44be8babf12e", "indicator--45e914b5-e6e9-4c0d-bccc-e655443f21e2", "indicator--2a2dcc8c-3463-4be8-b292-1fcc22152e32", "indicator--92a20bf0-21d6-4525-81f7-4dd2ccdcfdef", "indicator--cf524500-e16b-47df-b950-336d47afc536", "indicator--56e7e1d8-8880-4aa6-8800-901db7dd9b4d", "indicator--ad68bda5-2d44-4d90-93b0-221b36739fbf", "indicator--d0790e4a-690d-4102-bde6-e83678f9dc1b", "indicator--e2525e36-65e4-47e8-ac12-2160be9ea313", "indicator--92e9a245-edd6-4c74-a25d-50b2a934c2c4", "indicator--843e6479-7206-4bdb-8bd5-960a87576068", "indicator--0c8415e4-04b4-495d-a9b3-2240c0c1ffb6", "indicator--ece19b85-6c87-44be-80e4-2e42b39be357", "indicator--4785c588-47d4-49ee-8909-0c6ad1eef4fc", "indicator--a351c140-a088-43a3-b0c9-8499fcb55f80", "indicator--619f3e9d-5d82-4698-beb6-ece5ea4a243d", "indicator--99c160c5-3a04-4430-861e-b002accc1632", "indicator--a5e66405-3e4d-4329-9b02-e9458fc21c4d", "indicator--a1317ace-ca00-47a0-be79-6c389c54ffb0", "indicator--e9d79820-3a96-467e-aba9-4323739590d8", "indicator--f45b33bf-703a-403f-a500-0e9b1b555a63", "indicator--acdfb31d-c14e-4e8d-a4ff-6b183c88b45e", "indicator--fdf4c3ee-9499-4a36-b20d-d815c8297be1", "indicator--49796c45-9ab7-4014-9d70-29ae449a6b76", "indicator--5f47428f-3ef0-42d2-9047-4562a1944aab", "indicator--83a3d4b7-2439-4a17-a1ff-b3cc72b80789", "indicator--ad42aaaf-9558-439b-a943-2e8c05299e0b", "indicator--838043de-c0e8-44e4-9ec0-8440e85c8670", "indicator--a043862f-2f5a-4fd3-8422-2dd5be421ee4", "indicator--43a9315f-a5f9-45b5-8ae5-163e65815ffc", "indicator--d32a013d-6580-463d-aed2-ca4cec054c5c", "indicator--cc57a982-7aac-4703-9084-673944b34920", "indicator--1a219d90-3c3c-421b-8d40-aa2a8481417b", "indicator--83da5060-ffb4-4d2d-bf7a-ec3e1aa640cb", "indicator--039e6485-754d-4aa7-9949-84a357fa12df", "indicator--c3c89800-d67f-4a4d-8014-527768e9c85b", "indicator--80e1f447-e961-4620-b680-8eed0a035d2d", "indicator--58625bad-1443-4d94-b9e4-db3de05d4e7f", "indicator--1367a192-bc70-4f90-af3e-20dc85a70c0f", "indicator--edc4ed82-78e6-48e7-8064-e49bd3cc3b4d", "indicator--f99fa3ce-5612-44d1-bad2-d00d5f55e314", "indicator--0d328628-94a1-4e85-af1f-72f084ef1785", "indicator--9f27bd27-6119-4033-91b5-8ac2df4e84df", "indicator--b1fd52f0-0541-4987-890d-e8d09888178b", "indicator--531099dd-4b9a-424f-b47f-7aa6ca48845b", "indicator--a68e9674-6b18-4244-8867-e99a7e2b1f63", "indicator--310a6593-2990-4e45-92a8-d5742f2bfc07", "indicator--d7405983-0b12-41c3-a289-47d6abd15f34", "indicator--1e0b7c43-d0eb-456a-9f2e-aade4f77222e", "indicator--01a27045-e9e3-4161-9ed1-c9adc7f6697f", "indicator--a0b91aa2-423b-4b71-8c57-9a00599f8a5a", "indicator--f98cca91-fcd9-4a76-a0dd-752a3f17ccd1", "indicator--5728ce57-15c8-4c06-8d6a-6651806796d4", "indicator--8f520b1c-0111-4890-a695-434c8f66be0f", "indicator--03f2736d-20db-465f-b668-cd97c2988d1a", "indicator--6b54a706-fc71-4899-8cd1-36ab5cc30221", "indicator--34757738-39f2-4556-9a4b-7b4a9bfe1d7b", "indicator--41e05748-4cbd-4bfc-8832-74ca8d47dedf", "indicator--d077bb3f-8fa0-4d30-8930-c04565b8aa7b", "indicator--7a138a3f-428a-49e0-8c99-095b4e4b9d99", "indicator--82afdc28-86a2-4265-b6d1-540198cc12e4", "indicator--ca3d7cc1-f005-448d-82a3-641261b0460b", "indicator--5c8e98cf-1047-458b-8937-196efb1bc143", "indicator--a685a79c-8a78-4daa-8f1d-5831643222e7", "indicator--f586b434-d476-4571-8c8e-4d6774febb45", "indicator--fffd0ddb-0622-4fc6-965e-d3ad28547e3c", "indicator--35dec8d5-b393-4eea-8d63-bec34551f54a", "indicator--04040448-1b6e-48db-b11e-31578fac73d0", "indicator--b023a65a-85df-4354-86a2-a08526c4e6dd", "indicator--2921a366-f175-4770-b2b0-db65b7451967", "indicator--973d07ac-b35f-413a-84a9-7bc028e45c26", "indicator--b099456e-ef48-42c4-9045-e8d66ca8572f", "indicator--7d38055c-3d79-40c6-97df-263abcaa536b", "indicator--2a6753f4-6cef-4735-be52-758cb29d2e5e", "indicator--4d913271-e0e5-4840-8b4b-e7d22d6cd2e7", "indicator--b5431db3-0df6-4fcf-9dfa-d78cee5533f5", "indicator--5bcaae51-1c66-4097-9eed-f633d6e4831e", "indicator--ca7d76d2-b55e-4713-bc55-4e5ed709c3c4", "indicator--00e36003-d05a-468b-93e3-40a7cff8a777", "indicator--f77261ec-0970-4865-8fac-f901665450de", "indicator--951cacde-f41a-4544-8b12-b7b15fbc5182", "indicator--4229a07e-c4f9-4294-b363-75520ad9bb7e", "indicator--ac5ce28c-29cb-4c3b-b496-1384116805f6", "indicator--d18a22d9-49d8-4e18-b032-13831de218e4", "indicator--e295d7aa-2483-4a51-b1ff-0092301fdfe9", "indicator--49b12bd9-7fd7-4302-95df-b76975ad1b51", "indicator--0a099103-8d92-4d27-9595-f65a65db81aa", "indicator--4e52761c-fc3f-423e-ab2f-68662d3551da", "indicator--c9e77ef4-1dc0-450a-afa3-a58a13cf6abb", "indicator--60e19685-f450-495d-b6d2-e8452e7fac84", "indicator--70d39cb9-dba1-417e-bf45-afb8e62ca166", "indicator--b48d20d4-5491-40a4-81e7-0d561f73070f", "indicator--4179a5f7-20fb-486e-a147-b1358500ff26", "indicator--dbd69ae9-11e5-497c-bb4f-6177f07cd850", "indicator--578796cb-1c84-4435-bf80-f677668d5db7", "indicator--922c976a-bd8a-4903-8e77-108ce09282ee", "indicator--8496c22b-5fa7-4462-b6e1-af130cfee244", "indicator--cb478826-abe1-4296-85a7-9b39fa56b388", "indicator--35856556-651a-4f59-919b-5dc7b9ac0590", "indicator--47923f85-a01a-466a-9c01-24e8a966f23d", "indicator--6e6d7451-862c-410c-a9de-294bfdda84fd", "indicator--f4ae66e1-b5e6-4850-8b79-5e3d88e329ed", "indicator--b5d98fb0-d871-40c3-8943-9aada3f399f4", "indicator--ee8d7552-753b-4101-ae9e-d2dd1f0949a8", "indicator--7f45f60b-2016-4ef2-87fb-def1e2311e8d", "indicator--08634fb8-1937-489c-a7d7-8f20ed5beb62", "indicator--43a6953c-b896-48b5-8112-720736d579a4", "indicator--9a414915-2659-4cc2-aa31-45b371c0de0a", "indicator--1c676d24-6e09-4e7d-b7c8-433e44f8c875", "indicator--242e6e60-3fd0-4f8e-820f-6b863d3a701a", "indicator--70323f90-c84e-49a4-b801-00df96626e15", "indicator--8f0bf6a4-38d5-41cf-9728-7bab28f88a49", "indicator--03256471-4df2-4dd6-be66-6c972710a5ce", "indicator--2fad309d-ff21-47bb-998d-7960bed2307c", "indicator--aa56507e-6dcc-4870-b89d-472308bbb6c5", "indicator--41a5e75c-ec15-4903-a914-135dcd9e61a8", "indicator--522859ce-442c-4aed-b195-a7cae64d5ee9", "indicator--33726176-6f89-414a-b8b2-d6bbbbdf013a", "indicator--2c1344bb-f066-44ee-b682-a2f33e187ddb", "indicator--8b5b6276-d671-482d-95e3-aea5c1854d51", "indicator--ce8ed213-90b4-4f90-a9d0-1806177666d2", "indicator--f7401e1e-ccce-42fc-9dda-5093f78e9206", "indicator--7c669f0d-b245-420d-bfc7-dbbbbf288460", "indicator--58bc8899-2dac-4fce-87d4-7c5857a0928e", "indicator--51d72a83-da1a-4e7a-8b7f-c0735e84cedd", "indicator--4f77f0ba-81bf-4d51-9e6d-966b79de8e4e", "indicator--3db5c268-bd28-45bf-91bb-eaa14e5cb085", "indicator--b667f755-e09f-4b5f-afd9-267eafefdad5", "indicator--6d2353f7-4d6c-4dbe-93bc-aebdd1ff2b55", "indicator--7d54b0dd-1064-40f9-a2ba-fb8e6c910345", "indicator--2b3eb7cb-2215-4626-920b-0b49d68f589b", "indicator--062306a4-6402-4e69-b2eb-84fb5b1330e9", "indicator--4ccf5641-50b5-42b2-ab11-78b6ccab8da9", "indicator--f8689097-128e-44ad-8dc4-61a7ecebed08", "indicator--1325928e-421f-4331-9c0e-84cb453fec2f", "indicator--23351dc9-e1de-42ac-b97f-d7f9cff67f51", "indicator--071b87c6-7fb8-42d0-88e1-e2f5c5ed2aa3", "indicator--f45fe391-3be1-472b-a4e9-2ae80d080ece", "indicator--ee11101a-be0a-416e-bbf5-02bccfc495e9", "indicator--f0df2aef-2ff7-424f-b43a-ce0077059d74", "indicator--89f05709-2c59-4774-bcff-0c97f80df544", "indicator--819aadb0-cb07-42ec-8bb7-9f5be8fe1fff", "indicator--cbcaf31c-133b-4339-9fc6-b4c3f44352aa", "indicator--422353cc-4ce7-4fc3-b716-2998a3866124", "indicator--027433e3-eaea-4c12-8f8f-4e0ebf9eeb34", "indicator--e36d4232-fab2-4f07-ba0a-80c018dcb1d2", "indicator--490cbcdf-6cf4-46e0-b36f-e80e8ca4bb8e", "indicator--cf3b3a06-f670-4d6e-97ad-95bdfc806f17", "indicator--fb21b9bc-4a95-4e10-ac17-b30cf0e13a49", "indicator--8ef999f4-c26d-4699-96ca-d42d920c56d4", "indicator--dbb5d6cf-9a93-4dea-8fca-707fa273c393", "indicator--fdd4e8ca-251b-4186-bee0-4ca6ff7109f2", "indicator--aa2f1882-b0ef-4aa0-ac81-46f207e03a46", "indicator--fbc50e03-6fe2-48bc-8bde-e2e825d8cf68", "indicator--f4258c6b-6355-45ad-949a-75a55c85db84", "indicator--e5f9d75d-cb75-4873-98c4-dd01d4f65506", "indicator--177d9a65-4573-41b1-96b4-c626f1d29b8e", "indicator--943eadeb-94fb-4c7c-a2d4-eb9d5e2c0856", "indicator--caa1fa3f-042a-45e6-ad12-a1d7257b8124", "indicator--aa89512d-52df-42a5-bc52-11de36ee8525", "indicator--a6a9d87f-9df6-4f1b-91da-c24df97bb94a", "indicator--2f3869ff-86b6-4a27-a5a4-c8efc5dea94f", "indicator--8a19e7cb-8f85-4b90-9f61-8c90acadbae6", "indicator--b060b53a-5af3-485e-893a-bafdf5cf3b2e", "indicator--fd5a9511-c2d4-42be-926d-f806f447095f", "indicator--c392d89b-d2db-48d8-9330-7a7e0e725db7", "indicator--0a88399f-c8cb-46ff-8baa-b3f349929aef", "indicator--38c05e32-b60b-44ff-af72-4dc0b451f798", "indicator--11b9a3ab-4e5a-4c72-83bc-6a8de1d470fe", "indicator--943dd08b-7aa3-4895-8386-307d0b7a5b0f", "indicator--62ce3768-cbbf-488e-b4b5-7330788cb04a", "indicator--9134cbf1-fd2c-406a-aa99-c846158dae34", "indicator--7fc3bea2-1bee-4611-b5a2-3475497449f5", "indicator--17a960c0-cc75-4cec-88a4-212086ff0073", "indicator--b105f035-cc56-4a46-9508-a347f32b62a5", "indicator--36a5ad48-8666-4a35-b705-925c34b2df16", "indicator--26abf053-c3d1-431c-8b35-c2f1409ad653", "indicator--33eb4781-2ff6-48e1-ad77-493a30d97b4b", "indicator--58c0bec2-7159-441e-8822-67576bd34fea", "indicator--f301d1e7-d712-4385-a11e-0fb9ff770633", "indicator--866e72ce-cfe8-4952-ae8b-ce48ae48ea5f", "indicator--70d8fa90-dc50-427b-b2df-e0666ca26aa9", "indicator--bf8e78d7-9b88-40f1-8f4e-e8c35fcb7aa7", "indicator--081a0d6f-d43e-4938-867c-5fc442efd936", "indicator--bf3cd491-ba8a-41ea-b384-7af804e0354c", "indicator--027aec15-b02d-424c-abad-cb6d678eb071", "indicator--27a361d7-d336-4b86-a647-fa551a5bf50e", "indicator--8ae66deb-b6e3-43e8-8d56-995a99b914ae", "indicator--30d52c44-dfea-493c-999f-18652b991620", "indicator--7f9fc7e1-0c59-45d3-8acf-8c3af184ed41", "indicator--296d7eb7-d0bf-405c-b678-379551badae5", "indicator--cbab52d5-1413-4af6-bf85-1c079cec0cd3", "indicator--d537d1ae-c431-4a02-9e05-29bd46dfdbc4", "indicator--d1b3cd0e-1796-421e-864d-d5ad4641b506", "indicator--8978dcd0-408b-4798-8c75-b43fd3aa380f", "indicator--10fc0e35-f6a9-4caa-ade7-18bf64e4b368", "indicator--b463c56d-438b-44cc-9ab8-a2b72af82cd9", "indicator--23faebd6-4817-428a-b602-d217cbb34a31", "indicator--398488d5-836f-4087-a903-6c235fa93b2e", "indicator--7be53886-56e0-4b01-89bd-57353552b741", "indicator--92b70ce7-b02a-4ecc-94ce-049d9624a399", "indicator--2f623bc8-14cf-4b7d-92d4-2c9cbbd7a4e3", "indicator--bf755d34-65bc-4113-8885-a7770b06b592", "indicator--9b5c9666-ea3a-4687-8322-d16ac3db74ce", "indicator--cafc16cb-82f6-44ff-b052-3c8cf9a8143e", "indicator--0abec02c-3830-45a1-9d26-01f8af018451", "indicator--97301ae5-e16f-44c6-978d-0d796da5ec5f", "indicator--74f856ca-3dbb-4c75-b160-73fbba784284", "indicator--43e5d18a-6201-4c08-869e-c71d89ba6b2c", "indicator--63924214-b804-4adc-b564-df7baaf3fb7a", "indicator--77e37237-b9f8-49e9-8c14-c35961da9b95", "indicator--6944ed1c-5a96-40c7-9f70-05eb4ad51bfb", "indicator--88f4a887-1477-48c8-ab72-a2b77aec254c", "indicator--03660cf0-71f1-40ff-83e4-b5862d7b0257", "indicator--d6e17607-a5ea-4ce7-bb73-1d1c0847a681", "indicator--694eb0aa-83d8-4de4-9be6-b88114d284d1", "indicator--666c34e6-2863-4a7a-9c9b-32343024674d", "indicator--043ad57a-3ebc-45a2-b800-22fc30327364", "indicator--d047cefa-8047-42cf-bd37-fb0e5a542b17", "indicator--8156827d-570e-4fe8-8b74-eb7020e7d4ba", "indicator--ed1037bd-7b90-459e-a6cb-ab5b78eb5a50", "indicator--23ac45a6-4f6a-42ee-9cff-4cae1a0c8cc8", "indicator--339383f9-74bd-4f1f-8e0e-ef844c5b7aff", "indicator--ce65553d-8b95-4437-91a2-4abfa24d8c79", "indicator--c6754787-7742-417b-b080-fd462e4c2899", "indicator--036d9527-474a-4617-b6cd-6f35bda51e15", "indicator--713f2258-82df-40f9-a46d-b689730fd169", "indicator--dd9b2d6a-47c7-4d30-aa49-a2e2af200f8a", "indicator--185ec4e6-9a32-4342-b089-823f4ba3bf32", "indicator--37568e79-3012-48f0-8339-f0ff9c968107", "indicator--e6d1d763-030b-4114-8027-17697e553a84", "indicator--6eed654a-b38d-4fd7-b288-d8331f4ea82a", "indicator--05c5bf12-0eea-4916-9939-2f997e15b729", "indicator--8a86fb24-aae7-40c8-852c-ebfc52df705a", "indicator--c2b08cd4-2581-4870-8dc0-66552eeb50ac", "indicator--4411d07b-b843-48c7-8f2a-162c4bb2bf0f", "indicator--c13f8834-07ae-4b07-8977-e815c69276b9", "indicator--0d0b2f1f-8c89-4bd0-80e9-5379ebe647fd", "indicator--2ae438a1-c511-4dab-a4ea-e62c9fa65391", "indicator--6d6cfb26-35cb-4ba8-acce-a000c20174c8", "indicator--805a1f38-c31a-4b16-a424-f9a19bc3099f", "indicator--8150469c-1eb9-46ad-b773-fdd160369cdb", "indicator--10723e2b-25f5-4d8f-afa3-83714e4e961f", "indicator--a280b1b8-2a2d-4326-9de5-e9bf0950836d", "indicator--666ab1c2-f9b3-4f01-be75-f2f33f6a645a", "indicator--cbda7fc3-6cc9-49d6-845d-8b404309b462", "indicator--c6f0ba61-6c27-488f-9940-475c615ea0b1", "indicator--88c46c12-bd18-442c-bcbb-4014036a8a4a", "indicator--489e2bd4-75af-4922-a97c-db2ccd217f87", "indicator--ebce07a4-62a9-4343-a29e-1821080ceca8", "indicator--3acb64f4-e921-43a0-b398-f4e37675f118", "indicator--b524b8cd-f718-40d8-b465-f1d40dd9db36", "indicator--85659bd0-ec17-47f7-aa44-59dc91645e61", "indicator--89fdee5b-dce6-4570-84cc-6f4837e91f69", "indicator--1c3dfc4e-57c1-4793-ae1a-ee76cb9d9de9", "indicator--15a56428-de26-4def-8379-e388f6240785", "indicator--a82a7870-060e-4229-895e-411711222697", "indicator--a8066da7-f9a1-4f0a-a979-59ff75bd4867", "indicator--ca506dc0-a70e-48f7-9f7a-6c0626bd4c2e", "indicator--b5f41f68-628f-475e-9c80-ee8862200970", "indicator--ab448534-d5ce-488e-b103-e435ed670df8", "indicator--a19a59f1-686f-4323-b537-3fb1baa0e9c5", "indicator--53046224-5586-49ae-adba-34d6fda9417a", "indicator--72edb373-ecbf-44a9-abbf-fdda67ca9e3f", "indicator--39bb7329-09f0-4aac-84de-4aa40ef8f407", "indicator--e74cbe27-2518-4067-ad71-4c01757b9351", "indicator--c34fad47-a12c-4438-b4eb-f624cebd2586", "indicator--4f52a881-c713-43dd-bbee-4deb041e8548", "indicator--3d79ed53-e42b-404d-ba04-7ba8f2b9504b", "indicator--5628086d-95b5-4d19-8824-25adc85a6bd7", "indicator--7b6926e1-5653-4f38-88e9-bd3533303e0f", "indicator--4ffd1052-52db-4f46-8f23-79563dc39b46", "indicator--ff707add-a1b9-4187-9709-52457cdcd621", "indicator--0d0e0cc0-86dd-4cfb-9ed7-f425e009cac2", "indicator--fa48ca70-6483-40c3-a651-24bdaeb2159a", "indicator--3e340692-5742-490b-8c84-5e267ebd6656", "indicator--023e887f-b61a-4f85-9ccd-c433a360d27f", "indicator--e5794e6b-81d3-4d18-ba8b-c004f2ad1478", "indicator--2d4ae62a-cd01-4ac0-af2f-55cd8d761696", "indicator--f3791de7-03ea-44c9-88c6-1f0b93e8ca35", "indicator--9e89723d-1a63-4d81-aa17-02c0fd367b9a", "indicator--121537b0-f2ed-4807-b844-15eef6aa48b6", "indicator--f3d25a39-f852-4c38-82b3-460b57d6e09c", "indicator--e418507e-3d04-476b-bc65-623dd27bd193", "indicator--b3fd2d8f-0dde-4a5b-96c4-5c2e40f1abc1", "indicator--f39dde2a-f1c1-4432-ae2c-78f69526bfc3", "indicator--9a86127b-fece-43f8-8c7f-64bd880c498f", "indicator--a21c29c8-36fa-47ce-91b0-cd5a5eec2d7f", "indicator--9e574a39-a103-4152-addd-4e96103cbc85", "indicator--69134a6d-d19f-4d05-9044-411fb2ea8161", "indicator--0e3a7889-5fdb-476e-b6ce-471c7d1d3d9f", "indicator--b2c6b3bb-efea-4dc0-9a3c-3df33437a27a", "indicator--6653e7f3-f4f9-4390-9e9f-62c8b5b9098b", "indicator--1785b410-2466-417e-9b25-5cf1e094f37a", "indicator--6889584d-dc7e-4e89-a7a1-ebbb02addaaf", "indicator--b42d4c4b-f5d2-46a4-852b-a503c231e892", "indicator--e0c93a26-4166-495e-b64a-a060ff7b8a1a", "indicator--d338df00-db0d-4a3f-a849-f9fd29195e34", "indicator--1f097880-49ec-43c2-b9b2-4c8b85426006", "indicator--9150bac3-0f68-4578-9ffa-dfc82b3ae7a9", "indicator--d2b5ceca-83dc-403c-939d-712fa2ee2bcf", "indicator--70134bfb-6b2e-4ffe-b802-1bd4148b4f79", "indicator--5b8a7d93-34fe-493d-be9a-b3db17d1d887", "indicator--4e2622a7-69cb-4cd8-b660-9248a308231a", "indicator--1f80311e-e6ca-4ed3-b5c0-643d59b9331f", "indicator--b0bf3ba5-1206-4ab7-8143-59ec196c624e", "indicator--fffd6f5d-2a82-43b4-8dad-48386e2c8e92", "indicator--c3d5538e-8eee-4a9e-a2a3-29774c5edfaf", "indicator--0047757d-47b9-4c2e-a3ba-2d0c7777d27e", "indicator--e2e07f9a-66ed-45b0-adcc-7519c5ad4eb7", "indicator--a56ab24e-1014-4f81-97ea-575c0a3f58af", "indicator--1500235d-335a-4357-8e60-50cca0e2aa8f", "indicator--63b522f7-6977-41ba-bcf1-44caaa0fd6b2", "indicator--6f559a5b-383b-4fa5-96ab-74dfeb448241", "indicator--69a6ef75-c0ba-4c62-b9a5-8b7fb273e98e", "indicator--c8272f7c-f548-428a-b5df-0d176aa95697", "indicator--cb545459-c77b-4230-a9bb-0468dc0db6fa", "indicator--df0febdb-463c-4414-95b6-aec122f27063", "indicator--8a479ef7-9083-4afd-80fb-f7789b0a8a96", "indicator--078d9e99-2a20-41a8-8f4e-af8f52dcd747", "indicator--addbc968-dc11-4c3c-86a4-3bf8c79bc86a", "indicator--683d4381-ee58-4d83-a803-f61044473d65", "indicator--7ecb640a-dc08-450b-9479-2a5faea2d4ff", "indicator--dbbe40d2-05b2-4bdb-a79d-0eaea3925e4f", "indicator--a29cee3c-ddee-493b-8643-fcc119865edd", "indicator--de8b30e4-c550-4e78-9c55-4f6e378e6b3f", "indicator--de7f7fee-8a07-475f-9860-c0f301580d69", "indicator--35bcc9f7-833d-427a-8e5d-9d172adb9137", "indicator--ffbbbc6c-6446-487f-847c-747d6b715951", "indicator--3cc92905-6dba-4233-811e-f706f41b07c3", "indicator--19859cf4-3861-4c57-abf8-77b1da76f967", "indicator--192eb94d-ab14-405e-b8a8-3dbaaa330928", "indicator--32a406c6-76d6-48a3-8feb-28db74f1ffce", "indicator--4f9a608f-df53-47a6-b438-e15190f31ebd", "indicator--9c174497-0f1a-4c07-b6b5-ac74cddd101d", "indicator--f904eb28-0535-4c36-bc6d-3d60bbf18ccc", "indicator--fb0a9dd5-1c70-4f76-9d8c-0732a90528d2", "indicator--31b5f33e-7e9b-482c-b8ab-78fc48664206", "indicator--0e02b332-596d-4709-9cec-c20a9a58e515", "indicator--1a938b58-cda3-48a3-bcf3-10126f7e6632", "indicator--96a93f81-6656-4d48-8d2a-dec17aa5eee0", "indicator--cf5f37e2-6024-49e8-a193-ede9b984a9b9", "indicator--50f2f95b-9ac7-4882-b63b-87f63f2cc112", "indicator--19e444dc-11f7-4a90-a11e-b8e10d0add50", "indicator--88e94ec0-fd40-434c-94a1-6d0b9e43664a", "indicator--7bc62548-9542-4f7d-a21a-fa646c7905c3", "indicator--e10203e2-5b6c-4499-b647-df01039a5d52", "indicator--7a417c1e-0447-429d-befd-55f3b312b39f", "indicator--c064a955-a95f-4210-a90c-e29c4c6a199a", "indicator--e7bef8df-2282-4566-b9d7-de767e466559", "indicator--60555601-442e-4631-b5c9-25c870709ced", "indicator--bb48e614-706c-494d-97a9-5ae51b962e96", "indicator--543624e7-bf25-42b4-a186-4b0d3a3353df", "indicator--0280b77b-2c15-4354-8d21-236eeb6dc3f2", "indicator--89272661-68ad-41a6-980a-7ba961784fea", "indicator--1f291a98-2521-44fb-91f2-18502b48417d", "indicator--c385de12-466a-4fb6-aa33-991a1aff7b55", "indicator--22aa3ebc-a69f-44e7-bcc0-ca2cbe5c7766", "indicator--b9e4734b-4c5a-43cb-bdc5-4ca5d37e84ab", "indicator--f6a24ac7-3e78-47b4-8563-2322110ca32a", "indicator--6de477c4-2812-43a1-9cd5-1bee41b94ab5", "indicator--3a356aa5-d025-4e6d-b6c7-3b1180c2b124", "indicator--acb7ed2e-05c5-4e22-bbe5-5f105e220d53", "indicator--3f2fbe04-03a0-4e88-8fc4-af2213ae7fe5", "indicator--1f852d41-6927-4fa3-a1af-95d4ac9a35a6", "indicator--c2850215-8d98-4892-ab20-9ed8f4edc4fc", "indicator--1783d082-6cae-4d06-9f79-538f7363571e", "indicator--87f4b0ce-eb1d-4497-9d69-0488a8336c45", "indicator--c4032d8a-1ea1-48ce-a45d-3f453d9b8c41", "indicator--df669f2e-b166-4faf-97e7-4f909e063161", "indicator--9887cd07-a391-4fa4-b019-f6442dfb15a8", "indicator--e0706267-9373-4a1c-a201-3679016bdfbd", "indicator--a769e030-4a2d-4bba-8c84-0d111d2d46bb", "indicator--cc47ae62-0ef0-44b5-8248-c5575c761dfa", "indicator--65bde4f0-8f2c-42d4-bd08-6d34d42d8d65", "indicator--e4e8e3a8-6edb-4435-9641-b5da89372426", "indicator--b253e6f6-ee75-46bb-8444-a154464790a5", "indicator--a2513519-eb22-40db-92c6-d7096b917dd1", "indicator--19d35f44-4bf6-4cee-b3d0-eda5e70b2912", "indicator--91467332-c884-487f-a505-b3d0c056e7d9", "indicator--c654c6cc-3258-462e-acc5-097a01815e98", "indicator--7af175c8-2f60-447c-a60d-20aef37bffc6", "indicator--7448f384-498c-4a1d-8e40-5c84325bdc5a", "indicator--72d852b1-8e92-4382-a6e0-b5b7a639eaeb", "indicator--f84d95ae-ac62-4496-9cbd-8fe865f2a09e", "indicator--bf5058d4-7661-460d-b613-9d673426807b", "indicator--72fd6827-848f-4c03-b051-425f5d0ee675", "indicator--c3103b8d-99b8-4e37-82a6-53c2e1a8a75a", "indicator--9ce9dc2d-c60e-4289-8441-f8e431ee5daf", "indicator--b50cc9c3-17d8-47f5-bb8d-353566e0be14", "indicator--bff7c5c6-04dd-4b81-aa40-7916b0a9c60c", "indicator--d87629fc-3836-42e8-a8ff-6ed5fba8b111", "indicator--382cf588-da79-4f14-b13b-df253f479270", "indicator--764bdc83-8fd8-415c-ad68-749ea4fbbbc9", "indicator--f8c12c23-bb0e-4e55-b393-c2285b5c2754", "indicator--e0ab4476-6645-48ab-9b1f-d1af7faab538", "indicator--ed17e8e6-dc4c-4c29-8461-6ef1a417d177", "indicator--d8941242-2bf0-4bb7-a387-10b2da9a3b88", "indicator--75026729-fcb1-4a80-a1e5-7c354efdc662", "indicator--dbf45718-260b-4431-a9fb-88ebfcf67792", "indicator--9af330c5-7a8e-4bd3-8d85-665beacf2ec2", "indicator--9c6f89bc-c908-40f1-96b0-cb27abaed408", "indicator--c12452b6-e6f8-40fc-84c1-8ec73d845725", "indicator--59907a89-912e-45f8-8b47-b0facf9b3407", "indicator--c2a80311-e464-4972-9274-339220b5392b", "indicator--7ccc07b1-463e-4099-b674-9fcafe6630a2", "indicator--593ef7a7-143f-4ed7-9bbb-31e336f173d0", "indicator--2a8aae7c-d828-468a-be9a-71b804941914", "indicator--85029cb6-b59e-4172-b710-13eceb4d5e07", "indicator--e76946d6-e174-4f8b-a5de-c5268a8ebfd7", "indicator--d95d410d-721b-4c6d-88c9-a39475eae168", "indicator--356477cf-0b9e-4f21-b2d4-154e9f1f8405", "indicator--8af53309-a3fd-45f2-b6dd-10af00ea5616", "indicator--87cb50f8-1c23-4304-acb5-a08c80bdc0ba", "indicator--94610b96-999d-4edb-8b13-72f349e42051", "indicator--de717e05-feee-478f-b3fb-a8022cae11cb", "indicator--06b26d21-ad61-46c2-a531-580bc31ed8e2", "indicator--90825ee2-beb4-47be-ba35-c72d6d97d732", "indicator--f98c7af6-b28c-4378-afdc-a5f5e2a36b4f", "indicator--5bdc90bf-de42-4b0e-9202-3d20c7926b95", "indicator--6097c672-186c-4e2f-a0e6-e81cdb49e210", "indicator--e88e224b-0b59-4f28-a8c4-98c403b0b000", "indicator--ba8f0adc-5717-4e2d-9e62-df7d8143c289", "indicator--a4b87e9b-aa1b-432a-8531-e1dc863e43ec", "indicator--c18b24fa-0086-4242-8078-5de77dd881a5", "indicator--62ceb34b-de13-4921-ae35-93dd21f0bfa8", "indicator--ed6621af-f48e-43f0-bf47-4d82b7dafa4c", "indicator--e22232de-dadd-427a-8cc9-3ce7dffd6031", "indicator--8c690070-6a01-4a61-b049-08a06d313f24", "indicator--8b8550dd-3d07-4377-baf0-0ac2942c839a", "indicator--a71b2116-f16c-4d27-a924-f1bcf9630d58", "indicator--7f02c230-bd7c-4f33-8f2e-da8e47d42916", "indicator--a2b67fbb-6ce3-4bcf-a3ef-c5ac43ee7ebe", "indicator--2690f9f7-45a0-4daa-b0ef-1d8bf6c23929", "indicator--93fd974b-c723-465d-ae2d-64246a35c106", "indicator--55e7a00e-3b82-4610-bbc0-760ec3945dc1", "indicator--c68c68db-61c7-43ef-889b-69de0d3b77a3", "indicator--c68babdf-75c3-411f-b3b9-a891567b8f18", "indicator--fcaaf5dd-56f7-433c-80b8-9bec763d6271", "indicator--fd00cc54-3f8e-4f40-adf0-1a87d7cc1f82", "indicator--2d92aef5-c3c4-4783-8c19-c584efe4da87", "indicator--34eda9b6-62de-475a-8b69-f3b7a2c6248c", "indicator--8d9ca47e-ec7e-4922-b60a-85ee6136f7c8", "indicator--1c1cb618-ec06-44e5-963e-f63b3439b892", "indicator--66086747-0397-48dd-adfe-64d750c14ec1", "indicator--de7e547f-3478-4e08-8161-e434dc08e572", "indicator--082d1d14-7767-48fe-a542-649f0945728b", "indicator--fef16167-8077-452d-948e-e79580a66c39", "indicator--d82d98f6-a2e0-4a71-a4ae-39bd47155078", "indicator--5405b903-7257-4707-80f1-e4e1144df850", "indicator--0f75a97d-deb8-4771-94cc-f43ea78c5d08", "indicator--2fef512c-2e24-4bb2-9388-639111eb4bf0", "indicator--26211130-66c0-4b3a-8ca4-9430cae5dbca", "indicator--37af6146-0d3f-4a3d-bd68-e15937004ce2", "indicator--3dc3db4d-c238-4093-9146-df40876bb8ce", "indicator--146d5869-5669-4e9c-9418-6eb8c4405917", "indicator--e1372cad-6c66-446f-b207-19f763077991", "indicator--b73a8b55-fcf7-46bd-9374-dfeb0e41ca96", "indicator--90ce9c72-6139-4d26-89e3-056cf9af78c9", "indicator--20f8ceae-544b-4be2-873b-97f4e59b2a7c", "indicator--37286cb9-5fbc-44f5-af8f-bd92af005cfd", "indicator--a85a4096-a5b6-4378-986b-a6e1effc55f7", "indicator--cfebbce6-c6ff-4be5-97e1-68dd7a94ee00", "indicator--ddea4d50-5d87-4c6d-bc8b-399259cc1b56", "indicator--d49a6bbd-0a77-4e3d-a3c6-6b7a0ccdcc76", "indicator--deadcc4c-46c0-4ba4-a13e-da7ecf4dff49", "indicator--ad5bd86c-2543-42d9-bcca-4bffeb6dd08d", "indicator--b2438676-2e0c-42d1-b367-95a7a7712e95", "indicator--f19b1a45-9803-4e16-8b8a-2b6d497fd6af", "indicator--2b67af66-0267-4664-a564-310c40d3d28d", "indicator--9d396ad9-d27b-4132-b09f-f68c7836aac4", "indicator--0de8b9c2-8beb-45fe-aa73-1baedc857265", "indicator--25afe080-fd3b-40f4-a9a6-a929fe7eaafd", "indicator--69ed2577-71ff-4c90-b950-e8a08478aa5c", "indicator--18690bb1-0bf5-4b23-8e41-4fdb3b85e8fb", "indicator--592630f3-3dd9-48de-9bd1-6a569ce9d6b6", "indicator--c2442172-588b-40ff-ae2f-c9df27ff9555", "indicator--d1c03942-c1cf-494f-bb28-12ca7a88ba8c", "indicator--d2aa91b9-12ca-4c22-afc5-895c3a9a8304", "indicator--0ac4bb4d-f6f2-4091-8043-964239875e46", "indicator--4eded2d6-1f0e-43b3-9b85-f67cc1122f4a", "indicator--50bbc922-6c8b-4ad5-b386-bedae2c6125c", "indicator--52d62d19-610f-49be-91e2-94beda056ab9", "indicator--7fa90ee1-e766-4457-b191-17dbe60a3f9d", "indicator--97d9ecfb-8b95-4055-95d0-1d12f3f969e8", "indicator--5dc25105-0740-4ba8-80af-3534b50cf887", "indicator--a9e3d419-3f89-4f71-9b4b-d0a0e35d8e70", "indicator--cae52474-883b-4971-8ce7-f1906309458a", "indicator--d39ace7d-e13f-4a00-8b03-3455895e56d9", "indicator--9419b217-9979-4bbf-9c7e-f58918ef6cf5", "indicator--f47c99b0-035c-4812-8379-ff22d8d0e886", "indicator--0cec2760-0fb1-4d6f-ae4a-5cafdfc4176b", "indicator--c07f78bd-006a-420b-9e49-5ad2e378a4c8", "indicator--80d9f431-8f75-4114-a08f-355c35b2b166", "indicator--5652df3d-77ca-4078-b4c8-b140f05bbaa7", "indicator--caf64614-3d9f-4453-b757-9c1a3a79256f", "indicator--204482aa-bb3a-4fd2-8331-93ed8967ff21", "indicator--5bfa7354-5499-44ee-b888-23cdb16f10df", "indicator--9a30c9a5-0379-4eb8-b898-6070d4a6c750", "indicator--8b8269bb-6f92-4fb3-bc8d-7a267722a994", "indicator--e2fececc-c875-4073-9b98-2d4ef20fd6e8", "indicator--be4046a3-c5a4-438b-b1ec-43fe712b9961", "indicator--07a808a3-31d5-4c4c-8741-b043d4df9c18", "indicator--19ec1fc4-e871-4ba5-80ce-dc1df4775c15", "indicator--cea499e9-81eb-4f25-98b8-053a839f19bb", "indicator--b72da0cd-b04d-4f7a-9440-fb49092b2cc6", "indicator--69a141b9-6b0a-4161-aa54-50736d0e97a9", "indicator--672fcca1-aeb0-4b30-930c-b77cf3eafdb9", "indicator--10435c81-0f3d-4e53-ab2b-867c57bf90ce", "indicator--1f78b6db-cc50-4c19-ae81-76fd7c96a48b", "indicator--6cd27682-daad-4056-a25d-f771be8b69bb", "indicator--a964f90e-d96a-41d2-8839-f52c43df8b7e", "indicator--b19eb35f-5fbc-4475-9545-43ffc725ac97", "indicator--7e53afd1-8dd3-4937-9293-3009b59efbe9", "indicator--a53a0258-c373-4ac6-a666-530ee300e19a", "indicator--8c6b03f4-9b60-4ad7-af0a-3493516ec8a3", "indicator--4ffe9e83-41d2-4cc5-b269-64be3f6f34a0", "indicator--2dc53ee6-e35f-4ad5-96c2-840ac5b39343", "indicator--1feb931a-05f0-4cef-b0c7-6decb4d2e303", "indicator--92c761b9-cd04-4958-9077-94f34d113244", "indicator--8fe162b1-5356-4248-9da0-88800391d0b8", "indicator--5d744bc9-284e-41bf-a37d-3d9cc13a4acd", "indicator--f7b4e08f-c62c-48c1-8a71-1cc92e11a65c", "indicator--7e024299-3f75-4cb6-b79e-3d41c9a512d0", "indicator--9fe75c47-e444-4b01-8134-93db19029e76", "indicator--7c0ba2f1-6a96-4ef5-a840-5520af70be58", "indicator--0ff447a7-e1cc-424d-9b0f-e2e9951b779a", "indicator--a83e0414-2784-4f70-b846-7787b69cb2a5", "indicator--31369681-a895-49cd-b7ab-22380033acc9", "indicator--5b2f77c2-0005-488e-81db-18b8a175e8a8", "indicator--4c436702-1e21-4c18-92d1-da90e0d9a267", "indicator--5b0fbeb7-f687-44f3-abd4-a1d22afdb9bb", "indicator--9a1e0375-ab89-4a5e-bbef-7aac11775cfa", "indicator--dd484e7d-0c79-4b37-8a67-c98ca598be39", "indicator--fdcf3f38-ed11-48a0-9d78-125b357ccc56", "indicator--f170f976-4839-4b79-b95e-ac2fe1b9c3f3", "indicator--48f11e4a-fa58-4fd8-9fd7-3439524d4da6", "indicator--bf98c85b-9e2d-4aaa-b0fa-5a5c3f0a21cc", "indicator--fdb44aea-d0c9-49be-bd94-cddea44b93a4", "indicator--02565d6d-9d38-46ea-b7ad-2832666bdfba", "indicator--fe69b881-6260-4537-b921-c83beb203f55", "indicator--c2154b6a-4697-4ea9-a263-6544d645654f", "indicator--edd592d8-7983-4373-b101-5b8122e8a0c5", "indicator--2de8ffef-531a-486b-8728-24f774171d3a", "indicator--da5ced98-91a7-4d8c-ac8b-96ecd1aa14f0", "indicator--116e6a54-c3ca-43da-8c86-2674a5f58542", "indicator--e01d670c-022a-4886-befd-5b941255aa1e", "indicator--717531b0-14e3-4bf0-8fb6-337c0d93a9f3", "indicator--13245b0d-37a8-4c58-a219-345ca086e080", "indicator--1f84a06d-d284-4e79-a253-2ff76ca6d7aa", "indicator--24738b79-5763-4653-89be-b1bf52bd42c8", "indicator--7a69587e-d0a8-454e-b690-5034c8bb5aaa", "indicator--f84d0e99-b5b7-48e5-bda9-9ffd90724b1d", "indicator--55acefd9-78b7-4a33-9e59-389355741a15", "indicator--5683f770-9dff-47f5-aa0e-64cf4271dc58", "indicator--205a0562-0869-4e23-8593-d2a088dec0b4", "indicator--203ea74f-b986-4006-9c4b-190b1899fd47", "indicator--1f9c20e6-282a-413e-be90-393ead517615", "indicator--f469b060-b147-4323-9c9c-35d20e8f7051", "indicator--e600e7c8-edee-4703-b248-ddd4fedb2bea", "indicator--0df5175f-547e-4449-967d-7b41c13de441", "indicator--0b5b59dc-8460-4504-beb2-b1a92ddb4d6c", "indicator--e3ef16c5-e2ea-4555-8f31-212975736cd3", "indicator--fa196b76-4acc-425d-973e-49dbd316bb22", "indicator--7a338838-f68b-46ac-8005-d5617fbb6273", "indicator--925ed4ac-7cc3-4f28-961d-7a85936f938f", "indicator--be3e281d-e12e-4700-ae6c-abbae5a3771d", "indicator--8e7ba49f-4a10-4a66-9b1b-279e7781ffb4", "indicator--47278c95-0bf4-4008-b684-0d4a7050a892", "indicator--91bd35f7-250d-47c2-8636-5df33f8f59b1", "indicator--2c6e7ced-a2ce-42f9-9794-7508b1311c8b", "indicator--3695ab8e-0c4b-409f-9b46-0d67c482f317", "indicator--1c58c7b9-9794-4eb8-ac8e-1c6ee581bf8b", "indicator--bc4862bc-ecd1-4bb6-944e-c5a7544ca886", "indicator--ad3797b1-4883-4380-b2c4-b1192eebbd28", "indicator--51cbf560-e292-461e-a79a-184ae98403c9", "indicator--9cadccdb-6a05-4899-b3e8-2d5e9482bde9", "indicator--7ecd860a-4df4-4b04-9241-b2f437e63938", "indicator--bc4b515d-d743-4a38-bd91-1b2bcc3f5179", "indicator--c811909d-8f39-401e-9073-f4fc6751b7b1", "indicator--cacbffca-86a0-40cb-8298-f260d5d3594d", "indicator--273474f3-f5ef-4e80-8f20-fd1c9033bdbf", "indicator--c6a63d65-7b6b-46e2-b906-de47ae77c700", "indicator--be14ca92-7b35-4aac-b930-e60d6c9c2f1f", "indicator--ae10f767-77c1-4a25-a198-0b6a7d28b15a", "indicator--a507fbc0-4e04-4457-b804-f71ae9ed0ba1", "indicator--3ae6433b-c3ab-4726-be58-afd9780a991b", "indicator--f6f43979-8baa-403c-83fd-543658def126", "indicator--9ee198a5-8dce-498b-9557-7ae664900a7b", "indicator--3d79a033-98ea-4465-a9ff-565898d2ec9f", "indicator--09ecb9c6-e64c-40ab-98e8-aae14b3e081f", "indicator--fa152d28-28e1-42de-bfc2-fe0023bfb8be", "indicator--b8b795a0-6e19-4550-aafe-eb4688676f49", "indicator--46d676fd-0722-4bba-b53a-daecb3e1cd9a", "indicator--4efff3d9-1d58-4d6b-9ea1-a0d9178c2ea6", "indicator--8a4a29e3-2896-4ade-9072-d82aa8c2b37d", "indicator--49dce0f4-cb57-44ce-bfa1-1a84bdb21916", "indicator--5ae401ae-d567-43c8-8841-f444f153e855", "indicator--12b76fcb-799d-4a02-8c30-b10cf50abec3", "indicator--58d764bd-f757-40a8-a6fe-a79716faacd5", "indicator--2c6d4330-aceb-414a-897b-a12067c08c81", "indicator--bcc2be56-f0d8-4733-83f9-6147ece1e423", "indicator--d3dc53f6-534d-430d-9af5-2260c28585a2", "indicator--c551de43-546e-48a1-bbff-678e82f18284", "indicator--a87fb6b2-08ba-418d-97e5-cb03f4810ec8", "indicator--10141722-e09b-405a-a537-8bef363961f8", "indicator--be8d4a7c-dbd7-489e-9f0e-a1d0f9b302cc", "indicator--ba5ebb49-6c58-4656-8d6e-fa3047883568", "indicator--cb3c5693-f902-4eea-8c4e-d8b920b0284b", "indicator--26c0c2fa-8175-40ef-bd26-5a4c4c172b86", "indicator--6ac4b32b-222b-43bd-9c5b-96144d9c12ab", "indicator--18b77861-d489-41bd-a447-05b3a0358e9e", "indicator--6ac52762-57e2-44b0-b97e-1e3b09812c3a", "indicator--1b9c213c-f9c9-462e-b44a-531ec486b9be", "indicator--dfa603a9-820e-4e42-9e60-6cb9abb5995e", "indicator--0da37b52-6f90-42cb-9bac-0ae666a110bc", "indicator--6a66eadb-af6a-487a-87bb-c30599fdb334", "indicator--2c3875f8-ec94-4269-97a3-104dd42ecc90", "indicator--5004a680-3a08-4a46-95e0-de2b971825b1", "indicator--844026d0-1a99-481d-ba63-5dc7a30e9982", "indicator--8ea4bae3-3ea0-4aa3-a65b-382e9363c7f4", "indicator--3e1c8ac0-cf38-4e29-9f2b-e84d8708a7a4", "indicator--579c6b15-85b9-4938-9bfa-59904ab0e709", "indicator--fa89b340-0a06-4082-a44a-5c87a3dd0e47", "indicator--fbb0fc0d-45fc-472c-86e0-df21bf1540fc", "indicator--951034ec-8e1a-4f40-b34c-d9cf4eeb8e3a", "indicator--e728c2a1-b1f2-45af-9fbb-6f8b0ead29bb", "indicator--f6891525-f69e-49d6-9b0b-5838cb5ae32a", "indicator--dfe0c338-89d7-414e-95c7-f7c8685167eb", "indicator--e9cb050b-ecfd-4ec7-be7e-324be5314183", "indicator--f9535aaf-82b1-4869-a17a-cc6bfad6f3d2", "indicator--64e7e660-9d40-44da-988d-a8c2b94754a3", "indicator--4b180d35-6369-4dfe-bf92-3c7d91ebb9fa", "indicator--176f2904-3ee5-40d2-80da-467e65d035fe", "indicator--13cf9e7a-5c8a-467c-bf68-f29de36da445", "indicator--0c9ff901-f39a-4dcd-942e-6f1e6fb75d75", "indicator--8863a0c8-5c6a-400f-a844-9ac81c8aff89", "indicator--f3b59517-7b60-4bb9-ae1b-958d39874f5c", "indicator--7f9213df-24f7-403d-89fd-a7ea343e5bc8", "indicator--c92dca9d-61a5-43b1-93d8-fe1f1780184b", "indicator--27b678a5-cec5-467a-bb7e-c354c5bfb372", "indicator--4e4aa1bb-591c-466c-84e3-fc58fbe0bc6a", "indicator--f9e1faa6-f0b2-49db-abf3-6669c2e59e00", "indicator--370f1643-5fcb-43b3-801d-e61998e4d253", "indicator--20c00575-4522-46e5-9771-fc400ed0395c", "indicator--a6a23d6f-d136-4306-a0d1-30773678b87d", "indicator--86236ed2-8b2c-4b94-ae4b-48745fc0cca2", "indicator--969bde14-85d8-48c8-9339-78f58cb3ab4f", "indicator--1e2c3ab9-0400-4f7d-800f-6332b155bea6", "indicator--4467de19-d511-4179-8176-06be28d1c709", "indicator--274d2e87-4a30-4629-bac7-93a47ba43cb0", "indicator--1c9fc122-98bc-4846-ad3e-e530b3ba546c", "indicator--367f3328-6049-409c-aaad-189b3436fb41", "indicator--45779070-9aab-44c6-b027-c645ef765dc8", "indicator--5f9f314f-d1ae-43c3-aa84-1e5a24c7fb18", "indicator--42c730e6-12e5-4f21-8aa5-06087780c756", "indicator--89a4fdb4-879e-41f3-aeca-3b30409f31bf", "indicator--d209a486-3eb1-4f84-bacb-d3e0c2e64cf5", "indicator--49bb0e9b-28c7-4b25-8c4a-8a99398885b3", "indicator--5207b567-54b2-499a-9aa5-36f2ac373faa", "indicator--f29cb71d-e69f-4022-bc07-dbd1ab477dad", "indicator--9f105c3f-c29e-4b76-bc48-6e64cd7289ad", "indicator--5ef7bff5-f9a9-4bb5-9e58-3447790885d2", "indicator--ad188ad0-ad53-4ba5-9130-155930121207", "indicator--5b99c574-506c-4e6c-bbe9-168b3bd8c551", "indicator--bd5a9956-7bb2-4c29-bf54-ee944f981f57", "indicator--10dbdcc4-ccef-4c3e-ae70-1517d80bc4df", "indicator--ef0e76d7-b2dd-4d7e-9013-8188db17c60c", "indicator--ab0344d8-412b-4bf1-9db8-828542156b35", "indicator--9a6c1c8b-ab95-454e-9594-f2f6f4e1eac5", "indicator--7e9c4642-6c09-4090-8256-731f7fb9692f", "indicator--ab15f42e-293b-4406-9b7a-90ae6dd0f53e", "indicator--1c64f22f-065d-4a33-a668-954fd91f5bac", "indicator--3a3095eb-c073-4fbc-858e-498ec26f9ec6", "indicator--9d89678e-6b49-422e-9500-a8dfc25d4654", "indicator--547dcffb-beaf-4cf9-bf16-867a27b5694c", "indicator--09d0812d-3318-42b9-a480-eb78f3c8137f", "indicator--75046d66-96e8-4622-80c8-90ac61aa903f", "indicator--271f6eda-e610-4988-81e1-af494fe29049", "indicator--6ef9b75a-06b8-4195-9ffd-f6b762629aee", "indicator--4fbf63da-c412-4b7e-aec4-3518e2326774", "indicator--5ca1b867-6b32-4df3-8047-468d81c00793", "indicator--70c0712e-35a1-4155-b68a-83760db88c2f", "indicator--91a45d9c-f721-4a50-92ad-3e727a92be96", "indicator--c97ccb13-46b0-4ca6-80fa-afc0b9557958", "indicator--a330aee4-b687-49e0-bc97-a4434d1d7b79", "indicator--53fb9c18-b8ff-4b75-96d0-f3ea6c39e185", "indicator--7f82fbe5-cb3d-4252-954e-367151230ef7", "indicator--74cc039c-46bb-4e62-ae5d-de231b1b9a03", "indicator--523f2e98-2e10-475b-a08e-18a7ded69d50", "indicator--2e67d134-7d69-446f-b662-82935f90bbe3", "indicator--363f63f4-eb1b-49d0-97f0-961295c78f2d", "indicator--36f30a8c-d85e-4a67-a978-7df493dc14b6", "indicator--18da5341-90a2-4213-8aa1-c6b28a866dbf", "indicator--e138f350-c8ff-4f18-9bf6-5b170c535f14", "indicator--7f75df6c-f06b-48d2-9f17-51cf4ca4ba4a", "indicator--1e6e1a05-77b7-42fa-a3fe-bd5d08a6e8a2", "indicator--0f99af5e-25c7-489e-a451-486378abff9b", "indicator--78646fc5-808f-4eaa-ba22-c897bc8f70a2", "indicator--75268629-36bb-41ac-ac26-9a94d3656757", "indicator--0a17ba50-4cab-45fb-b926-34592327b62c", "indicator--46db12ca-dc6e-4a89-8f64-a164f021157a", "indicator--240485ae-81fd-45b0-a440-4fb519389207", "indicator--04289ac1-833b-4cfe-81c7-be268caa9f35", "indicator--e419c906-4a74-4b48-8743-d7a8ddc9cb53", "indicator--f88562c2-942f-4266-b23e-57ec46085df7", "indicator--c18fc1f3-f1fe-4357-99d2-3983fd690e3f", "indicator--0d2cf8d8-b802-4255-8784-35161902edfb", "indicator--d25e9b8d-a2e0-4f49-89a9-4ec17f94c6db", "indicator--ac110322-d634-4f50-bd1e-656d9fb33c97", "indicator--218dee0d-743e-4e77-b21c-a9889b9a7ed0", "indicator--f8cbfc95-512d-491f-a933-7ab8340daae1", "indicator--55f2e41c-eeaa-4dfa-a6bd-5e0e06a74669", "indicator--4ad493ed-52c8-430a-be60-c364dfd00dec", "indicator--80b52e5c-3573-4df3-99af-95a5a4fe4f46", "indicator--4d024022-e62c-418f-b239-172981516675", "indicator--e10c527e-e7ee-4c69-8a64-923a16a32503", "indicator--9bc92cd7-9142-4823-908d-f27dbdb2d0d1", "indicator--3c6ee45d-6e69-46fc-8066-0c3e59e85a11", "indicator--18f41b90-1fa0-4a5e-9cfd-5fa80b3e1f08", "indicator--2f4be429-f7cd-4809-a124-1afb05d79ab5", "indicator--40569a49-1b7f-4c49-9a94-9051d83792b5", "indicator--78b5d9be-957b-4e0c-a3e7-0559456b1dd9", "indicator--d2df8f89-aa96-49d8-8266-665f39a12c33", "indicator--e11fd6e0-3d3d-403b-866f-a8c7397e3aec", "indicator--eb09946a-79bf-4c03-b71f-06fb9bd07b0d", "indicator--32bacea3-0d03-4e0b-981e-48ac5c72cd0c", "indicator--962e76f8-2025-49cf-a6e2-e11ffbfaaeb2", "indicator--b35a657f-05e3-4ebd-ad44-54c44318b952", "indicator--eaa2e0de-908c-4d03-8b90-ad8aef05aa13", "indicator--6f177374-4fed-42aa-ae19-b037c60555d1", "indicator--f35e667f-649b-4aec-960d-d7053b98fbd1", "indicator--b95802dd-0131-48c0-81c3-bc0fd6482849", "indicator--6af0e42a-08d6-4289-9ce9-04109f921184", "indicator--8b6163da-46f2-4e44-b5e5-f297106958c0", "indicator--3f82c385-32ec-493a-8d2b-58e9ffe456a2", "indicator--f174cd60-97fb-4a65-8dfc-72f5e3495857", "indicator--002f7b6e-53c1-40df-b440-3ebb2df0c639", "indicator--e14cb727-d6a8-4e16-9c58-dd9eba39ea5e", "indicator--2faebac5-d445-4eb6-a55a-e7698bdca7d9", "indicator--cc9cada0-466d-4482-be72-9538fc6d83ff", "indicator--f9531643-bf48-4319-8f65-9a676156abf8", "indicator--14a5becc-9b9d-4f8a-8148-c48ea9bd861f", "indicator--d9d54a06-0a04-4fb7-a9c4-52e01aee3ac1", "indicator--c2fd6bd4-56cd-4329-9eee-47b29d012185", "indicator--5d2bec9d-8395-4518-869b-67c5866b55f2", "indicator--507d5a60-31eb-4ab1-a32f-0ce56079a81f", "indicator--2347d7ca-cde6-4436-bb59-2f3d90fb63bc", "indicator--55fc9444-69ad-493e-97f6-ac7753253e25", "indicator--87b55dc4-56f4-4d46-85ae-99cc8f723d6a", "indicator--4497e8de-b7d4-433a-b232-cfc0ba9055da", "indicator--fde5e403-90aa-4516-883b-b085e821bab4", "indicator--b2b0d21b-f364-4513-a55e-905217e9d8a9", "indicator--745b3278-46a0-4113-9201-7dbe76e7c869", "indicator--609c33c4-4226-490a-9f6a-413189a46132", "indicator--b077defb-3bd0-4095-b2ac-66f68c203634", "indicator--36257302-0152-452b-9e64-6677aad74429", "indicator--2eb7d786-f662-4e5e-9657-77f2c3f7f613", "indicator--116f3b95-c28d-4c3f-9a18-76fc151c6c65", "indicator--d4a25689-2bc6-46fb-9865-4223d4b5482b", "indicator--d13d26aa-d1d9-4252-8163-bc2d4e2b408d", "indicator--310a374d-c586-4a3c-bbfa-b4804ddb0df5", "indicator--41433b80-aa6d-4408-99ab-6e247525f4ed", "indicator--4412bb0c-0199-4d7f-bb1c-aabfef0cd899", "indicator--aa99d605-34a0-4f7c-affc-7e2e41a25d8c", "indicator--a3845294-93dd-480d-9f8b-7e72951231dd", "indicator--358750cc-7884-485d-b3ed-a678eaaf2bd9", "indicator--a127da55-f33f-4934-8eae-adb48e4dff68", "indicator--12ea68b5-933c-4313-8b72-6ef41a4ddc64", "indicator--f07bbf72-0a72-45a8-825e-0b3a1adaa877", "indicator--f2931625-b251-4972-b913-1d3aa8a39159", "indicator--2a24ba6a-6130-4eee-8b7c-a6953f07688d", "indicator--a60cd368-529e-4b36-b3dd-8a89d514d1c2", "indicator--42913602-4728-4b26-89b4-b62a7efcadbe", "indicator--13f261db-90c4-4be5-8587-175050dc447a", "indicator--7552ca3a-bd86-4b12-9b1b-0382ad82f38b", "indicator--dc308b06-7a05-42bc-acfe-eac42a018135", "indicator--44a3dbc3-d0f7-4d85-bd36-3a0fc4f82320", "indicator--8b2b8fc2-2680-45ba-9fe0-51a94215647b", "indicator--67b220e5-bac8-4f1d-8748-891f989fe582", "indicator--654683f8-1f5f-487d-8440-efaee0a029d5", "indicator--f567be89-2055-4e77-ac1e-06c369002fcc", "indicator--660aa3b2-ee4e-4df2-98dc-e5a1ee955853", "indicator--e8d7b722-a84c-436b-8995-d315cd4ad103", "indicator--52732208-f628-4d6d-869b-a2b0b5557cd1", "indicator--8d7e64be-0364-4c4b-8e57-b05e704c3d2c", "indicator--5b611334-5407-4715-ac4f-fdcaf216ea90", "indicator--cf338588-ecc3-4942-9531-401a281621ef", "indicator--d9f678a0-c392-407a-b813-c3ebc338dcc0", "indicator--a1947fbe-178b-48ee-9035-860f9eb6e223", "indicator--5a9bd8b7-329e-4b4b-a3f4-0da8ce4e77cd", "indicator--68afb57c-77fb-4921-9905-d6c71d7aec15", "indicator--15d6ed4d-4233-4a47-8a95-afe140569f28", "indicator--e5cdb05b-1c4b-40d2-8468-bab8bcee8b97", "indicator--7c2a3b60-7cae-4830-b807-75134d71a4d5", "indicator--fb8f97db-aeda-42a6-b948-6400e58c7b42", "indicator--02b2e0ed-b880-45a1-9c08-4525f64dbb59", "indicator--855c8a48-1463-4c2e-bfbe-2b0deafd0394", "indicator--6d296bd1-2772-4a5a-89a0-105b95514584", "indicator--7e8b8e27-41bc-4adc-b97b-bb27d3ebcfd7", "indicator--5156fc45-26c3-433a-b374-e57c64be7e0b", "indicator--20aa7367-f77a-4f3d-8c61-49831dd49646", "indicator--d6aa7ba4-aae5-47d1-b621-3bbd0c190e70", "indicator--5b180103-7c3d-4452-826f-459d359bf4af", "indicator--f07c808b-9656-4c37-b52f-7b4c10ef68d2", "indicator--acf80e05-344a-45c4-8536-914857ee7364", "indicator--c937e42e-32b5-4701-8d2b-cc5a9f7cefda", "indicator--cc4746b9-5299-454b-9e9e-355ba15d0063", "indicator--0dd54b0d-cbc2-4947-8039-a0ab7833fe94", "indicator--7cadeddd-532a-4bde-b05d-0d0a424a199c", "indicator--c1263b6d-400e-4f8a-b66d-97619b531b72", "indicator--b9cc9eab-1923-4a0d-a49a-fd028d9cd98e", "indicator--aa42266a-fcc4-450f-88fb-7bcfd2edb38b", "indicator--7b88ba51-bf0b-4119-a76f-764a390a955f", "indicator--59be9a97-d0dc-486e-a33a-e4bbcd17a349", "indicator--b0777695-395f-4fd1-abf6-0f32694f2e03", "indicator--3288cdce-0138-40bc-b25a-f8bcf75b71ec", "indicator--63d3c611-f0e7-432d-8d2c-741326726e36", "indicator--304aa8f2-cf09-497a-b8bc-fe30a27e1f40", "indicator--2957d1b4-475a-4fc8-a25a-30529f21f51a", "indicator--0cc3a016-2213-4ca1-826c-a8bd45a2e6dd", "indicator--f1f91b17-e9c4-4aab-9028-751309e1d688", "indicator--6494ce39-5952-4d14-bb52-72dfe3d37965", "indicator--423db0d1-d8dc-45f4-8ade-4686737c4e1d", "indicator--d3793887-b9b4-4ad6-b6f3-16dc4419986b", "indicator--1475bdbc-98d6-4e55-b02b-39052ba6f476", "indicator--8e7d7637-6f80-497e-85ce-5aceea624d1b", "indicator--b2b262f8-75e3-421a-9650-67d4dad8ec35", "indicator--fd6907eb-959f-4bad-a457-e450b3254526", "indicator--c775e561-c8b8-4571-aa5e-6c26c111bd09", "indicator--167d25d9-0b15-47ec-bdf2-e797d9244bca", "indicator--05b4e464-ab75-40a8-a5e4-77aabe103c5e", "indicator--24616493-561c-4e97-942b-59d1ac50e981", "indicator--01a59a5c-8ad1-428f-a6d8-376b9c785ec3", "indicator--ca3bb2ea-c4c4-4c33-b178-2a05b1fbbd87", "indicator--ba4ee2a6-bb2d-4653-80e9-85c9bd5fde24", "indicator--f3398e9d-08ed-449f-bc9d-1839de0307a4", "indicator--2d3c0fb8-8dda-4694-aa19-b19a391b56c4", "indicator--7ba079e5-5588-4637-ac5e-2849c9c9951d", "indicator--dcb7945b-6116-41ec-8b46-63419643e088", "indicator--88ce3350-069c-4a01-9e45-4f9badd75c03", "indicator--508f7e5c-4b56-4f63-b7f8-409208b93907", "indicator--73f6817e-9334-4fef-9d43-64e13acb65d1", "indicator--4fd5961c-51ed-423b-9666-63087d6ce32a", "indicator--351da9fa-5c96-425e-8a3c-6a3eeba4dd55", "indicator--fb940907-9920-4c29-b315-02d6d12d2ece", "indicator--e5e5b14e-1f02-46b5-97fb-1479c88f52b0", "indicator--414c384e-a65e-4f81-8357-bfb4d1dd9ac0", "indicator--4b410d96-0dba-4087-955f-524548f3bda4", "indicator--04fb76b7-0244-4188-8d3c-2f2a50c49b06", "indicator--7e342250-475f-42da-8a54-3d1730a69aae", "indicator--9cf867d1-154f-4c01-923e-82179e02fc82", "indicator--57e3fbf7-96d8-45f9-bf9a-b3754f98a41a", "indicator--972f7725-3a5b-4a4e-bd19-0afbfa153ee4", "indicator--7c8ebf43-0c1e-4bbb-bda3-320297de760d", "indicator--c709e7af-b0e1-4bb5-bb57-3ae9b58570f7", "indicator--e86b8fb7-6ee3-4f05-bd99-7b70bcf60d0d", "indicator--338c65fd-0157-4d65-8a95-2e9f85452d60", "indicator--63b7f374-8e09-4aa9-82ba-167ac439aa7e", "indicator--cd795e27-d64f-4b25-a607-5343b79227f7", "indicator--ac89b032-1535-4096-8e57-098e6ade70f6", "indicator--cb390187-3555-4093-922c-4701323a7ad0", "indicator--c78b9b89-b7a1-428f-865b-8a6f18724b5e", "indicator--54f4413d-1d5f-4b31-9122-2c5b4c5fe53f", "indicator--92c6867c-46c1-47a7-a5e7-1d4ffa211f41", "indicator--be79f584-f917-4045-b8c5-87a0573c3c52", "indicator--eeaae519-2c7d-48c5-b0b9-826cdf63df8f", "indicator--30c0cb8f-cc15-4454-b44c-6b48990b6e31", "indicator--de01e6b4-976e-43d2-80a6-cf918e46180d", "indicator--d54157fb-a455-4c26-8498-483eabf0b2c2", "indicator--bfa24abd-b2be-409a-8e84-08f7bc905528", "indicator--22761774-b9cf-4d7e-b014-83fce114a3e9", "indicator--a4c1a03f-63bc-40b6-8f83-5f4b71055fcb", "indicator--5a749033-7c2d-43e6-9414-9f374f2ab941", "indicator--7be63190-c783-48e5-a1b1-fe308963d6fc", "indicator--190bdc28-2443-40f8-b1f0-579684de57d4", "indicator--7ba9ac6f-9e50-45d2-88b5-c48929ea2062", "indicator--dc5f61ef-37f6-4204-9c7d-d11556cf3818", "indicator--ec2a8f1a-95c1-42db-897a-509a950ce86a", "indicator--0ef499da-c6a9-4ec7-8535-c65dce924dd7", "indicator--b2b92473-eb20-41d2-a40d-01b67cadf621", "indicator--b31cc541-ff3f-4ae9-b185-fc07d00af0f3", "indicator--06a1b3e5-01bd-4ed8-acf9-9288492cc4db", "indicator--707ffce4-0df2-4666-b88c-1a83425e400c", "indicator--ccdd4cee-3c14-4f44-878f-d74aecffd7a0", "indicator--ed0830db-ec85-47f3-a594-eaff08376959", "indicator--438d84f1-e2d4-498e-ac23-683d3b00bb48", "indicator--f477936e-0b35-440a-8ccd-bab1a67b4320", "indicator--231c9736-9286-439f-9a30-3470e0c6afff", "indicator--aa127bed-fc9c-4c81-976d-1d7bdfb37734", "indicator--abae8adf-9970-44ee-9344-fdaa8c580553", "indicator--9bc8032d-6ff3-4bf2-b6d2-a64ad9907e37", "indicator--7a3fd2d7-a278-4129-99db-c03f59afc9f7", "indicator--275cf9d7-f3f8-4d72-a029-56e18a310d46", "indicator--bee05833-0daa-4d22-a5f5-517493938150", "indicator--e634963c-d46c-44b8-999b-b95e1b21e160", "indicator--5064c125-de0d-4d46-acc6-f64209439295", "indicator--b79eb6b5-b314-4fae-b7d9-dcc81e057af4", "indicator--8fefacba-afde-48d8-b9ab-f67de76ad709", "indicator--dade2375-0c96-4af6-bd2c-cea646989b65", "indicator--9a085b62-bba0-4487-9cec-1a40626539fb", "indicator--72c4f655-ecc2-481b-8b3c-89750fa93527", "indicator--add02c07-02fd-4627-b4ac-2a75a3694553", "indicator--c8ce1579-e21c-4f06-befd-0e5c13e2bef4", "indicator--9bc73d2a-9146-494f-a6f0-e0458baea83d", "indicator--06e7f17f-724a-437f-b0a9-8f019d4b0407", "indicator--908053ae-7e01-4b90-9554-11b8df81f170", "indicator--f805b407-7d0d-41b7-bc08-27a0fb11a600", "indicator--fa2a2c86-1eee-4a52-8483-716452036b2b", "indicator--51f58cd6-0585-430e-ba9a-a49d4d2bb36d", "indicator--2446aab0-5794-424e-a4c7-5ca33b7f096b", "indicator--afd991c8-52e6-4d79-9a94-b010275a4719", "indicator--792bf532-6955-41d9-9926-6519c48ff637", "indicator--9aad2317-22eb-4257-a00e-0e20b1276693", "indicator--3f1a5167-7cf1-417d-9f47-4a66b3a5abcc", "indicator--a5d96547-82ac-457c-8f84-f016f56cce65", "indicator--435f0e46-b4f1-4203-90c3-68c658b3ccbc", "indicator--9bf79251-1d6e-4ede-ae60-6ea3a3752fda", "indicator--43372f5c-5dc8-45df-9761-69f6234a4000", "indicator--70866504-3ccf-45b0-a2ac-d8b9ce9fe7b4", "indicator--7de698a9-e712-4163-92a7-0f06ee0e4c82", "indicator--5f2d37e9-ea78-4043-9c88-f80084b8bbe8", "indicator--6f3acadb-6cfa-4ec5-a1bf-1e9a750499bd", "indicator--fd57c241-67f4-402c-9741-59cda85924f2", "indicator--21f195c7-baa3-4b42-9acd-70d94af23bc7", "indicator--18ee6700-7a79-4bca-8482-ea2defe2dbb3", "indicator--aeed1bb0-06f9-40b9-8fe9-fa470e13794b", "indicator--e9ad7d5a-d263-4d77-b8ed-92dc95636aa1", "indicator--c74ef262-b15f-42d3-83fd-d2ef14d2b4b9", "indicator--37f96a84-0a70-444c-8c5b-3379ed5a6f06", "indicator--8dc0d332-2021-45aa-96a5-90b5307ac873", "indicator--0e0f15b3-b828-496a-948b-c21570183706", "indicator--a94281a6-73cb-4504-92f9-41471f5afec7", "indicator--d31e334d-cadb-4f78-ae0e-d6072cc9f403", "indicator--0b81ad64-3460-431e-8d34-35a63f843cbc", "indicator--648b0bf3-1df4-4127-8e5f-53e37dc0e644", "indicator--9ac5c8db-ccb8-4806-9a43-acb781aa5691", "indicator--d4fcbc37-33eb-4725-bc06-559380105c7b", "indicator--4d08a427-59d6-4278-8fc1-b36c83f987a9", "indicator--b5fc5f1c-e15a-4229-b09c-3d22ab86c722", "indicator--3b514889-bf78-4068-977e-0ef29a3dd98a", "indicator--5a175cd9-b3c7-416e-92e1-3575316bc129", "indicator--6bd8c242-b3fc-4c25-83ba-d2de9b7bec24", "indicator--3a647d7a-8903-4ea6-99ed-8e3b6e484567", "indicator--97f3a1ad-1313-404e-9027-6542d3cf5298", "indicator--37c67c54-6d96-485a-983d-afb001fc1dac", "indicator--fbaa6187-5390-4c7e-8bfc-7872691b09a1", "indicator--ee915be5-0be8-4abd-a250-1146d05653ee", "indicator--97b91b92-f9e6-400d-8c17-c3ec41358f24", "indicator--65d9b6ec-1242-49a6-8a19-8d16f0285770", "indicator--85a04a5d-f977-4c99-a579-52d6c05fb816", "indicator--cb28f135-d403-4261-98d6-0d9d22d1300d", "indicator--4d31204b-4baa-48ef-b90d-c5445b43dab0", "indicator--bebed85c-d1a0-4bf7-b674-25bb68501bed", "indicator--7e045b89-5470-4bf2-9023-21ec0b0fbf31", "indicator--b65fedb6-2430-4cbf-b132-bf6aec20f589", "indicator--44c724fe-a5ec-4d7e-9d4e-b5b19bda4a8d", "indicator--55744184-26b6-450a-824c-d1b02f99071e", "indicator--38843b0a-bc3f-4a14-a662-9c3037ba4d06", "indicator--dd6574a0-1267-4b6a-8e33-643b8b3adde4", "indicator--b8972012-d42e-44d7-892b-e1c7e1b8b483", "indicator--52c5456d-39db-43df-9bc1-247bd521ca27", "indicator--ada12daf-967d-4901-96ec-00af5ed8b46b", "indicator--619d9eaf-2517-469e-beac-291cc2ea1310", "indicator--08e072ba-af95-4218-928e-f06f33e85012", "indicator--b680f9ef-67de-4972-9e41-f0d527a60e57", "indicator--8423ec2e-e23f-4814-82ea-8f4c6a46f184", "indicator--daac1c64-e436-4e41-83b3-8f9b980fe570", "indicator--d72688fa-2a1f-4e92-801c-2c921ef70eb9", "indicator--34de70bc-6565-4608-a247-8e46e696e59e", "indicator--ce1e328e-2c4c-4c46-83d4-a476406be5b0", "indicator--1ea9c6ef-d2b7-427f-bb49-64acaa3e0a87", "indicator--f7a04505-099b-47d9-90c0-b3b02aef2c87", "indicator--aadcba7b-938a-4087-accc-a010f49ffcb6", "indicator--89e9d1ad-5b6a-4a85-a2f2-32e3eb45347f", "indicator--ef239c62-3bb7-40e9-bf79-606774e3a3c4", "indicator--6442bff9-2668-4062-922e-b7f76909cc1e", "indicator--4b95ff47-ed90-4490-afb4-420a0a6537d5", "indicator--a965091b-9dcf-4881-9914-9382736f0b5f", "indicator--e7d631fa-211b-4bf2-ad5a-aff0e4865b9a", "indicator--c113bb8b-91f6-43d4-af87-37f5c87825c1", "indicator--326e2cf3-1778-498c-9062-7032b9a207ff", "indicator--cc963f56-595f-4635-a1e0-fac1295567f6", "indicator--bda7e57a-c00a-441b-9bc7-3c6e877b38dd", "indicator--408f1f6b-36ca-4303-a3b4-b0fdf8ea2592", "indicator--f95fdddc-093a-4880-a83c-1ec0e5ae9327", "indicator--b1ef2800-d9d2-4865-a1cd-46cc39291202", "indicator--57dd10d8-fc49-4c37-b55a-0a2874977d9c", "indicator--c41f788a-d006-43a9-9f73-b5c0aabec90f", "indicator--3a32d209-329c-484b-a00f-7a5b3fb1ffcc", "indicator--db75a878-41f7-4eca-883f-e42e8c6f88c2", "indicator--fd3c420f-e167-424f-8dd2-87d3d74588aa", "indicator--79bbcd93-bc18-4973-adaf-5accdbe9b838", "indicator--88b51175-241d-46cb-850c-915d32ca7849", "indicator--5ac2c2ac-8b97-42ab-93f0-b66250f14723", "indicator--fd0848d9-3a3c-46b1-abef-ebb81d2edce6", "indicator--f00148b0-b044-4914-924e-48f37f219848", "indicator--afee6d64-f362-448c-9090-c6141286e2b8", "indicator--3b2b764d-ec27-4346-bfca-f889d68ebdd7", "indicator--baff0d2b-eff6-412e-b051-39327b594f53", "indicator--649ebf7d-a21f-4102-80ea-a14f0f4bb688", "indicator--1b4a6988-e54c-46d7-b6fa-3d5df7e8db76", "indicator--0f1c43c8-451c-4b76-8d1d-c6e63d15956d", "indicator--24493d98-e2a9-48c2-ad6c-7adfb2963a07", "indicator--db363f15-bd20-4638-b342-9310d58f6e23", "indicator--aa6b09ec-1947-4c0e-9349-456625af44bf", "indicator--60e485a0-a389-449a-8062-9017baf841e6", "indicator--af14ae0c-e881-48f8-8030-a3e5ccddf0e2", "indicator--fbb61a7d-8e9c-4660-b1a5-bac64b31ddc8", "indicator--4ae72264-4861-4fc6-8eb3-f56ef6e9aeac", "indicator--f28694e2-6dad-46f1-bb0a-1d78678e419a", "indicator--bcef6f16-4968-4232-8059-e21ad83825b2", "indicator--1bea2680-b8db-4fa1-bbab-eae84629d273", "indicator--ad6a092e-5b33-4751-b3b2-51203d93ab5f", "indicator--202ea6f9-4c5d-480c-8755-d11df1a44d4d", "indicator--23ed28bc-ecaa-4ff9-a351-2b8d2a85e90a", "indicator--7049ea9f-ab85-4ccd-b84c-c1fdd4859552", "indicator--0a9c713c-4ffb-4c28-9c20-9342d066b9ee", "indicator--9d822381-b600-4c57-a9c0-e7174d0bf6a8", "indicator--e19d9270-0d82-4095-9a6f-5e1fe10d07e3", "indicator--0b56b816-dd7f-4ae2-9ce9-efbbc6c03431", "indicator--0d3b0a8d-b9e3-490c-9d6a-3ce938720ca9", "indicator--b2d8a6c8-7d40-483f-b1b4-569076a01c5c", "indicator--e2d70368-5dcd-4c0c-831d-6129eb86e026", "indicator--8454accc-23bb-44c8-a9c5-49a6d3001049", "indicator--5db93c4b-758a-4754-aaa1-cd319b443d2c", "indicator--f5190381-9c19-449e-8211-8ec6b55dc9aa", "indicator--89bc93b2-94ae-4e80-85a8-212ec4eff977", "indicator--ab1687ae-063b-4844-9517-76698dada7bc", "indicator--197af5cd-1a2a-4dad-bdc2-f3e6624060b6", "indicator--e5406388-b73e-4621-b086-4738d495adf2", "indicator--c2948043-c2b3-4ed5-9432-377300a1b0dd", "indicator--7b594764-d6ab-49d3-8a4c-4a29ee0cc2b8", "indicator--90f87bfb-12d0-4b08-80c8-91955575535b", "indicator--366d2f54-0663-48db-864e-89b61dd7a38c", "indicator--d2b91cbe-7493-424e-a643-e85618d54b0b", "indicator--8149cc44-f5e8-4e2b-998e-b1ce15e65216", "indicator--da07cda3-5261-40c9-81a7-9206212064cf", "indicator--d88dd83b-abe4-4a3f-8f67-b306c44dd04c", "indicator--42d5df2b-1d68-4f3c-898a-e62670d173b0", "indicator--67eb2213-8f4a-4ba0-ab63-0940aa1ff118", "indicator--99c3b7fb-e240-4915-be86-ee2cf9ca1d9a", "indicator--02507644-d970-48ca-a490-c55271746801", "indicator--c723753e-2699-4e7d-86f9-c8e0ac49a1f5", "indicator--bcb3389d-0716-4f1f-8079-485ef603d3ec", "indicator--6e62eb4c-a9e6-4daf-b571-f05ca9e8d33c", "indicator--18b0a74d-c0d3-493d-a9dd-30448fa3ac4e", "indicator--a5fa0b2d-3952-43f1-8bdd-b41862942726", "indicator--a7ca1992-b41f-4f0f-a2e0-ffffffefc996", "indicator--432d4458-a556-4190-a400-a4f1f8de7dc7", "indicator--a5a36894-fdee-45be-bd29-5d770cd17910", "indicator--be0878c0-3875-4c6f-9d32-6e7331d5b900", "indicator--8403b82e-2b47-40c0-9cb5-007e5dae16a2", "indicator--a72a92d4-19f4-46f3-a3a9-3e752424ad03", "indicator--71d0b0b6-7956-41e8-ad5b-b15bdbb28959", "indicator--7ffaa7eb-20a6-4ca8-ba44-21c8310112d0", "indicator--e85a5e93-2ca3-4b11-8a28-fd632c3e9614", "indicator--7f0f9d72-2754-457b-87cd-b60eb0a832d3", "indicator--d72d3eb4-470a-4947-86cd-513dac0bf283", "indicator--a14cd323-4281-4160-8027-fd1d9c4d8717", "relationship--585b8118-ae7a-45ea-95e0-9e461423f194", "indicator--41649a54-c04a-4660-b8bf-0a749c172299", "indicator--88cc3fa4-d744-492f-99ba-85defc57bb23", "indicator--7cb6d8cc-badf-4015-8ceb-24e988c16b65", "indicator--8db9a2a0-133d-4b96-a4f6-4063d2df18f9", "indicator--3e9ec03c-f259-4354-8144-8f772218ed23", "indicator--cd1acc51-6cc8-49da-956c-f45cbd3df6e3", "indicator--175e5fdc-a2c6-4cb1-8b1d-83d0feac2082", "indicator--bdcf7179-33d2-4125-8274-c7077fca549b", "indicator--45d70640-5efd-41d3-84e6-0be8b1c207ac", "indicator--b4b6356c-62e0-4445-85dd-479c1cb85b9a", "indicator--7b71329c-c5a4-4d16-a0f2-f08a104107e6", "indicator--75a4dd9d-b35d-4061-a4e4-22927b87ab75", "indicator--19680648-cfce-495e-a425-f8c7028186e6", "indicator--30db1647-75b1-4c23-90d7-04c8fd35cc69", "indicator--58377282-1979-49e3-96b1-330b9c14d851", "indicator--be91e3c6-9aa6-4ba5-bcd8-d544ae71cfa0", "indicator--7e065e71-14ed-4809-9345-b296855193a1", "indicator--580bfd29-aa94-4676-b8d5-b8690a80f09f", "indicator--33dc9a61-4de5-44cd-9ec6-5f107bdea959", "indicator--c0af1943-eb81-4ac1-9094-65658fff4219", "indicator--15e1e099-b8ec-4b7c-b981-0311d5f17715", "indicator--b2e0479f-cdcf-4a99-bcdf-4a40a75eb149", "indicator--1f3fcc7f-b592-4311-9c20-cc2ebee5a5dd", "indicator--c7d83ff0-0b24-47bc-8b66-3045ef13dff6", "indicator--3e7667b3-e279-4102-ac3e-adbf9e2d5005", "indicator--79ac3d8c-f317-4009-92f5-1d2bfcb3ac76", "indicator--3091ab3a-ae1d-4d42-8056-73de357bfc78", "indicator--224cb946-dd68-48e3-aac9-dc72b5d80e2f", "indicator--22936848-c2b5-411f-8e8d-23af4f984d9a", "indicator--52267c6e-b356-41c1-8050-0e94ed8058a5", "indicator--67d4be63-3664-48c0-990a-6e8a68200e0d", "indicator--63b294fe-a1e8-48ad-bfe1-18d287e0315a", "indicator--b4b7d45c-1a49-4cd4-ae70-22a5d480c53d", "indicator--0e2d2eec-db66-4e16-af28-16bc095e2fb2", "indicator--cbf30996-1f58-48b3-9f61-48de049cf42b", "indicator--e1986773-eecf-4312-8d87-4fa6448f9869", "indicator--f2bcb4c9-0f93-4fff-8e85-df6202f52eab", "indicator--4dbb2ec3-e91b-4ace-b811-cda04e42904c", "indicator--b1bb3b16-520d-4379-b44c-b8d000a5efd7", "indicator--3bd0bb67-6007-43d6-ac8b-a99986310d3a", "indicator--8d7a4b96-23c0-4f0a-a11e-002121aa8c8f", "indicator--63c45919-7ca7-4366-96ac-8eb312a417f7", "indicator--014d67ef-50fc-4724-b3a5-0fba7398b8d6", "indicator--99d6e3b4-4c35-48fa-b767-8279b5e5c09b", "indicator--401c2857-8571-4b25-b1fc-e3405556e60e", "indicator--aec31017-b2af-4b68-af6f-bf51894de7a8", "indicator--a4fcd997-30a2-43d0-b07a-2975020ef878", "indicator--4885ecd3-5979-4edf-9be4-4f2bba1b2237", "indicator--66968b49-55a1-4bd9-92bc-70ced5b29b8b", "indicator--08a28be0-483f-414d-b82a-8be29c363610", "indicator--932d3305-7dee-4994-96eb-1324174a856f", "indicator--7cc3f946-9535-4493-a65f-ba77e48bf81b", "indicator--2adf4242-f481-436f-9ea8-4209bfe67aeb", "indicator--26eef5a3-a0b6-47ad-91a0-65788d50c956", "indicator--0617493b-3842-4ea6-a2af-edfe6936dedd", "indicator--9c3342dc-189c-4cd2-902f-3861b4fc6408", "indicator--fa5f56a6-b20b-4bdf-a09a-51983fca09f5", "indicator--2a66ceaf-3488-4c4b-8c10-3ba7a01e5d4d", "indicator--a7d3f97c-78bb-4e23-8c5f-f1b6ec7dd935", "indicator--01748bcb-4c24-4634-ac31-bd05f76c2358", "indicator--a2dfa54a-21b3-40fc-af92-f466b5dc717d", "indicator--5e812454-4358-4953-b773-e6cf16b4a724", "indicator--f0cebb23-39cd-4848-84e7-e7b03c485f2a", "indicator--b083426b-a7ff-4f6c-9175-4199a3c869db", "indicator--62e014a0-cd1f-4f5a-8aa4-80e9517766c5", "indicator--a3df6ba8-1b90-45d5-bc40-11eb29b3aee4", "indicator--9a0ec6ce-16cd-4f8f-a774-bcc5fdf351c7", "indicator--2895160f-b44b-4cc8-ae35-1a39c7571610", "indicator--946d25f5-8281-47ca-a47c-3abe4a88d61b", "indicator--0c14c48b-66cc-493b-926d-9cc004ade805", "indicator--8355c775-182e-4fb0-98c8-03cacc0ee305", "indicator--905accd0-d9e5-4230-900a-b64cbcdea541", "indicator--1c72e724-91d0-45e4-9e67-4b0dbc9900b6", "indicator--ae2e05f6-aafa-400c-bef7-0f80a1ac78ae", "indicator--c689d262-8cf2-4b6b-824d-7f247ff7199c", "indicator--6ffbc2cf-411d-435b-95ea-08ab6684ae3a", "indicator--8e728c9d-32df-41a5-9ae0-8bb0a7ef5303", "indicator--62975add-f3d2-4327-82fa-9e0ce56de1c3", "indicator--ff9bdc2a-f71a-4e00-a7a4-07b3dab9ce29", "indicator--e2aa8458-85aa-471a-9432-38cb4a72a777", "indicator--014b0b1a-a78a-4fbd-8159-59dbb361d162", "indicator--78d44d8b-d6e9-4bcb-943d-52eadc33f921", "indicator--484c4019-bf2b-409f-8075-f4f008c2380c", "indicator--dab2f303-109c-4c62-b19a-ce6bdab23ea2", "indicator--260639f4-79e7-4dbe-9012-87639c90d662", "indicator--2a748152-00c4-413b-97d2-42920308a22a", "indicator--e07685ec-317c-4b88-9128-4175aa81cf2d", "indicator--4e3c3618-a37a-4559-bdca-9d4c26e61c97", "indicator--69104c0f-f213-4fa7-a96a-7c9dc6c6483b", "indicator--064ee0f8-551b-4809-966a-07b427641123", "indicator--507a6848-2ca3-4766-ac47-1772b53cbfae", "indicator--ef979544-0757-42cf-85f8-7d47e8adac54", "indicator--09d5b334-487d-4ac4-9eb0-f607c07bf59d", "indicator--893072d1-a72b-417b-a04a-bf29fe2b3a02", "indicator--764bc87e-e70a-4507-bdff-f328540cd28c", "indicator--5d4484f7-1ef4-4b84-af78-0a7c6f33a9bd", "indicator--3a3c416f-a2c7-43b3-acf0-bc605eebc495", "indicator--c6dc5778-b512-41c4-84b3-929e3f258753", "indicator--01ea85a4-683d-445e-a115-6c17ae2bf78a", "indicator--2d2da861-4634-4847-b58f-80ad9d9cd1e6", "indicator--3e6d0588-e5ae-430e-be76-2ac31442728f", "indicator--39e5ad1a-9837-4c37-8343-53561ab8d83a", "indicator--059ca122-2c96-4ef8-9819-c7231010be4e", "indicator--37d8166b-d3cf-41ae-9e5b-ed7b1f64985a", "indicator--be293a84-912d-4734-9773-00cd4b218761", "indicator--e5ed2af1-cdcd-4da7-8249-f14f56e4dd72", "indicator--bc368368-6584-45c2-b3b7-2cecce9b0554", "indicator--3c5a5548-e3f4-41b1-ace0-c5175cd50436", "indicator--f15c3c1c-4354-49c2-97fe-9899a6a84b5f", "indicator--a0301e50-ffb0-4bbb-a043-84705794ab01", "indicator--862be353-2ee0-4b1a-b318-69707123670b", "indicator--7f72eab3-489a-424d-b089-7690e5a1f62c", "indicator--3db90bb4-c91c-47bd-b5aa-0880cdeebb1f", "indicator--16e8a64d-9065-44ac-b967-0638ea5dd11b", "indicator--cb5250f5-a33e-4279-aad2-c651fb771c22", "indicator--eab1e223-ff4f-409c-a877-7dfc8fbdc0a6", "indicator--ae1fb215-70ca-4c95-9270-7cd8fa058b6a", "indicator--d7d3ce14-931e-468b-b77a-fbd50dce2849", "indicator--e6230ec9-81b6-42f1-946e-a60b66b930eb", "indicator--791200d5-034e-46a0-8349-108f8da045e2", "indicator--f4a27671-2740-4435-b370-b37f437d3a17", "indicator--78f365fd-b93a-43fa-9d82-bcf2959dbb7d", "indicator--106a0f2f-8682-4165-a36c-aef7afbd6794", "indicator--e4a08ca1-5bfe-4b6d-87be-0fe12345c981", "indicator--ed021504-1e3b-4f9b-872c-a24b3cc74a46", "indicator--7dffe3a5-d626-4d3e-9be2-069508a0058d", "indicator--4ffb66ed-713b-4f30-bdec-686099ad4830", "indicator--b9a15eb9-5aa1-4f2d-9d6c-efad2ef4fb4d", "indicator--d97abe81-7eca-4222-98d2-ae2b1d56b054", "indicator--dd62a4a8-abea-44c6-822e-a1c1b45ce1e6", "indicator--3a7d7a2e-6b28-4ea2-ba00-3b6eb19b6d76", "indicator--b2c0f98a-f377-4b50-8768-6d46f90e845d", "indicator--612b70a3-b2d6-477b-9999-96499249e3cf", "indicator--e05d754e-892b-4a6b-b63e-670a48f45dcf", "indicator--f58fd22c-9c32-4243-8f69-37ca806b1cce", "indicator--5425fe5d-9bd1-4302-937e-7e1966acecbe", "indicator--b260897a-6f4d-485a-b9eb-b8fa5defbb64", "indicator--19c59767-f841-4c05-9ff7-e67e85e69e78", "indicator--bd2b4749-df0f-40a9-ba43-8094e7f800bb", "indicator--85c4ee7b-bb9d-4af7-a153-187c964a111f", "indicator--26b1367c-d8e0-4f7f-807a-22906d2d4b9b", "indicator--0a47b4d1-394a-44e4-b27a-e0c978a64175", "indicator--96bae403-ab5c-45ff-9152-65cd5766a762", "indicator--9ab5629e-1cc2-4405-a146-458c087281bf", "indicator--658620c6-0107-4f59-ac4e-5d59d2261b00", "indicator--89c95995-1296-4215-88c1-030e428623ef", "indicator--1f2a6bf6-07d1-469d-92c6-0e65378c219e", "indicator--4e6a2149-ca67-4190-b7d0-7a1e5653f70b", "indicator--c00048d2-eaf7-4607-bcb7-19fdbc8dcbc4", "indicator--88c81a44-596f-4f9c-a3a1-f60e3270bbf5", "indicator--5f8a3542-49e6-4d48-9b6c-2b2b43612e85", "indicator--f501bdc6-6e30-45cf-8566-e590db7fd0a6", "indicator--5b488ca0-74f0-4cc1-92c7-401b643c072e", "indicator--44f43165-0524-4972-953e-c348f7c0fa97", "indicator--18c11239-d53f-4f5b-b090-16cc5bdf3e40", "indicator--342b2574-b466-4e9b-a717-e4aebdb4966d", "indicator--188d46d7-0ac8-418c-900c-d018cac5bcd6", "indicator--78ef92b4-d248-409d-9bb1-97e5576db7a0", "indicator--25c8cf82-d53b-4722-a666-4d400632bcaa", "indicator--aef26eb8-08e7-4b80-a466-4219e8468e01", "indicator--52002479-f497-4213-a7eb-f517baa8da3c", "indicator--1aa8e9cb-d4a9-4b08-b2ac-69403b680ec7", "indicator--e66d772a-1493-4af9-9b70-30e10bf188a1", "indicator--8f21d267-1e6d-40f6-8585-80ed86f1f147", "indicator--1a1a6c10-aa1d-40e9-a7f8-5df5469cc010", "indicator--01c64fcd-0c3e-42fb-824a-2f5409b2d9df", "indicator--76925b5e-c763-466a-b3ea-3b540f52cc50", "indicator--33b1a6d8-2b61-4529-9277-92ca53956c4c", "indicator--cb4e31ba-9c7b-41d4-93a0-c8aa7349f2e6", "indicator--f42b9523-19d3-4643-bf11-62c63d649685", "indicator--70fdf66b-1ed1-4912-bde2-316504b4ed65", "indicator--ff1caf78-6e87-4ac5-b352-0efeec17a74a", "indicator--50a19f0b-70d2-49e7-a156-9d845d385f2b", "indicator--3fd4613e-1ee5-4bb6-8835-a2dc53d48d3a", "indicator--c0ce823a-9217-4820-98b4-ea1ca8b6859f", "indicator--f9aba59e-f863-4f2f-8dc5-d2f6c1723b5a", "indicator--367d5a4e-9e8c-4123-b1ef-9e2edb7da298", "indicator--16f3cea8-8666-4dee-ada2-50f852c676da", "indicator--51e48b01-272c-4074-a726-47721c474cde", "indicator--b129ff1d-44f5-4b37-87cd-0ccec02b6805", "indicator--4b4e6e1f-3708-4f34-b0a3-ddcc0284d9a8", "indicator--f35a4505-e9fd-478f-b5df-f7e5f28f574e", "indicator--f7e54bb0-f5f9-4d6d-b069-1bcec88707a0", "indicator--eb915f37-95d3-4f01-ad93-715f7fb64ad3", "indicator--91ff7ed3-bf79-42ce-8405-8d64862b8c4a", "indicator--017571ba-e5b2-43b3-af7e-c401ceda7be2", "indicator--0707ff12-f968-4f35-bbc0-932ab5e8d78a", "indicator--a0c79b35-b9de-4f88-888c-2444d468b229", "indicator--a5da99e4-5416-4f71-afbc-69702a6478d3", "indicator--cdbf2c90-66d7-4b93-b3e7-827ce832c2b3", "indicator--b1e6e0c9-9bca-40e4-899f-dbc9815c5086", "indicator--8f9c937a-d340-4074-ab4d-6447663266a6", "indicator--d2c6c02f-20e7-4b6c-b0cb-689ccd69edf6", "indicator--68110987-aada-40d8-ad8a-ff83e6b2098c", "indicator--6d9eea00-7dc5-47d2-a3a0-4520334b8474", "indicator--25d9cc6e-931c-4fc0-ad2c-d86b309c0789", "indicator--68a3e491-92ed-4e19-8e9d-d27ac66feb6b", "indicator--fd72499d-63ff-4d3f-8584-3acbf04512da", "indicator--49b1038b-8af0-45b0-9971-5a183632356f", "indicator--94fcf458-a4c1-4107-a082-e04ef0beee4b", "indicator--e18df7e3-e1f5-49ca-a95e-26200d818111", "indicator--8af2bafa-af25-4290-a0c9-212e572ce0c6", "indicator--a433660a-9cb7-455f-a1a1-df6ab3bf8758", "indicator--56beb38f-813f-4226-9ca2-18c85a1fb8b8", "indicator--2259a65b-e391-4b3e-9d17-28ace7cdf40a", "indicator--89286a21-8dd3-48b1-a974-7652464e0b05", "indicator--85e3b97f-dce9-4200-81e8-1fc6b04cfbb9", "indicator--372fe47c-a124-416a-bef4-1746cd192602", "indicator--a024b44d-52df-4833-a606-9fa729edb149", "indicator--09972396-107e-4fce-9df0-8391d54fd78e", "indicator--96c548f5-c658-4a2b-be71-365925db7d2c", "indicator--9629bdd9-4770-49e6-aa02-8e0aa68628dd", "indicator--0ae7095b-ea21-4a52-9cba-9751b29fbe57", "indicator--82caa3ed-af71-47d0-9a09-c08ea1f00ad3", "indicator--c1902ad2-c97b-4cc2-a1af-3026541b8d3c", "indicator--e0d25753-980f-4edd-ae04-4a687f61aef2", "indicator--0e9c6bde-9780-4b20-a6fb-ad71c2241243", "indicator--e89d33ba-106d-4e6c-ab5a-6373c8cf4e93", "indicator--519754b3-dd71-4cab-abb7-0b2cf4491d9a", "indicator--613726c5-0fda-4f22-b71c-9640b60b8929", "indicator--3f73b4ec-1ff0-497b-8f7b-6c98cab7970d", "indicator--e66ee609-3054-4d4b-94d0-681bafb42c31", "indicator--9f12e87e-bd35-46e2-9d48-c3e6257739d5", "indicator--562f3f43-74b7-4af5-b560-a6a63a36ef72", "indicator--f868a805-8542-438b-bd04-8faabd7aa1cf", "indicator--a957842b-cea8-452f-acef-bfca3f821b1b", "indicator--85a1bed9-93e2-4182-95e6-5df8809bc804", "indicator--73b7203c-0dd7-44e7-b72d-08b1e51dba95", "indicator--583dea09-d9cb-497d-9b11-d1f6306fcf86", "indicator--947b44b7-3afc-407d-a3ce-f04c0af2ed8a", "indicator--2d915837-2806-4e95-b35c-4272978f6788", "indicator--b3ce60d8-505d-479b-86d1-721af384b9c7", "indicator--890db4b9-3b3d-42e5-a305-da9c62bee257", "indicator--67cee330-6a2f-48e7-bf5c-fa5a6d02ef34", "indicator--6b7b28a6-167a-4c64-9bba-35d63ea20d73", "indicator--26643822-6e0e-4ac4-95d1-516460ce7eef", "indicator--114d823f-4887-4db4-907c-c5ae29583d33", "indicator--3e59d025-d628-46e1-bec2-0204a0c0c45a", "indicator--9d011c98-d6e4-4702-aa16-bc1d0bb1a3de", "indicator--27fa024b-12b3-4a97-8f54-a5cbb86a24c6", "indicator--471124ab-ffd2-4049-b268-8cfcab758ced", "indicator--f57d88c2-c4c6-4ea8-9d18-46dc8376799f", "indicator--876ac27e-07fd-495d-8f0c-b4978ba1192e", "indicator--91273714-8330-4849-be16-d39382b5cf37", "indicator--b5cd0ee9-5832-43e6-ab4d-f630f9343284", "indicator--78cf4609-bc92-4675-97b6-0e4841426ee2", "indicator--9927c463-3355-4cb5-a70f-2accb97a062f", "indicator--02e902f9-7614-45f1-952d-8dddd852b647", "indicator--79de1e80-dcf1-4834-bdde-dd4dfcdba288", "indicator--a4224f3f-d79e-43ba-ba8d-c7fbae7f5389", "indicator--15fc6d17-aa50-4c42-b666-a27aad08e162", "indicator--9dc89809-a3cc-4d3b-903d-aa0c52b9d924", "indicator--ecc55343-9832-4042-aead-8d4c0e8ec98b", "indicator--dcc01e3b-9ff1-49e5-bba0-96b7e1ddb934", "indicator--a904b314-0eee-4bf0-8bef-76811bf7666a", "indicator--672b79f4-14bf-457d-bd4f-3db216fe75c0", "indicator--4118e358-5590-4ab2-ad80-a9459747c0f8", "indicator--41360453-e487-4c91-bb3e-a5b48ad9b941", "indicator--95e4c66a-0fa7-44e4-a43a-89f176699433", "indicator--f2b97e22-4d44-4994-a36e-8797a4e4275c", "indicator--339a53f8-364f-4ffb-90f1-d0760aac7949", "indicator--ba4818a0-b6fb-4b47-8227-808fa6092a02", "indicator--cf016577-87d1-40b8-bc19-b5df782de7cc", "indicator--d0091f19-7633-407b-9f8d-d7dc5abaf131", "indicator--22a6cac6-4ce3-4420-a81e-70d00b2cdc4d", "indicator--bb34a96d-8b7e-4fdf-a074-c69404db7606", "indicator--09028340-2b50-454a-959e-6580b230ab0a", "indicator--8c5640bf-7b70-4acc-80b0-7af93694f253", "indicator--9c43f3a5-ad7b-408c-b2c8-b87a8240ae07", "indicator--3089f288-2dcd-42b4-ba67-e70055f03672", "indicator--dbc1177c-1cbc-4db8-9ef9-7aceefcf246f", "indicator--e6ec3cad-3907-4275-b99c-9cb5b6c294b4", "indicator--adef8498-bbfc-44cc-a505-76aebe7ae6ee", "indicator--1c26139d-1e71-4946-8c4a-3f535b5f9d03", "indicator--b9a4328e-9f69-45de-8342-4537027b5079", "indicator--1cd2ab19-d78d-4c6f-869a-1dac949fd3b4", "indicator--021f43e4-c641-4ab4-a007-c2b9d259ff50", "indicator--1d602309-5dba-493f-92b9-408d9b839708", "indicator--323257f9-f25c-45dd-a1f5-55d857662b60", "indicator--31703feb-80fa-4088-b1c5-5152a8de9455", "indicator--9eb67056-1342-42b6-9781-c7364b62b082", "indicator--212255f4-d848-4831-9934-3fe05d1119ba", "indicator--d151b8b3-e2a0-429a-b865-27d5c52816c4", "indicator--95fffe98-dbb3-46c0-a50d-c688f6dd9b55", "indicator--d6686954-824d-4aca-bbbc-5dcc9fafd290", "indicator--0573552f-102e-48b8-8dcf-7a0eeb10fcc3", "indicator--9c1b60a2-aa4d-4154-bf2d-362978277fc6", "indicator--ffa9657a-2260-4571-86da-16b3a1c32d9e", "indicator--24917595-5c35-4e38-b45c-308cce4d2437", "indicator--c9c75f4f-a03f-4322-8f5b-ed1930ca7928", "indicator--7180f6b3-1299-4a24-a6ec-4f7c1308d026", "indicator--4019b9de-deeb-41c4-a7ca-fd4ed1c0567d", "indicator--045d2b1f-fe09-42e7-a899-bc09a014d9cb", "indicator--9946b3f6-1a9d-461d-a144-a2504887e2ea", "indicator--39dd34a8-676e-4fbd-bc44-8266cbfa1423", "indicator--74484f47-c53b-4f3a-be85-e4b337af1722", "indicator--4096b3b1-cfd1-482c-9a18-0a1ed2384893", "indicator--27da121b-eaa9-4c57-80b7-bc626c6a1492", "indicator--4f825b6d-6ece-40ae-81ea-00019aefae67", "indicator--fd19bf22-997c-447c-8146-7d503922a762", "indicator--184a9d81-c4cf-4e03-b40b-b9e9ee9a7e2e", "indicator--81b2dbcd-e221-4e16-a7b5-8e947115216e", "indicator--a606227f-231b-40bf-925c-e11654543144", "indicator--67cf8609-425b-4acf-8a4a-d594530918a1", "indicator--e22862d8-6606-4413-9bd7-ee40eff6c880", "indicator--8ccf4a7c-e8da-4644-b60a-9241bdd69dad", "indicator--6dfa66bb-dbda-40a0-b57c-fa87aede9e3d", "indicator--25143c6a-836f-49ae-a148-80c48c6bbb63", "indicator--47ab07d6-b47b-421a-a0a3-629e8ed8d16e", "indicator--0eaf3797-1910-4765-ae50-5f52ce47d4b1", "indicator--f02cc63d-3227-4047-a1b6-499df4238b96", "indicator--1693b5e0-bdb7-44b2-8315-7e828b4a538f", "indicator--f8999e87-0d92-4712-8d14-6db8123c86da", "indicator--56b0a074-2371-4349-9346-7aeb6f87e153", "indicator--80969317-4b9b-43b8-bc8c-15f786e6f276", "indicator--f1284045-958d-4826-8a65-36d7b78b585f", "indicator--10972379-9381-4f1f-86a6-7ee94975df41", "indicator--78a332d6-0e09-4ffd-a7a8-b29774ab567a", "indicator--082be848-4b76-4f5f-8f82-1a3df47a7598", "indicator--9abc282d-79bb-462a-b44e-1e97e5eff329", "indicator--235a93fb-6a7a-47a9-b3b7-09d096143a7b", "indicator--a576eef1-559a-4201-9d90-39e71daf7301", "indicator--a8ce8dc1-5299-4522-af6e-276c521ad257", "indicator--fe52e5a8-2f4d-4e45-adba-d8a322995c65", "indicator--3e5ab67a-33f1-4e56-9605-cee266388168", "indicator--d5c456e2-5f90-4023-a1c7-06e40ecb0f25", "indicator--a6673c86-913a-4bba-9ce7-fc82ce0313cf", "indicator--0eba7e15-3ef5-4ab6-9113-b3de8005f42a", "indicator--c22055f3-a1f7-41af-9e3c-4b6bbd438495", "indicator--816adae9-b692-4108-97b3-2cea2f60942a", "indicator--bfcf6b1a-cc66-4980-825e-6d74b1a9fd50", "indicator--4b9a40fb-5101-4824-a385-952cd121876b", "indicator--7be3abf5-3157-44eb-9dd6-010700bbe034", "indicator--a3cd647f-4242-4a9b-9abf-dafcb1cee792", "indicator--8029597a-a76f-4dcd-8106-3bba46a464ca", "indicator--f3205bbf-f68b-4a71-b044-3142823d4f9b", "indicator--439cf0d0-ad65-4bea-8f86-3d84a619e87d", "indicator--3c3c3645-ba43-4c6e-ada1-0efbd6525383", "indicator--88ed561c-6b4e-40ea-bdf8-fb2f243af225", "indicator--b3e922b5-e15f-4a82-9362-bc263508a232", "indicator--02bcfc07-ebe4-42c0-8669-ef95a5ff33d0", "indicator--196907b3-753b-4577-9aa3-bac96a02cee5", "indicator--1c0cc149-d9a6-4774-9d1d-bcc2b6f63d7c", "indicator--d15888a0-532f-4f82-b0d4-f7ddcf4c7429", "indicator--814ce132-1465-440e-896c-5a16f7b9b996", "indicator--4d86ca33-c28d-4037-a6ca-474d05411dc0", "indicator--554a914b-17be-4562-a5fb-6fd30a09c1ed", "indicator--7699b591-5c41-440b-ab70-acaf71a65592", "indicator--d17850f5-0eb2-421c-b638-30b17beacb90", "indicator--b1f09f8b-e80c-40bb-bc23-f1b9fad0ada1", "indicator--0ad60e75-e8a3-4c49-97a6-d41bcea74903", "indicator--27c5ddde-b97c-4b6c-bc16-29725add934c", "indicator--9e4302b8-3138-4672-bb14-838d1eff074f", "indicator--50537a6b-f496-4461-9bf3-9af99ede4fbe", "indicator--9dc5beed-2c14-4e26-b76a-8c35969b3bcf", "indicator--ef865254-7f34-4189-8cea-4dfbdf90f661", "indicator--e0d9d589-e155-4ce9-831b-758050d137fe", "indicator--3873393d-ee82-480a-82ac-797bc1a7b4db", "indicator--c59eb7cb-089a-4bcf-bfbd-1783aa47c79f", "indicator--5112e64c-07e4-4ad1-bde3-3934cf76caaf", "indicator--3d5a3087-038f-4fcc-a9f4-68dc08a65445", "indicator--f4945e89-0182-4d8c-8c5e-9f01ce2f2aa6", "indicator--73d75507-9e72-4242-a469-a74ba64d0b91", "indicator--277a587a-f284-4014-847e-3e86965b9a51", "indicator--c647d88b-dde4-420e-a323-8836ff3a42b0", "indicator--0d4f5d25-3d15-4e5a-9e4a-9b397e860eb4", "indicator--e4eb3a1d-71c6-447c-bd8a-3c745475f302", "indicator--b05b4288-779b-497e-9841-e687b4eb2d6c", "indicator--334fa53b-e5b9-42bf-a5fa-04670c5a20e0", "indicator--420358ad-ed09-4823-bdd7-82c5b5150e06", "indicator--e43e5952-5b69-41b4-a8d8-6045fde21649", "indicator--76630f53-d43a-4d7b-b17a-3824b7e38a3f", "indicator--cb95bbe4-da84-4ddb-b5bf-7f5b44edc17d", "indicator--e108f82b-d965-4db1-8a3e-be20fdc07491", "indicator--738e4f87-537e-4d0f-b5a1-80ad550c1469", "indicator--44b0d9bc-f40a-4d16-afad-ccf47fef6183", "indicator--8ae562a7-7ed6-4bae-a06c-19b74d861834", "indicator--bb9f2366-f7ca-46e5-9170-a6c0de111adf", "indicator--e23d6c2d-48e2-4eef-a25a-a19766cb30cc", "indicator--51f84afb-f908-454a-b119-f1eb90e3759f", "indicator--9b5c54dd-b611-47a0-8327-d7f76654616a", "indicator--e83938e8-9718-47d5-a6eb-0b0133a9d428", "indicator--fa7a42ef-f19e-45c9-b079-ab4eaec0e695", "indicator--fc89645f-05f5-48f2-b8eb-8eb4c8a4056e", "indicator--a4ef923d-25ee-417b-b437-258a1bb289ba", "indicator--7adf4bd0-732c-4f46-9793-6352848974de", "indicator--8675d7e6-940a-4262-ad3f-56e8363c9340", "indicator--d36ae5e5-da5f-4aa8-8018-98afcfc5f49d", "indicator--a2852b0f-38ef-4c31-9030-a083119d523f", "indicator--b41052d8-8a8b-404a-9688-9abb9f17ee99", "indicator--17963235-fcc3-4b78-8bc7-97b2df212580", "indicator--028d3a98-547c-4bef-bbe2-cba14d86511f", "indicator--51bae3e5-9832-4589-9b1a-5182b3f1c71e", "indicator--6ee861c9-22a5-4ac5-98a3-05e404194809", "indicator--1677f0a5-ddb3-4707-aed5-90a2bdd5b5cc", "indicator--269b74a2-6544-4331-b1a1-d9769c0af489", "indicator--3705abb1-82b4-4707-812d-8e2f9b02bf42", "indicator--706a5496-e903-415c-90c8-62dd4a47ed9f", "indicator--bd3a567b-1b66-442c-933b-912234a46bbc", "indicator--05e1ec76-688d-49f2-87d1-1edcdd885499", "indicator--02bd0890-1028-4d73-9e4a-bfa27a5f9285", "indicator--7c998426-27f2-4a04-910a-f26a0e2cf17a", "indicator--c48433c3-9b92-45e6-a980-a911493ff075", "indicator--e09840b9-0e1a-44cd-b91a-25b67b108963", "indicator--af304645-d115-452b-a1b0-b9f1cccb94ba", "indicator--4a95aad9-ee6e-49a7-8954-53ebe8319fe6", "indicator--768c8e62-a8bc-4045-810d-da1543236ad4", "indicator--216461d3-e355-42f4-8482-cdc11ec791d1", "indicator--47782011-ef34-4197-a7d0-c1770cc2279d", "indicator--d6b5592f-8dcc-40ea-b2cc-cd2f78c71a37", "indicator--17987e40-6ddf-466b-97e6-d8c77bf1959b", "indicator--826fa1b6-5c9b-4419-9bfe-f2024859d60f", "indicator--31d27563-d088-4220-8c40-5331ade18dc6", "indicator--7617c1b3-0942-4924-8df0-21447186e1f6", "indicator--e142fa89-189f-426f-bd13-4fd6e3a3ae27", "indicator--b1eb98c3-796b-4d28-818e-890fbf4d55d9", "indicator--a6bd8fe1-2199-40a7-842d-1e4b9a33c595", "indicator--083fe58e-a9be-4959-b94a-752c4ccad7ec", "indicator--c937bfb9-ff7e-4093-af3d-d159713bb35a", "indicator--9825d167-273b-42ef-8d11-0c1c03c2a984", "indicator--1a37bb20-8eb0-490a-9f9e-d8b501c77b3b", "indicator--2c957117-d48d-464d-87ee-b48219364395", "indicator--8f275aa5-c83e-44c1-9d9f-bb7c62c36807", "indicator--e9344f6f-06e9-4dd5-8ef1-ffada603be85", "indicator--95866b1b-d2fb-4b98-82e5-15f4494c73ba", "indicator--639281f5-1262-490e-9412-94aa50c25c60", "indicator--5c5c4185-691e-4a0e-ad01-538d710da993", "indicator--69c5eb07-72bc-4dde-9415-c81b63b37fd2", "indicator--e9e258b2-24a6-4946-80c3-223ccabfe84c", "indicator--eac771ae-cf41-48a2-81a0-33cc69895644", "indicator--802e3139-49fc-4b6f-8a83-bcbd12d1edf2", "indicator--cce08fb9-5f72-4f40-9a02-782447cb952c", "indicator--de0ba32c-559f-4a59-a1a0-30ea26cbf8e7", "indicator--17d4a495-1e73-43f7-84ec-6eefd3f2cf36", "indicator--480ecd1a-21d2-434e-a71b-7ff12cb86722", "indicator--edb355ae-1bea-4ec8-a8ba-dd830371fea7", "indicator--ecfd52cf-37f0-43ed-bbf5-e8771ed6fde2", "indicator--82fca2d7-2adc-4ba9-922c-6b5309ad8157", "indicator--bf8e9103-3b25-42dd-a563-c5bd527638ce", "indicator--a818dd3b-b82f-4d8d-af9c-f494039ff3b8", "indicator--fe4083e1-04da-4ea7-af07-ccae92984ff1", "indicator--49c57baf-5098-407c-a5a1-eab7c5684f9d", "indicator--9640b969-a99a-4c4e-befe-81f6b7de9f86", "indicator--db9af256-62ac-488e-a65d-14e43bbc9979", "indicator--390d743a-8bfa-4588-92da-5506dd50ee23", "indicator--fd9b5093-8e9e-4f72-9cd1-9b881edd1708", "indicator--d64a778d-e289-470b-b32b-bed2874cdf94", "indicator--dda26694-d0ee-4601-b85d-301b2731a1ea", "indicator--b13c7d10-a0a7-48ce-bdcd-a5397e02722b", "indicator--ee1e13e9-6750-41cf-8c13-e461b4149017", "indicator--d2260264-010f-4af0-a290-0e891335b9d0", "indicator--b9c74914-97d2-4361-b031-14b3d8b30bd8", "indicator--b4a71587-0932-46aa-8764-055891e753d9", "indicator--ef61c465-8c2b-484a-a7c1-f67a08c0a7fe", "indicator--d08085e4-5830-4c3c-911c-adb117f8e710", "indicator--6bf0ffd6-20ef-4bc9-b325-0f63ad1ad153", "indicator--8c383d62-a6b6-4971-99ea-a997ef8e6ab2", "indicator--0f6c970f-c912-4420-b69f-a888f8c5aa54", "indicator--9116665f-77bd-48ae-84fc-6d7eda1e574c", "indicator--b80f7da5-204b-4342-b41e-884bcec12eb7", "indicator--6263bf48-cbfc-489a-a2e3-581daf2df3ce", "indicator--760ebea8-a009-48f0-b83c-3d44cd9db252", "indicator--c242e2fb-0341-4bed-b638-b365a9cd3c43", "indicator--41d251e5-2ebd-4e51-8d19-49c767899656", "indicator--e8074628-4a44-40d2-8bde-8aacdd0cd60d", "indicator--12188e1e-8127-487c-9ef8-dddec5abb464", "indicator--418a24b8-b9ea-45e8-a3d4-d4994eb3d54e", "indicator--37c66430-3f3b-4329-88f1-2c4101def81c", "indicator--b480e2f0-8199-4d0e-a42c-19681099099a", "indicator--df5d6451-de1a-4078-b91c-2388cd049609", "indicator--e395a588-2f95-40c0-a522-98807a00d12f", "indicator--f8b11583-bf65-4056-8693-9b09e1d6477a", "indicator--16fd3d06-233e-4d7e-960f-bc7d1b1258d5", "indicator--11ddf816-4688-4aeb-84a6-a63d5ec408f2", "indicator--9eb84f35-76f3-4f99-829e-e901843e399a", "indicator--938e2f3d-0755-4fbc-857e-11137914f272", "indicator--7b3e6e10-44fd-4615-a158-36651238ca1f", "indicator--4d681171-8962-499d-856a-706d30053d52", "indicator--e4ff797d-caf4-4aa0-b407-8f89e57fe98c", "indicator--9379aaa3-01d1-4e70-ac20-f7bd7a6fe85c", "indicator--3ca4ee0a-f82e-4452-8393-7ee915c9ede2", "indicator--4cc41d41-ca6c-480e-a510-ac66aed5e137", "indicator--f9fc7725-f6dc-475b-bc06-ecadde507495", "indicator--e7fb6e36-24d3-497f-b0a5-95e3f648ce7b", "indicator--40780ae9-8c80-4f38-a807-c73470a195bb", "indicator--24e48329-2e42-4f9e-a43b-9421ecc28645", "indicator--ba8d9780-9e45-483d-8fa5-934ae686948c", "indicator--24acde1e-4220-41f2-b13d-a17ee5f6f6f2", "indicator--b4532936-4d4a-48dc-8ed1-28887d5b6bbb", "indicator--405c8414-364f-4000-863f-491328d55a85", "indicator--12d628e8-4316-448f-adcf-3b9035b80870", "indicator--df30053d-d48c-4c0e-b500-c5a8b3af9299", "indicator--c2fe589a-5f01-4391-aa9b-db7370cf4a52", "indicator--3c8d7dc2-894f-44c0-ac37-382986824bf5", "indicator--992c8677-1110-4d25-ae40-cb370b802afb", "indicator--2ccc69a9-8b9c-4217-a4d0-24e7ef7b01b7", "indicator--c942645f-3a2a-40c5-964d-3be90e616325", "indicator--937ace7d-5b46-4551-9ee0-d3a7c2792af3", "indicator--a4e9ca84-c032-46f0-9dfa-60307eefbb93", "indicator--12bad24d-626a-4593-93de-bb0e57a9e0f9", "indicator--5c2d5c82-1416-4b0d-a291-46d960825249", "indicator--67601b0c-968b-46e9-b655-3a3e222c3d41", "indicator--e4cfa730-b33f-4a3a-a413-287538fa264f", "indicator--c6e2e3ea-079c-47cc-9193-ee89866e7fd8", "indicator--484d790a-b6eb-4809-a543-0184699ac6b4", "indicator--f54fb5ba-c55b-4199-98f1-ca960a43cb05", "indicator--18790acc-0aba-473f-88a2-ea63ff1d7d8e", "indicator--38cbcc6e-c6ec-4368-bf32-7d99a216b4ec", "indicator--81e4ea58-2467-490a-bd77-ae29973039a9", "indicator--22676399-f8ae-4c64-96a1-62e93be7e837", "indicator--46c49d81-1338-4659-964a-a74d9b3f0e1f", "indicator--1b1a6f3d-ee73-468b-a5da-1a24503eda53", "indicator--d7cc7360-0817-4c74-a1df-4ca96bb4c59a", "indicator--7405b3f7-08ae-417a-9e6d-438b5b274361", "indicator--8fc97280-28d3-48d5-a0ba-87bde481eaf0", "indicator--f6c01ff2-f529-487a-a26c-24b61194362a", "indicator--4727c832-fc1c-4f7e-8ee0-b8425d9b76b1", "indicator--05e1dde9-0cb1-45a2-ab3c-0a42be90f5fb", "indicator--98b73593-723f-46d9-a7fa-46527f3ae48f", "indicator--be3d1fd8-2c03-4f2f-a453-c43d9277d41b", "indicator--83a4e1e5-e78d-4f53-95c9-845adc9a1875", "indicator--50e553d6-5b0b-468e-a890-34897dd55691", "indicator--04133436-1be7-4fe3-81be-3d30872d87f1", "indicator--8d4e0da6-5427-42fc-a055-cbb26717ca8f", "indicator--c1987b70-e747-451d-8e5c-d0f659f99832", "indicator--395404c1-9b89-4de2-afa2-fff193fd8b38", "indicator--7ad35661-5dd0-4a1f-8ea3-cdf84a47107e", "indicator--1ba47ba9-26f4-4a50-857d-7a8079cf9336", "indicator--cd0bbd71-6318-4652-86c5-a1fe9c6e86ee", "indicator--483d64d4-3d86-4053-9e67-ac645d6b766d", "indicator--f9885e4c-ffd8-4a81-b227-e9216e01fb82", "indicator--b7aaa1c6-c81f-4311-b611-b25c9a8ea49f", "indicator--e0d421af-7213-4577-a3ec-7653d4489676", "indicator--f2b92d10-bf46-4c03-beca-f8f14c7889b8", "indicator--5eefa8da-cdad-459c-9823-92e96391f204", "indicator--0b79874d-9a80-4593-9521-afd1a86732b4", "indicator--b3e1d98f-8fe7-43cd-baba-6773be0d17de", "indicator--4e77156a-c5b3-4929-ad2c-f6bfd9da6288", "indicator--eeff931b-3ddd-4a3a-a050-9e52b6fee7d6", "indicator--1909ee75-f254-4408-81e9-296e5e8892f4", "indicator--07311566-3db8-4d09-a984-827dc9511f44", "indicator--dc585550-0724-4a48-8164-53cc87643f5e", "indicator--aeb37670-3fc4-4623-b652-93ba87ce8ad9", "indicator--99039379-425f-4c29-a198-ce201aa789f9", "indicator--87d9d543-3077-42c1-bfe4-509b393c98ca", "indicator--7596388c-5347-44ca-bc42-bdfde12172c0", "indicator--473fc48f-5702-47c6-a4f8-aa9305ebca35", "indicator--63c24b06-7c68-4bb2-8b62-613176c129c7", "indicator--85570765-a8c1-4209-8fcc-f296deb4bf8c", "indicator--80ee2dca-e67f-40f2-8506-d615456feeec", "indicator--a21282bc-d6c9-4a1e-859d-46dba83338ca", "indicator--27e5320a-db4e-4d4d-a807-8259a350ae3e", "indicator--d8c2592b-8ac9-46d9-9b39-f3fa9ff0b069", "indicator--297bf450-67c2-43ee-8ee4-c382b5045c36", "indicator--96cb5add-8df3-4865-ade7-f325a859a56d", "indicator--7f578eae-580e-4c38-8f10-5658c4900b0b", "indicator--9b3ba9df-ea14-44cc-985f-e711b3a33485", "indicator--3b465651-bf9d-4a67-a54b-815d2e71dac9", "indicator--2939db82-4ce0-458a-84bf-f5fd68e1e5c8", "indicator--2a9ac0ca-b0c5-4eb5-ace8-1bc59959463b", "indicator--aba6e501-33d7-4b87-9f96-6f6fc96ea715", "indicator--2b12cc60-43ef-4f10-917e-52b77e608159", "indicator--40161761-9493-4f8a-a146-753188e4da19", "indicator--74bcbc79-7762-4480-89f7-5992f1f390d4", "indicator--606d4e48-ac33-45c7-b710-b4c452037544", "indicator--624de2a4-2681-4245-8f25-d2faa61f6463", "indicator--92ba6346-8c6b-4f07-9c46-f8aadb201e5b", "indicator--75cd3fa9-6ec6-4ec0-b757-5bf1ab37f6a0", "indicator--277c6937-2e14-4865-9325-9f0bfd49835c", "indicator--0564cd31-b9ce-40cf-b9a0-78218aab9e96", "indicator--d5ffc008-5d3d-4f55-a47e-aaf07ff75abc", "indicator--53db5189-8702-4a2f-9915-628e1aff11fd", "indicator--c232c11c-ee06-4053-ba17-15c747184613", "indicator--91634b43-e3dc-404a-8067-43ce3893d567", "indicator--fa8746a6-b3b9-4236-8c6e-5b2b887535c6", "indicator--30af0bcd-c01a-4337-b4ef-5ba39921cada", "indicator--eaa97558-4920-4a6b-a426-ebc00ba6a344", "indicator--b9695ec0-a65b-4462-a1f3-3321e6634ce9", "indicator--68665106-d12d-4e44-b4a8-5926102440b4", "indicator--a0eec2f1-ea78-4825-a61f-ec46687e3014", "indicator--449fa929-b623-4673-8788-601456b5d38c", "indicator--fe23cd53-5166-4a31-a427-2b7cbb80ea8b", "indicator--87a5204e-d437-4a9e-bda8-60c395ee9c00", "indicator--0cdf6704-91f5-4a0c-9075-b9cbefaec1ef", "indicator--dd902c89-bab4-4bcc-8c6a-a4850f18e3ad", "indicator--95cd253b-4643-4e85-b0f9-992dd9db106f", "indicator--54a19016-f680-4222-a571-fb921b4f6a32", "indicator--7f028031-e7f3-4cd0-9079-5654ed83d46a", "indicator--f3e83227-8adb-43a0-a232-dfedb54cd51c", "indicator--287d4edf-ce27-420e-844e-e66767520a90", "indicator--aedbbb8e-ddb2-49b5-afc5-d4b93d604b72", "indicator--ba2b3a4d-90cc-4f6b-8fe0-bb3361759ce4", "indicator--f2dc56eb-4674-4e49-866c-efa2dac996b5", "indicator--47b1be6f-b3ba-4492-8628-ddd5e1c44fbf", "indicator--fbd13d79-80b5-4b88-aaf3-296faa7f5a1c", "indicator--cf656084-8334-489e-8e50-8206185d689f", "indicator--2ea43d6b-1d70-4992-aabe-aae7acbbca88", "indicator--b5abdd1a-6eeb-487f-a3e0-d0646cc3627e", "indicator--a3125378-dd64-4f6f-bf07-eb4ddb41b38e", "indicator--fed3c230-cd7a-47d3-961e-6dca4b252cec", "indicator--e8113233-6fbb-488f-a0e0-9423412084a7", "indicator--ab716949-bead-4e88-b152-a5380547ef4b", "indicator--cc998296-c7e5-4cb6-8872-343560dc12d9", "indicator--0b69ca60-73cb-448b-959b-0c590c28b6af", "indicator--59608852-a635-4a14-b219-d15a46fc2395", "indicator--f97c4900-b8a9-4a2c-b5dc-f0d34cf6f390", "indicator--2fa56ae5-2bc2-4f07-8ecb-62f51cdfa4b9", "indicator--cacea12c-5e98-4739-aca7-6ab998c0deae", "indicator--b5fe264e-37d3-4f43-9f26-c2a9eb27c02e", "indicator--d638ff05-52fe-4d56-9494-92623b52fa25", "indicator--90b4697a-0209-4998-a3d6-79cf8401b2fa", "indicator--150067e2-3db4-4e80-9d1f-4e3ae1b83038", "indicator--03e1b5c0-a40d-4cf6-b2e2-30e8a3937945", "indicator--522753c1-08d2-4368-9fde-8765fffa1546", "indicator--3b69376b-f62c-4d64-8167-65e86ab7788d", "indicator--a71c643e-e38a-4b63-ae11-f7d547acf85f", "indicator--364b5aca-04b6-4206-9bbf-06161435eac4", "indicator--17fe3300-365a-4501-b149-14fd34b4b2de", "indicator--40eb3572-d82b-4cd9-aeed-d121911a0995", "indicator--fe8b8930-b569-4d7d-82c6-94fb474a11cb", "indicator--58e7e851-f0a0-4632-bdd5-255161ca6e59", "indicator--517d03c3-d738-4e14-8d5a-fc31b705a021", "indicator--e74c21fe-07f0-4c4d-811f-ef2894b1580e", "indicator--f57c8d55-ecbe-4c5f-9e6a-d67bdf1d4da9", "indicator--135f363a-1795-429d-8ea7-55e220dc0959", "indicator--3d81b079-9431-4444-a0fa-e79ddb0dda49", "indicator--9a46197b-ce92-4c67-b19d-c2864ed2e8f5", "indicator--aa372e11-ef41-4c10-970d-4227d6e71712", "indicator--4088349d-cf64-4d64-81cd-cba9ac9f5bf2", "indicator--de1f0b95-9aaa-4733-9927-8efac6f2d007", "indicator--a689b78e-dd0a-4f4f-a960-39a42dee84af", "indicator--3871d2a0-f2b3-46e2-a1b8-ddd2bf599977", "indicator--61e172a1-d88f-4f08-a50a-f109597521c0", "indicator--6cc4e778-acff-4f39-9651-e7620c87d080", "indicator--19b9e808-691c-4684-a845-701539d0ff97", "indicator--0b38a1a3-09ad-49e0-8e61-e10f7df689ac", "indicator--b0aece77-440b-4fba-b4f5-bfeba289c931", "indicator--d8be1247-942f-4f5d-8c3a-fd1e7cf1d1c0", "indicator--06a8452e-01f4-4909-8940-12b457b7fbfa", "indicator--2c1edc83-0c03-4c9e-8608-b0e2beb76262", "indicator--d2cbc2a6-4e69-4f95-8719-e3a238974551", "indicator--4470fb92-7857-43a1-a451-48c0b4c5be46", "indicator--59de8eab-015c-49b5-8e3d-17eba43cccc1", "indicator--7bc4fc0a-7b19-4de0-b07a-707b796d4d4e", "indicator--bb13ee1c-d998-4f0b-b8b8-4ed69f6e2b2a", "indicator--c46f0275-a6bd-433d-ae8e-e608e52a1531", "indicator--d92c55ba-d600-460c-8b9c-68b07a41cf76", "indicator--a891bfad-3666-4ea6-908a-a44b2c703ccc", "indicator--0fb1f095-a322-441c-9fa7-e25a05d8e2c9", "indicator--87c34adb-b842-4ed2-8e2f-f791400e7414", "indicator--15eed63f-7da8-4843-bfea-f43603313edc", "indicator--079bd98b-a7f2-4b1c-8135-fb8d20a970dd", "indicator--007ee94d-842e-47fe-8e7d-77c33befc8f5", "indicator--1b628f3f-996e-4e3f-8ad6-9386ba9abed4", "indicator--1829b087-1445-4983-83c9-821b5b68afcd", "indicator--547e84cb-da36-44a7-89bb-fa661528ace6", "indicator--74aaec60-e217-4b1f-ba86-38def92e86ff", "indicator--98a1b406-5a42-4e69-9bc8-aa4bd4e69871", "indicator--84b7c4eb-c31c-4063-bfc8-6d5f62c6ba49", "indicator--ee92bf85-1f2d-4b8b-b23c-6c5b32c0b22b", "indicator--75b4350d-7cdf-4bcd-895c-b86255c1a9ba", "indicator--337853dd-19f6-4499-bb52-2912ab985500", "indicator--31c936e8-7520-4f61-af71-615d403c5ae4", "indicator--f95af506-6ee1-4fdf-b9f0-53eb4979cbe5", "indicator--e142a87e-5466-48cb-8ede-724f53069103", "indicator--a4878625-da56-43bc-ac1e-c02e4f1ca469", "indicator--80cd9743-04ff-483c-80e3-85d4bde86637", "indicator--219f8a2f-03a9-48da-8c68-eb98ab3c5d36", "indicator--f52e4ec0-2ec7-48d4-a7f5-4b42b2aecd36", "indicator--06654d8a-d37e-413b-9a4d-ef36d5a24795", "indicator--caccd333-d807-4dd8-a138-48846b9cbf40", "indicator--d02934a7-261a-4f50-9055-20e173562f2f", "indicator--f0892cda-2082-4b38-9017-77686259bb53", "indicator--51c0b1b7-3cfa-46d3-96ea-38d96746e08d", "indicator--f4c27f30-4e6b-40ca-b227-f12b0b58197f", "indicator--074f31bb-9cff-4401-8ab1-29a961c72589", "indicator--6873b211-9c0b-4a85-99f0-fe25aef25157", "indicator--547f2649-a0f7-4c23-a672-34320a245f76", "indicator--03e5963b-f404-4784-8eca-c4f3c2df137f", "indicator--9e8ac56d-0990-44c2-b0da-46580bddf2be", "indicator--140482ea-cefa-439c-a75a-c5b9e82f53c2", "indicator--ad1a2956-7117-486a-ab74-2884d834671d", "indicator--3c7f35bd-909d-4fc4-a715-ff0049217e97", "indicator--5dfcc723-a5bd-45f2-b3dd-a9842689a321", "indicator--1694ea23-a3bd-4f02-90d8-cc8b48a4875d", "indicator--c1d123a4-f56e-41f0-8889-80b60d636cb4", "indicator--479e847a-c5c6-4bb0-8ad0-5667f51d72cd", "indicator--31df6481-fbd1-4fd8-8610-9d835ba6ac58", "indicator--668fc4d6-3802-4196-a9ca-284a3fe4d2ea", "indicator--c0e0a4ca-d3dc-4713-b4cf-22fd6ed58af2", "indicator--2d189ec2-1e1c-4067-8169-23b4260eb652", "indicator--abc30935-dec6-4fb4-9086-a743161820b7", "indicator--d6ce10b8-6da5-4fc2-a0de-95839aea2bab", "indicator--7d6e55aa-4be1-49c6-818f-3d767d9602eb", "indicator--92b7fc0e-59a9-49e8-8af0-bf460aeb329e", "indicator--dd1532b5-25a4-47d2-a437-308747ba22f6", "indicator--3794aa7b-3b46-4b15-9078-8a342690d98a", "indicator--2758d721-cbfd-4fe9-85b0-e75230cfc5b9", "indicator--bb860fbf-58e2-4565-8c12-5076df0d16d6", "indicator--486b40fa-648f-4866-9585-799094684002", "indicator--af30075c-43c9-4d4c-b1e5-f2af6e6df769", "indicator--35bd9e97-1654-49df-aee7-cbf1fa3da179", "indicator--10748b61-906b-480c-b116-4614d9793151", "indicator--2cec1896-2139-4c76-ac55-ca3e509a6902", "indicator--4a33e342-78fc-418a-b5e6-af3cddb13074", "indicator--2c2182af-1923-4845-9a13-4e5e7690df17", "indicator--bd67326f-7ee8-443a-bcb6-41d09545521c", "indicator--67682b6e-8d22-41a4-90c7-21ae85d52a99", "indicator--8d049992-350f-4647-b3fd-23dbd48894fa", "indicator--40e82563-dd77-4ae8-98c1-eed3e4073a30", "indicator--4b4e00d5-b0ce-4ff3-8d71-ef82406724e9", "indicator--a89fcc0e-0fe7-4d45-9bdf-abbbe7354d2b", "indicator--9a321820-c3eb-4901-aa7a-a7297062f192", "indicator--5f2bc857-da4f-4fe8-ab34-fff705a852cd", "indicator--c7e4273a-709b-43cc-b710-795b79c47e8e", "indicator--fddacf77-c6dc-48d7-b05d-0dd1a4d1a584", "indicator--0b8cd8f0-0790-404a-9eec-730d17ffd1d6", "indicator--3a5cdfdc-83c9-4ffd-aa89-08312bbed3bd", "indicator--d591402d-69f4-4565-b016-8cf5c2befe1b", "indicator--89ceeff5-88a0-4e44-8431-9c3a1d56f95f", "indicator--df9a8227-8cb7-4931-bd54-fdd7cf4892f2", "indicator--c6b0162a-9201-4929-916e-e3fa268a9dfd", "indicator--198e7662-ec2b-4b32-8c16-31e9bf8938a7", "indicator--0d5ccf44-ae66-47a7-ab61-72894980b34d", "indicator--ba59cfbb-df2b-490b-886d-f3f0a8c20dd6", "indicator--7af5192a-008f-4fc9-a42c-693f0406ece7", "indicator--eb09d8e1-fc5b-4fa7-b03a-612334d75f8f", "indicator--c5232339-2cc6-40d7-8bbb-3032e3cce718", "indicator--1271de7d-89e3-4a3b-aae9-56b41af5e19a", "indicator--ff37ed86-40ec-4b2a-b2de-694c99838d0b", "indicator--fb7da28f-f5f3-43c3-8ea0-a9f54ba545e1", "indicator--5229ab78-630a-4fcc-a1ab-04665050696c", "indicator--6840c1b1-3663-4788-8d3f-e46187d937c1", "indicator--6f524499-1d5a-4ee0-819a-3ed4cc2dfe91", "indicator--376e3065-cebf-4113-b443-79ea4f0a2785", "indicator--61ccc566-9477-43af-bd03-858616f18c6c", "indicator--0656a8b9-5a19-4610-b632-3e6496e2486c", "indicator--41474ceb-f6ac-4613-b3d5-28d8a572df50", "indicator--a02da207-b690-440e-9945-4619044d6d5a", "indicator--6eda7206-8f43-4830-92c2-a9eb270878a7", "indicator--cb4de7e3-150b-4181-973d-733cbe77031b", "indicator--e35d6bbf-4c2e-4376-a4e4-52be038a90b3", "indicator--ef92284e-e2eb-4bec-8dc0-2e083c87982c", "indicator--8bcd40bb-80eb-4d67-9527-938fe0db7a6e", "indicator--479a79ec-f6c9-4ed5-80b6-fb640cfea3f4", "indicator--acb06b7d-86f4-458e-834c-b3407edfaa6e", "indicator--32b533c0-6bc0-45a4-a2a3-515062fc23c9", "indicator--e94e17a1-4e31-4aa8-a2cf-7a13ca0279c6", "indicator--693f5a19-4fba-48d7-98a7-650540faacdd", "indicator--ae3f7843-c638-4b6f-a491-0c3ee941c5d1", "indicator--307c0a0c-a429-4f00-a8b4-1d73fcbf878d", "indicator--44c4cf5d-227c-449d-812c-3837c3c9f507", "indicator--0c0cc106-4b50-47af-9c75-e0f0c640cab8", "indicator--7e3f8050-460c-4831-a9ab-8407ce261bcc", "indicator--ab8389ce-f044-4273-b258-1b6962210373", "indicator--52f052a9-e045-4177-b1a8-47d4d714fd2b", "indicator--a1f5fd41-2eae-43bb-a08a-f2504ae07b03", "indicator--8a3685f7-265c-4f85-a126-9349742868a5", "indicator--67c59266-27bc-46f0-b44c-211e4a0b40e8", "indicator--881631d3-7f90-4694-b9e0-1bdbb24564dc", "indicator--c488e057-72ad-4a5e-8ca9-5348fdf80b92", "indicator--6ecb8885-9202-478d-8e4a-38167271fcdb", "indicator--65110f4a-a8e5-41ea-a710-d3eb793c46fd", "indicator--aa8435ff-4285-4aac-a275-3b73e6eb1225", "indicator--0935bade-1228-44bb-a2d8-bb17e4a99c23", "indicator--8a93ae08-60b4-4af8-aeb9-48540e98227c", "indicator--d35b6248-f73e-4bc6-8479-d19a33cf50c7", "indicator--0f1afcee-77ff-4c0a-aead-bd7590a8634c", "indicator--6dd11c70-51d5-47e0-ab0d-9a50dab09c23", "indicator--d31fcf02-553d-4899-bb65-a6cb797073bd", "indicator--aa7b3ea8-3df8-494a-88a0-9103f4ba9e08", "indicator--956dd0e4-4ef6-4a74-8f64-a44770d4fb10", "indicator--f40e1670-6664-4f3d-90ab-f1452d3cfa65", "indicator--6ecc4995-170f-4a45-8722-64356146f2fa", "indicator--1fe99e23-9f9a-4cf1-960b-48def0889367", "indicator--655b0a8a-334f-4aa9-81c0-5c3de5948c1a", "indicator--935ce604-49a4-4e96-8287-4c0f942890fb", "indicator--4f3a58b3-a9d5-4acc-ab05-05b78d13a439", "indicator--ab57df51-f8e5-4888-884b-28f5bf40bb57", "indicator--fa6db24a-bd1d-4e3f-b12b-0a7929e51b25", "indicator--5555cc0f-66d0-4e0b-be20-d6cd61f2bb2c", "indicator--795bd85d-f65c-4e03-9d5e-60a4f3492a04", "indicator--05309781-40bd-411b-b955-3f4cbfb48679", "indicator--60c2af80-a2c1-4f75-90b3-e1b233925e33", "indicator--8b6a4adf-c1e0-4b7b-b181-190306a81f19", "indicator--12581401-b2a2-4bd6-aafb-2d69cfd09efc", "indicator--dcc27e93-5f70-4a02-9e1e-137deb22f41e", "indicator--073950e8-87c4-4862-aada-3fe41cc5a3d4", "indicator--83e4e5b4-f192-4875-8020-c556c812276a", "indicator--64873290-8c80-4446-935b-44bc19336e47", "indicator--b7ae6816-7e7c-41dd-a3a5-5cf3ba7a9f40", "indicator--8117e0e1-95a0-43a1-8027-4c475a2e0ea9", "indicator--19fb40d1-cc5b-4585-91fb-155eace238ec", "indicator--9f0af98a-546f-4025-8f7b-5366fa8bac0f", "indicator--b6a9af3c-bbe7-4f33-9035-3198c50afde7", "indicator--8b34a59a-6552-4372-9ed1-543e4abb8eca", "indicator--e0a82eb3-b561-4422-8eb9-d0af3c7cd3cb", "indicator--7a549123-8dc1-4432-ad9a-f052264f2d0b", "indicator--988919b5-0d00-4588-b1ab-88cc03b520f2", "indicator--1ea40ddf-73cb-41db-b860-39f551119b31", "indicator--1ebcc68b-995a-4a48-b0f1-02c1ff503458", "indicator--0a5b8fc4-6124-4772-ac1c-9ce44cd76f8a", "indicator--8df30c71-74d7-4411-9e0a-00b0f8b41889", "indicator--173484c9-886e-47a6-a53a-a1f6b338e5c3", "indicator--f5fd4de0-1d09-4b3e-8b4d-550caac2f1f9", "indicator--aa4695d9-c229-4c57-ae2d-b452f06c2974", "indicator--31b7cd3a-5cd2-4dc5-8457-495e9d8cfd53", "indicator--345b2071-1aed-46be-b313-30cb585f3797", "indicator--1d1a1e79-b491-4531-bf90-eaab0901acb3", "indicator--3680cfb5-e4cc-4ef5-8b48-e0f75c31cd82", "indicator--a16a41b3-99bb-40a8-bf18-916590c0d17b", "indicator--2c9bfc8f-4c52-4751-995f-d824c1cd5edc", "indicator--8a34bb40-af32-4759-a780-4ef2a8dd46c4", "indicator--ddd9016b-3bc7-415c-824c-948fa51176c6", "indicator--4aaacbd1-ee18-490b-b763-abfb31341222", "indicator--55de5a90-977b-4b07-9439-4ed1f0c3b279", "indicator--f65b7912-2729-4295-8e7f-e48229fc1b75", "indicator--557b485e-4695-4a57-a222-e38888afad8d", "indicator--f3851f05-4415-478f-98b9-bf300b3f23f6", "indicator--efc0c922-7c70-4558-b527-5d251fb6a2a7", "indicator--3aa9c1d5-3e6d-4bb3-b3f6-27a2e8641c8c", "indicator--c6305a5b-7f91-48a0-a202-0d36e4d1c5b4", "indicator--e79139b4-59ef-419c-9f74-10c8efcbf777", "indicator--2a8008b5-e15b-4935-80a0-20844fe2b6ea", "indicator--7a559ca6-13b4-4d8a-aa6e-5ffa7d6185ae", "indicator--1994016f-1366-4690-bc57-f828383d46da", "indicator--b0ca2533-9eef-478a-a0a0-ae8ff9b49c88", "indicator--766810af-3fe9-4746-9757-cb7210066c02", "indicator--b1f76d8b-ba3a-47f7-a162-0fcbdd46ec0b", "indicator--503a5012-7751-47ce-8e09-bb00382dc5d3", "indicator--e8e9a828-ff9c-4013-beb6-a52415484199", "indicator--76ba122f-9a4d-4d01-9a99-12fddd96abd9", "indicator--67f72ea2-3419-4bef-98d6-6e487610b3b9", "indicator--200ee0fc-a218-4d19-9d52-51ca42018685", "indicator--a90a85ca-9e80-461f-b2f2-1080ce4c9740", "indicator--5c6daef6-6af4-44a4-b185-4b6919605284", "indicator--c24b7d20-23da-4a70-bc45-c65aa36d92f7", "indicator--65036681-4d0f-4665-a1ed-64db3503f71a", "indicator--2d57446d-5a8b-45ba-a6b2-c56adcff0247", "indicator--b3a93253-0526-41aa-9161-62d7879eca83", "indicator--093eaea2-4e9b-48a9-ae1c-647fccb9a614", "indicator--23adeb94-ea7e-4716-a286-ac4eeecd07f4", "indicator--229a745f-3a55-445a-9efe-294ea7d2cbf5", "indicator--5a4aaa57-b8c0-47b0-b6a4-3238b8b6a3db", "indicator--6fe78809-263c-4006-9263-264cddcb4020", "indicator--b1cffa28-4f24-487c-a67a-988ef9f02c38", "indicator--090850a1-f077-41ba-a1df-88f04d13ca8d", "indicator--5229ebda-bccb-433a-a81f-69f49c7300a2", "indicator--5e6840d9-a1d3-47f1-b445-e699d9d532bc", "indicator--b1fbd87b-e631-4a87-bf67-08c590f14a51", "indicator--5656f3d0-87a3-4f2e-94b8-145d2dac938b", "indicator--1fd0768c-ca04-487c-8712-7b495e12481e", "indicator--84a143f9-798b-4f8b-9b84-d9e500f24a7f", "indicator--24d3c43b-9959-4d05-9aa9-65fb3c68a4a5", "indicator--90fe7dcd-8421-4a3c-b6ee-d8696e79583b", "indicator--95f3cba5-dcbc-483a-9938-20a218bcf78d", "indicator--9d35fe7c-ad8e-4ece-9cfc-5c12a8106647", "indicator--e96adc2a-db8f-4c81-985a-4162eded80fb", "indicator--ba474bde-9fcf-4d0a-9214-566e1ef7cbfa", "indicator--c534d6d3-2d48-48c1-b791-4e32fac4914e", "indicator--0648b25e-2b27-418f-8a2f-ca2d5fbfdb37", "indicator--4c8a4ef1-509d-4882-a778-3b821130a1e1", "indicator--a9fe6663-8769-4575-a07f-a59f9fb532de", "indicator--8db35b87-0023-4310-989a-fafe282fdcc2", "indicator--11a98e69-9b61-44a1-9e63-1ae2c79a375a", "indicator--3cb5838a-d5eb-4b53-b910-2a5dc669ebef", "indicator--0e4817e7-9331-441c-a543-735ee1a594c7", "indicator--f6ef429c-8a04-44a0-bc1c-a7d772f159c3", "indicator--9820e676-f262-43fa-9d63-f14e72bee910", "indicator--5fe4aaf2-c6af-4f44-a433-ff28a7c573fb", "indicator--567437f7-0a45-431c-8d31-29b21eb7bd9f", "indicator--3dde0de6-dd3b-4440-b5fc-e8fc8675d2fd", "indicator--d80f2248-4232-4a1b-a1ac-b4439d4cd265", "indicator--e71ba80a-fc2b-48fe-afd6-e238b1aa8197", "indicator--279f83ed-ba12-46d6-a55d-30181078b39f", "indicator--fcd13e3e-de5a-42b5-ab17-e4058da8d43b", "indicator--0beba2f2-ec31-4d94-b3c0-28256f067eef", "indicator--ed5e19d2-cf95-4020-b683-dddd70980242", "indicator--c72fbd0e-1542-4753-b60c-9ee4946264e8", "indicator--11f34dd8-c609-4d2f-b77c-6067ff407570", "indicator--b0860b5c-2793-4593-a80e-0142e5a93f56", "indicator--66902982-ce24-4395-9beb-283cca4fd39c", "indicator--14a40db6-5034-4ba1-90ef-816d1ea825e6", "indicator--3f41d1e4-d9b0-4029-9a78-6f767a59c253", "indicator--b0ccca8e-8c93-4280-8250-f7346cf8b327", "indicator--ac92131e-dde2-4134-a397-d299c967fc14", "indicator--e0082769-e4d3-4dbe-a5a3-cab5d977fa3f", "indicator--a8c46d4f-6ede-4f12-9d05-ef8d87808b72", "indicator--9adc96e4-5d23-404d-8e0d-af537907228e", "indicator--e91a31ec-b11c-4ad9-a2b0-e1311e2c2079", "indicator--6d83cba3-1846-45ae-899b-c13a0fc21925", "indicator--b485472e-ca58-4fb1-85de-5aad6dcc23aa", "indicator--54ed6b79-b6f3-418b-ad92-f38841e70bc2", "indicator--e2fb106a-56c3-4ab9-b82f-6f1bb70f2d03", "indicator--ae9b7ceb-94fb-4247-b3ea-a07a71744321", "indicator--51ecfb35-5c18-4900-a065-2aed5f9910ff", "indicator--255668e9-299c-4806-9e6a-2f26f10cb29e", "indicator--4872acfe-499c-4311-b321-db50a1c6508d", "indicator--44e8bdf1-69ce-4534-992d-169f072f57bf", "indicator--599cd7bc-e29c-4907-9f6e-4614982a709b", "indicator--0d59cb28-b249-46bc-8c48-84de49a971b8", "indicator--7ceed16c-9dce-428b-bf18-fdab5fda23d7", "indicator--a38346aa-0b21-4be2-aa42-f4358a2081c3", "indicator--6209721d-23b2-4b89-8a11-58f3342057ed", "indicator--e75d7a0a-1c92-4390-adb0-e3c882ea63f9", "indicator--cd1ee90a-4549-4bce-885c-e239da998bdf", "indicator--69f7aae5-d13b-4049-84bb-a469eb2f2f12", "indicator--9cbb1509-2e4f-40f6-b88d-1ebf9e52225c", "indicator--02903766-d4ff-480f-a512-07310ea229f1", "indicator--58eed4b1-3788-40ff-8bd2-491b5850a34c", "indicator--2c1a7d68-3058-45c5-93ef-51a3eed4ce62", "indicator--651d7c5e-a60c-4d18-b2ef-70e4b60a4527", "indicator--6d00d624-76b1-4339-938b-d934def13314", "indicator--449a6c8b-a96e-45a8-900b-da07175282c4", "indicator--1fa01400-0b6e-43db-92d4-304845c1f5b4", "indicator--46299b02-d202-411f-9b94-3538f95c53b8", "indicator--616bdca7-d4ea-4691-842a-e456932644de", "indicator--aef55932-cf9a-43fd-9457-884c42ab126a", "indicator--77346c52-91fd-45f5-bf7e-81592a5ff142", "indicator--8671599e-d90e-4e6d-b8c9-82d8a73e889f", "indicator--f2e14507-9d13-4db1-a66e-486a3bda8fa3", "indicator--968ccc93-c6ac-4a8d-951d-4ac293f16a86", "indicator--f50b4396-eed3-4824-a1a8-c87503fd177a", "indicator--13216880-bba3-4ebf-a959-4bf89d62be80", "indicator--e99755dd-7ef2-4b12-9652-b6f4e2f67957", "indicator--c3d01f37-c90c-4ca9-8bbc-5420cb1912a5", "indicator--5a85ed6e-1e74-4111-b072-8a2a29724fac", "indicator--069c4fba-d65d-4878-b5e1-b64921f6a4b3", "indicator--db5711cc-1805-497b-a421-e306fab185ed", "indicator--1e8d0d72-82e6-4c6c-95e2-91ba18734958", "indicator--a6056a99-eda0-4e14-93cd-e77fe146bdee", "indicator--0b912e67-06c0-4bb8-8255-296432d6aa72", "indicator--0233b9a1-cd8e-4185-9339-1cc13106fa9c", "indicator--24aff07b-abae-4c7a-8c15-b86e65ca953e", "indicator--2e481061-6ff7-44c7-b84d-9599627dcf71", "indicator--2bd20616-a36a-44af-8cce-a4b9a6fe19e0", "indicator--327024d2-9e9f-4558-aae5-c1196e141573", "indicator--40d7263f-bc65-490c-9430-675918b600ce", "indicator--27195d37-900b-4ec6-b831-e91d9def7286", "indicator--08817f94-4df2-4daf-a462-9c0cdd6fabe6", "indicator--4b38a271-e502-4d4c-b130-2f29073c01e4", "indicator--1f347f9b-8d96-4360-908f-898851326b4a", "indicator--2386bcf5-d4c7-4369-8ddf-8cc43712f319", "indicator--1b092846-e85a-498a-afbb-df6d9f5c863d", "indicator--5df93711-e9de-4f6b-8b06-857afac31dbd", "indicator--542588b3-2704-456c-83ef-fd31b2661d68", "indicator--ee8022f3-aa4b-47aa-92d2-7201712d901a", "indicator--54343913-2997-45ce-bac2-23e52f9011a7", "indicator--58e92eb7-72c7-4d65-a7e2-8a65d37d504c", "indicator--b6c8441d-7c48-46c8-8d81-97631bd7b500", "indicator--9bb43096-cbab-48b7-b176-1ccf535e3c6c", "indicator--4156ca38-8b14-4b51-9f4c-8b02b178f4d7", "indicator--d5d55961-9ca4-44b7-b2e6-a90ca35337ce", "indicator--cfe2dc27-f3c2-404e-bd5b-37ced5168a10", "indicator--b9eba999-7423-47cc-a333-4858f6ddf494", "indicator--573fd107-c196-435e-9b06-193d1e2a342c", "indicator--b649441e-db53-45d6-8ade-8391a7bd685e", "indicator--edc9e17a-3a3b-46fa-b965-e025a8d47109", "indicator--822a10bf-4df0-43c6-8850-60e7cd51cab3", "indicator--3990f589-7e5d-4345-8062-fd35a8d13a06", "indicator--1f62d37a-f7e4-4a45-9d40-629568b9f31a", "indicator--bdd5e41b-43d3-49d0-b992-9b5068fbfd45", "indicator--5cf45a85-c907-4114-af9c-d59194803a09", "indicator--8a60f9c4-651e-4483-a416-05dfa4439f5e", "indicator--e1105969-67c3-4d8b-9d14-c98e3ccadac0", "indicator--e4edcd80-670a-4703-84d8-39eec2a4ba12", "indicator--5c303d5a-5771-4130-975d-70c70789cff9", "indicator--9038c950-36cb-47a9-a65a-4349e40ed3d3", "indicator--ea69b00c-7282-4739-beb3-0f6ded939a09", "indicator--fa0b6cf8-5e2b-472a-bc10-793ced739c47", "indicator--db1de346-8a0e-434e-b396-ae8a577d0ccf", "indicator--3682f158-d883-491f-adec-c941c037bc20", "indicator--9c9ee51c-b850-42d0-8f3e-889b940b458b", "indicator--da660bb3-87c0-41c5-a4a3-0bfd9df0b344", "indicator--33e04472-b9f8-4c81-b5e4-5b48acd67065", "indicator--ab129e8c-133c-4f46-9dff-3ac91618959c", "indicator--455d5676-42ca-4568-bccd-ee9718da3301", "indicator--7e9504f6-79df-4234-ba89-5dfd4716bd1a", "indicator--c81bc636-cbe6-48d1-b273-767c43c621d0", "indicator--a6ac5fe7-c0a1-4f41-ac0e-095a66b9853d", "indicator--c9299411-efd2-4183-8fb2-8a667fc17d0d", "indicator--a0bcddc3-79e1-45e3-831e-7671572a1cbc", "indicator--0031e1e6-05b9-4231-b6c0-366e306f4494", "indicator--b8f25564-b996-43e5-a179-1692327fc2e3", "indicator--2cb222e0-ab28-4fe8-a32f-4f6f6ceb7d46", "indicator--a313d3d7-5b3c-461c-9a64-84220c1fb586", "indicator--6c215b50-4646-4bfc-9141-87cc63c11322", "indicator--53d901d8-e802-4be8-906c-53ed06836fb9", "indicator--cdea138e-e6de-437c-ba1e-dc349d5888a8", "indicator--5673ac84-bb16-4f1b-8bec-b35c7549b242", "indicator--9c5b506d-2b54-430a-937d-a292641ffbe5", "indicator--a31b8f5e-5874-4ca6-b3f2-52cc9ed36b16", "indicator--fb702215-03bc-4490-aa4b-d160d24b6a4f", "indicator--5d0a7c75-0b6f-4eb4-81ff-0fb82c63f317", "indicator--005b8972-9e30-4f33-a2bc-2049277e6ab1", "indicator--cf5e1288-5854-4535-bc11-0f7eac1153b0", "indicator--fd45a710-7244-4cf7-a40c-d21d0c452a2d", "indicator--0323d85f-7729-480c-84d8-1ff637167f20", "indicator--e9b82343-452c-42a6-bf10-cb72918bf20b", "indicator--5f9c715e-0512-4bc1-9e06-ad387918d4a1", "indicator--200cd093-2f75-4534-a9df-4750ef259245", "indicator--50e5c454-2799-4fb5-a011-0d46775e7512", "indicator--345de77d-48f1-4c16-9168-27bf1c0654a2", "indicator--4110d487-2182-4eb9-a7aa-0ff2489d4526", "indicator--6a082b18-64bd-44df-9e4a-5cee4558d883", "indicator--2464fdd3-123c-409f-bbc1-710848c46fbb", "indicator--e2f60a56-88db-48d5-b720-7458dee77fce", "indicator--d12a7657-a945-4a0c-9318-69a69f36eca8", "indicator--b773f649-0370-4009-a15f-c9ae510482ea", "indicator--791dc36a-9b8e-471d-aa5e-9e1b82e7cfcc", "indicator--dd5c08cf-f20e-4c7d-8bff-f5461e1aa718", "indicator--c4bd8a79-f73d-40f7-b360-3e0fe0322d62", "indicator--3587c128-dbcf-4b3b-bcb8-2a0a23fa72a5", "indicator--36976bf2-7f52-47ee-9cff-6f9c0eaf99c1", "indicator--eaa504ea-8788-47b8-904b-615c87d0a92a", "indicator--418f8b1e-edb3-4f81-9732-c76553b8c2a3", "indicator--237741c5-7e68-4ff0-8c45-97976fa26a9f", "indicator--2ed5c6fc-a7e0-445b-81b7-e7a657b648eb", "indicator--53be20bb-f56e-45a3-9410-e4af2ae361eb", "indicator--b8c12822-dfc1-403c-8fcf-4d5c383bad58", "indicator--35f2b4ad-926c-41c7-8003-d2b32af10922", "indicator--517dfa78-9c7e-4fbe-b054-432d720efd87", "indicator--991abbe7-0a25-44c8-b876-a4ceaaff7129", "indicator--54a8f65b-a8e3-4e30-bb91-da113981d99f", "indicator--da9daa26-37b1-4e36-aac3-7c667e75ee14", "indicator--11eb7cad-d16a-4bd2-96f2-4abef86e622a", "indicator--390900a8-fc23-4819-bc48-a5b55b1837e7", "indicator--c8221474-48ea-431a-958e-4459c1cd12ec", "indicator--3cf56562-ea50-4165-9872-9dfde6912d72", "indicator--f190c5c2-8922-4bfa-8789-bec214ffcfc0", "indicator--a24bc719-9e60-45c1-82fd-d8331eaa2322", "indicator--5da868d4-590b-4741-9eec-c2d5394190d9", "indicator--b5492cee-e4e6-4163-83ad-f12bd1a873fa", "indicator--0fce480e-7a47-4c62-812c-2070b8001f0a", "indicator--80e75f32-029c-43da-8431-e78e67ce3790", "indicator--6495ea68-8c99-4be8-be31-521b7f00d7bb", "indicator--90b45359-2af0-4712-bdf3-753419f2c169", "indicator--3e9057bd-603e-4ebf-aed3-20e9c2cf4898", "indicator--d56d4ca9-90aa-45a6-838a-99e0e092b563", "indicator--ff7742b0-fcea-4d95-afd2-fec7de76732d", "indicator--4a75444a-e002-4fee-9677-eb326787fc84", "indicator--7480e11d-6946-4d07-9a1e-c1db6dfde67e", "indicator--a87f409c-655f-442f-acae-0fa8e4da7c14", "indicator--6dc80a04-1e24-4757-b047-838040684cd0", "indicator--b7229bda-96a9-4afd-9a09-a5f726dfcde3", "indicator--4035972c-451c-46df-84cb-d3f7daa640b5", "indicator--5dd5caea-550d-4d30-ab90-27a47ee9581e", "indicator--5ec9859e-f2e8-475a-9f45-34a72acfdb3c", "indicator--93e01ede-d829-4b9a-a735-dad922c9bc3f", "indicator--33a08ce9-76bf-483a-8559-118960853639", "indicator--935557e5-8fcb-4e04-8bbe-0da207d1af0b", "indicator--6f2738da-5b1e-4c06-b57b-c716c796293a", "indicator--95510f9d-4da7-4af6-8d99-4bc7e7fd6cbb", "indicator--aba8f5ca-c8ac-4e22-a0a6-1d64b1008307", "indicator--da1ef93d-9a7a-4c30-aa28-68d23addfc30", "indicator--1ce9040a-d379-44b0-a137-f9d4a0320aee", "indicator--876f77c5-f6a2-49bc-8839-60027c17bf1f", "indicator--967c6dc3-31c3-419a-bbc2-e13892dce501", "indicator--9d78e823-cb3b-49d8-9fad-73055823bbfd", "indicator--72e5affd-5baf-4415-901a-ca0778c5a6da", "indicator--af2ab44b-2c1d-4050-a5ef-ffe29b08a39c", "indicator--b8510364-a580-4b01-a96f-2d36d517bb83", "indicator--7cdadc49-6f49-48e2-a2ab-0c40fe20f4d0", "indicator--28f611e8-1f0d-461e-9f74-c211c1186684", "indicator--775ca5a5-f4a9-438d-8915-6524ffead806", "indicator--89166a19-cf2b-46ca-a267-51b22e07f93b", "indicator--9743ce4a-0d17-4dcd-8aef-2ab24139f0e7", "indicator--5cf55469-d348-4268-a625-d8b577a4ec0b", "indicator--88b1504d-b66b-4a45-9bc0-d2e4058253cf", "indicator--5f117a21-bbe2-49d1-9212-bdee08c24866", "indicator--0d27d0ca-a11f-4828-a8b7-7722f592db89", "indicator--c470537c-a04c-4b43-945a-14584b664880", "indicator--735f0561-4e8b-4bef-aa53-a2014662e797", "indicator--82bcc0fc-9075-4854-863d-4411e04b4c7b", "indicator--d3af1408-3180-4125-a417-a1db9f80a81b", "indicator--dbe22ba0-a2f7-436f-ba1b-1c0e2b6ad399", "indicator--e3600838-39f4-4db6-baac-7e78fab82a4b", "indicator--c0408978-0270-4e4b-ad6c-6fefde752e20", "indicator--503ec232-1ec8-45b9-9651-a7c1f8709f2c", "indicator--c4c32a9b-c22f-4575-8821-433629fd9d7c", "indicator--deff3093-9c0c-4da1-8672-2ac45fbf88a8", "indicator--0f1c3efa-a246-43bd-ae14-7aa3a1956421", "indicator--19d78820-2d23-44a1-98ed-3b4575087f67", "indicator--a5a975e4-edec-40c9-a601-3a5611a715d7", "indicator--2e8d4a34-7ea2-4d3e-8951-f8bca80abe65", "indicator--3bdc855a-16e3-40ef-95e7-62fcca59ad20", "indicator--f28ff1bf-c251-4db2-8e31-56f17ecfa509", "indicator--6effc9ab-7415-49cf-88d4-037b6d029e6a", "indicator--63451e70-8d83-4896-802b-d557d54c512c", "indicator--461f18df-b233-4c62-9dea-c362a513b48e", "indicator--39e11993-d2ca-4ab9-9da9-06ef849d12b6", "indicator--09c5a557-1e8e-4813-af85-e3fd8ab07950", "indicator--28296365-46ef-45c3-98b0-a4159b62c971", "indicator--b0da78af-bf2c-4732-9a3a-032fbaf161cd", "indicator--deb4686a-2b83-43f2-be80-3605c11fa0b7", "indicator--a3d0c793-9e99-4ab2-b78d-d9c0f83ffbbb", "indicator--884b7a83-054e-4ba4-bd8a-422bb1621d58", "indicator--6022075e-6bda-4e8a-863b-defe9d0e07fa", "indicator--d9cd2797-1625-48d7-a641-74b6491cbd47", "indicator--97d85617-8dfa-4801-b2bc-560818446edb", "indicator--ae4d0318-95b8-4270-8a02-1b8cd7106e81", "indicator--3759ec34-b1cc-4769-8994-95b6e8af4510", "indicator--db3c8910-71c6-41d3-9c28-644ba9566214", "indicator--7f966842-4444-43af-90ca-b07814a083cb", "indicator--e2e99137-c8a6-41b2-a5db-766cdedfc193", "indicator--72961ca8-bed3-479e-93bd-fb21d32bf9c1", "indicator--e6ea06cf-0c70-4115-92bd-6a26125074e5", "indicator--3041b0d2-28f8-4a7b-8999-49d282d4f262", "indicator--d4c97137-63d5-4549-8bc8-cd2b87b2bcec", "indicator--821dd42c-6c8f-470d-979e-404b5e1f9031", "indicator--6b245ba6-cd67-4605-a51b-25919ee2c415", "indicator--7e26ae1c-7be9-4b7b-adc8-6c43f2a3db14", "indicator--501d1d77-342c-44ac-a71d-c00a7ff6bb08", "indicator--8669c219-0bce-4d67-a17c-b467d8b5adaa", "indicator--58a670fb-2516-4d42-8b0f-13e576a9745b", "indicator--822540fe-631f-4f1f-95b5-d152c6fca1ac", "indicator--e9f34a03-4dfc-4a2f-ba66-20b980963a17", "indicator--3ca7ac8c-4db9-411a-9255-9635576c7461", "indicator--20056e74-a519-4b5a-a30d-0320720079e1", "indicator--600987c9-00c1-47da-869f-1e5bf02f3ae8", "indicator--b3e3116c-a8ae-4110-b565-f19c9bcece11", "indicator--1dd30cfd-3b81-481e-aa70-eebbe77048a0", "indicator--16b0b2f8-62a3-4416-b160-07585ec08a34", "indicator--cabaeb31-b56a-4ff0-8197-1a8c50795859", "indicator--8b41413e-6725-49ce-b896-f48bf7ee206a", "indicator--72d90c23-7f6a-41a4-b889-c2677735ec6a", "indicator--c7756851-2a81-476c-a3bf-b89ead77e503", "indicator--ece29587-4f2d-4db8-bca4-eb8668155216", "indicator--3455e17f-4ff2-4e43-8c18-593ffa543bb7", "indicator--37f82c27-95a0-4bfc-bf9f-5dc164038008", "indicator--665b8c3d-82bc-46b7-8a51-d7861f78451a", "indicator--73a357dd-0770-4e68-9c57-9a7d244e7b9d", "indicator--0bd52c1a-23be-4ae4-9894-b7e1513f7830", "indicator--586ae199-143b-455f-bfc6-27ccfead974a", "indicator--3fdb931a-8e9d-4067-a97b-ba6c63abe8c2", "indicator--03df4052-1321-4e28-9a5f-787586d39134", "indicator--0c76b0c8-05b6-4689-9a1c-925648f88e3b", "indicator--745a5da9-7ff7-4a66-90ac-823f9ea06314", "indicator--e008f2e3-b2df-481f-94ed-1d95cd4520ac", "indicator--afa6cfc0-e09c-4ee9-87e2-c9a37b2c4766", "indicator--e4538f15-3f74-4f83-b371-5f61b1757480", "indicator--9be3d019-0c6e-4feb-ba22-0c893508324c", "indicator--9c602be0-7454-4eb3-a221-baf469004934", "indicator--b167da5c-64a7-4f10-814d-09a9cffcc96b", "indicator--68bf909c-bc88-47a2-b2ca-595a721fb880", "indicator--e0a62230-054c-4383-a6ef-c9d96212bec7", "indicator--e6806376-cea6-4465-b42c-a8d20053ae01", "indicator--470da12e-5f61-4b19-bfe8-dfa9433048dc", "indicator--592f70a9-2672-460e-8c0e-9c312c825bdf", "indicator--d2865b94-7128-4c0b-878a-5e519d272e83", "indicator--5533fdbd-e62f-4776-ab41-efbc72cbee9c", "indicator--f182c765-dc4b-44c3-8c57-1a6241462e7d", "indicator--d092cf40-d3eb-46ce-ac4a-56e9dd131694", "indicator--50d2f763-edb8-4d4f-b332-4cd5ed965926", "indicator--d5090c3c-ebd7-47ef-b058-964ff4cbe92c", "indicator--f3187414-861b-41a4-862b-9416cd215169", "indicator--2a876c3f-9d68-435a-847c-1f923e2fd414", "indicator--790f48d2-af74-4697-b5f9-2ce441d0f5f6", "indicator--7416b44d-4b71-48de-8f3f-605f701dea5c", "indicator--236d4605-5bf0-4fa5-9d4c-d321974f2edd", "indicator--3dc4a9ac-580d-4516-bb47-4f37b8375e10", "indicator--0d26f4f3-2a03-4e36-98d1-fcf6b0237cbe", "indicator--aedd5fb0-808d-4335-8339-88ad0c9d0923", "indicator--8a62f212-7e2d-4542-9d8e-616cef88846a", "indicator--6562453a-5d4b-4299-9a4b-1288e1a11cae", "indicator--1e4d2357-e2d3-4bfa-94fd-0e26887c247b", "indicator--6aa6a10a-331a-491a-9a0c-bb9d759237f9", "indicator--555270d3-343b-4d48-9dbc-fd159cadd323", "indicator--7a1e4de2-14de-4fdf-80d1-35891ee5b84d", "indicator--66886949-0cd2-40c9-8f61-e8f6dd088170", "indicator--1790d7a5-f048-4681-a5c1-de2345bbc010", "indicator--e7e05998-e4ab-463b-a800-260eeccdf8b3", "indicator--caf0783f-9934-4099-a449-0edaa554626c", "indicator--5c2d1685-a117-4a78-b862-be773b4a4854", "indicator--bf701479-5561-4570-9163-8ae20f1b14a9", "indicator--f4f432ed-598a-4948-8fbe-c11d9576b431", "indicator--8ac563d8-3bf3-4597-9afa-1b78d2ba8762", "indicator--f4840f81-c9a0-4cd5-95e7-a28af23451a6", "indicator--0dfd1619-e27b-44b3-b19b-7c6368440b49", "indicator--84628b8a-ac94-40ec-a3b1-b876c47c8a8b", "indicator--ac0d7fd7-fc64-4251-a418-559de04344d8", "indicator--4f6d2f51-f8f9-4c8d-a443-2809bb89ef3f", "indicator--25f8c598-4a90-4ee3-86f3-34f9a5ed217f", "indicator--177e4db6-992d-471d-a065-8956f483cc4c", "indicator--14d50fb1-ffd1-4d61-a946-ce9f9ae2e50b", "indicator--18de9cd8-a407-4091-9481-ec3a98d36d87", "indicator--af0ee80e-00b3-45c0-b3a6-60b7d5ff30e5", "indicator--e4054333-e580-4788-a5c9-ddee2c8483d8", "indicator--de6751b0-cd50-4b96-947a-f75f7c70d9d2", "indicator--3b8c9bc8-5f90-463d-9541-8c3581690022", "indicator--ba8b4e15-917a-413e-a279-933b80a08aac", "indicator--5d22434f-64b9-40d5-87fd-fa196fdba0df", "indicator--55c39e05-ee3a-445b-9b02-e8786937301f", "indicator--8b81d40f-c41b-4972-974e-18af8f3db54c", "indicator--8aa7fae0-8786-4bd5-aef4-908e9a9d1fb1", "indicator--59b1c0f7-00e7-44aa-9db3-6be9a1dc7de1", "indicator--6ad02f6e-a348-4119-8999-46eefeb1ff3d", "indicator--d717958a-ba57-4368-bf62-39245bb9b6dc", "indicator--dc526200-00bc-4adb-8eed-d2d43e0e612f", "indicator--365b792e-da19-4328-b832-33041894e88f", "indicator--3e07d149-3d67-4965-a8d1-5f769b91902f", "indicator--e9e8d78b-d64e-4ccd-bc96-8a780f099c6e", "indicator--985fc047-2258-4c23-9111-794feceee8f6", "indicator--66b2b533-227c-40a0-9676-1f3422906beb", "indicator--da73c0e6-00c3-449a-9745-7d94bdc22067", "indicator--441bb0f3-b609-4430-b667-84e56c7a2f37", "indicator--158aa2b8-3254-43f6-8092-55887fd89ae0", "indicator--6dc2b619-68eb-477d-9fc8-df1957690767", "indicator--adbf58b4-aea2-4b00-9db7-c09a8d021003", "indicator--5b7195f3-59e9-4433-84b3-ad07d8534039", "indicator--c6070188-ede9-4d97-98a5-d8fee9af198b", "indicator--e301c7dc-2f6b-4005-9376-1e5003b26a42", "indicator--3e28787f-4ea8-46ef-a528-997aef0c2b7e", "indicator--8d15ca47-20ee-4aee-8236-6a605709e16c", "indicator--290034bc-ef60-4039-b62f-7ffabcf70bbf", "indicator--6cd03c87-0cb1-4239-b36d-efa43bb5014c", "indicator--da4e3a76-2ebc-4565-ba5b-255bb5fb3fa9", "indicator--25c0c9fa-dd90-4e75-bbc6-259688f98c53", "indicator--83487d9f-ead8-4c5c-8782-baad27a46750", "indicator--4d53550b-1d80-486d-84cd-77a663cd9769", "indicator--dadd5535-e63c-40fe-bbd6-645fe155bc8b", "indicator--70b51aec-e155-46b7-ae79-1bee2539f2fb", "indicator--ce0f1f00-3244-42b1-a7ce-b3a9ebfd756d", "indicator--529cc297-8601-4d93-b7c2-8acc3694cd94", "indicator--64b27b1a-67b3-43e2-be85-04dbf66b1073", "indicator--d660d1ec-42b8-4e99-993f-018b43bc3203", "indicator--23f2879a-5e3d-4734-a5d0-ef9093b15ff7", "indicator--03ae43ac-96d3-4629-9f01-c11d5e4980ef", "indicator--9db86cd1-5a51-4932-bbd8-174750c13497", "indicator--41877a29-7a54-44ba-be09-62fd6bd30785", "indicator--14e053d0-d301-413c-b903-84b386377d4e", "indicator--fc6a87ee-5faf-4e42-a955-e74bea9051b0", "indicator--828651ee-1e3a-4a54-b44c-ad3b26b13ae9", "indicator--deca5ebc-2712-41b0-8e57-1aaee0088314", "indicator--3143fe0d-1db7-4335-98e2-427e28b04fc9", "indicator--3dc86762-d16a-47af-9fbe-3b8998b54b5a", "indicator--277ca698-cfc9-4373-8156-f102efb02cdf", "indicator--f2ebe16f-6d6a-4027-90ef-b2e8ff8b4772", "indicator--6e8f3e4c-fb1b-4d5c-b74a-8b7a7b807c83", "indicator--9e81496c-233b-4418-abfa-246afc482042", "indicator--9de32883-1e32-4c3e-9c20-0bee5af7db39", "indicator--73fb1396-a189-4efd-8b71-8acc371f2d0f", "indicator--452b8c00-9e86-479c-adc0-2afc6462d55a", "indicator--6255ce9d-74eb-44e3-9ab4-3c629603d907", "indicator--fad9470f-a171-409e-a5ca-8e7f10cd7d88", "indicator--e1d94214-befa-495d-9d55-12fcfe9d3ef5", "indicator--29cc6080-0915-4014-86e3-776420823ee4", "indicator--2f099292-7f03-4fb0-98fa-7993e2de7dfb", "indicator--49d0d732-9ca2-40a6-acb8-5dab63447cc2", "indicator--cd696af1-e188-4301-bf5d-c3d3c045ec8e", "indicator--dbd3b1fa-ca97-4921-9f99-9abf906b10e8", "indicator--65bdc5fe-f8a2-45f2-940d-436950cbf285", "indicator--914f19b3-3928-4083-8f6a-b416b645a982", "indicator--a37796b6-3ee3-4bde-ad01-f169d7a3454a", "indicator--958c4e87-49fa-4829-b75f-58a3b6f0fb51", "indicator--59bbe7d5-89f2-4831-a6bd-8e9d3a332183", "indicator--ebfcae0c-324a-4481-84d9-e4a50b237192", "indicator--c5cd9700-d750-400d-b6a1-62c36af98f8b", "indicator--ebd0b95d-9abf-4a8a-8eef-d138a55460ac", "indicator--776d2dbe-46d8-4834-b38d-df5b0972d419", "indicator--574024c0-c01e-4b72-8404-dced323fcb1b", "indicator--593af3a5-7c69-405d-93f1-1cd806d18437", "indicator--b407fa17-ba64-4291-83e6-787e7d349c5c", "indicator--02d2db51-47f7-4fbe-8041-028aa3b23146", "indicator--404420e7-1a76-4d87-9756-19724b5d2508", "indicator--dda49e7a-8558-488e-b925-d2a9f5e81843", "indicator--8e735d45-9935-4ba7-9ca2-06db1f9b7e14", "indicator--d080e8c0-e21e-436b-8f0d-1847f60fd84b", "indicator--a50cbf04-b32a-4998-b646-d4cc5437ed32", "indicator--a52f49bb-a13b-446b-8edb-589db862a58a", "indicator--2773b368-58e8-496d-871e-5269610f843c", "indicator--9e7737d6-e7f1-4aee-8bbc-377e09f11f88", "indicator--3f024010-d31d-47b7-8ef9-fcfe2e05b41e", "indicator--3ca0cf4b-e452-4077-b894-875e6e0866d4", "indicator--fa09481e-8d4c-4dab-80f0-e5079336350b", "indicator--7e2e920e-4b6e-4482-9ed1-7fce5b7aa334", "indicator--c978db1e-386d-4b84-b8fe-4b0d06d666ce", "indicator--7b116ba1-9f00-49cf-8e2a-3c0c8f578f39", "indicator--3cb289ac-d87e-4147-810f-bc153a205b5c", "indicator--0daf35c3-227c-43ea-bd8c-c1eb9656411d", "indicator--8e1fa3fd-dd6b-4c18-8155-72c07668c71c", "indicator--0f830414-21c3-4a4a-b906-c2635e833055", "indicator--088a0d3b-86f1-469f-a942-73c8e1570381", "indicator--9f3c6e69-8579-493e-9a07-73a990ba4e6a", "indicator--99b3481d-5c6c-4924-abba-511306d0fdeb", "indicator--bf15a9e0-301f-437f-9a49-6e9f97125f0b", "indicator--0fa72d6b-c673-4b72-8ee7-f4a4fd31c349", "indicator--83e74853-077b-41d8-8063-2e308d9dce9b", "indicator--f5ff6ea1-62b5-41a0-9993-50e4c7581fca", "indicator--6df1fafb-b20e-42cc-8241-b6a49f7c7063", "indicator--57a8f76a-1f42-45f3-b33a-4469a973230c", "indicator--6295cbb0-4ae0-4a63-ae4a-dc18cca7568b", "indicator--e749c71c-96d0-48e3-893d-b4a272f738c5", "indicator--b36b0eb6-be53-46f0-8fcc-42db9d108a11", "indicator--e3596fa9-348c-4fe0-8669-fe84442f5cc4", "indicator--7eaa11d4-65d2-40ce-838f-b494cb007865", "indicator--0d16515f-e9a2-4b19-959f-6aabe6a5f711", "indicator--bbf73e4b-30fa-43a1-898c-304fa416ac87", "indicator--5a26bc37-835f-4a21-9a66-50f6a637a6c5", "indicator--73ca5533-53fd-4eb8-adec-9f2811dbb32c", "indicator--02885c02-a0cc-4c05-89ee-171885c1f8a9", "indicator--9c08fd3c-bd3a-4ccd-86a2-f748a5970f6e", "indicator--d7d774bb-51cf-486a-a1be-380d60fe839c", "indicator--252e416e-d624-41ac-952d-95829dfd1c45", "indicator--909dc053-ea0e-4353-9218-7fa425e66eb5", "indicator--e4740cdb-96ab-4aea-ac89-0d0d2b5d6124", "indicator--fffe6e79-05bb-4f1e-8e88-d1818d6209d4", "indicator--3c94a7bb-0753-4170-981f-8c8d0a00e4ed", "indicator--cb118dea-fc04-4802-b928-e670a34a1cda", "indicator--e5140c81-4e92-419b-aff0-32aa2ed287e5", "indicator--0cd2f798-238e-49bb-ad01-f677a378dd5f", "indicator--72940bcc-46e9-4d76-9a2f-8a24d86574a2", "indicator--a8ee3f3f-ccba-4755-b1a6-42425a70f8b8", "indicator--b1f9d0b9-990b-4623-b42d-9c57b6437328", "indicator--9df5a690-9f88-4ed6-be41-e456d78f0055", "indicator--8d2a2215-5893-4fcf-baf8-0a65d43d368a", "indicator--e293545c-c392-44a7-9b1e-c85478d01545", "indicator--d2870959-da94-4470-90fd-982e3da87984", "indicator--ed067b47-9e77-40f3-b023-1a374646a578", "indicator--013c7484-1388-4eb1-ba13-17ec1e851f13", "indicator--1bc68a62-76a9-4a2d-83af-2bac9ebd9200", "indicator--fabec1a4-be22-41a2-8e7d-17c3e9881437", "indicator--12f38f4d-0b2c-4af7-bf81-6f985beef42c", "indicator--385cbd59-9b28-46ed-9b72-b9ab9bbf2b9a", "indicator--5c7e70cc-2a6a-4c92-8854-21201e090d68", "indicator--88c2ae8b-d2c3-4cbd-9291-9cca978a07ff", "indicator--7d15d8d9-318b-4f93-9bdb-87bfbfaac9df", "indicator--e0b69d03-5fba-429b-9c3d-c5943a83d853", "indicator--b0c6c73c-9b11-40a2-9543-ef4110893481", "indicator--db38d317-19fe-4cba-9244-ff63ab37c6d3", "indicator--f0ab2385-17b7-43cd-92cb-5294c888bb21", "indicator--255db1e3-9583-4e55-96a0-36bdb36a2f7b", "indicator--aacd39a4-11e3-42b3-8f9c-caa24987f2ac", "indicator--acc8ca6a-04e9-44b7-8bc1-060c3906c7fd", "indicator--1d407a20-eb4e-49dc-ae47-fd8632edb285", "indicator--2a2f7608-9e57-4a7f-9307-81c827c35117", "indicator--47e8fb31-b62f-4eeb-8a36-2cd6ac77fbb0", "indicator--5c6df27a-10ea-446d-b75a-30c88f6e5a8e", "indicator--5311e253-54db-45c8-b895-6f90214d1303", "indicator--fa784ee8-66a0-4fd5-9e43-8873a06b64a1", "indicator--fa2daab7-ca63-42cf-a334-661a6c5dafa8", "indicator--77033acd-0cd8-451c-a1f4-b0dc91246798", "indicator--01528b27-a3b5-4ebf-a61d-0c99e3daa111", "indicator--35be6bc5-b307-41a2-9523-a15f9515dd8d", "indicator--961e3944-da26-457a-bbf5-0ce151a3e2df", "indicator--300625d2-4abe-417f-8a9c-d2d798f75b26", "indicator--978cd28b-c476-4f63-a8c5-c625acaa3bbb", "indicator--3d91ec77-4c79-40ee-ae6d-b14e79988349", "indicator--d157957c-eed9-4162-9b3a-80b8b74a70d5", "indicator--d344f135-6ffc-4e1a-99be-c977a7413149", "indicator--3dc02062-c4e1-469c-9ef4-cc7d8523e45d", "indicator--efb8a6ff-3326-423a-aebf-c0114f665d83", "indicator--a079f7fc-0fed-4a12-ae4d-e99680d20032", "indicator--def55d25-3bdb-4207-ab10-3262ef1c7ad1", "indicator--978b7031-0cbd-4e7a-acf5-b7b12600ecbd", "indicator--dc932f25-80b2-4ebb-9518-7d585fd58dfe", "indicator--e1d3cf26-00c6-496c-b3db-7ba443c12c93", "indicator--ab1f944b-9994-43a5-9cdc-1bb83263babb", "indicator--7cbfb445-3327-4904-9dc0-c5cd1749e423", "indicator--4b19cc1a-2041-4d10-92e0-26994373b490", "indicator--a1164445-2b90-4fb3-8d55-0acac51640f3", "indicator--ca661423-c01f-4f65-87f5-ab0e63bfa1d9", "indicator--f191c2f6-9d1d-42e9-a332-51a81a35c478", "indicator--cc32a5b0-b13b-4ab1-b5c9-02daa73a839c", "indicator--3235e91f-8dbc-4467-9a6c-ca45ff27e344", "indicator--0a16ba6b-87e4-4325-88f4-e9d5ba2b403a", "indicator--c004392a-c495-4022-8c2c-67f698e98d59", "indicator--09b7be97-81bd-4b28-82dd-91b5ecaab0ed", "indicator--b22db22b-a468-418f-9dc9-0f28fc6d359d", "indicator--95313b6e-b9b3-4909-94f0-9410b9d90117", "indicator--5d1e7d26-b53d-457f-8001-1402e1802455", "indicator--9aa22a41-51e1-4652-9cca-fd9c68332bf1", "indicator--6246ac6d-6a97-48ee-87f3-91f2e874ce6f", "indicator--c1d05a13-88ba-4b37-83f6-7d825b2bba67", "indicator--9ee6cb4c-355c-48cf-99e4-0fa030da630f", "indicator--689b7ca3-6a4f-4628-815f-e7fd873586a3", "indicator--f2811f14-346d-4a8f-a662-6f26bd0c864b", "indicator--7d81ff08-6cbd-4039-931e-e0fdff5e6e36", "indicator--b440c869-5146-449b-b276-b41f441d5aa4", "indicator--fe080024-8b7c-483d-bbb8-3da4cca22c5c", "indicator--8f7e6e05-7c3f-437d-b6dd-615abe75abf8", "indicator--45281405-18c0-4b99-be0d-4f1a86824046", "indicator--9de756b1-ac3f-4c8e-a79d-9b204b386f65", "indicator--7d6d049c-40a0-454e-8da0-6280071f7977", "indicator--a4860aca-eed5-419e-953f-a1e3b923efe8", "indicator--cac3dafa-45e6-4916-8141-4c976dc557df", "indicator--69218421-5247-4694-84ad-24f99c93e444", "indicator--ce17c46c-1098-4f7f-9564-81783751cbd2", "indicator--e090a3e1-cb94-4e1e-a9a5-d6926622c011", "indicator--3538f457-9adf-4b97-b8af-aa8ecb992778", "indicator--aec7f04a-0cc0-4e6c-9415-f518301f6b3a", "indicator--726ba9b1-d606-4367-af38-883a1aefe87f", "indicator--ef474369-397d-4a22-867b-79f98f5615b6", "indicator--df33eea7-7dc3-4996-810c-ffcad5f91d33", "indicator--ddb0e66a-1553-46d7-8889-c5f7021a53a0", "indicator--7bce9e1f-6508-41b6-9b6d-912b3b13d451", "indicator--4fd93c60-d963-479f-ac69-640936343785", "indicator--aa4e521b-5540-47bd-b3d6-7a7813c0aa46", "indicator--a38a6b7a-d359-468a-a7db-7258bc058bb8", "indicator--e64fb94c-4d3c-44d8-8684-c7a867834bd9", "indicator--b6d8196a-7dac-424d-a229-2deb40553fe2", "indicator--1fe9c880-556d-4abd-8539-0bf19dd39d21", "indicator--5068d4ae-d568-4233-abac-51b4f5e90143", "indicator--5e6b2f2b-c897-462a-a5d9-038a1f3b1fd3", "indicator--d5b80b5e-b932-443a-bf24-c99d8b93c654", "indicator--96761bf3-1248-4990-b33b-c80324f5bd3c", "indicator--718fa26b-154d-4c2c-9f17-e8f161ccbb4d", "indicator--5090e22e-65dc-489b-9928-de90217d21de", "indicator--44cc5dce-0aae-4963-9bdf-2a3d8973f95a", "indicator--3e038531-3ec7-4f55-b4df-5c42bf3ba248", "indicator--e469f6cf-28ed-40ba-89ec-78f35bbe7f4c", "indicator--21047f27-a962-467c-87a1-6bf44ac2e61c", "indicator--d6736046-2ac0-45cd-b7e9-37dd088ce2a3", "indicator--e6262e92-82e3-4ac3-afca-20fc803a1a09", "indicator--238506ee-169e-409a-89f2-332cc410a9c8", "indicator--50b7392f-d2cf-4c9d-a92d-eb5fba411f5b", "indicator--0448749b-efc7-49f7-ac31-34c41c324553", "indicator--97c8cc0d-c45b-4c0c-9a35-db4f4d81e526", "indicator--97d8c0bf-ed81-4fb1-afc6-69d2fb2e7734", "indicator--22bdf3c2-27f3-492b-adf0-815d3eda354a", "indicator--671e4ce0-c591-4abd-8299-81d7e4043cff", "indicator--0b0500fb-6858-4ddb-9116-bb43836667ba", "indicator--580f1132-dd4b-4f65-8454-06c1370fc746", "indicator--8bcd616c-7acd-4097-b1bd-b3d6a9a97948", "indicator--ba077f14-a3d6-4a4d-93bc-42e653a173d1", "indicator--3e86c388-0e77-4627-aff6-5342dc6f3d04", "indicator--9be10ab7-eac6-4e17-bb66-012190095bf6", "indicator--8523ade6-66f4-435a-bed1-1d782b2f31c3", "indicator--51d54b2b-d685-436f-8eea-e951887a8002", "indicator--a918dc73-fa0e-4c73-aea6-b5cb161f08ed", "indicator--2fe40e65-f8bb-485b-a183-59ae2c181523", "indicator--f3c737e2-f897-4705-9efc-2a539508aa98", "indicator--2a63cbe2-22ae-47cc-acce-c3035499a9d2", "indicator--31f8df5b-ea7d-4254-aff1-6574ed773eec", "indicator--67fedc7e-8ed4-4e75-bc4c-267a8fd7f405", "indicator--e01f7d42-5415-4eb1-b9e7-fcf5f5b016c9", "indicator--da74e72f-c8f4-43ee-9edd-97020180df5e", "indicator--78b0831c-ea27-46f6-902e-402ab726ce33", "indicator--d0e0c7ba-2048-40e2-85cc-eb60a6dae3f5", "indicator--32737089-88d7-4e3b-8f1c-c4f191f0e5f4", "indicator--e0e8dc26-5dd7-4833-899e-bf7cbd8ea3b1", "indicator--b7895363-1aaa-40a2-9645-ee94ca14e04e", "indicator--8e63233b-e2e8-491d-9160-c6e30a846608", "indicator--21b5d5af-f1e9-4187-a79a-5444eabc082f", "indicator--de2f6cab-aed7-45e8-89aa-bd3e9e7091de", "indicator--517dee2c-d8c5-49b3-88a9-a5bee61d2bbc", "indicator--2d400c15-e8ff-4ee5-8ce3-f71113078710", "indicator--d1acd2e6-51cc-4d90-aab6-42190f3b4923", "indicator--edb7176c-96d9-47e4-bf09-ab500615df9f", "indicator--5dcd5f9c-74d1-450f-be57-4450f0c76e4d", "indicator--0b8e641a-b224-4510-969a-ab4298fa95fc", "indicator--720b15bf-1254-49f6-8a4a-e4bd504b6f25", "indicator--1b7f9f3a-94ae-4334-899b-f4c2b8eea723", "indicator--f839dd67-2cc7-40af-a07e-9ef1c669e14e", "indicator--de04973a-dd6f-44f8-ae54-20d246b3582d", "indicator--f9aeb322-3e9b-4beb-b5d1-4897c05d583b", "indicator--b254f1c9-8722-47cb-89f3-66a9c9e289c5", "indicator--61908dcb-4bc8-46ce-bdaf-8cb9050c4388", "indicator--9b973956-b8b6-4d68-9b01-7bb9ba757ddb", "indicator--2b19a73c-4901-4bd2-af06-70384a48d497", "indicator--a533d56e-7053-46bc-afe8-5e63fe84776a", "indicator--f089d622-0bb1-4aad-a13f-eaeb94e3599f", "indicator--5bb32d3e-0a3a-48ff-a46c-69b02d65b3a5", "indicator--a85a9789-9478-4a22-8c66-7f41f3b594b5", "indicator--125f7918-5d6a-48c9-a743-3cca5164d6a2", "indicator--8c5bb732-4766-41b8-8ea2-e55aee538c75", "indicator--0f999492-f3a6-450f-aeeb-d5db3966e3f0", "indicator--411a4a43-cf07-451e-8f3c-08d2d5eb87d6", "indicator--277abad6-d883-4065-8131-a154437fbd33", "indicator--459dd5ae-406a-46d1-aab9-13559df1b4ef", "indicator--ef80ad7d-2abd-4ffe-ba4c-e3d0968b87fc", "indicator--0bffa451-c99e-4300-a085-2843ec545eb0", "indicator--36278e70-3b4d-4a2d-b157-7ee4a0e1337d", "indicator--d11beb19-1102-4282-a674-2517a40c13e5", "indicator--99959baf-efe3-4687-8447-7167c1a0653c", "indicator--df3cc905-e656-4beb-be30-1ca1dc368945", "indicator--eac6d54a-0b8e-47c9-b546-f21f193db265", "indicator--fd5dbc49-ac5f-4fa9-aca4-9b29ccc9e6a4", "indicator--15c90773-0f5d-4f38-be0b-bde3c12e0c10", "indicator--ae2bcda1-4507-43fe-aa59-e49ddbfaf6da", "indicator--54c6f1bb-fcdb-4955-bbf9-e7a830c11ba3", "indicator--dcfc5262-6b80-43dd-b7f6-7d1daf4f08e1", "indicator--1af6a172-86af-4327-906e-36edd7ed55c9", "indicator--963b855f-cd6e-4446-b7eb-8ec10cb23993", "indicator--c0315238-93eb-450b-b56e-25564a88c7bd", "indicator--b42214d2-9205-4320-bae4-0703d4c15102", "indicator--d9952fa6-c50d-4b47-990e-51b7a29d2399", "indicator--500dd165-a5e1-4feb-84d1-ea8c1db8785e", "indicator--95f9ecd5-a032-43e3-9d47-d125f7ff3c17", "indicator--212993ae-b30d-412a-95c7-5e54482dae99", "indicator--840b1a3f-5aa0-467b-b264-de27bf543ff9", "indicator--bd69caa5-ceca-48f0-bba9-dc49c32cabfe", "indicator--7fc70e9f-a5e3-4c7a-8aa6-b2538154082e", "indicator--769c949e-370e-40a1-8f9b-29eda2fc0b90", "indicator--63d9d246-632d-4769-a3c8-dc9078ff088f", "indicator--779549eb-7a9e-4d6b-b67b-c48f877172b0", "indicator--358d273a-9140-4833-a0ce-5045cd36ec89", "indicator--ba667bda-1728-44ae-929b-4a82a4ccf181", "indicator--45b7b905-edc5-434f-a57e-e0a3f2e94fe0", "indicator--82828ad3-e463-4c76-9788-0c568115258e", "indicator--b111f34e-8ea0-429e-9bce-7dedc648fbf4", "indicator--ddd9a428-68ef-49b0-ba67-3464ea78c53b", "indicator--04f6a80d-8111-40aa-90ab-06033a235a1a", "indicator--07a5e3ad-0117-4232-b8bc-4a8d91fc7c8f", "indicator--86ff817d-dd96-4211-9702-434e3659a650", "indicator--fe45cbcc-25d8-4ab0-bb4d-2d8f0940897a", "indicator--a3f8ad95-4d18-4a85-ae45-f5ac5766c44a", "indicator--53f96c11-64e3-4582-8cdf-15330501beef", "indicator--bd34c395-7b21-4aa1-963e-1b3e13687fcc", "indicator--48b11dad-a05b-4ee9-973a-48f32184e688", "indicator--3ef63837-a188-4b79-9dad-e6e937d3c1e7", "indicator--221d0152-e574-4c4e-91bb-5e522e7ee540", "indicator--f49fdb5f-5265-492d-99aa-0b5e9df62b76", "indicator--ecf67fd7-82b1-436d-b6eb-1524dcee4b18", "indicator--0db1de86-0046-416f-bd24-c868119093a3", "indicator--aad0c003-0e87-47c7-a559-7263e0ef93b9", "indicator--9b23403b-d37e-49bd-8023-1c6633f1e73c", "indicator--4c77ce84-98e1-428d-9cf5-9f80732e095f", "indicator--cc7e01dc-7883-4932-a482-2366700da222", "indicator--fc8ab687-9525-4a7c-8dd0-3d4f3f66becf", "indicator--419efd05-eb5c-4be6-a5b3-e070925b3c68", "indicator--42015dfb-edb5-4a07-bae1-b6fbdb94a2ef", "indicator--373c44b8-9efa-408f-9c3c-b903b53bbe3b", "indicator--6ae8cebe-7890-4bf3-8846-5683654fec7f", "indicator--8d483289-8059-498d-ac02-da63ed072d80", "indicator--d09b4162-0680-4772-a90d-cb1c26b0343f", "indicator--17a439ac-0c6b-4d20-8a62-12c07cdcfa40", "indicator--429ac225-2ccf-49da-9a7c-caa5ebabbc78", "indicator--8535b03c-de49-4777-ba32-8f1c3272334e", "indicator--26e7df16-39b6-4c16-b81a-6fa68437d3ba", "indicator--461e5b56-2e6c-4668-bc95-cc2e8e2b34dd", "indicator--f134c84f-b12a-4955-8a15-cfec35cd5cb7", "indicator--c4ac517a-0757-4e6e-a76c-41e37e13b319", "indicator--11b702b1-e894-4231-8aa4-a10f2b607b22", "indicator--7885030e-b8ff-4a10-ab26-3ed3bc605d0e", "indicator--ed9d454b-e422-4cb2-8a3a-c27d11b45f97", "indicator--5629af2c-82ee-4d75-8a10-f95ab2f4f10a", "indicator--7d983cd5-865b-42a6-b3b1-14b4fd57c862", "indicator--b8a78d92-86d2-42c2-96b5-57c3faba2862", "indicator--dc01b7fd-e7c9-4452-91a5-0c2c508563cf", "indicator--4579657e-8e82-4a3f-8a87-6f643dae65de", "indicator--fbea8cd4-f69a-408e-adf4-cd7b9732aaa9", "indicator--0e18f8e4-fc3f-4dbd-807d-ba8099c5149c", "indicator--cee9e037-ce13-458a-bb44-247a4ad47d0b", "indicator--51479d76-3fa0-47a0-90fa-602bbe6edbfd", "indicator--aa8c4b2b-60e6-4047-bf22-3bd2e1643780", "indicator--e6331b8b-b289-4976-965b-3d31290987f2", "indicator--1d384615-0e10-444b-b082-d2234ac8face", "indicator--17e687d4-3c53-4e91-aa94-9e44e29eac1d", "indicator--58c77a30-89bc-4fd3-a82b-e9180d95905f", "indicator--3b3a636d-4cfe-48e6-ac96-9e9337033170", "indicator--df4c6bea-345f-4f40-a1e7-4d4faf3a8b96", "indicator--f3aaf394-0c4a-4a98-8c14-37015faff42c", "indicator--17ea7ce6-18bf-41e5-b51f-bf09567dc0d5", "indicator--f3ecc306-1564-4092-ad3e-c56e2496dd9c", "indicator--6abd3e42-48a4-47f9-8f50-660f9b7ca812", "indicator--2888686c-ee0d-419d-a95b-2c0180e9c902", "indicator--96677bbc-361b-4ca4-86dc-8a6d3f7598a2", "indicator--5facda33-cbbe-4fd8-b825-76dd1dd79fa5", "indicator--64a657ba-d2cb-42a0-aa67-4451cea4f962", "indicator--2320c68a-44d0-452b-ae39-2d266d08cb1c", "indicator--13e28fae-067f-43de-9f42-76697576db99", "indicator--6374ae95-794f-409e-9147-8400dc95a4f7", "indicator--477c18ee-c972-4bec-994e-abf3126ba041", "indicator--6eb08e70-5c40-4361-890e-b302ac24e0b4", "indicator--dd42c663-f9c0-49aa-bebe-fb2b9cae9bc0", "indicator--ac45bacd-d09b-446b-9635-0fa9af7a40b1", "indicator--4373c916-3dd0-4b96-9272-5d136b054d51", "indicator--511535c8-d5c2-492e-ba0d-ace66f4b0da3", "indicator--cfdfb78e-1efe-4761-957e-9f4b2a026569", "indicator--d166a2ec-b945-452b-a6a5-d41fea2fa3a0", "indicator--c8e87047-b1c8-43e0-ab9c-2a5c195d3278", "indicator--e225ea9e-890f-4e84-9d6f-95406dc7e734", "indicator--ed43dcd7-207b-431b-aeae-ee42ff1d1439", "indicator--faea3281-da9b-4478-9ec0-45ca7d672b98", "indicator--226be804-2243-4b73-a1b7-08b134aca102", "indicator--766d048d-ca41-423e-9b2a-ff320f759442", "indicator--5572dd1c-85f7-46df-bf8a-24356c6a7e82", "indicator--369bd86c-bc36-4ead-82cd-25f5a2d9ad51", "indicator--a225bc14-6d6f-4d77-8702-29926960f015", "indicator--818e78e4-806f-4020-a8a5-a443eed62701", "indicator--abf96e02-867d-49f4-a5a7-a757e4a5263e", "indicator--ad9fbe23-6f29-4c08-bc4e-54b2d73b58b2", "indicator--87afe94f-abae-4ce1-b7fe-2215ee6c7a39", "indicator--3ddf274d-f3ce-432f-873a-3c0e271c6fbc", "indicator--74eaa094-3301-4e1e-8677-a09aac57397b", "indicator--90d40f4a-875a-4aa0-a661-9bf31d936a0f", "indicator--edc82710-65d7-4eec-b3cd-2175acd5b889", "indicator--d1bc5eb5-1dbb-42b8-ab7c-f32a3e05eed7", "indicator--313b8db3-591c-4234-8500-f96d896b5bc1", "indicator--6b8a5624-8a8f-4c4d-bb3c-c4c70a139b24", "indicator--693e85f9-36bc-48c4-ae34-3dcd7152cc1f", "indicator--cf370711-1409-42a5-983c-bb6d7c7cf71e", "indicator--27343438-a50d-4eef-9911-968424a8fba9", "indicator--59019e6d-e952-4b03-80f9-42fc925d87e4", "indicator--ddae5c74-0b3a-4179-85a8-0838b63ebe21", "indicator--791763fe-58e6-4ccc-92ba-dea11e8de86c", "indicator--12681e19-df73-4fb8-a20b-41c8467da895", "indicator--c737094b-e7a7-40ce-80b4-f69fb95efb3e", "indicator--38454a13-de9a-4ec9-950b-f92dac23510b", "indicator--69f9cc9f-b40a-4698-af35-1a9428218f3a", "indicator--ff2c3baa-ffd0-4309-96b8-61ce6d39032d", "indicator--2a114f3b-175e-4aa6-b3ff-f261e5275ec8", "indicator--becd6e80-bc02-411f-bf91-edf8ba67288d", "indicator--6356558a-1a65-43ee-9de1-033a928f82c0", "indicator--3232e85d-db92-4b84-b14c-01a7bfb0c21c", "indicator--4b98ff5b-0167-47c2-beb0-ee80fa05c417", "indicator--ac0ed8e7-df3c-433b-bf6a-fae5350cf0eb", "indicator--dc047c68-7984-468b-87cd-986d02038e85", "indicator--1bbbc8a0-e97b-414f-bb4f-b62a0eec48ab", "indicator--70e978ec-647f-4ddb-9e10-0b7546fd4ceb", "indicator--c2973be9-81aa-4a3a-8304-7e7b3cbe0a64", "indicator--64d42e9a-1977-4cf0-afc3-763134aa87b6", "indicator--03af2e61-bff9-4133-afa4-8e62721c0cfa", "indicator--61d04be9-6d4c-4fcd-9b42-8421e0907347", "indicator--3a7e7f7f-0418-486d-9804-d6bd127d6763", "indicator--16c885e6-864e-453c-ad26-99f087a15b68", "indicator--02b3cafa-cf19-4e97-a324-4d43c91e81c1", "indicator--dbf57669-d0a8-485d-9272-57e906fdf4c2", "indicator--326505d7-ee86-450b-bc5f-49c35a5263cb", "indicator--daff1abb-b8a6-47c2-b483-44ae7bc09b1a", "indicator--396818b0-1ce0-4bff-9aa8-c7c1022d6b88", "indicator--d094c0b1-b73e-41f3-8023-32ee481ac9f5", "indicator--c47918ef-e78e-448e-a7ec-cd501d17b9a3", "indicator--07884ec3-cb14-4a76-9a0b-652c541be736", "indicator--31590e0b-9b9b-4f03-a748-a9f3270ec083", "indicator--e2fba473-f2ff-41e0-ac25-576746fb0bed", "indicator--e9379087-ef4a-47ac-ad64-4cc9fc719a1a", "indicator--6fa81ca4-e9b9-4dcf-b809-7a2cc1ae6ff1", "indicator--9c0896cf-b0aa-4a12-be85-9d1759041610", "indicator--10672a8b-a3bc-4a53-97f8-02f93fb5539a", "indicator--96c1625d-19f8-4f98-b261-ea003c0153f3", "indicator--1dcb1037-04c6-48a2-ae8b-1c7696ac9932", "indicator--9e1856c2-0d4c-4271-84bd-181b27eefdb6", "indicator--161bc492-4e65-4c6f-a947-2992d7065dc0", "indicator--e74950a5-f8d0-463d-9bbc-5fab3e060dee", "indicator--39246f66-a4a5-447e-9fac-e4ee56e95602", "indicator--c125be77-b89a-4a9f-abdc-a4c457a8fa34", "indicator--ced1a25d-43f2-41a1-af50-659674d437d0", "indicator--5e5ec371-af83-468f-9cec-6d8c4b7863e9", "indicator--c236d211-f366-4546-8142-071f21fda6e5", "indicator--8476cdf0-4b4b-43de-bba0-d0eb54debfc9", "indicator--6c5b21a8-b2d2-4e2b-8fdc-1e6dbfc035eb", "indicator--aec7b6c0-45e6-47a7-81ad-b58604ff1a91", "indicator--1ca82cc1-aca0-432c-a379-24c9407d61ac", "indicator--a2aad9d5-fd60-4d94-a9cd-6451332890d8", "indicator--151a9909-f69d-4418-ba54-d967b44418ad", "indicator--c02d9dfb-f610-4c39-8f44-185e9466e6dc", "indicator--85c417e5-bc1c-48d1-915e-26cf9e10df4f", "indicator--cae4f575-4d32-4711-ac31-6bc45695c8cb", "indicator--d325e944-ab28-4007-b3ce-7a763c9f59b2", "indicator--bfb7d358-626c-4ee8-a583-9d59b0803dfc", "indicator--444b81e7-21ec-4de7-8645-2a7b0c2bf28d", "indicator--75c25792-37f4-4e3f-a6d6-c9e77bf34f52", "indicator--aa8fcb14-8e95-4498-8434-998527bb87dd", "indicator--5e42ad2b-cd27-4140-a955-576ae76af360", "indicator--f5a5c04a-60a4-4b7f-8e2b-4022d4b6b95b", "indicator--869824ee-0b0a-474e-ab44-893f17450020", "indicator--ada1c72a-a20a-4709-8793-7a069c5dbef6", "indicator--8e55a7e0-7f74-4a58-a403-463b90b3f4d6", "indicator--f852722b-55d5-4422-b23a-09db1ce401e5", "indicator--95924c0f-13f8-4345-ab20-950e1e3706fb", "indicator--24b1e113-7c62-47d9-86a3-7f4bed547b7c", "indicator--515b2401-3ac9-41de-98d9-30118f82c27e", "indicator--d6cf3ad5-1623-4a80-8ca3-ddc191694e84", "indicator--7dd0e423-62ba-4b64-9a99-b1d37b317f96", "indicator--f73fba97-27c9-478c-a264-5738a17b4cb6", "indicator--bf130492-2b5b-4dc3-902b-83c7a197aa92", "indicator--0b355b22-fee6-41d2-8a5f-11a823149045", "indicator--04340faf-7804-4d64-af5e-91f3b747f6d3", "indicator--8ac50fbf-ce12-498f-8aa3-bd4c438a64f2", "indicator--f4cbf1a7-9cb1-49fb-85e6-294b0a7c024b", "indicator--d8b6f1dd-df07-48df-9db3-ae812d2aacd4", "indicator--a811eec4-0123-4764-80e0-f1a7f578c284", "indicator--43f28c41-d2b9-41f0-92fe-e8d7d1e1915a", "indicator--f6f43464-71ad-490e-b58b-c024f9bb0d02", "indicator--24ee6ce8-30c1-485f-a8a6-dfbe0de4574b", "indicator--66f8f334-6dee-4d2b-bd74-844a3dc1eda3", "indicator--396a0e84-f845-43e5-979e-f6b9dd74ce9d", "indicator--0299465c-3a6a-4fc3-9bc2-53706df15983", "indicator--625eab01-32ac-4425-9fda-c4cb7b564f0c", "indicator--696271f0-7b63-4fc9-bbc8-ea3cab75047e", "indicator--a4d896a3-3de4-4092-9da8-29c8fd12d143", "indicator--0c8cb2d2-cd22-462e-a5c9-dba699df95ba", "indicator--ce062044-e6e8-47d1-8aa6-5468c41aef39", "indicator--367444d6-b6d1-404c-8e82-9d24fe2f6a4f", "indicator--42556ea2-9917-4f80-9633-22e9336632e5", "indicator--b31a7f8b-0aad-45cf-88c0-5f661a220558", "indicator--9f2263e0-af45-4e13-80a8-a624747a55a3", "indicator--ae3dff03-2290-4d4b-842f-e2dcb70dee55", "indicator--a5b5f0ab-c4cb-4989-b13e-02b0cac33d41", "indicator--f4d0c8da-59a8-4ff4-aeff-1fdd069a2996", "indicator--a12de4ca-226c-409a-8309-ce73da6f2da3", "indicator--9de191a1-caa7-4ded-9789-517a4059d88b", "indicator--3285c14d-0e40-4684-9ece-a8f9643e37f3", "indicator--15346995-06c8-4fa3-aaee-8e5f0039279d", "indicator--d9989616-3efc-4a62-bdd5-bd04bfdb4427", "indicator--92378ed0-b029-4c4d-8d63-812b9f9ae1ee", "indicator--c0aa4bbd-e650-4494-ad7a-f86666f30fa6", "indicator--28c1076e-50df-4ae2-951c-775bf92e2adb", "indicator--9c40d62f-538d-42aa-a861-e21aa74d930d", "indicator--13ed1532-456d-4d54-b3d9-dd66472a791c", "indicator--ba30cd92-2e41-4af7-a17a-8385c3cf1aaa", "indicator--d7cf23d4-2fa9-4848-b888-993f03a2d3e0", "indicator--043ee8d3-50db-43bb-916e-6679f4efaaf7", "indicator--9f5e7d56-f239-4dfe-a59a-5bdcee05b394", "indicator--f77d786b-2d40-4c90-832a-a5d7a8c6bd6a", "indicator--e68ceaa0-2dc7-4583-97a2-e1270eaebe32", "indicator--83d8a032-e7c9-4a15-a003-deddd8766673", "indicator--385c454c-22eb-4c5f-8477-52cc98b1f4d7", "indicator--9d72e0e5-2072-4fd1-a04d-d8e3be067fa0", "indicator--2ac5a604-2162-4e67-80dd-a9a354e6dddc", "indicator--ad54d76f-0e5d-43d8-8fc8-fc0f46de6c17", "indicator--42840f61-c8de-4304-b619-964ebe5831e4", "indicator--75c4571a-378f-4b36-8cb5-d4c3ac039f20", "indicator--62524581-f845-4fb2-b8f8-c11de65032da", "indicator--44f721bc-1a8b-4859-a993-fc64fc1714cc", "indicator--9fb00438-9ea4-4b08-b873-11f4027182a1", "indicator--ad48faac-df6f-4491-90c0-966d9d56897e", "indicator--a74e61b3-9666-4e17-a8f2-01068224ec62", "indicator--807c0b32-9a02-4542-b894-831ca02f797a", "indicator--16943e41-8cf6-4270-b2a2-879fabc1618b", "indicator--9fdfa971-a7bf-4e06-9187-94731d46da9c", "indicator--0fb64c15-c39d-4edd-a2d9-016c39d87417", "indicator--1faada27-2f88-4c0b-9176-c27d6c468ded", "indicator--a0562da0-2c29-4c6d-aa0d-985392d66433", "indicator--20e5dbaa-d0bb-47e4-a13f-349c5ac16964", "indicator--6a72deff-c711-4be2-8f09-6ca207c15e7b", "indicator--cbdf79ab-db72-48f6-9e6d-21c665c6fb65", "indicator--0f186b23-f477-4f55-9087-55700f86970c", "indicator--b6267bf9-3722-4f97-ba68-8e4f4493a470", "indicator--4ba8ba9a-f84c-4e42-9300-fd4feb4e62e9", "indicator--41a83532-ae8e-409d-862a-b4464f30544c", "indicator--1cd24070-eb47-4619-8ccc-2aa7f19abde6", "indicator--dc8ca56f-7749-4e91-add2-e6cf46ed5d69", "indicator--40e6b51b-b8ad-4247-9527-43171432a363", "indicator--bfc525ec-8eeb-47e9-9a60-12bd9d5f6318", "indicator--e5268d26-be25-45ad-b378-130eeb231704", "indicator--3acec090-6429-4dd1-bacc-9e392f6c5d96", "indicator--d24c5b21-c50b-4dca-bc22-73ee1d314a85", "indicator--1ea14f7b-f40f-431f-9f55-8f3db6d41aca", "indicator--683d1754-1bae-4b8f-bcde-8005292ad2af", "indicator--2e5481ef-bf90-416a-b89e-b518d3164a86", "indicator--35873446-7af6-43d7-8bca-30727a5eda15", "indicator--88b1557a-ab80-464a-bbb2-95817b1e8e7b", "indicator--8110d77c-bdb8-4112-9d62-c2baa8d1988e", "indicator--41657156-98c4-446e-b668-4e157b79ef7c", "indicator--8ffa2850-4da2-48c7-9979-421f4c477f83", "indicator--d261188c-32fa-4484-87e0-0b69a45f8eb5", "indicator--83344026-c149-4388-bb24-029fb8e6e2b0", "indicator--a4108f6f-6040-4c95-b6c5-adf247a29bfc", "indicator--ea39cfcd-07ae-49d7-8b10-9b2756ad5f1c", "indicator--07e50d91-d709-41f4-97a9-4c379bccd959", "indicator--3f45c79d-1b7c-4da8-88ab-754863c6c1da", "indicator--0cc53846-a82e-4c86-8108-08509128086a", "indicator--7ea68943-a9e8-4e46-ba61-2b953d37ee86", "indicator--fb837f73-ae02-4c53-973c-1f49b01f2107", "indicator--b630e5ee-91df-4b67-85b0-957eff503ca2", "indicator--96213ad3-0e8a-41d5-bf60-ba63cbb4d076", "indicator--6e0b5c8b-627e-4653-8cb2-a17ea06560af", "indicator--49a5938c-98a3-46f5-82e9-f5355a465606", "indicator--96bdcc6e-f151-4314-9673-c3cca6453e13", "indicator--16f3244a-0daf-4bd3-9f5c-a0ff3a6ecd15", "indicator--e1097c0b-8bb2-48c2-8134-91ef89eca465", "indicator--873fcd7a-d035-4017-892f-c46720753ed3", "indicator--f5d89bde-0048-40b4-bcdc-44ad482e38af", "indicator--ee8318df-dd1f-404a-bf9e-78ef0b345c99", "indicator--3f7e1bf0-3cfe-4ec4-ada6-af0f6a7c2a68", "indicator--77113a58-eee0-4007-9df0-fe8c452a0a56", "indicator--67551aab-690e-4fe3-8a34-3f71c650e503", "indicator--ed67133b-f6d2-49ae-9409-bfafed3cc4a3", "indicator--930d0e0c-59aa-4b03-a774-9afa97654471", "indicator--7f758f5e-c9a9-4e42-b5c7-957b1cce3eb7", "indicator--78b11cd3-239c-427a-b8f9-32a625cd1257", "indicator--409e99fd-c987-4920-a086-e80de590d80a", "indicator--327d760b-20a8-4866-8c66-912eaafb990e", "indicator--b524934b-f9e3-42f5-8062-d233c50864c7", "indicator--76420d1c-8149-4163-8749-3fe543ef554f", "indicator--35423f53-971d-470c-84b5-c63ebe12a42d", "indicator--dd9cb2d6-efec-49b5-87a3-145c0dc3c190", "indicator--dec4c4df-d064-4fcf-8640-908162504d77", "indicator--719c64fe-53d1-4bab-8d93-b1090956059b", "indicator--db94f8e5-ec4a-48ef-9795-40a586bad786", "indicator--9054fc7d-265b-41ae-aec2-9e786be23c4e", "indicator--090cfa25-1046-4fdc-ba24-fae8084205c6", "indicator--c5abd8ad-5730-470a-b85b-b6f54d4f975d", "indicator--c8f89cf7-48f6-4cb7-a38d-d44b43face0f", "indicator--a79db8db-ceb9-410a-bd7b-2639fc296cf6", "indicator--0a677661-d4c0-4276-8c3c-6d797573962c", "indicator--2a3308b2-970b-4e2a-b6a4-f85ab02e4243", "indicator--77a70ba0-9e3c-4620-8bd8-886bcb6ad0da", "indicator--12ffbb59-7848-4388-98ec-17a730e681fe", "indicator--bc75cbd6-9654-4cfe-8fd4-5a5d3e1a7b28", "indicator--6b67bb8a-fb8f-417c-b95f-896b1ead16aa", "indicator--f6e31134-bb6e-4f72-ab65-0aa792049824", "indicator--907f80db-fffb-427d-901a-28d04b882831", "indicator--67b762ba-0c42-4c61-924e-7d28b1c93255", "indicator--123df104-1306-4d91-bb36-f78768a82cda", "indicator--18847e34-0f8b-484c-8f6f-3a158795b9b5", "indicator--b5ea1aa5-704b-403c-9df5-a8750cfedb29", "indicator--16ed9311-e4c1-45ea-a095-3c9e2fd26d6f", "indicator--62477086-6d62-45da-a13a-24c4bac088c7", "indicator--510fa5aa-150a-4fa5-830c-8a455502d1a7", "indicator--1d36bc6d-fc27-41bc-831d-2f0e044be695", "indicator--fca7e831-d84c-47a9-8101-59afc36d032b", "indicator--5423107c-0e15-4b9b-a25c-9ed39bfdda37", "indicator--0fc233f6-f5f7-474d-a965-4cb1db1de561", "indicator--51e73326-5493-49bf-999e-741b62e769ad", "indicator--d252d15c-519a-4068-b642-9b508e3dd7bc", "indicator--cad595bb-430d-4100-8192-3fa3a99a0b8a", "indicator--15a49829-d359-461e-b919-196424849bcb", "indicator--b786d329-df30-42b3-810d-ad2da52ec7ad", "indicator--84878d06-7692-4dc3-a155-5bf468b78ea9", "indicator--7cba420b-e10c-4fa4-9e6d-ce56030fb309", "indicator--9c00f634-b19c-4a23-acb6-76e3bb02c1c0", "indicator--2ff9aebf-4dcd-4f4c-9913-a03f4fe8fe59", "indicator--c81b3951-92f3-4f29-a4f1-e4de0982d8ab", "indicator--97a5e96c-d672-4159-a21e-06cd5976dd58", "indicator--52f3928f-4db1-44f1-b4ff-949283f35670", "indicator--383e72d7-767d-4765-8d3f-1900faa846b4", "indicator--1d0e1926-7bad-4637-ab10-1ff27991c76f", "indicator--7830b76d-dabf-48e1-b476-b7ce7db3d837", "indicator--5a03c475-3ae9-4970-8495-50ed8db61253", "indicator--9ef4d5cd-6249-4f10-bc47-4e21e9b66739", "indicator--646ea028-d44c-4f85-8e86-ada58e4e89fc", "indicator--8d675cfa-d5e5-481e-a345-cffccf6768bd", "indicator--06a762d5-ddf0-47e5-aaa5-369a1fac9886", "indicator--622956f4-0fd9-4791-8e96-5e1cbf769f69", "indicator--fad99982-875b-45cb-9e95-9ac611092af6", "indicator--7c6cec6b-8882-47c9-924b-bfa78516e56e", "indicator--d68e12d7-89a4-4b55-b170-ee95e38b616f", "indicator--85579918-1356-4bae-944c-776e45268e73", "indicator--434e2154-319a-4862-89e5-0b17f59321be", "indicator--cd0d5609-4674-4437-8e73-107bf50b8296", "indicator--eee64334-34b7-4886-b149-5ced015cf14a", "indicator--50cb3091-ea2d-4dd2-83b3-6d9ad351f73a", "indicator--9151a1ae-17e5-4c14-8e9b-c73f53e95dda", "indicator--d53de140-32c5-4339-9566-4925bd12d390", "indicator--f6afd1b0-74ba-4cbc-a7ed-a54452a74bcf", "indicator--6d0e78a3-575a-4733-839d-bd4923142834", "indicator--c92ed83f-615b-4059-8aab-01f1ef1ffc9d", "indicator--b5a85e75-0e47-41d6-9bb4-a16cf4f55ecd", "indicator--753faa7e-23d0-43ed-86b1-2275856d9e56", "indicator--b8fcf955-b519-4277-b87c-d3e24306a14c", "indicator--54903b83-3ca3-4a10-9f2e-f209a90bfeea", "indicator--dd100938-badf-4fcd-a834-3e64ae2125bb", "indicator--2b2fb31f-6b02-486f-b5af-36d9477db445", "indicator--f3e2c2ee-557d-474d-93e9-9d3b03a2e37c", "indicator--3240f63b-2811-4da0-ab91-0c624a0d358b", "indicator--93770cfa-488a-4ff6-bb3f-16b9846d607c", "indicator--4c46d0df-a190-4b2f-9e87-501a38953928", "indicator--6e470186-0f03-4573-aa8a-51db67064a43", "indicator--a04e3ed6-a0a3-4ec0-b32a-5fba5d47d62e", "indicator--8115cda0-5ac2-47d4-b019-59fb34569896", "indicator--aa8d5c09-0188-450c-af5f-234a043c3138", "indicator--e1ea3dda-43d6-4f1e-8a18-99175261bcba", "indicator--5b4b628c-f8c0-4cb3-8cb4-1add22fa73df", "indicator--afc22093-9651-4e60-8c39-9b8bc9939051", "indicator--f4c7e35f-ce66-4c1c-be97-8bf582cdbbc0", "indicator--3b2ddbfa-9a8c-4823-81a1-f7aa48fa44e4", "indicator--f092e389-5d3f-425c-8fd9-f314549a119d", "indicator--1df987b5-f0d2-49bf-b920-b218864d18f8", "indicator--c41dd9ba-8e8f-4f9a-854d-f2dcb44f989d", "indicator--125c7490-8e4b-4b30-957c-0e860903b686", "indicator--8897863b-3220-460e-ae94-32a2d427a09a", "indicator--511edbee-4849-431e-b342-64d4751e70df", "indicator--b7a37986-6293-4547-a367-37521b359886", "indicator--f318e20b-fcbf-46a0-843c-d4ed2387ed61", "indicator--4e2ad20d-be4e-4789-a211-0af05f56a257", "indicator--d5c94d09-37e5-4620-a902-b58d0bad3289", "indicator--0ecec898-b064-46d5-aa09-87369436a808", "indicator--f457a467-e52d-42cb-b15a-14e4b92bb3de", "indicator--2061ac65-78e0-4316-8952-4cc839f073e4", "indicator--42ec9050-8822-4bca-b54c-abcdc00ff423", "indicator--09652ea3-9dd9-4a11-8650-41fe62717c7f", "indicator--cf784267-1b17-45b2-a42a-f848578926b5", "indicator--8d722104-bd49-4d0e-a419-7aed8a6cba29", "indicator--97438ca7-8a50-4363-818d-fc99fb3e282a", "indicator--c2340797-ae8c-4d0b-9e86-1044f37f46e2", "indicator--2ca1df80-1e5f-407a-982f-7a6d45e3a33a", "indicator--54397b73-c9a9-4045-b56b-d4da174b8874", "indicator--0d515f5f-fd80-40de-859c-4193cfb7d8d4", "indicator--7ecd827e-3084-49a0-be18-46b4e4952094", "indicator--4902f705-baaf-410f-aac0-79d6c2b5dc66", "indicator--33eadce4-e54a-4ab3-af12-ce17d520bd0b", "indicator--f450e917-94dc-42dd-80a2-94bf736f71b7", "indicator--fdf88290-02b4-4e4e-8457-04ce47e011ad", "indicator--5b84d0bf-8b7c-424a-be3c-deec9a874f18", "indicator--935ab422-b353-479c-b833-43f27cc710f2", "indicator--d2c10bb9-3581-4483-b9b8-f73a6abe528f", "indicator--ee16640a-2d5f-4697-a688-74ca615c4967", "indicator--35b2b211-d622-4099-8086-4c2bd344cce4", "indicator--bb8c84ab-b109-4216-8fff-1c830eb858d9", "indicator--49f57d49-3ed1-4808-bcab-9ab8c4b40825", "indicator--472e1ab0-2d7a-42a1-8e8c-1007d4c3a293", "indicator--7f992907-0c69-4f79-b0c5-35816aa11181", "indicator--6833e103-bf09-483c-9272-31f3cd07f7f6", "indicator--49b8f662-48aa-429c-b568-08d2a5e1e169", "indicator--52617ba2-c5e0-4c86-ab73-9c980024d27c", "indicator--4ce22f86-7866-4fbb-a328-b1fc5380937d", "indicator--abcf9943-dcfc-48d5-a3b6-73129faad833", "indicator--c29f57d1-ba85-40e8-a103-1956519ec785", "indicator--27c1410d-b363-4aa4-ac55-e0b509db1a88", "indicator--7b9eea78-c136-447b-85cf-449c88ccb044", "indicator--256aee87-f087-41ae-8539-6baf2c0162c2", "indicator--681a8021-f9fe-4022-920d-4ca3cc193b5b", "indicator--d7dbeaf6-3266-4e71-b58a-52b1d6a7574f", "indicator--360cca77-e297-4fc2-8993-5aabc1191ea0", "indicator--31d2fc3d-9c44-4ed6-bef6-33985378e2b6", "indicator--e5f9a855-0f57-44fd-96d9-4cedd3c6f000", "indicator--a1d61e89-952a-4a01-89e9-e41436db8e78", "indicator--afc7d079-ebd3-4899-a1f7-40727a38341b", "indicator--5eaa3d9b-946e-4f53-bc36-a6f936a4e08e", "indicator--691b8c76-dffe-4630-b336-d78009cf7a7b", "indicator--3383f268-2a50-4e52-beb4-ba885555dccc", "indicator--7c81bc78-a418-4ba1-a76b-3f8492b85ae8", "indicator--eacb10ae-8c18-4bde-9711-cfee9ed13c99", "indicator--10aec57a-6881-48af-9023-3a89976610f6", "indicator--d01a2575-afac-495a-8d90-90d767ff9a8b", "indicator--42337540-2277-4722-bc1d-0ef202a6a49f", "indicator--25c48c34-3189-4a11-b3db-f609ce22786d", "indicator--c8466b38-0fb5-4207-b3e2-a5c232f8dd13", "indicator--724e04b5-173f-4517-b3f6-8ed41147208b", "indicator--7588eccd-908e-438e-a89d-1da0c91ec9b9", "indicator--f0e1b551-4c0f-4829-b545-716b7346abbd", "indicator--fbc5c454-b7b4-4779-8b22-f33b2989942e", "indicator--6a4e7434-8333-4338-a3de-00aa141f1ac7", "indicator--8b5a28a4-72d2-41a6-8d9b-966151383f4f", "indicator--f941d84a-305c-4a03-9d48-cfaebf5f0661", "indicator--00ae1e7f-602a-42f7-b646-9da109a16939", "indicator--1f826cc9-d619-4586-a89a-5914b05a24d8", "indicator--bd9d80a9-a1a4-4a29-b5dd-aea5b4a0a47c", "indicator--f1b7b07f-b6ed-4c00-82bd-3cac97c8134d", "indicator--bfb1ebcc-adfa-426a-b3fb-68149d48a866", "indicator--f0ac3984-1189-417c-ab15-26bdd053f477", "indicator--ca915807-99ba-495c-8baa-aa211de62c3a", "indicator--dc1f7a77-40cd-4d19-9ee5-daeb10cf8cfb", "indicator--b1914985-1c6b-4481-a9e2-b76ba28a645d", "indicator--4faa7dbc-8517-497d-ad8e-74c8abeecc7d", "indicator--e1856f8a-c425-4b25-a6f5-43e33b78d025", "indicator--52bbc7b0-42c2-41c6-82c7-2d6a165922c6", "indicator--040050b3-1d7b-46af-9ede-06f0c25e3ac6", "indicator--1a6397bf-7e79-464e-bac1-305168df8b72", "indicator--98ab4335-c802-4e60-9dae-21c6caf8fb5f", "indicator--206bc905-a2b8-4dc8-82e5-b69ac6a0e3fc", "indicator--21003568-6794-4288-be0b-36e9aa877774", "indicator--8ceea843-1483-4034-bedf-5a0bb3813a65", "indicator--758150ee-aba2-4d90-ad5b-98d80f8d2a2f", "indicator--7b24329e-6b29-4fd9-a01c-99a8671713b3", "indicator--42a32183-35ee-4ab6-a7a0-7caea3b1f646", "indicator--c93b46e4-0c3c-4230-8f84-3a4a18936382", "indicator--7d36d734-11bf-4b75-b042-a526e3c4f38b", "indicator--cce703c2-2ee3-4d8c-81f6-a0012e5dcc61", "indicator--2fde53c0-5a1d-42ed-9a0f-3997e7422db2", "indicator--9fa8b3f7-bfa2-41ec-a4a4-8296b6f21147", "indicator--ceef1be8-3ef4-4b01-a28c-98331e6657df", "indicator--277b0662-93c3-46f2-b6af-6bebb79c7d59", "indicator--d92874cb-335f-43f6-a082-22dc046145ac", "indicator--42150627-0879-4567-8ab5-af8e700dca3f", "indicator--aaad6a62-284f-4e6a-9989-3588bdf912d1", "indicator--854fa597-4ed3-439c-9a6b-6d88094871de", "indicator--5021f6ea-84ce-4311-a38e-3c2f910a2f37", "indicator--f71c7bf5-6bb7-46f1-a984-73dac4e1bbbe", "sighting--367ff66f-5304-436a-ac68-717d720a0424", "sighting--350a7277-ca79-4f2b-9cd7-ba68259e4cef", "sighting--316250e2-c34e-46a6-9fdf-7b4a2c8eb5b7", "sighting--7f9a992d-b9f8-4dad-b068-9a0fac608747", "sighting--593e488d-36c8-43af-9dc4-6ecdbd14b8c6", "sighting--b8872874-36f5-4709-9e31-dab01e636939", "sighting--65b489a5-240e-4e35-bbb3-1929013f2efd", "sighting--716887ae-2a1e-421c-bf25-2907a212947f", "sighting--cdf45fca-c0e5-4315-9504-07fc6404ad94", "sighting--5644a5b8-4de9-4b11-bce6-f96ee7dc5a52", "sighting--96cd889d-3a04-4285-adb9-081614228e08", "sighting--1701119d-cc1e-4e95-959d-0a3351ba003d", "sighting--983c7896-71b0-4961-9565-856adc6a9a3f", "sighting--0b319d98-4aa2-4bfb-b377-b101839711e7", "sighting--d556a44b-ccc9-43d1-aac9-7de4e1738f0d", "sighting--a34b0756-ba80-4e35-9326-ca2aa2af5824", "sighting--dd6b1dae-1012-4f10-b7b3-3119b5b6f2c3", "sighting--5d5d0e40-4ce7-4300-b826-d53a50d85764", "sighting--35c375c0-996b-4287-8bd3-2d78cae6ac55", "sighting--f550f949-3fdf-4e9b-995a-d747a71a42d8", "sighting--63b79bbc-9b45-4b05-88b1-a1bd70268cf5", "sighting--361b099d-a774-47fb-9bfa-830dacc61a86", "sighting--db9426c5-d3fc-41ce-8f0b-e25d4d8e10bf", "sighting--fb291345-fc63-460b-a12f-9d3abe344099", "sighting--81d29f0d-0679-455b-a64e-bf7e8731efcd", "sighting--7ac960c6-14f2-4931-bf31-a9d24e6483ef", "sighting--c8dc0f45-8250-4943-bf67-b9a9cb7d7885", "sighting--ae081615-5509-4127-9416-dc3805ed0bb7", "sighting--3bfe72b7-c213-4c8a-b9bd-44130f981027", "sighting--1d40024f-36f3-4103-9b4a-69278872b78d", "sighting--9ad65260-9855-45e3-af36-e39e872d019a", "sighting--4e05e84e-4d86-493f-bfb4-b5db423bcd66", "sighting--5b2db0f8-df44-4743-9835-0ef1e21c598a", "sighting--b4565e33-91a7-4540-922f-88ee15755abe", "sighting--a22bd06e-1432-45f8-9a66-7700b3c5e826", "sighting--49d7acf8-e199-4bd5-a2f2-0f7b67453d3a", "sighting--a9600995-f46b-4408-8bf2-fa9d91423a75", "sighting--e740c050-10ea-4298-ae41-8ae6425fc3c2", "sighting--b3f35597-f04f-4fbd-99e8-58e47fecf8b9", "sighting--12600a1d-a711-4d92-a544-aab02bd3ac1b", "sighting--86f8258c-f06c-41a7-a41c-d20ce7d949df", "sighting--f9d9e02f-edff-4557-b682-d4eac9dec556", "sighting--1a0b6ded-b358-4f69-babc-384db446c3d4", "sighting--231c8bb3-b79a-41d6-b695-78f3311c7973", "sighting--8b8ddc80-1c51-400d-aed7-670b5bf98a7e", "sighting--f5ebe6dc-cee5-4a2d-a0f3-d7e9fa1c1ca7", "sighting--449c01e2-fb91-4b57-8408-fa21f50134a7", "sighting--ca45ae1f-d678-472b-816d-5c198ca96d9d", "sighting--94204fc0-28b8-4b1a-ab2e-95f4f5d9d65c", "sighting--87db4651-8a46-42bf-989a-1ac9a847edcc", "sighting--acef4863-08f4-4a14-857f-a0f825ee0fd9", "sighting--255d4f39-5af9-4bd0-8b65-e2b3468c02da", "sighting--7ca4a007-a42b-4853-9640-cd9ac76873e4", "sighting--ce79c63d-56c3-427c-afc0-6d9938fd5f7a", "sighting--031f42dd-36e2-4796-aea4-92883a7ea8a0", "sighting--064892bf-a2d0-4f14-9917-d03424ea2f16", "sighting--4e2840ca-2878-4c28-be6d-f3ed3b5ffb42", "sighting--1b527fe2-fe15-4448-83b1-9292c927b98f", "sighting--f28a21ef-109f-4cd3-a1db-685853aa4126", "sighting--943bc4ed-3508-481f-8271-575ba1e05a3b", "sighting--212c769b-bfa4-46a0-9b5b-d07cdcba196f", "sighting--f91ab8ee-60ad-44b0-a811-0b17b2241b40", "sighting--ddbbafdf-cc59-4d4c-8785-d3a582bd97cd", "sighting--7ef8224e-f924-45e2-8be0-1141b8664021", "sighting--3849e397-eedf-4fe8-9389-6ef3b8c29a99", "sighting--43fa37a4-f65f-43f8-97bd-60a8fb8ae044", "sighting--a4918272-b475-461d-a316-c314276a8594", "sighting--5a7c84d8-85e6-46b5-aa57-ab1d68f2a814", "sighting--2686681d-f915-4d0b-a8b7-aa1f3524d3a3", "sighting--6c77a9e1-b035-4315-ac6e-0a9b81020895", "sighting--b780d9c5-6f92-4d05-a38c-ee112b6c8275", "sighting--8520034b-b10e-430f-b304-a8fa4cac7651", "sighting--37e48bea-a033-4821-9094-73c2f251be45", "sighting--323c89ea-7491-4891-a926-c2e5926d8020", "sighting--d22b31b6-11f1-449b-a4af-de6a0de375a1", "sighting--ea00c8b4-0bcc-42fe-bd0a-232ebbad09c2", "sighting--3394fb31-b8b4-4a97-b21c-2a2cbafa52b7", "sighting--a31aba69-4b9c-4c9f-a14f-9164c5183044", "sighting--83d06c65-9e79-4ea5-927a-090aa078fab9", "sighting--faa2b422-1a99-4039-bcb3-95eb92d01c9d", "sighting--e9c40ce7-5975-498e-98a6-8b900ccc480f", "sighting--411bca6c-dc84-4747-9469-65061acfe7ec", "sighting--84b7135c-7422-4b52-9a8c-ffa98f642fc5", "sighting--47978c66-5664-41b8-83b4-17ecb16ba696", "sighting--b4eaadbb-7477-4dff-ab22-b7571521ee90", "sighting--89aa8950-5a96-46ae-ab2c-33a1a47e2161", "sighting--936c76a4-b5ba-4ac8-b9f4-cdf24cad68a0", "sighting--72a80590-f779-479c-9cc7-47ec7384e256", "sighting--b545e284-c1c2-4450-b0f5-1cc0437e9b8e", "sighting--73f27297-1dc0-48b5-86bc-ef3a15b8f67e", "sighting--ff3008c0-a661-4f19-af08-2485d37a83cf", "sighting--7129426d-362e-4bb1-ba50-606a20effb56", "sighting--d667e1b1-18cf-4461-9f81-878ff3e747c1", "sighting--d450f901-64c1-4709-b776-da2b417e88e0", "sighting--892c1720-6d4d-4704-80fa-6502a7745c6c", "sighting--cb254a4f-6428-4f51-a289-00125b387387", "sighting--9ad635f0-f518-4acb-b454-037e4647af64", "sighting--c0e9f0d6-ddc5-43ea-92e6-12a2b2e79792", "sighting--e4543c6e-b8b9-4cc6-b764-3bf30e553a17", "sighting--b0af8f4e-8482-443a-9fa3-d429b74c48a6", "sighting--4bc0298d-bcc7-4a4f-b340-3664bab49495", "sighting--054c5400-584f-4366-8aa1-46d876cc3665", "sighting--86d65ab7-9c32-46ca-9eea-30829061402f", "sighting--06779fe0-5663-4854-bb44-e439cbcb2b0d", "sighting--5acb85e1-ebab-44d8-ab9b-846562c4b826", "sighting--2ba1572e-4c59-4fff-ace8-ba5fb445d08c", "sighting--5dea98de-d706-4c65-8713-f8a2a21a89c8", "sighting--0ff2896b-74fe-49bd-bf9d-3a8501d4c8ae", "sighting--62abe9b4-dc4c-4afe-aa95-d2a546bce6bf", "sighting--0e39cf3c-ed02-495b-a3fe-8fc78ea558c4", "sighting--bb8322ef-0497-4007-b20a-690503911e92", "sighting--606ae65e-b463-4c9b-8c9f-fdcdf12aeb86", "sighting--f12e6b76-7a29-4120-9993-b358d98f622f", "sighting--d125b4f5-c8ed-4c5c-886b-25ea15a9c20d", "sighting--c5f4bb1d-b38d-4693-bb2b-bb601767616e", "sighting--37e88d26-5233-4f08-a87d-e1935ae47033", "sighting--e433a4aa-b6e1-439f-a2d2-ae352bf6cec1", "sighting--f83712e4-35b5-4963-b739-1461fd337258", "sighting--60207512-5d8d-4999-ba48-7d244991bdb0", "sighting--f82b2b28-e9fc-4993-9b1b-e888756b5f99", "sighting--64a7821a-db55-4caa-bbb4-b4a34dba8706", "sighting--e0018c18-ace3-4712-bdbe-bf9b3e7cf4da", "sighting--423fa3cb-09fe-4356-bdef-031a463de7b5", "sighting--d12b6f5a-63af-4fb4-834f-14cd58d33db0", "sighting--64d2e0bb-b636-4d50-94d9-b2f62b34cebb", "sighting--520e7e84-9165-484a-94cb-fc40113b9279", "sighting--b5b54627-7ca1-4259-908f-15bbd0acc9d5", "sighting--8730af8c-d070-4343-9616-9ae328908867", "sighting--ae92f6df-6f75-47e9-889c-ce1c13f68ab4", "sighting--40bee954-7e03-4d7e-bc89-f0245f17a8e8", "sighting--94b2a342-cfe9-4962-ac72-a26eb86e2225", "sighting--4e218bb6-50ab-40b5-a5af-cf1612af3276", "sighting--bfa538a6-f766-4897-a041-023549f80664", "sighting--5e9a9b2f-903b-44a3-bbbc-35dd99adb456", "sighting--0431fc02-d8b4-4a48-9899-78e57dbbff3d", "sighting--ddd52e6f-5ecd-4604-9c49-f14dc5921dec", "sighting--4e03d942-631d-4eb0-b5ca-aea236c5c2c9", "sighting--988cee9a-f212-4b61-9a57-f8b8ea9db7ec", "sighting--f3517668-e6ec-4fbd-9dcd-649c8a20c0a3", "sighting--ba131d7f-80ae-46d3-a75f-74ad921c30f3", "sighting--79b3a6be-4e3c-4fcc-8466-14a32c2a927a", "sighting--ad5b6d6e-d5ec-461d-9d90-05dc282af16f", "sighting--acb6e0bb-8f79-4907-9bc9-0e3b11a553e9", "sighting--70fbe15a-aad5-4ac4-a15c-1ba1b959775b", "sighting--c1d650e6-53e8-4d04-a7d9-0a3f10eb448c", "sighting--db901a09-b651-49b3-a87a-f1c4295a5aee", "sighting--9dcc6fa2-ba44-45d7-bcaa-567f44fbe814", "sighting--126d4534-9239-49de-8223-50b301abb26c", "sighting--5e6b2827-7d25-4dee-b17f-6d4d4ea15ac8", "sighting--2ceb0fa8-480b-4e42-a7a9-4ec9c62b1118", "sighting--5af15bbe-5a21-406c-8041-88913aaf9e82", "sighting--6cd05a54-7c20-4505-aa0b-190aeb21cf42", "sighting--81d1dc28-e2d0-4b81-9d76-99ad861a47a5", "sighting--4aa44b59-f858-43f7-8702-544e86849be5", "sighting--696b4b9f-77ac-463d-bf6a-a437b36a5b19", "sighting--465bcc26-907c-4b2f-8fe9-01f811ab6fe0", "sighting--0579c2cf-4486-4795-b3a7-b3d9f2073ef7", "sighting--e803a276-56ed-41f2-80ac-78b42d6e398a", "sighting--e60b9f2a-0439-499b-a7d4-d0b0ea94e869", "sighting--e96ca82f-0d72-4455-a38c-b90c7fd58738", "sighting--dab2a9a5-76af-4247-aed2-769f86657dd9", "sighting--1e303b51-df26-4182-9b98-ae6dfe174e7b", "sighting--7b3caba8-8cbc-4fab-91fa-158e7ca8a358", "sighting--33c0c5be-b672-41bf-bc46-e8c3d0cf8261", "sighting--feb20247-375f-49ac-9ccc-ded85b618f87", "sighting--cfc74467-35f8-4a77-bc77-56be38e15221", "sighting--5ea9811e-71c7-4ef1-a6e9-7b1b8c2e97ae", "sighting--51791428-9087-4cad-a140-afb6fd9c4360", "sighting--b418bbe2-a468-4283-8daa-d6a76b4e69ed", "sighting--8514f8a5-c38b-4fa6-b88c-6a4058e792bf", "sighting--dae7c953-30af-401f-bfba-3b66caa30515", "sighting--d7c96bc4-d62c-402b-9ad7-49827f7d82fc", "sighting--45240f2e-05d9-4565-8de2-32ad27fae7fe", "sighting--c55bf13a-e4a2-4a8e-a9d4-c997031fa81b", "sighting--65a13782-4dbb-4b91-94a3-99b0faa56d5f", "sighting--c4eb3a3c-deef-416b-adf0-7f58c3b0ad4e", "sighting--a65fbdc1-82f2-4324-8bf4-3de859a787d2", "sighting--8b608bdc-5448-4c0e-90ed-d320e2b5d262", "sighting--9731a6f8-e5be-4bd3-a33f-2bdc58803a5c", "sighting--8ec793d1-82bb-4a15-9429-f74b0da4f10d", "sighting--cf919326-913b-400a-be98-9fad1cc66c44", "sighting--e6805684-2e99-4a6e-a97a-9b4841bcd1db", "sighting--c0d4ed9d-b62e-45c8-a51c-5fdd8d3dd668", "sighting--3b74d953-f3ad-4c0e-9dfe-e36ea8477c07", "sighting--b9e2598d-dd7b-446d-815c-cd125082cffa", "sighting--5e0987de-0811-4aee-82a1-c705c6290a89", "sighting--78b56d99-7c98-4094-8e6d-d6715eb79614", "sighting--1e08d7fb-a9e5-42c0-aa94-f39bc947b6ab", "sighting--6de0f1e8-d438-4643-b088-87b70ffa39dd", "sighting--96ec55bb-67f6-49e7-a6b1-72e6638ba852", "sighting--099a41ed-5daf-4004-b261-af050fc033cf", "sighting--ca158216-1e8d-42ad-863f-8168ef5ba877", "sighting--e37a076d-bf6f-4d9b-8b89-2a08d2f6a8cc", "sighting--bdce6266-2643-447d-8a1a-81d334e6a2e3", "sighting--1e3d5f0b-2a0e-46e3-b611-ebca0a24461c", "sighting--59722046-ec20-496b-9f75-ad7be7b91f74", "sighting--6bac2177-c2a6-4cab-9a4a-2a1a363e109b", "sighting--a2c5683e-240c-476b-9712-fb007173543e", "sighting--7ea92a7d-860c-4dcb-b89b-77ca2552fd9f", "sighting--472570c6-0178-4c7d-ba6f-8c1510915dc7", "sighting--35dbe4e8-5593-4030-bcdb-99beeb9e01be", "sighting--e9af4d90-637a-4886-ae52-faf1046bae43", "sighting--4b29e761-054d-4f71-943c-a945ee7c3851", "sighting--05d0511f-1242-48c2-a67f-5a6f0ffe7907", "sighting--cc0e8b3a-eb8f-49a1-a205-fe71f0fb3ef2", "sighting--23f48f5a-bc6b-4be1-96cb-97c847f9e39e", "sighting--da2c50b8-10b2-4e3a-9111-6b664a3168e4", "sighting--222ad94b-6559-4939-b459-5e1b3d705f98", "sighting--98a6abb7-b2d0-4090-879a-467ceb494233", "sighting--b81d7511-86a3-4091-a9e4-8546d5a0c12c", "sighting--86bfb9e4-6dc0-430b-a7d1-12e7fff0004f", "sighting--2c10807c-4ba1-4fa7-8acf-c71bee0dc56e", "sighting--10746c20-4c1b-4f2a-a15a-bfd71c828dc4", "sighting--58a19477-bf98-47c7-8697-76529f502383", "sighting--53c24b16-7456-447d-85ca-8f041f42075d", "sighting--95d94428-3477-42d9-bbe1-a6c1337a2a97", "sighting--03199121-2e49-4724-839c-19d6ce9acd9b", "sighting--e2b52c14-0ca0-4cfb-a8ad-523cd8c266a1", "sighting--96606b85-8bf9-4a20-a114-ba6d22fb8342", "sighting--e5c6e73e-2865-4f0a-b9f1-014b3a9c272b", "sighting--534a2147-e4af-4a57-a25d-363f5ff0fd33", "sighting--e05267ed-1cfa-457e-b35c-eb2b49e0dbc2", "sighting--e6eaa376-6fab-4331-b578-0459f53b784c", "sighting--df7c6206-435a-4296-abf6-a666ca29e3af", "sighting--91f17f85-4dba-4bca-b88d-f099b07a298a", "sighting--567ff34c-9652-45b5-866e-209ff3fa74f3", "sighting--1eb4acea-4287-4422-99da-3ce38e0bd19c", "sighting--093830f2-82e7-42d7-ac6c-f72c73ef289b", "sighting--a986530f-ebac-4f98-ae3b-4868cdef1347", "sighting--7060a22b-f27c-4602-b3c2-3895b45a783c", "sighting--350e7a26-051c-4088-8d88-4f8ae699cc21", "sighting--42c9a392-b71f-46e3-bcb9-b9f63ab74d3b", "sighting--4a499e53-6ed1-4e9d-a848-c2364021e5a5", "sighting--508966f9-6a77-4db8-92d2-821dc1b43c36", "sighting--ece5685c-2ef2-457b-8cca-417f3086dc17", "sighting--36e7fa75-296c-4a30-8963-9af7b46b6115", "sighting--6a708e34-4d1d-4638-bcfa-7fb4c0540f78", "sighting--df2a2cb4-c13c-45f1-984b-0e3d651b9a90", "sighting--906d665e-abd1-4331-a702-6f301377ff32", "sighting--28ff7e48-e858-4401-9b9d-e5a099c679f5", "sighting--edd7a92e-1203-4219-8d45-fad1e867331d", "sighting--4bf3c8ce-c9cd-489c-8de4-d8c2bc4c5f62", "sighting--fcdd0c9a-86a9-4fd3-afe6-46cc4fa460eb", "sighting--13363af5-06d9-4e44-bb78-83a7f5b74090", "sighting--c89ab559-4e3d-4f99-b07b-0bbe27cde6f2", "sighting--c29b0ee9-32d2-43fd-b4d6-b6cebc670657", "sighting--2428306f-19e0-4716-adb4-845d9cb49e9e", "sighting--de788732-a3ed-41ff-814e-9c5b06558139", "sighting--99e46b63-8ebd-4222-bb83-9d0dbd30122b", "sighting--479170d8-9eeb-4a8f-a0dd-165eec4e211d", "sighting--66a09fb4-ae63-4bf9-be0d-96c0d4a18598", "sighting--9ec59d1d-a5f6-41d7-9833-dded4b44a232", "sighting--c82b3e06-67fa-4828-977b-3f90ac3bb1b8", "sighting--271c5615-6aa7-4472-a4ea-00887638e2f8", "sighting--af3e5082-a57f-4fe8-9a87-203fc7c9390f", "sighting--5353d8e9-bc05-41d9-91a0-07f10b9b8cdd", "sighting--5b122999-365d-428b-aff8-2e2da907af74", "sighting--6d9864dd-598e-4bdb-adeb-61814fc01bc2", "sighting--68f1635a-8b88-48bf-a757-b1a276881264", "sighting--ba4d9620-49e7-49f5-9a3c-e1820ecb579c", "sighting--8a9e15b7-5a5e-4cef-938d-68770e7d1033", "sighting--c9b73137-6669-4577-a2cf-b400621be8f4", "sighting--a936965f-d4bb-48e7-aea8-e7d882bc3d56", "sighting--79580051-b9e4-4d36-b80f-0e19b595cc32", "sighting--d89714f6-a7d2-43aa-aea0-0063570262ec", "sighting--e7178185-5833-40bd-a7aa-62d00797233e", "sighting--313e89c4-350d-4c0e-a3d4-f9d9c62b92da", "sighting--95d5a603-03ce-4ee6-a1cf-665ab0960238", "sighting--e48cf400-96cf-42d0-a194-8dd2a910daf3", "sighting--ae9cee9e-9a89-4e4c-8507-b8448459c727", "sighting--b580d8d4-4aa3-4ca9-9f5d-f9fb95ac8b54", "sighting--8677745f-f036-4838-be7f-5a36c6d276ef", "sighting--6e4576c5-8c51-4f7b-b386-d5dc1ae31869", "sighting--d272c0d1-a4d3-460a-b2f2-fe8171f63d2b", "sighting--0fa67a14-95af-4a19-a0e5-a3c6600f36d0", "sighting--565bdb9f-d278-44bd-adc0-47b664733a07", "sighting--23f079cd-2599-472a-acac-fb03b4162150", "sighting--2d90464a-793f-4f88-8953-91067a53e916", "sighting--dd8e6dac-16ad-4cb0-9a8c-2fe3af9f1e30", "sighting--5e456600-7e76-400f-a7ad-805e9d673997", "sighting--51694a89-a2d0-4dc2-9890-c9501bd3d22c", "sighting--216b0c56-70e5-4d15-805a-4a25db29f8e8", "sighting--92409da1-b609-44b1-a75a-ea95c708724e", "sighting--ee32ed7a-ddfd-4d87-8180-a9def90ff892", "sighting--f85050c3-543e-47f8-a8eb-4b656a528f58", "sighting--919c0ef6-290f-4888-a9d3-e315ac85e974", "sighting--3883b60f-fa25-4dff-b7e8-cd51436b2feb", "sighting--945d4a36-01d9-4284-9bd7-960cda7a93b8", "sighting--02bf4ceb-d849-4d33-b84f-51a77b781cbd", "sighting--1cd121bd-008c-4416-84a3-a675ddfd4161", "sighting--bd85a741-c926-41db-8035-025040347dfd", "sighting--1bf0de04-99ab-4e58-b26b-6f40c1ed695d", "sighting--b14b4600-eedb-46c2-83aa-b26cb35189cc", "sighting--a4bb565b-22ab-4ec3-9778-012f3f4e68ce", "sighting--5b38d7f3-63cf-4e0c-b0b7-914d5eee35ed", "sighting--a30abe0c-00da-44d7-9cda-52d90999996e", "sighting--ab7062a7-db45-4e77-bf9a-1751e5da2f63", "sighting--e4de4838-b59d-419c-bf0f-5b606692c513", "sighting--adba5acb-053a-4c01-920d-023833ce9e52", "sighting--bc0e78bb-ca0e-4211-a667-1b6aca9ff002", "sighting--4baf9041-c774-4bf5-b4d0-ec78285132bd", "sighting--96ccbb78-59b2-4c8b-b5a2-13749a80e89c", "sighting--9eba5054-ff09-4938-a731-e952c2582ea1", "sighting--65a9e288-ffcc-4125-be79-a9b607558339", "sighting--72f70ce3-5c01-485e-b56b-77d51aa21b01", "sighting--cf643463-d935-4c94-8d64-5160f434b703", "sighting--08c5fd78-ff1d-490b-8847-3ccf73662747", "sighting--e62fa122-db6f-4bce-8473-49a359d2f0c7", "sighting--edf5f6e7-beec-460c-81ac-8e0ea37ceaa9", "sighting--18a3b5e7-eff4-40b2-bb7a-9aae2a583aaf", "sighting--55cc548e-32de-4953-a9e3-a0cc1724cbdb", "sighting--84afacbb-7a90-4aad-8bdc-6e760fd329ec", "sighting--417cf943-d1cd-45f6-a8c6-64a9c39d1077", "sighting--a3135c39-1ffc-46d1-8312-c3f3051ffc40", "sighting--2b78fa83-291f-4586-a249-ee91bc0c3fde", "sighting--b8ecfcd7-a57f-4581-b084-9e4909bd97a9", "sighting--2b2b879c-1704-4f4c-855e-1d26f8c8d013", "sighting--080ce75f-bf25-48f9-9fcd-0383811a36db", "sighting--4a7c39bd-65bf-4624-81f9-341477e97777", "sighting--48bfac12-dd2e-495f-8e69-9bcbc559b673", "sighting--2c2c1ad8-6da2-4a6b-a728-154e60c0c588", "sighting--9f111b36-3610-47a1-9a85-12580bc69090", "sighting--7b968bae-4c8c-4f2f-9c04-e759f1cc18e6", "sighting--95e23997-181f-4718-af4d-3903d76468c8", "sighting--5c3eec75-6033-4627-b92a-fc31a14ac23e", "sighting--9f1a142e-fa6c-46df-b41a-28bb73c920f5", "sighting--06bf0d21-5af5-4a77-bc71-d0cf4ac197a7", "sighting--79a6d895-7f35-45e6-a8b8-e35172cc8a93", "sighting--50e41089-3624-43c1-b42c-31370790dc6e", "sighting--ca5c707b-97fc-417c-93b8-7532e2c5034e", "sighting--28714e98-016a-4b4d-bf11-9d3140db0d84", "sighting--06bacbfc-faee-4af1-a5f8-d92f65fd767e", "sighting--dc1d11ad-db0f-4a80-a436-fc16875ac58a", "sighting--e759cb3a-938f-48cd-ad45-4b94a0ae4136", "sighting--37a4c60e-feeb-4538-b979-cbf3fe92a33a", "sighting--c660b7ea-7e80-44e9-9003-9620b6362cec", "sighting--a2502a91-4e50-4b8d-9ee3-60f55e51f7a3", "sighting--a47aed5f-20f2-4cd4-b43e-1a7f585d6453", "sighting--3ac3daff-b889-43dc-bdd4-8ef279e9eab9", "sighting--ec8773cc-ccb6-4721-b55d-c47fec24b507", "sighting--79d72106-c3a4-4415-a36f-5183037adf2e", "sighting--766ea8f9-ac5f-4708-9f6b-886bf05c9b94", "sighting--9f9fbe54-0a8f-4300-b6cc-91b93d3729f2", "sighting--ea6f8923-2a4d-4964-8ab4-3491cfcdd658", "sighting--85faef8d-4501-4250-8335-3f7b3da3e0a9", "sighting--6bb56e9f-5251-4d98-ace0-673ab0c11dd1", "sighting--82a716ac-319f-42ff-9e09-d92c06a8bdad", "sighting--0396feca-a619-48a4-8700-eccb8d99bc7c", "sighting--d911c07e-5a88-43ea-9ed4-eca23ca89f7f", "sighting--f00ff933-9699-48cc-b46b-ad1e21dd1115", "sighting--78f664ff-1f98-4f7a-8056-54f671996137", "sighting--efc7942d-fd4d-44ed-9458-5110ae7be4e8", "sighting--079f6f4d-9128-4a98-a1f3-735ad71162d9", "sighting--44a941e7-bca8-4b71-ae58-0af6f6b4b555", "sighting--eb47a722-dec7-42be-9581-f9832736b447", "sighting--881b4401-3e11-4fb9-9ff8-97c8f73d79e6", "sighting--d2af46b6-19f2-4c66-9300-fe66dbb939d0", "sighting--1f3e31ce-edf6-436b-bc47-7ff62cd92798", "sighting--d2f96568-f457-442c-ab41-261c834a82fa", "sighting--37f75e33-ba1d-412a-9327-b9c920eb076e", "sighting--ff989214-6380-4521-a8c8-959c2b1b35bd", "sighting--c2df79ce-66ea-4e23-8bed-956989afd5b5", "sighting--0e3733c8-9d94-47bc-b86c-83f2cd3301c2", "sighting--b0bd2b6f-833e-4e3b-b2c9-617dafd8545b", "sighting--e8eed821-752d-4e35-90cd-9884f585cb23", "sighting--36274e2f-6879-492c-ac19-7f79a0c0f6e3", "sighting--f4849b10-ae5d-4198-9697-e7a1f9f94910", "sighting--f0033829-2db1-4f78-8ad9-172ab720abdb", "sighting--39842ab8-0e99-4abf-bb80-579899259c13", "sighting--8641e4f8-2f10-431a-bd5b-95579328f652", "sighting--757b70b8-0c58-4165-9431-b221d6def689", "sighting--d9615995-1990-4861-8ff8-973d2d2fa688", "sighting--df3558d5-f995-43df-8e50-0cc3b77bda25", "sighting--cec85029-e53b-4d54-8c62-e53e5e713521", "sighting--255cb56b-68b4-4715-86e7-3e551f046877", "sighting--9f924fc5-a368-4087-a8d3-e00a5934b4ee", "sighting--e656179d-294d-49e8-912e-0f000a75e5a0", "sighting--2454bbc6-ffaf-4969-86f5-99c2068ae4fd", "sighting--f191116f-4774-44e1-a89d-71d44e5a2797", "sighting--637c7730-f4c6-4123-b914-95be434d4072", "sighting--9de7bbef-c196-41cd-a927-27c9755057cd", "sighting--8f9957be-8c35-47b5-9d61-84147b5e89ab", "sighting--dfcad4f2-0707-4d45-ae98-28bfb897d093", "sighting--ce1d8fac-4851-422e-8c21-17c25d5a0826", "sighting--9087cdee-9fbb-451b-8401-91fe83eda18c", "sighting--9d040a0c-eb87-40e0-8567-3a6702d11730", "sighting--8a2e8ccd-7bcf-4c20-aad0-70418963d0b3", "sighting--bcf1248b-84ba-4414-9ed9-3e314bd0b22a", "sighting--c2f61844-5f42-475f-8b4c-094bab876e48", "sighting--146e5306-4bf6-416a-9c16-438c01c30721", "sighting--12cc0840-f8ee-489c-8f50-ffc17a69ebb9", "sighting--21811f64-94bd-46bb-9018-11f8aa8b80d4", "sighting--2ff4dbb7-ff9e-4a75-8dd1-8bbdfa0908d5", "sighting--ed7ba3bd-f2b2-43ed-a26a-1ce6f6045127", "sighting--6f728c4a-3bf8-4e9d-95de-ec7dc08cea32", "sighting--3fc497fd-5157-4806-9751-e51c5ce27d06", "sighting--2e4c7b71-f016-4223-b1a7-25acf48b7afd", "sighting--52cb1327-4265-4b70-869b-818816e403ff", "sighting--8622839c-6dbb-495d-baf0-deb5fd3aa6f5", "sighting--84b33596-4655-47ba-95bb-3fce2c6a9f8c", "sighting--d6cab467-bfc3-4690-9075-486da034c30f", "sighting--ee96a7af-85ec-47bb-80a2-20e9ddff43ad", "sighting--c43687da-f499-4e53-adf6-db8ef4e88d92", "sighting--eb879249-1038-49eb-9f15-a80cec22b62c", "sighting--ea67c35b-46fa-41a3-a083-ce4186d018d9", "sighting--73092d74-9ffb-4100-8989-8f9af647566c", "sighting--40fc3d7e-fc11-492e-9b7d-c3c4a5aa83cb", "sighting--09716c6a-b849-448e-8af1-a6616f50c67c", "sighting--3e09dce0-a293-4682-b12b-e3dc7c8f94a0", "sighting--d57ba8bd-2bf2-4ab1-a11f-47c0232f475f", "sighting--c8763ebe-0fdc-4ece-976b-78bc8d212972", "sighting--886e16b6-2110-4d2c-880d-b5ff42b8bf19", "sighting--3072d3f3-b42b-4608-9820-17dba4d30c48", "sighting--74c5fc72-4d70-47dd-b044-2f99c3a0f90b", "sighting--62675f77-6451-42d2-8e7a-1615f2a7a332", "sighting--4a702b5d-1689-4fe6-84ca-6cb456b98e5a", "sighting--0e15d5ab-31ab-4634-8a5d-3c2aec3f6b80", "sighting--d12e5548-89a5-486c-9514-ab583b513bdd", "sighting--f43256d3-ea44-4078-8985-41d0a7cb2704", "sighting--2e1ef294-9c4c-4ee5-9243-038de5d1ce4c", "sighting--2f440a08-408e-447c-b0e9-954bf59f0fe4", "sighting--2a366d60-635e-4efa-acd5-ffcf828eea71", "sighting--4f47f691-fed2-48a9-9f77-4acd2e76e9cc", "sighting--e97470fc-0327-484c-870c-52bb70698249", "sighting--9a4f14c0-5bc6-4119-9893-c99eeb4e4c60", "sighting--2630db70-57c3-4b59-82f7-7296a925fea4", "sighting--3b1ce0bc-1fc1-434f-8e68-ae9ef1c17453", "sighting--ca13322b-1aac-420f-a7bc-fccc7b2fa507", "sighting--8e35a055-58d7-4ee3-876f-33ece1c06f98", "sighting--d1493391-30db-4ddf-9bb6-aadfc30f312a", "sighting--ecec640e-bcf5-495d-b022-ffe8ccc8d513", "sighting--335ae79a-dee9-45a6-96e0-c6f8d5fc9480", "sighting--ecd197ca-0167-4653-af1e-329e6dc48e88", "sighting--a6aec4c6-df17-4002-af3f-c56edb319d3c", "sighting--87f7cfcf-3f6d-48da-a9a6-7e97ce73c6ad", "sighting--f20bf6ff-ce38-4307-9467-23e31934785d", "sighting--97de0969-1b1c-4ef5-aa0d-59350994d3a4", "sighting--9ff039f6-8154-41fa-89aa-f740c3e940a0", "sighting--925a3d93-60ce-415f-9da4-d4cf8c73a332", "sighting--120e2da0-8be9-42b3-bc4f-eb96ca11e1ca", "sighting--51800e68-f428-4eef-a9bd-0852e2cb9c7d", "sighting--aa719d23-a037-4bad-ba79-52297852c415", "sighting--197a7a18-bba9-4d97-a2d5-0026e49fc1c9", "sighting--6ac8ff7e-268a-421a-b7f8-ad39a06c15b9", "sighting--4fce503c-3d2b-4b5c-bff3-12e06dfb3e05", "sighting--23668ff0-2599-481e-b306-58ebec3574b9", "sighting--b1a26bdc-6ddf-41cf-97c4-cec1c241f900", "sighting--287d0893-5077-4726-8696-0a8b48b884b7", "sighting--138312e6-d5e1-423f-953b-60e791bf4859", "sighting--5ca3f4bf-062b-4de6-b34b-bd25ef204f52", "sighting--31ac05a1-02c0-4b6a-acbd-3ed7c117dfba", "sighting--32167272-42fe-4d3e-90dd-e8fbb96b7f6f", "sighting--5c11be3a-4603-47f9-a1f5-eaee0dda0208", "sighting--1586469d-0aca-4068-9cce-6039c256e464", "sighting--0a65d953-b788-4342-9bb2-5eeedf566589", "sighting--cd825030-6a49-4cc6-a7f7-177198a56e44", "sighting--ff5c81a5-9ecf-4a74-9444-1cbac274abfe", "sighting--92320351-1881-4dd0-a9b6-6166fceccf11", "sighting--a6307e68-83fb-4988-a134-5898194cfc54", "sighting--8331221b-8ff5-4cc4-bd0b-f3f7dd6233a4", "sighting--896b3b98-3b9a-4ee3-8a1c-cd4e1080ede4", "sighting--05776192-2e5f-472e-a689-30446d07113e", "sighting--0793ea71-cd8f-4076-b230-74c59fbc29be", "sighting--c22b30c9-3155-49f8-ae11-d5f8ee8bf577", "sighting--b197a7e6-348b-47b4-a4f7-eedfd427a75c", "sighting--af962da5-3c5b-40ce-b00f-239bc4b0ae21", "sighting--3a9c4beb-09d3-4ad2-b205-3f27449e69e4", "sighting--ef561a33-bc57-453c-b9bd-68a7159d5e72", "sighting--9fb35085-aba4-4d63-89e8-d9340e362cd2", "sighting--148f90aa-b24a-4f59-8481-1c6515e3d068", "sighting--218f84f3-21ca-4968-b24f-048eada25e78", "sighting--5b46d184-a12d-44b1-b02b-f0ac45c80eac", "sighting--a99c293d-9457-45a1-af7c-a28c0ca4d6d4", "sighting--79bb4f34-9cb5-4dd9-bf57-363a185ec78d", "sighting--a2de93cb-ddd8-42cf-a8b4-fbeebf1b74d5", "sighting--85808814-1b2a-4e62-94cb-c23cee079e72", "sighting--42f1a038-a426-4392-a9a0-b29074545b61", "sighting--6374efb3-a86c-445f-a981-8f04c77b8bb5", "sighting--0466af79-c303-4d64-bf6c-67400672e1f9", "sighting--951863d4-781d-4e4c-b0c3-f81c78abe417", "sighting--62fdec64-b630-4953-ab3a-ff60c80a2b31", "sighting--caf6113e-5cbe-452b-8380-06fc6e3927ca", "sighting--6fb5ce7c-450c-4582-8360-4a20df480ec1", "sighting--5934b3c8-926e-4cd3-bac1-a98b9c1da24d", "sighting--0e655ce0-8f2a-4d76-b784-3ffd76f2aa70", "sighting--120f6bd0-3c62-4c0e-8a35-8d2d1e45aa53", "sighting--6c5aac26-db22-4313-92f4-712845855e7e", "sighting--515eb348-8f29-4013-bd9a-0f56cee77902", "sighting--26edba4f-38b9-4025-bc21-3bdd31e95ff5", "sighting--56f926c7-537d-48e8-97b2-0d75736a475b", "sighting--0039b46f-5ed3-4b5e-bc76-2a1a2c660132", "sighting--38801396-9c5b-468b-befa-bf3f96904eef", "sighting--6a6a93a3-136f-45da-a730-53bce2d99c1b", "sighting--34496707-30f3-4e22-82ec-e919dbf9e2a8", "sighting--2f8ea896-8e60-4e8e-af39-7660e6ebd26b", "sighting--709bbf5d-75be-4a06-a057-fbd636e47735", "sighting--d0adf6e7-6848-424d-bbb3-9d7ea0b3c454", "sighting--339a4729-13ac-417a-9523-1fe62b53cdf0", "sighting--2a062ed1-cba3-4cb4-ba0b-d299ed82d24e", "sighting--6a0e2664-63c1-4e2d-9d3f-a786fed5fd9d", "sighting--b70a5c57-9cb5-41a6-a75a-8e93a94dd21c", "sighting--f2c3e999-00a8-4293-ad80-53677b2fcc7f", "sighting--1db8e277-7df2-4040-8d09-630c1520caff", "sighting--79508665-2fbc-45ae-bb40-503605eeee60", "sighting--b4f085b6-4f1a-4b33-809d-39b1a5943cbe", "sighting--8bbc0a20-8b96-49e2-9583-778202de73bc", "sighting--4ce35bf6-4b2c-48fe-bd43-6910fb8b9b4e", "sighting--ac1794a0-b38d-4c66-9e15-06cea045e3e6", "sighting--82ad739b-1df2-4bde-88e9-dc38cd71355b", "sighting--e90abb3a-44fd-4c59-a746-265b5a08c453", "sighting--f79fb749-e2b2-466d-9612-862a90641aa0", "sighting--672b0f45-3ca3-469c-a495-89ab16e8492e", "sighting--df579c7a-9968-4a7f-a1cf-d4df6aca0a3c", "sighting--6baa53c3-7789-4cbc-9cd9-581901d04a46", "sighting--76c71831-dd2b-43d2-95ef-6f26283e04b3", "sighting--6e1d62b7-a350-440b-8e12-74221e62c3e5", "sighting--875d5ec4-52eb-4f04-b64a-b912afd328cc", "sighting--155ef889-d068-43ad-bcb3-f7e2846c2c20", "sighting--84541d06-b6c5-4b0e-a988-c35406f209e0", "sighting--5d94477c-52b1-480d-af12-9f3d14f3ee64", "sighting--91f738dc-aa56-4884-b71f-eb8db914006f", "sighting--5c587c71-10a5-4367-98ee-3dda019698f1", "sighting--6a811f35-352a-45cd-b9a3-2a9f838ea726", "sighting--f2896bb2-48dd-41ef-b235-5fee296ece98", "sighting--c7e8e094-ed39-4557-ba76-9bf88e35a3ec", "sighting--0fa078b5-c6ba-44af-93b2-7881aefdd15f", "sighting--9428886f-b22f-4213-b2e7-4acc0b901e35", "sighting--b701c455-1980-4772-a898-43a8af07bf84", "sighting--1eb2d987-d7d1-4fb2-bce0-13ea1f503d37", "sighting--3cc9eee5-6f16-4844-a7ac-76b0f1075fb1", "sighting--99b3a167-54f1-4c2d-8ee3-8e21f0f8336c", "sighting--b280e1b3-4296-4ca2-b661-3220fdd65ddb", "sighting--198d9b57-59ab-4655-8126-9a1a65a5011f", "sighting--f0c772a4-c92a-4ec9-86a2-1d8fff6af3fe", "sighting--a50ab229-ffad-4bbc-b602-2aa9c70e57ef", "sighting--89b78693-4925-43d0-9150-08e3509b74fc", "sighting--3dae497d-0f59-40e6-b62e-8315089eab3f", "sighting--16d20f3e-ecbc-4012-9b4c-a3ae1d302272", "sighting--95244404-0897-44f8-81a5-a43cfd2bb9f1", "sighting--3f63c8ad-beb4-49f7-956f-41983ea5f1a0", "sighting--af93eb1d-6cc8-4875-93e6-b4b451084df8", "sighting--a58c6565-fbcf-4e9f-b2b1-f8a5d5079ca2", "sighting--122e3a12-9796-4c59-954e-42bdf3ef7786", "sighting--9f73691d-236c-49ef-b120-acbf24a3c017", "sighting--5b020ec5-585f-4c5e-bac1-807392ffc779", "sighting--77cffcd2-b002-46da-8621-81c01d370b3b", "sighting--453b89ae-e9df-4ff4-8edb-05b98b80c50f", "sighting--7ffc6fa8-890b-4985-b542-8e03fc3871e7", "sighting--d636095d-5340-46c5-8a8d-3c17a2260f45", "sighting--1511f9f9-5449-4bfe-bf90-5b51453789a9", "sighting--a57f40c8-8b4a-4f36-8a56-373b540c3698", "sighting--c2650e01-273f-4274-9cc0-6f43b01aacf3", "sighting--8ef4e3eb-e144-469f-a0cd-4cefdd05eea9", "sighting--1160c257-1e3c-4e3f-a672-a559e951a7b5", "sighting--03ed2cf9-4880-4a96-a28b-42dfc1ae664a", "sighting--2b3efe65-1783-4074-a20e-63d155d2206a", "sighting--29c137e1-f232-4b8c-b7b6-56c0c850297f", "sighting--05cda2a8-3132-48c3-9a1a-0b146867e2e4", "sighting--544c8c3e-c1d6-4e2e-8743-484c27b2e5d8", "sighting--a818f6dc-c76d-4912-b358-d7e72d00ffe0", "sighting--38ecff01-c3f8-44dc-876e-b2cff4046f93", "sighting--72099600-acc3-4ff4-a28b-ab8390333008", "sighting--b499569d-579a-4df3-adbd-d0da30844f98", "sighting--2314dd05-19d2-45df-bc27-879f5b583901", "sighting--6f447d30-8767-48fc-9262-6ca73098ebbf", "sighting--2a7d3c49-3e4b-4bd0-8934-d245054752c7", "sighting--e0ae6ef2-20f9-4a1d-b807-1ef8dbc5dc64", "sighting--d3da4d28-7ca1-4803-a53e-4afbda98a89f", "sighting--eb6b966d-2f20-48e4-a685-ce87aea6cf83", "sighting--e2b648c7-87b6-42c5-9cf1-88429f7dced3", "sighting--7133f01d-cb49-4a6b-a54b-de297a97398d", "sighting--39f92d8d-9f54-472e-a331-f4f3729b0962", "sighting--e379007c-32bf-44bf-8b15-9907bb5e0605", "sighting--7a862c4e-fadf-40ba-8b96-f31d91e66ec6", "sighting--65503454-55d6-4301-ae75-a271d0387272", "sighting--c41959bd-190e-4249-8bdb-879bea605336", "sighting--9133cc0a-2a12-4b5c-989c-3b4698c45e06", "sighting--f140fa21-7c9b-460b-9a54-314cdb47bed1", "sighting--ba1da678-84a6-47d9-99b9-88a1501fbd8a", "sighting--4eae6d0a-2a2b-4bf8-a95d-7b8c75494c31", "sighting--e9fca118-f308-4373-b976-b5aee2cae982", "sighting--e323d581-e686-4530-a646-09a619a86390", "sighting--642b293e-6b09-4089-b712-1fe5098940b5", "sighting--e415488c-dd7f-41c2-a1ae-ee4f598a13d9", "sighting--f65fa55f-671d-44f9-80e2-e14685da4b30", "sighting--e5da079d-e522-4db9-9812-f5b1c5485eb6", "sighting--a0c87b19-d676-4a99-8139-3ec8850c5c09", "sighting--bf138682-416b-46f7-95cf-6c8480f8972d", "sighting--e61fcc98-6970-4c92-8000-3732937acc60", "sighting--41bd0083-0d4f-4afa-a044-a70e02d92b75", "sighting--5e7fc5a1-84ab-4c50-8fcf-aa475f2a0d00", "sighting--3b0ac0a3-e720-4a26-b41a-6b689d14f5bf", "sighting--9f2566b9-e983-4cd4-a803-33cca3acf13b", "sighting--58d2bc3c-1722-4a29-9d50-4e15e348abc7", "sighting--d6996242-17c9-4ed6-a7c8-15168c9cb844", "sighting--cad7a35d-4e0d-4e10-b081-f3e8ab775d48", "sighting--e723dc8e-ae1c-4cf1-8675-160eaaa42b91", "sighting--bec085f2-64d7-4638-abaa-e9355bc8f3e4", "sighting--cab36a8a-48a4-4b8f-a9a9-ee2bef28133a", "sighting--0109a173-4f31-4dc4-b2bd-1344057849c6", "sighting--ed0cb523-30c7-4fde-ab3e-cfd75288abe3", "sighting--fd99cb10-eb96-455a-8424-694f022ea5ff", "sighting--1ca239c0-ace0-4f25-9b04-b1e60a369bac", "sighting--a9ad0578-de6f-4531-aae7-e9afa1df9153", "sighting--a497a845-8945-4843-ad9b-73564622f9d5", "sighting--26448e28-3ba2-4a77-a6d9-e7174d5d5524", "sighting--9a5bdb37-ee1c-4e02-bfd2-f82ff255ec8a", "sighting--26d6e04b-0f60-4b6f-bf98-800567c36ba6", "sighting--1e93cae8-f929-4132-a094-149492b37670", "sighting--8c37e351-612c-4c1a-a45a-25339bddc69e", "sighting--ab9374ff-a0d0-4256-a566-cf27d56c469e", "sighting--9c1fb000-9199-4c61-ab1b-1fee0990b60f", "sighting--c1237edf-cec0-443d-925f-ff984ff255b3", "sighting--ce009d2a-df52-4b73-83ba-f2403be6e343", "sighting--448262fe-21fa-4add-b47f-8750c80b5343", "sighting--6d780b86-0e70-4167-8a0f-40bd1214869a", "sighting--2f5d0ae0-27e3-46f2-9636-67020f2f9749", "sighting--414f3abe-249c-4add-9b26-dbc58f631580", "sighting--86cd3cc1-f02b-4178-a5a4-53aa5659dcf2", "sighting--52a417c0-5296-417f-8be4-2c44293f7689", "sighting--1889e62b-fe97-4d8f-a0f1-445d34358ce0", "sighting--29368073-3cb9-4a26-b716-e6201f78f360", "sighting--03b71911-bfb1-4705-8baf-18d4dc9b1735", "sighting--ad344ee1-cdc1-4702-95f3-8bf2bcc32c83", "sighting--53706997-390c-496f-a5b5-69f839d820d6", "sighting--744ab356-efcb-47da-b6f9-afe0eb6c4567", "sighting--5434d18a-d2c2-4324-9bd1-f9dc0d1d8d30", "sighting--15d1d4ea-1a02-4338-8d49-24d5a3d56ac8", "sighting--06fd001e-20ea-49c6-9f65-cb0efd132fcf", "sighting--6388da0a-c315-4883-a3f7-cf6538c03305", "sighting--aab2302f-ca12-4920-a09c-bde65cee4d3d", "sighting--e9bea36e-0b40-442c-b6a4-467d23b7f1ec", "sighting--93c55e91-20da-48ff-932a-256806cceec0", "sighting--c4c12e3a-42cc-4d69-bb8f-86b4745825af", "sighting--5898c0fa-b9bb-489a-bb92-f326306622e4", "sighting--3e162b48-5a3e-4d2b-9489-2951d02a9a65", "sighting--c3b2567a-b706-4275-a843-af08f0dae860", "sighting--4ed35b11-4ea4-40f1-8421-20e9212dfc78", "sighting--bd8f77e9-86c2-4034-a1dd-623453b08942", "sighting--6e535705-4111-42a4-a0fa-2d499be516f8", "sighting--0fedcfcc-4e5e-4981-b4de-25f15e0bbad0", "sighting--b0948cfc-d58f-4423-9723-98e0f5fc1ed2", "sighting--d2a2532f-5bbb-46be-bb96-47ddd1beb2db", "sighting--319d2626-262b-4098-aee2-7552d8a232d3", "sighting--ee97e692-a0ed-4fb3-b6ba-d53a55d34e87", "sighting--4a72dc88-0b78-4ee2-bc1f-025622165013", "sighting--9a870f9b-547d-4849-846f-636e357c8877", "sighting--a928a481-9c2f-41bf-96b8-d768d77e9467", "sighting--2866bf9c-9b98-450b-8487-4201072e48fe", "sighting--5268656b-52bc-4138-b276-6bdd776f64bc", "sighting--527d6c20-c2e5-449e-99f0-4b6046e0ed40", "sighting--c26bd927-4c6e-4a01-a26b-c9ae7dea03bd", "sighting--4f17234d-906f-40aa-b86c-c5f1b666c9f1", "sighting--ff8c3e46-0cf6-4b9f-88a1-3b1a375349e3", "sighting--7b9b8115-1c02-43fc-ab7c-5fef5edffacf", "sighting--c9224693-f500-4f8d-9d22-4eebde464d00", "sighting--8caee60f-8e06-41a2-90e3-807fa00c8dba", "sighting--427cd88b-0ec2-4e53-8a32-ee224e2a9a19", "sighting--264d9e3b-22ee-44ec-939e-a765bc873a02", "sighting--f4fac27d-ce46-4477-9568-964f9fc10b4c", "sighting--f83d08ca-ba36-4dcb-956a-92d976cbcaf3", "sighting--635da2a2-3e9e-459e-a8c4-57b9a4fa9130", "sighting--cbfd8f28-957e-494e-ab4c-ff30b254bd5d", "sighting--1b88e862-586c-42a1-b9d5-dd7796045394", "sighting--d296bf37-ef7a-4611-9a83-9384bd9d4414", "sighting--413db6df-c5ec-403d-bd04-bde2f2a4b27f", "sighting--9f72bfbe-08d6-4ece-af9c-5c2f1aa9a54a", "sighting--4c53190f-3445-4481-a236-d30d68d31459", "sighting--2deb4fd6-334a-48a5-984e-d49b2a91eff1", "sighting--a87f8f24-bc85-41e2-bedf-815f562820e3", "sighting--14715019-6164-4255-826c-8ad79bc74212", "sighting--4d3d387a-34e4-4ec4-8f16-3cf26b7063a7", "sighting--6e37fd4e-93b4-4330-80f6-c63a72d718b7", "sighting--7c0c1057-4b2a-4aa8-be78-ce18ac47c439", "sighting--0387b802-f312-4485-a430-0952e01fe380", "sighting--ffda262e-963a-4af7-a912-b4f7eae6f726", "sighting--9dd8a45f-1f7e-4c31-81dd-3a33a7e8e523", "sighting--d71f9daa-55c4-47ed-8063-12001c36f241", "sighting--2e0dfb4d-4692-4db9-94ec-6df25639e539", "sighting--8748e387-b1d7-4684-b703-1953bf90339a", "sighting--d8b2ca55-e167-4b16-8866-ec5eb93199bd", "sighting--643cb578-e223-4456-bf86-f483d8553aa6", "sighting--fae8230c-abc0-4d99-b78a-6439466991ff", "sighting--6f96f7bc-80d7-4fd7-b3aa-f07669dd8a9c", "sighting--641de339-93a1-445e-b7f1-1c97a5344a68", "sighting--cdd5679d-b44d-46d0-ba79-0a826e11131b", "sighting--d84c04f8-0778-4ff3-95ca-7e191f22e7ab", "sighting--f267a364-7cec-4c19-8ee1-41a6ce39311a", "sighting--568c5606-3b28-43af-93b2-56ea5ddac4ff", "sighting--64c6166b-3512-4721-9138-8efc6d57ff6c", "sighting--27183ba6-d4e6-4c76-bdba-af715812d393", "sighting--08e415d3-2095-43ec-80d0-cc046a3d7cd3", "sighting--6f51dc48-f9e1-4793-a3ba-0b77da283569", "sighting--52e955d5-d6a6-4fec-8b99-fa77b4dc32c8", "sighting--c6d80a5d-9ca7-40e1-bca1-3d3ebf936461", "sighting--96d2d9a5-6209-4df9-9ce1-e73f5d22f0a0", "sighting--f578dc4b-acf0-4d56-8832-732343afb00b", "sighting--d631f354-2496-4bdb-9330-378830bb89de", "sighting--927e8739-6970-43bd-a0c3-b3a7e771b482", "sighting--e348cf2d-21e7-45d7-8c47-2ead3addf846", "sighting--b3c1f19b-bc7e-4044-a750-eb1ffa838bec", "sighting--fdae1779-d3e5-4b9f-82ee-ddbfae2af463", "sighting--5d99b1a8-00fb-4244-ac84-182a295d3423", "sighting--6e8f4f3b-f24f-4d20-8970-29a2ea2b5aca", "sighting--0fc516f5-41ed-465b-bd20-5bbf81def5d6", "sighting--974413d0-64e8-445f-833f-cd62eec72d5a", "sighting--91f43bf7-8b2f-48eb-9d7b-c7af8d03bdfe", "sighting--e32dffba-e9b0-460a-a430-0993e97a458d", "sighting--49f71ad2-6f48-48c3-9b2a-477ef8b019df", "sighting--8f064e7e-3e27-40a9-887f-025dbd3ea687", "sighting--e2e47aa3-056a-4b36-b0dc-f6078fa50581", "sighting--d79231ce-53e0-4d45-ac05-e90e548efba8", "sighting--fe2435cb-b06e-42b0-98aa-a4e31636b7f8", "sighting--5292a60d-2970-4c68-9bba-92c556085bb4", "sighting--6b6f2a0f-898a-4cda-b446-853f4beec81e", "sighting--13517b30-28ee-4764-8786-70177e96b98a", "sighting--1fff6544-157f-4ae3-8a6a-69ff2225d09b", "sighting--80bbd52d-7590-4299-9cc3-1694071ab214", "sighting--9aaa9b2d-ff08-422d-a009-ef6f8c7661c2", "sighting--4b659526-ec6a-432e-b6c4-d19b5e20483a", "sighting--f11ef0f2-3f8b-4692-a8ce-a4d2686d6c1f", "sighting--90529f34-33c1-4427-aa40-913e9c21db52", "sighting--d1e663af-796e-43f7-b1ea-339e0b2e07a0", "sighting--6ec3dab8-8f1d-42c5-b9b4-9978f261de6a", "sighting--ec998b63-fe08-4b66-9b72-23d94e88170b", "sighting--9ed0080b-31fa-4d93-ac63-67ea9c90c42d", "sighting--b91efc5b-7f79-4a77-ba10-e81491575d07", "sighting--a1562872-b5ef-4a5d-a2b3-d2b34e22abb0", "sighting--50f10233-ec3f-454f-883d-12aba36bc290", "sighting--cabd0809-4538-4617-b34d-759a636e4f9c", "sighting--602af899-d4e8-4b22-b571-ba846f39c945", "sighting--b86f8772-dee8-437c-8a23-bcfb938d8412", "sighting--1731e480-9af6-4dbb-b2b8-291c41d839e4", "sighting--61f69cba-c336-4d80-85e5-68e678bc1057", "sighting--fc875cd8-ea82-4ccf-8d74-d7b19208af3b", "sighting--4062213e-441a-47d8-bdac-6620bd4c63c9", "sighting--5c083a9b-ef87-4cca-a7c5-f918deba4193", "sighting--9feec5e2-a2fc-475a-95f1-eba857ca1dc1", "sighting--da253cb6-b021-48c6-a040-0c0549272151", "sighting--3be9fc00-863a-4850-92d3-0ceeaf317b12", "sighting--7950c0c8-9d62-4326-b9ac-dedf7172db7c", "sighting--dadcba2c-deb3-49c4-b5f3-8b4bf58c060e", "sighting--51b3e40a-2ae4-4dd5-8754-636ffe4eb7a2", "sighting--b7ea0aa2-34f6-4865-b68c-6991fe206fa5", "sighting--174d3878-7a74-483c-b230-c78a85f20c72", "sighting--cbdc34af-22a5-48ea-a2df-0ab2005a375b", "sighting--6f08bb8d-78d4-4e4f-a094-1741c91f3d0e", "sighting--3cd73dc0-8dea-4472-ac6b-2fae93c31360", "sighting--65843761-c0ea-4d6f-9950-2c6f8a4c1e53", "sighting--166f94df-3a47-4c09-b298-ada0bf46b1ea", "sighting--2344a075-3a78-4236-b0d4-899d5695395e", "sighting--9917b2fb-9f86-49ea-9465-14bb01e45e73", "sighting--fe3e36a8-a7be-4211-94d6-2d70d4f112f9", "sighting--20bfd8d3-7eea-4953-a390-74f98a07782f", "sighting--fd23f563-bd9d-41f5-a282-9ad12fb14ecd", "sighting--211d3951-3bf7-4908-ad10-8ee953db759b", "sighting--351510e6-5764-41c7-8864-42b1c7d7e9ab", "sighting--8263e485-fe20-4f20-b86f-4d6f3c71c4b0", "sighting--de870620-cb31-4cf5-a61a-2cc879864cc2", "sighting--80fdae81-0f3e-451d-b06c-88ebb206ce57", "sighting--e651b7f4-7f8d-4ed7-b0c3-0c1b4b21903b", "sighting--e5f8cf86-0a38-4c51-85ae-11863dbbcc4e", "sighting--a8f68a29-058e-4eda-a3a2-76e3dbf7a730", "sighting--72b739e3-bdc2-4595-9048-b35cd9c97504", "sighting--b02ddc51-908c-440a-b4fd-1680d36621a4", "sighting--e54e2a7c-b3f7-4945-929f-357f6c4b32c5", "sighting--c921dc5b-3ce9-40f8-ac1a-210c0b454d27", "sighting--d041fe9f-3e03-448c-94ea-8cefb6e5277d", "sighting--35a030aa-4daf-4d07-8d38-eea39ed6f3df", "sighting--179b7114-a303-402a-9a10-8613f76d6454", "sighting--117b6e94-5928-4250-8756-555d239fbad7", "sighting--2feba441-b4d2-48ee-ad56-49c2cffb277d", "sighting--db83627b-aa91-4aef-8a25-4ff0a2486f84", "sighting--10909b95-c3e5-40c2-a828-784013e0450d", "sighting--59798a2d-61a5-4cc3-963b-8f21541d4482", "sighting--e630b079-8dd4-4ea8-ba3a-7b003aac3a4f", "sighting--efdb2932-a739-44d4-9b0b-2016d45902be", "sighting--a0c0bdc5-6658-40aa-a889-69167f0eaf3e", "sighting--6fa4fd0d-c066-4b93-b5d7-7bd7ac28f842", "sighting--c4d57c35-ae46-45d1-8c6f-a859587233f1", "sighting--7d3209a4-240c-484f-a37b-5ce453f54295", "sighting--4ee002ac-ceef-436f-9d58-0866591df04b", "sighting--7f1d13f6-8890-4fe7-b1b7-4b4dfbe6a22f", "sighting--2b50e0ab-15d4-4e46-8e4b-c25645b4cb49", "sighting--de0af66f-b92b-4119-a390-e448e0feeee6", "sighting--c8c3fb62-954e-4871-a932-35dc080041c2", "sighting--c4b09e84-b379-4ff6-80c8-e924869b801b", "sighting--bc32077b-b98e-43aa-af27-79e8821ee630", "sighting--a80c0eb9-6a6e-4ab1-92cb-0b396194ba72", "sighting--22f062f1-b5db-4717-bc68-dd4210c2f9d9", "sighting--b24231ef-0804-4197-924c-131fbe2637d3", "sighting--a822b9bf-53c5-4bd4-926f-8e5c0d3f1bea", "sighting--d8ff8946-d511-41d0-9058-fe67a0a61ccb", "sighting--e7d86d4a-df3d-4185-8252-e9ffdfa7845f", "sighting--c5313427-0fe4-4cbb-80de-75e1a28de687", "sighting--400c6d27-fec1-4751-ab8d-39e994a5c18b", "sighting--59c1cf2d-1047-4e04-8fb2-259e4dd8cb9d", "sighting--50158c72-bb3a-4750-84f4-1de2b505ce86", "sighting--78e7b034-748c-44ae-9492-06f6c11aff1a", "sighting--26f1f755-3447-4fab-8e96-7f093680301e", "sighting--49e17cb7-3a05-487b-917c-53277109dd72", "sighting--105c20ba-e5f4-404a-be0e-207d9411445c", "sighting--001dd47d-b0d2-4188-b093-b8e13d44b456", "sighting--e7b496c3-3000-475a-b062-40a749c67624", "sighting--4f37b55b-d410-4229-82f2-99633b6922fa", "sighting--bebddf9b-afed-45b2-a342-71bae317bc12", "sighting--200cc813-0864-463a-8a86-03cfd8f4774d", "sighting--5123e72b-dd35-450d-9227-e26332bedd64", "sighting--b13db3a3-95be-4a6b-834c-4e9a8f41ef21", "sighting--e5f2aeec-2183-4ede-964e-100d71299586", "sighting--4496c98c-3ffd-467c-98b2-9ef10b038561", "sighting--7eb00469-9f1e-45a8-aea0-13100f2dc4f8", "sighting--edfa1a74-a601-4862-bb5e-d7b71ed3d67d", "sighting--793f7a57-c97e-4851-aa75-d038732693ec", "sighting--faab6ea3-6181-406f-9852-9e37fe69f752", "sighting--de4a76a0-8de9-43a2-a3bc-d9e463a43cb2", "sighting--3ade43ba-7562-4d9e-a299-ac7c0a9bc6c6", "sighting--51aaead3-22ea-4c0c-8589-8dd1978dd04f", "sighting--4cc405c5-38d1-4ed3-aa74-2c05b45365c8", "sighting--60d54e75-58f8-4695-a810-b02d7f4d7418", "sighting--e99d38cd-626b-42db-bceb-c147f659f887", "sighting--1770cd7b-ab3d-495a-9c55-3025340f064e", "sighting--e0ff5fdd-ec3d-48e8-b29c-8094b302bffd", "sighting--b2d7d1f7-1084-4a43-bf59-ee5b363679ae", "sighting--10233544-b465-4f50-b3e4-7e69ab27c5d8", "sighting--dc72ae2a-84a8-49f9-aec5-6b81b51fda1a", "sighting--05c0ea23-92da-429b-938c-341294abec02", "sighting--9cbef9eb-2fe8-4b6f-ab70-6ba270ef6e40", "sighting--b46ed753-b189-4b51-aff8-38c6be07604b", "sighting--4eba1527-61b6-40ee-9596-6a30f8d9933f", "sighting--7d6449f0-56d6-40c4-bb07-ba29d9351319", "sighting--23d216a0-c436-4a4f-945e-3971740e6780", "sighting--13973dc4-63a9-47bc-9b31-da98cb80c3bc", "sighting--bfc9b170-5a48-49f5-9745-60c35c51b51e", "sighting--a66bac87-90e1-4309-ad08-2d551662cfb6", "sighting--2692ec61-f7ed-410f-afc2-dc8d0197c51a", "sighting--6ec54f86-6b8b-4ff0-95f1-4f1e50ced258", "sighting--89639ba1-71d6-482c-aa84-6a62baa1724a", "sighting--fb5474f5-82de-4e56-99df-5e1928160165", "sighting--8c6428e7-cd17-496b-8aac-078046341062", "sighting--200a45d6-93e3-4e0b-a96a-762b757e1879", "sighting--84039668-15bc-4e07-93eb-ef4335129cec", "sighting--10c5b7da-d61b-4c79-9df0-ed618b6008c8", "sighting--3dd537c8-f5d9-4a82-a417-0c0f97061677", "sighting--e478150e-28f9-4c3b-adc6-c6e664de3762", "sighting--d076e042-7206-4119-b180-e8efa6b70ab8", "sighting--d2a5282e-3522-4e22-a0da-013cd1490b8a", "sighting--2af78e0e-a4ba-4c22-9c87-d52a65ea577f", "sighting--618519f2-2455-43dc-85c2-e114c195966a", "sighting--c5fd781f-e652-47c1-8dba-8c6156f00519", "sighting--b0d3f196-6c23-4511-8ee9-e2133b9c0809", "sighting--908ce9cf-b2c0-44a0-b1ac-d4c4c63a9b7c", "sighting--7b29ac88-a7b2-4da2-88bb-f2ead3b8aed7", "sighting--0984e627-e95e-40e6-8d3c-94f9b739083e", "sighting--55251608-d5eb-4621-b4ee-e21ab73aee7d", "sighting--75af3110-9359-431c-adfe-f28639054f1e", "sighting--0d5e41b6-2385-4a18-8caf-9bd33b723852", "sighting--400a3007-2ca3-4079-8c67-7ae1bc5af4a1", "sighting--35b694a0-77d0-4473-aaa2-2c17447d2e81", "sighting--7c1a0466-d25f-43a1-b3dd-13a1dd0d567a", "sighting--2b4fef41-9643-484c-a40a-a7cc403eadb8", "sighting--0eee4f1e-099d-4134-8f36-96d89c9c755d", "sighting--c92caa49-13e1-4fad-866c-3a6d3304bdb2", "sighting--b0ed6ca6-524c-4e86-9058-ec66766d9238", "sighting--982df71b-935d-4aec-899d-7b26ab732dde", "sighting--82e492bc-6a1e-4c6a-b36e-7469e50d2b91", "sighting--2e07d27a-de26-45b2-928d-74a1822ac8e6", "sighting--07dec6f9-7425-4a37-9943-5fa73192ec28", "sighting--5eb6a334-8874-467e-bb48-9261b6bf015c", "sighting--51204a95-5c22-4f29-8eb3-612f9c52544c", "sighting--c7edb66c-8faa-4499-995c-73fd411f11c4", "sighting--72200e50-297d-4c4e-806f-cdd0d9a97e9b", "sighting--7db58286-c2a9-445e-b6b4-7727d1c98eea", "sighting--2aa70a2a-5e69-4305-b0bf-e5cfd5e35adf", "sighting--f3c93c95-02f5-4b76-80f0-7f0852820874", "sighting--afdb5668-4719-41b0-a307-a103626b77cf", "sighting--df733770-dc7a-4c1b-9773-a476d5e0ce68", "sighting--3e6b2f59-2e38-444e-908a-66101a3fde0a", "sighting--dfe3f46a-aad6-4317-aedf-f3df6c6afa38", "sighting--fed9e71a-2ae7-436e-b58a-0809bd4bb114", "sighting--32ab221b-8cd2-438b-874a-374a0dc9ae2d", "sighting--cc604e45-625f-4924-80b2-a9086527ac2e", "sighting--edb6740d-af95-4ae9-9567-311cdc1019e3", "sighting--e2927c0a-5d82-4b65-b53d-17a54bff1266", "sighting--875b7a5e-72b3-4f6b-9de9-8ef7ed4e1128", "sighting--a5aa794f-234b-4c58-a080-8d0928be3edf", "sighting--542aad4d-68e1-407d-b6a8-b7539a729d69", "sighting--1ccd2375-65ef-4cb7-ba3d-8f33aaa34144", "sighting--ceb1d7b0-6b7d-400b-9eee-71836b665eda", "sighting--19a477aa-f822-4d7c-92f9-9d8a8197edd7", "sighting--a8b54448-84c1-4ef4-841c-053866343921", "sighting--97ea98e8-b4f2-4265-b1c3-a37039972757", "sighting--b99b0e5f-6aa0-4304-ac12-67aad374aaf5", "sighting--87bd41b5-cd18-4be0-ba6a-fe79e33be7fc", "sighting--bbe7aa5e-5cda-4136-8bc7-3a1386f86027", "sighting--c3a60f6b-4a92-4de9-8f57-28e8c16de0e2", "sighting--e09a7c52-fe0f-47f4-a2d9-cf52655cd633", "sighting--1286e8de-05bc-44dc-8d50-62125cc68fce", "sighting--3cb4a1e6-35dd-4657-a3ab-adf0655eeb8a", "sighting--2eaad5d2-5040-4420-a9c3-b1857e81add0", "sighting--be9b110d-1353-4186-a939-f92fc6de7188", "sighting--ae4a6728-3485-4273-a15a-527fea1976cc", "sighting--a2fb46f7-9dbb-400e-894f-d1604b13731e", "sighting--6de6706d-a7ec-4f77-a09a-f31f39d117e0", "sighting--3f9428ae-fe66-41dd-b1a6-f78c1492b4f5", "sighting--432f3b44-f12e-4873-b556-3abdbf847581", "sighting--f00df55e-af91-4b27-80bf-442c8fa237bf", "sighting--896304ef-5af2-4a47-afaa-f226057be3a4", "sighting--425b0472-cb9a-4a77-a3a1-b42ae088498c", "sighting--154b008a-e41a-4a9f-bfa0-a72b334c6bd1", "sighting--4d340f72-6e5a-496b-b23d-420488898136", "sighting--a8086976-a9f0-4216-9261-a8072cff2269", "sighting--8563b561-51b2-49be-b730-8df546245a9e", "sighting--8ffc2bc1-ba37-4a23-bac3-3d57a1f6bb88", "sighting--9cfc9802-f106-44cc-842d-8660dd8ccabd", "sighting--24ced945-251d-41a5-878d-0b75ecc8c5e0", "sighting--3710d4fb-bbc1-48b5-99e0-f3f171812f1a", "sighting--377e940b-9d0f-4fbe-b640-b54beb906f3b", "sighting--b06d9bb7-dc04-424c-bc97-4fe6a68fa07b", "sighting--fe1d1872-4cba-4dad-bc54-261792e48f7c", "sighting--9f6b8944-cd17-4436-b272-850988c2630d", "sighting--e9c94975-6858-4d80-a223-ac89143910ac", "sighting--48c5e53d-76ae-45bf-a5e3-808d6c370423", "sighting--edcb5a71-8b48-4838-879c-a260ba04606c", "sighting--f9514b8d-0f95-4a9c-bbf4-2480e501d55e", "sighting--5c0ce6e8-4f10-45b0-b7ac-f85ffba70897", "sighting--02a9aa50-3de2-450a-874d-f66f22bcb61e", "sighting--3d825e6c-fdb1-4559-8ee8-bc24dd911457", "sighting--8d085b3d-cef0-4ecf-b6f5-d5d0efdb3c12", "sighting--a6af099d-3b36-4162-bc3a-fe81614eba8b", "sighting--a7c0dce8-6dd4-438c-9791-0ee705f3d4b0", "sighting--97af825e-18b7-408b-bb12-7f853e481c9e", "sighting--71d369f6-14dc-4eba-858a-999af5e56ed8", "sighting--814d2b92-b05f-4532-94b5-2d9b1cf40cad", "sighting--542a0bc0-a39a-46c9-bc84-8b36bc7d41fc", "sighting--670c96f4-3698-4aa0-b3f7-fd22d7d3f9a1", "sighting--a583acb9-ad12-4c06-942c-433c59456442", "sighting--2ab6129c-a8e6-4ca6-a500-f08724e0b585", "sighting--52eee6e0-9e33-404d-aa22-061cf39e910d", "sighting--acf48487-f225-4af9-b20a-87ee050ed02f", "sighting--3f155dac-e69c-447d-baf8-0525e6a711ce", "sighting--a86c2300-2e49-4a65-834f-a7ceb0997ce8", "sighting--622afe39-ca8c-40cf-a086-6ad3ad9c7755", "sighting--f8b9779c-d794-4463-9481-0d7e8dd1aa12", "sighting--4155950b-bbfa-4e85-8cc5-881d0cc0a30b", "sighting--aecd7881-adfe-4d54-ac64-13317f4e7d68", "sighting--4b4e44c5-4b21-486d-a85d-7c24b5534367", "sighting--177be6d2-68a6-418c-a180-c26b00a95bb8", "sighting--c73c2899-f1af-4e32-9eca-e289a802b029", "sighting--ec41daa7-d1a9-4c41-bdb1-43198f2f83fc", "sighting--6de25b80-2212-45dc-8216-421544cd94ea", "sighting--a1ce1108-bbb9-4152-9441-2e0806375dab", "sighting--0f78d806-a42f-4557-8c81-448e15530394", "sighting--db5cc0e2-2d24-4293-93f9-2175fdbb9b2a", "sighting--cc0f80ab-968a-4004-aae2-5f4d7fc9a463", "sighting--e279e146-1abb-491b-89b6-9ddfc7455efc", "sighting--44b6c35a-5df3-4f53-8cbb-5b18e5bedcd5", "sighting--2ca5ad11-f6df-42b2-9260-598f12577db3", "sighting--8edeacb7-5d29-471c-8b89-af502c1f61cf", "sighting--83a45b93-c9d5-4922-87d7-574727bfa824", "sighting--59ccc4cf-e29e-473a-9cf1-3d40859d4448", "sighting--fa4f2001-269a-44e0-b21b-439208884ae8", "sighting--6de45c0d-fb4d-4694-8368-e3629917794f", "sighting--24022449-8226-4210-a295-c022f541e404", "sighting--87e1da0d-b20a-44c6-8beb-fbcacef236a9", "sighting--5211eb07-c685-44d8-a31d-2ade8feefcd4", "sighting--9abc9d88-25bc-4444-af1b-6010ff49c46c", "sighting--49549f7f-32f6-4d64-8567-066f8e9bf1d1", "sighting--cdb72af0-95f6-4e51-9d46-caf988cd5155", "sighting--0dbec077-19ac-4229-9872-a01e83cb60b4", "sighting--cc03debf-d6e6-47ed-b328-8fb95398cbd6", "sighting--f28d4028-9a3a-42e9-99d5-e02e7b460900", "sighting--eabb5058-c815-4a80-9a77-402c4264d4d7", "sighting--428517ae-176a-4824-9dfc-147a679b8929", "sighting--076a7504-3c93-4c07-809c-5ceb8b581d0f", "sighting--95de09f6-b609-4efe-8379-d7e668b1a7ea", "sighting--ce141584-591c-47ec-be3a-e0df33f66c6a", "sighting--bb74a1cd-ed4a-4b2c-a266-7016da05b43c", "sighting--952ecd61-4058-43ef-93cd-f10953a90fc3", "sighting--17959c07-8cb9-42c5-8725-93a4ff700d2c", "sighting--688919de-cdb8-4d08-ae9f-50915f11550e", "sighting--7aa81920-e6ae-4a48-a305-8cee3446f6e2", "sighting--07bc1e4f-cf33-4244-889d-3dec8a1b10f7", "sighting--f362226f-506e-42ec-985a-f95541f25ad1", "sighting--dfef2c53-b92d-43f6-b926-39399e19adc6", "sighting--b70f24a3-76a4-4db4-b5f0-fe7c208cc8ec", "sighting--7b9e270d-d31a-43c7-9de8-2f75bbaf079e", "sighting--f78597e6-9b39-4b65-9670-3b6674fb05d2", "sighting--eab17a9c-5067-40eb-ae6f-813dc5043111", "sighting--519b6b88-5c30-4b10-a55d-565d2e849fdd", "sighting--868c3d15-c088-4957-bcea-08caf2c85368", "sighting--a2035acd-b0d6-4731-88e3-7d05fa2651b7", "sighting--622fccbd-9822-4416-bb47-e81358a9c251", "sighting--f889b516-e788-42b3-a152-2dbf173e8bb9", "sighting--9952884b-7ec3-418d-9a9d-7638c2ea512a", "sighting--eea03062-8586-451f-b09e-769ed8a944f6", "sighting--895de052-cc41-4ac2-9948-30abc0291cc7", "sighting--47f8a20b-f7e4-466d-b6d3-4feb404d8f21", "sighting--3995c5a3-ea03-4793-93bf-e78c219f8c3b", "sighting--e441a6fc-cde3-4279-adf2-80b84335797c", "sighting--03474d00-911e-4837-a004-cf1d5a799fff", "sighting--34bed7dc-5690-463a-b9fc-25529847fafe", "sighting--e575812c-b89f-4be7-9944-48864a9e0537", "sighting--950d6631-1d6e-42a8-8408-88ea787670f0", "sighting--e812bc1b-8a6f-43c3-a639-9aab01c90c3c", "sighting--cafe7002-8ce9-45dd-9bfe-bf583bb727b3", "sighting--01c2e17f-c25e-494c-addf-2d12429e66fe", "sighting--a30c3e8b-7bbd-4c05-a140-cdf37fb9430e", "sighting--18981cce-b5a8-4721-83e1-63fdcfefea6d", "sighting--388ab92d-c03a-4319-ac8b-67fddaa7c5d3", "sighting--ff51bb9b-b0a1-4d25-862f-2ac88b8fcfd5", "sighting--48d7a195-1433-48bf-96b0-a8a751199cbe", "sighting--7c041029-5aea-4d71-9ccb-4d7320974c31", "sighting--b679443c-4581-4e39-a37d-037f9015fdee", "sighting--74d78408-aced-4485-b0bb-68c691085c0b", "sighting--5494c987-2f4c-4752-a417-6edde15b8af7", "sighting--037cef63-3498-4a55-8be5-b47c52bad1d0", "sighting--aeb4f953-ad50-4b2e-a1ce-d816364eeffd", "sighting--83aac6fe-f02f-44ab-bfb8-be52aa4430de", "sighting--c00903fc-821c-4615-9223-f99d0cd1931d", "sighting--83fef3bd-8f67-4bdc-987e-3faeca82a2c6", "sighting--a22e8b23-226e-4d74-badf-361b10ae656e", "sighting--c34417c4-e76b-4c5f-a6f3-44fbbd267c84", "sighting--c4e45b00-b7dc-4d6e-8dc3-f69c7633037f", "sighting--fde0ac90-6959-4606-9d2d-2ca02717c9f1", "sighting--0bd92816-7fac-4293-a077-5b476b384d4d", "sighting--08b57957-a8cf-4106-9209-8c73c4c4622f", "sighting--d42fdfe8-e484-4a09-8d38-5adc409f23bb", "sighting--3403e4c0-2eac-4448-88a5-99bd76118b5d", "sighting--55374f26-06a3-41b2-80a2-1e98563cadbe", "sighting--66d838aa-0004-46e6-99a6-22038522f169", "sighting--2c29cd0e-0239-43df-9c7f-0f50e4579d5d", "sighting--096c9621-61f8-4ce7-b559-7f95d9169ea7", "sighting--99d75ef6-46d9-450c-8dfa-b93d32a87c43", "sighting--e7018f09-3282-4952-8001-6e5f5c96d5fe", "sighting--491474e3-0226-4b6b-954c-adea1db4e373", "sighting--3b56adee-1dc7-48a7-ac31-19df110b2ac4", "sighting--868aa0e2-430b-4ccf-99f8-df5b5ea41a81", "sighting--ee931ff0-0bd2-461c-b43e-b736f13b7da2", "sighting--84f8c3ab-7b5a-4859-9184-ab72f1945d3e", "sighting--b0cd686b-3e4d-48ea-a443-9662e25ee597", "sighting--d907fa49-124d-4282-8e59-ee400439a5e8", "sighting--f3aade50-e026-4306-beb5-be527f81decc", "sighting--cab1f9f2-bdcb-42d7-ac26-ff02c80bcf88", "sighting--f3928879-412d-4102-ada2-025be3e5c986", "sighting--f9a63da1-1c5c-46f5-af9c-7b93c0b3802a", "sighting--cc50369f-480e-4cfe-9e11-b333730ba30b", "sighting--577b8e8a-ab99-4806-89b8-259a6b2f21ac", "sighting--aea31ec3-0a6f-4ea9-9547-13711793617f", "sighting--d4f25f6e-7602-426d-8195-51fb37e9dcf1", "sighting--b17c00bb-63d5-44e0-b49e-b2712d5d4b09", "sighting--e16d511a-a4b5-45c1-a044-f8f437edbbb6", "sighting--4c7fe3fa-0719-4bd5-8957-b972e797e0af", "sighting--9e549ac4-fa6d-497c-b578-228262b09762", "sighting--6a09703b-1140-4533-a01f-211d566f0902", "sighting--387f8998-2519-4640-9715-5bf474a6b113", "sighting--ff027f1e-ec0a-432c-b7e9-08ca81ff1c93", "sighting--30193170-8df7-4059-83e9-3ce5ea3a6b67", "sighting--9dd997f2-3205-4d51-8afd-77fac6a8aa3b", "sighting--d536c27b-9faa-4260-93f1-1476a9024c51", "sighting--6e0dfa7f-f301-4faa-925b-927348e964fe", "sighting--976ccaf5-87e3-474b-a3aa-277aa012e7fb", "sighting--6ac07c55-3551-4c84-8732-cdd659c2ba20", "sighting--715ce0e9-f3da-41e0-8cc4-aea44959d95b", "sighting--a1dc55f1-2b24-44cb-bbbc-eead7b325035", "sighting--b49a495e-6203-4275-9a45-22182f0df318", "sighting--6840f5b6-e830-488c-973c-3c1ac9270e49", "sighting--3ba9f9c2-d240-43b2-a495-b5c1f8495b88", "sighting--2a5c2501-7a98-4275-8ec9-48abfd4430a1", "sighting--6876a1c1-24cc-4360-b5f3-858731ab7382", "sighting--a6e1e9d7-9840-4303-bf00-a18fced3ad2e", "sighting--01ad5082-debd-4811-9de4-512afdf9e752", "sighting--303a80f4-ca77-40f3-a277-01853142a664", "sighting--08fbd3af-d928-4998-9c5b-23635f3eeca5", "sighting--60c078b0-18ef-4e93-b176-d092a2780a3a", "sighting--2e5f595c-7a2a-4f5a-9858-e75eab3548ae", "sighting--972b3c07-81d4-465e-997b-446daf73fa7e", "sighting--a175082e-1cd0-4f04-901a-ad6b5fb2ae5f", "sighting--712724fd-b21c-446f-b1a9-76eed35aaa96", "sighting--8b187af3-0411-4163-ba0d-fbc2fc622bb5", "sighting--f5401605-1fd3-4989-818c-f740bd54f619", "sighting--a974c24c-ce6e-4b3f-bc90-81d2aea18c14", "sighting--e220f28e-962f-44e0-b7ea-64ec8a6ca2ed", "sighting--0327c1b8-e387-4f68-8cba-7a564291ea8e", "sighting--20853dc5-fcb5-41b6-b30d-20374d10c67e", "sighting--2237cec0-ab8b-4511-a446-93859a15bc14", "sighting--8deaad92-dfce-4b1e-b063-184169bd8037", "sighting--a8b16252-1142-42aa-8c6e-8f2333acb85a", "sighting--37009f22-ebfc-43ee-a36f-e9f62b6bbe9d", "sighting--b2cb8f34-79df-42f5-8d15-05e4e50dc89a", "sighting--14f1935e-5366-4bed-8bec-46de93a50514", "sighting--4c61bff7-603a-455b-bc08-eb129e6622f2", "sighting--32fc4680-8a92-4302-acc3-b8ab454d17fe", "sighting--c79cca3c-5b3b-4c20-894d-7477fd7fbe16", "sighting--d3b5bd9f-b3c0-4939-aad3-8e049d3409b7", "sighting--041bd4b1-45dc-4c94-a839-0bdf8a3424ff", "sighting--02593f37-b213-4a3c-a404-8b16a900b2d2", "sighting--3dca27c6-b532-49de-a564-32911912f0fb", "sighting--313b8630-743d-479c-bedb-2258aaff803e", "sighting--58d9c74a-9f46-4206-b7c8-c8bc4bf1040f", "sighting--542d7bfc-dd64-47b6-aade-59690171aa86", "sighting--f09fd309-41ca-4f6c-97f2-9f221cae30f6", "sighting--056013a0-2a87-4c38-9608-e1a6526a8d43", "sighting--ee63d6e7-9a02-449b-9a5e-d676c7f2995b", "sighting--ffabf24e-3c56-4182-af60-8a25011d764f", "sighting--9a2352fc-ed02-4a72-b978-7ec773f91d65", "sighting--310e32ba-8c91-48a4-8bab-edaab7ba2deb", "sighting--d7237a21-468b-45e0-9f67-1c2cc2efc9cb", "sighting--bdd579e7-b74a-491b-8969-1c423bc8673d", "sighting--32a0153e-e223-4bae-9451-b50ff2036543", "sighting--96c3dcbe-5b1a-4f67-b04b-00429fa27e71", "sighting--18624680-a524-4514-b8e8-ce8dc8ac9d74", "sighting--42591233-6800-4901-9547-4e43b655d793", "sighting--226beb27-5ebf-40a7-aa5a-d7007e3faea7", "sighting--904d2f6b-e55a-4a75-bbab-bbf6ed197694", "sighting--c1434238-6d18-4918-b775-8ec1bc624a88", "sighting--92ece26b-3c0f-48a4-85df-9ab1d5796025", "sighting--4a21577d-cfcb-4916-9bac-feba71431485", "sighting--11b3c57f-1388-4e4e-b6ba-0838ca4dda33", "sighting--e7f2ca74-23d1-47ed-9a7b-86387429775c", "sighting--8aa05906-7d02-43d2-a843-fa326ac70dec", "sighting--b9c98c19-c16a-4cab-807e-9f1c1cc578fb", "sighting--ee552330-22ae-4e24-890b-b4a9d730db9b", "sighting--052e6457-40f1-42d4-a40e-976eee25dc37", "sighting--af98d9eb-894b-4e91-897f-d26087cdb61a", "sighting--6f869ef0-0bf7-41b1-bba1-c074a00d494e", "sighting--f56ae8e9-7459-47e1-9ae0-8033004aa4ad", "sighting--3a590fcd-7239-44d4-9980-0ed4ace60d23", "sighting--816bc2ea-2a7a-4615-87ad-b4828865f3d9", "sighting--eb196a8e-7891-4ecd-b494-a74d5fe8acc2", "sighting--7ea7cb2f-622a-4e32-b2cb-965159139c2b", "sighting--e5e76d2d-b12e-4daf-8937-07d4ad6d39b5", "sighting--b85c60b6-2c11-474c-83b7-8897d50dd49a", "sighting--4a84793e-b64b-4b91-9ac3-f8ecb9497506", "sighting--7666c6fb-c62c-4114-94a5-be0f1c29ea9f", "sighting--b1c8f212-a282-4c2d-bd2a-f29ac82fdc09", "sighting--3d6e0e8e-23e9-4ab0-8b99-d6c176b27d2d", "sighting--bb4b65a0-7bcd-4eb9-bc23-e25cdee8f884", "sighting--a7a1f870-6aa5-4402-ab4c-0f8f22d844f2", "sighting--1463706c-0c8f-4048-82f2-65ce2b34ec55", "sighting--97e3f69c-6d85-4781-8b27-9d30143566fc", "sighting--47f1f367-1538-451f-86ff-76f8bcff148c", "sighting--3f5b97f7-260b-48c6-b73d-d199a7cfc052", "sighting--448a402e-07eb-4281-8d7b-6701efbb0ff4", "sighting--51bd12eb-7a91-4b72-ad71-47102f148d74", "sighting--eb5fc74b-4b51-444e-b3b6-5f320a943091", "sighting--a4a86903-7485-4dcf-8cd5-f79ae870da3b", "sighting--219e2b93-0d63-4607-b70f-e2c2ff25cd44", "sighting--6874f850-4258-4977-89ee-33db7710ba43", "sighting--df683ee4-1d9b-4bd5-aac0-e71b4a2ba4cf", "sighting--17fef894-9c42-45ef-b405-ea53a640113b", "sighting--817f43fd-b531-4549-b5dc-750bebd0e077", "sighting--5907241f-f08d-4cfe-8449-21fc7df3f824", "sighting--75ecd64e-85d0-4c3b-ac5c-feb5d7c10278", "sighting--6fadf266-86bc-4078-bdf5-2a3b24d08839", "sighting--6c3dcfaa-39e9-4d9c-bc54-e15ed101b8de", "sighting--5ff31a7c-14ac-4b17-a0ec-204cfaa5210b", "sighting--acb6569f-b7aa-423b-bbb3-2fb9770c90e9", "sighting--92e9ac1e-c62a-4d5d-84cb-de3062a81b0b", "sighting--93c7f95a-e5fe-4c0e-b415-e1f3cd98cf3f", "sighting--8530baa5-452f-45ef-835e-1d95a742dc7b", "sighting--a928ac22-bee5-41bc-9546-52e3b1ebb649", "sighting--09ffa3a7-1b2b-4328-afad-3b6510f7af37", "sighting--5fe83c54-c60f-4841-8f15-f55625f9bab0", "sighting--0f6fa796-4b3d-4a62-978a-cc27b44ec79e", "sighting--fa9aadee-5c47-4b4b-a768-e618064bc5e6", "sighting--fb740c94-42bb-405a-a8ac-13077b0b47a4", "sighting--f5b97483-e5ac-4eb4-be2d-a940a2acf654", "sighting--62da8458-6cba-4697-b184-867c0615b8f1", "sighting--c37ce8a0-63a4-47b3-8579-d49deefca40a", "sighting--4b61e73a-8a14-4410-86a6-1c462422174a", "sighting--64d63907-5e89-4a0a-b0c9-dace53f71fd9", "sighting--2219b8f1-70af-4f05-8cfb-4664c9fa81a6", "sighting--e30561b7-c736-408d-aaca-0a07437a2c55", "sighting--42b86443-eb27-4f20-aff2-f364cdbc1522", "sighting--6c0ca6a9-b810-4cd6-80a7-928f85491177", "sighting--5f3ac7ec-d261-47a5-94d7-a87c15701c0e", "sighting--c05255ae-cefa-4397-94b8-4c84b9ea9389", "sighting--05ecd793-f203-4d49-a6f1-4df828108b77", "sighting--ef23e30f-f82f-4892-877c-7c318ffb9ead", "sighting--a91c2afd-6075-4f02-b4a2-7cc766192c60", "sighting--0b01cf3b-b0d0-45e2-bb19-e30806644a11", "sighting--47637190-4204-4a3e-97db-879e024f6075", "sighting--b0eeb47f-636d-4f81-b3b1-ce07fd54363e", "sighting--5a54066d-1c9b-434a-be1e-8fbaa5f93414", "sighting--4ce21e7b-bdd3-44d6-b406-66ad414e3e9b", "sighting--af4ac36f-6d30-4aee-9623-9bf05a09d62c", "sighting--1404b3a3-449d-477d-906b-751c209d2454", "sighting--fb71b3d2-672f-49f5-acf9-f79fe01b05d2", "sighting--daa58e95-e9f3-4140-9853-2693acf988c2", "sighting--dd3cc05e-cbed-4f7b-a6e2-91c77ea3b24c", "sighting--9a9ad031-6054-4f76-92a2-7eacd002eaf1", "sighting--a51104df-9a86-46a8-9137-3b75f9e21bca", "sighting--9ba2a468-e69c-4bda-a02b-46f81a76d8a7", "sighting--1aef6485-2e5f-4001-9acc-975637b40fa5", "sighting--0b7331ff-2001-4611-bec9-1a8c4750b94e", "sighting--8a400b84-16c4-4753-8261-f419d67574d8", "sighting--d4099ad1-6aef-4a84-85d5-00801ca55c90", "sighting--aec55bc2-c578-4470-b282-fb97f97239fe", "sighting--1f6fc240-4760-4317-9ea6-ba6497136683", "sighting--7c92a206-8472-4bdb-8cc7-99b50e64b48c", "sighting--f78f3ac9-f73d-4d71-8f14-8d6b774ab6df", "sighting--d6367ea0-019d-4c2c-b01b-5c3cb45538a0", "sighting--d1f57a3d-ddb3-47ec-a48a-006aebc7909f", "sighting--56a65b3c-f109-4745-b410-aba5a36da6ea", "sighting--c754b5d0-6bf1-477a-9391-4ede8ed386ac", "sighting--61d8697e-ecc8-4586-8213-bd2e50bc8744", "sighting--149dfe5a-da98-46db-9fc7-295b038b44cc", "sighting--d49fd5cc-ea6b-4552-9ab2-694185a75bf9", "sighting--3093a93c-e7de-4612-83c4-df651d634228", "sighting--a2b4deb6-3899-4d23-b0d7-523acb95a08d", "sighting--3bc8977a-e845-4e3b-9a78-1d336838b156", "sighting--b07c1fce-e4cc-4145-87e9-ae0a8f88803d", "sighting--bf235ee0-484b-4259-9d61-bebd0ba226d1", "sighting--27654284-0e91-46d6-b11d-cd3f7d7458e8", "sighting--24ab0df1-a633-4a56-944b-41f8205167c2", "sighting--88044c15-490f-4e9e-adad-8a6785f6678d", "sighting--ce959377-2f1a-4cb2-a20c-99c6db2bf9d9", "sighting--50132be0-e475-492c-b379-3b68a986fad3", "sighting--8af8223d-6e82-4364-a907-133c5ac77643", "sighting--8a8aeff1-e420-4182-8ccf-176e04b2d1bb", "sighting--93cf1561-d189-43d6-ad51-e7a57af00813", "sighting--5b67794f-5347-420c-9cc6-ba4b986153c3", "sighting--68d0395c-1f7b-40f3-b5e7-1cf11fb50ec1", "sighting--2e7dd608-7e93-4369-ae05-65df69a56fe7", "sighting--168c96e2-4879-49a7-993a-c73c31382b1c", "sighting--4d576217-ee0f-4e82-b736-55a3dcd8ed32", "sighting--fb6c936b-4641-43fc-8054-e5386994ce56", "sighting--d9b24f9e-ed6e-43bf-b600-3784123294ed", "sighting--c5e0752e-cc95-4718-b7d7-97ff7ca7b774", "sighting--6fd9d97c-0f14-4184-a91e-885f3663308e", "sighting--df881e8d-f939-4986-9011-bfa865cd06ad", "sighting--5b9273ce-5494-40e3-bec9-b10f71c44745", "sighting--1f1a81fc-e3f4-43e4-8532-9538417dba63", "sighting--c1a262b2-c25e-4efe-a0a7-8378fd0e5199", "sighting--c8979490-1396-4297-b4e5-b00f9b26e037", "sighting--16df169a-14a7-4556-99e6-6cc1e2c749b9", "sighting--28af6d3b-2fce-4092-8179-97054a4fd423", "sighting--2a79d2e2-36c6-4974-800d-a05c99aa0577", "sighting--dc2a7ea7-b708-4a55-9f98-f717065a434d", "sighting--2c249969-bdf3-4056-8811-f1d74edee579", "sighting--0ba47e5e-1ea0-4ce2-8a05-95f57c847b5f", "sighting--b87e8d51-3734-46f7-859b-2a62cb9d992a", "sighting--a03505ee-46d3-4061-b894-52b08b4676a1", "sighting--19c64c93-81dc-4559-9d16-f6e517298e56", "sighting--f383f6cf-71b1-4483-8da2-e589677eebf2", "sighting--495d9cb9-cf03-4f10-a43a-ab2952e420e0", "sighting--d9ac88bd-0955-4bbf-9cac-aca2329f7042", "sighting--d840a6f2-ace7-4d0a-be68-bb02a0f07c07", "sighting--2b5a2d6a-ff4a-4cd1-ad36-c3418d6d92ea", "sighting--8303925a-97f8-4692-a59e-22b0338c36ba", "sighting--07c005ea-e951-4dba-89c0-aa17c19ccffd", "sighting--9ca2a1ff-e0ab-4673-8485-101af872692f", "sighting--f440078b-9f64-4268-bcfc-fc1a90965e0e", "sighting--1948e9a1-927b-4abd-8194-51ee58a4f073", "sighting--fca5252e-0075-4a5b-93ba-c282c09f4bf6", "sighting--17393c5d-c25a-4947-856c-e89ef5e2b173", "sighting--7ec0d50a-6cab-4e0f-896a-4196b1f645f3", "sighting--94e99f41-74c4-423b-9052-59033c049b1f", "sighting--cdfa7b22-d358-4cd6-969c-9c3bae685b5b", "sighting--cfcc407d-5f26-40c2-88a9-2aec62681de8", "sighting--c27eebd5-b1ee-484a-9c80-2c55a9fc6deb", "sighting--21a95803-3d4e-44bd-8ac7-93508e278823", "sighting--7be40761-5a0c-4428-b814-cb8c595fe3f2", "sighting--736f2d38-2d4e-4d78-963a-55103c018257", "sighting--4d12b2e7-a94b-4fe1-9805-140698f835eb", "sighting--e656b11b-33d0-4c9a-a9f6-66c18f107f78", "sighting--2931f84e-579c-4a66-8f36-911613669ce2", "sighting--11d1794e-304a-4aa1-81c8-851d86d5e70a", "sighting--4b7bf5ff-3995-42b0-b99e-2a32a3b2dc6c", "sighting--2d2430c0-4cf4-4576-af82-bec53c072746", "sighting--da7d568b-fc0f-42a3-98d2-4501bbb2a6c8", "sighting--5c05608b-1ac4-4627-8768-525ff0d595d7", "sighting--8a813214-1ecd-4232-b794-72b84b8e95a0", "sighting--41fb255f-8557-432a-ba06-1ccfac20753b", "sighting--fab4e666-b6b0-491f-aa4b-6562398760e9", "sighting--14ba39f9-e6ba-4dc0-9838-85ef08f419e4", "sighting--3c6e8d21-c3b5-41fc-84d7-0211134a3251", "sighting--d7656ed0-7b60-4d92-ac42-3c6721db8c72", "sighting--15ae3042-e105-475c-8f4f-62a6c61b4e9d", "sighting--76cb0cb9-28b6-40a3-883c-22facc549f5c", "sighting--de252489-3341-4851-b525-3c97ed1ce406", "sighting--fb2c0129-d5b3-4b83-bed2-cf3b7b57009e", "sighting--29471a36-07af-448e-a0b2-93e9ea6c4bf6", "sighting--ebb3065e-b3b9-433d-93d9-ca094f4b4334", "sighting--f1a8e956-96f6-4950-a3a1-5a140f96096a", "sighting--267438e3-1e5c-46bd-b679-3c64c78ef27d", "sighting--e02f93e9-ceee-445c-bddf-054d2a66ed33", "sighting--dab7b086-4466-489a-9585-16aca95edaa8", "sighting--47efbd69-ecda-40c0-9efa-b2b930e6f575", "sighting--f73c0d7c-469d-4749-a25b-182cbaffe285", "sighting--36386981-7b67-485b-ba09-42bb96e5b14f", "sighting--a08e99fb-bc92-4edc-b3d3-3769cff1676e", "sighting--df1118ef-8767-4761-8908-969eb32d7903", "sighting--b8a84554-c0c9-4f14-ae0a-747c2b0a95dc", "sighting--11c4b517-06dc-43ec-8767-8dddaf2870d2", "sighting--0418591a-2157-44fb-b31c-01bef4084168", "sighting--3b43a42b-e5d8-44dc-b47d-2e70442d12e6", "sighting--66fa677d-be6f-4ff1-83ed-ffca3bc0bb54", "sighting--b74896fc-d36d-4d82-ba30-4f069d61f606", "sighting--30c883db-5fc2-49d8-9927-c7c765074bac", "sighting--1b273ca9-de76-41a5-bf6c-b4222e8f428b", "sighting--7f882085-2074-482d-816c-907ef6029a46", "sighting--1ed81cb6-39e5-470a-bb54-45ae9280e2a5", "sighting--7343446c-0257-4e33-b2b7-4c4eaef90023", "sighting--b7d58702-f4a0-4777-ae0e-3d3cb007b5e4", "sighting--9da8c7d0-4be8-4734-8ee3-a7f65ad7c3a8", "sighting--cc0e42a7-b23c-4c31-a6cc-6fd73c8271dc", "sighting--3fe3f4f5-705c-4a77-93c7-6a6ea183178d", "sighting--ae5dc1e5-7415-4ec1-a0a8-b617b1716068", "sighting--4984da3a-18a1-42da-9de1-f4f5dfc99f03", "sighting--4ac29f6c-099b-41af-b4f6-71d73b53b182", "sighting--52741f6f-04d4-4da3-be3f-4b6b0b11e272", "sighting--25bfc0fc-13aa-4072-a526-f8961bca3a80", "sighting--493c3d94-3c7a-49e3-a54d-859c0c4a6443", "sighting--52e08246-3548-46d8-890d-4ef5d01d177e", "sighting--c507a994-f04d-4a17-8644-428b5e1b5861", "sighting--2982c5c4-8fcd-4080-a410-11be9f178d0a", "sighting--7ee666ea-25c1-4114-a648-5041640931c4", "sighting--7e0dc73f-7eb4-45ee-b335-c0db3b6643a1", "sighting--fc977def-d4a9-447a-8c23-be9028dcd5d6", "sighting--d96e9ffd-e0af-4059-a556-4a7fbfef4c6c", "sighting--3380c668-a021-452e-bb65-f5514152ce2a", "sighting--28dd11b1-2dc3-4b83-a0c4-d0c65e043f1f", "sighting--82b8016c-5715-403f-960f-d54f8050d108", "sighting--c3ee9b71-cea0-4643-8d8c-dec8542fecf4", "sighting--477a597a-7080-4137-acd9-0db5a0a98faa", "sighting--2dd12d53-740c-47be-85b5-fd9e55587a9f", "sighting--311e6669-5101-4a8d-a197-af57f8f3bf89", "sighting--cc1e04aa-b9b5-4687-a88f-8380d55931ed", "sighting--28b844cb-5d27-4e0a-9565-bfead2f8f4ae", "sighting--7e1f3775-9cef-4509-b7a9-1851f788e255", "sighting--847b5dae-b87e-4ebc-8617-df49d11e6c12", "sighting--bdf5ab71-e323-4ee5-a0a1-3cf687b2b64c", "sighting--085b9f26-8464-4799-9df8-f1f8c8289d2f", "sighting--07aee690-9741-4187-a2a9-bf2ab57e60c8", "sighting--8fff4b50-464e-4e0f-8711-dfba8390b004", "sighting--e0ffa41c-193e-47d9-9410-4553c903af56", "sighting--40e490c5-3876-481f-910c-f55b813d6bbe", "sighting--8a556eb5-19b4-4a0e-b9de-6ba70d3d1566", "sighting--d818fc0e-e630-4ceb-b535-4e99bd61dcf0", "sighting--fb762aa1-d297-4240-bb8b-1e032967a459", "sighting--8d0853c5-feba-4ab8-a44d-e562feb69d68", "sighting--a648e886-870b-4164-b96f-febab4eb06d1", "sighting--0e13d489-cc74-44fd-9357-29bb1a7c1383", "sighting--cdc02936-5400-4fe6-887d-89b503de3dc0", "sighting--bdfb030f-6d32-4fce-84b1-3a72975ff291", "sighting--cab4c465-15e0-4182-83c0-79615eaff3d8", "sighting--88188637-dda8-4ce0-b6fe-d88a80c646a3", "sighting--909d8fc1-5987-4d11-a4f5-4b2d80ccf57e", "sighting--e62906cc-362b-44d0-9230-18c127272e19", "sighting--76173067-c1a9-4ec9-ba8c-9a064cc44e6e", "sighting--f67cb40a-82ae-42f5-b3ef-44dcab67c7da", "sighting--24f42608-0083-4541-b5dc-cca8be144cca", "sighting--9ff6e6f5-6f2c-481a-9241-ccf7aa24c5bb", "sighting--2611117f-0f2c-43a9-b3b2-3c93fe78664e", "sighting--3ec322cc-6422-4d41-a48d-9d3e3cc4e6b9", "sighting--cf58db63-0aba-470f-9bb2-ac060fcc421c", "sighting--115946a3-aeb4-4cfe-b46f-6f613b087711", "sighting--42805ae1-3d93-4a57-b69b-a495a06a202c", "sighting--d095dcfc-dc59-43d2-9fd5-80556b360c97", "sighting--8b0446ab-f1d2-4d3d-832a-8f1995e64a6f", "sighting--887f8c56-a547-41e1-bbf3-1fae256e9645", "sighting--abf24275-f37a-448f-af69-731ac3e63d48", "sighting--e5d35374-5e23-4791-a744-029f8adbf958", "sighting--e6303dbb-049c-470d-86c0-e13fc352cf62", "sighting--6074fc75-2050-42e7-8b51-a617295c278b", "sighting--8a93b352-c19b-41ef-9310-887df354939f", "sighting--eba8a7df-8ab8-4ddf-8f8d-52aca336770b", "sighting--81c51217-076d-4f1a-9e83-fefaa39af8a7", "sighting--b4ad798d-4ddc-45b2-95e4-ba89215166fe", "sighting--7a1a421f-45a3-4474-a4b8-c78a921344ef", "sighting--0ed7b7a2-5d34-4e1a-ba33-d5056ae2b562", "sighting--19fd708e-6a3c-4443-a6a5-08f990e042cf", "sighting--516612d6-e77a-4d4d-80a2-a97c6077892f", "sighting--eb2fc0e2-a77f-46ba-a984-52771e44d97f", "sighting--97b1e10c-0922-4208-9cc9-3adf61337304", "sighting--2138e38c-55bd-4878-98ba-454e1c249027", "sighting--3cf9e491-ca2b-43cd-984f-c49a82dd6060", "sighting--ae48cde7-f6bd-4baf-b1da-e46cc4f4700f", "sighting--15de69d0-fe94-4396-a8be-440e7f8ce8bd", "sighting--64673ef7-8f86-44f4-ab1c-d375e36e50ba", "sighting--f8b687cc-af11-44d7-96fe-9b5e0b48b18a", "sighting--1a2c5b38-740f-4a49-a285-932dc5cacd03", "sighting--91e0aeb4-1f65-4b8f-a323-6d6ed786dfe9", "sighting--d0fa3c52-110b-4598-81d3-b8db195e7877", "sighting--5e22103e-052c-4114-9f2d-a458ee940220", "sighting--b18f1c51-58cb-4f33-bcda-bbc8901aab08", "sighting--b96a8e5c-45b7-44f9-81ed-513ed33555bf", "sighting--fade0561-de43-4f51-8e30-8cb8dbe7a450", "sighting--59dc34a6-ae14-4b16-a81d-5ab7f258d58b", "sighting--77f37e21-e130-4255-aaab-10fdc1a5a38a", "sighting--2d83bdbf-35cd-4153-af69-fea74903d983", "sighting--00fd4c2a-b682-4626-a0fe-08e7b7f8c535", "sighting--8a34d257-0959-4a8e-820d-b0253fd9d751", "sighting--7fbae4c4-1d4d-44bd-bbcc-e42164cce818", "sighting--dc767bb1-d807-439a-afe6-8fd8a0a22663", "sighting--dd0bcca7-1d40-4dd1-825d-9e0f46661c55", "sighting--a00d97e3-0ee5-4894-8c96-d5f9928f0713", "sighting--11d00c93-6621-481b-b153-90f429010dfb", "sighting--905703ac-144a-47b3-a0c5-f23df594bce0", "sighting--c643ff85-2ceb-403d-b736-717b640808a5", "sighting--0adcbe9e-1f27-4ad3-962f-d50c111d9c48", "sighting--1945751c-2d92-4d4a-9cc2-cf976c21950a", "sighting--80cd8da1-1034-4d64-b042-7b5e3c535c52", "sighting--bce07737-e60b-41f6-9353-bb65258892cc", "sighting--29e2c86c-4f47-4429-8b97-6eddffc47275", "sighting--1e32616c-c884-4e27-8c0c-34bc990868c7", "sighting--a7ede3a7-c4ab-4779-a659-0181db91d7a3", "sighting--2e98a505-ba17-4a2f-9548-a0ee5d239ae8", "sighting--0ddbdca2-7def-44b5-9a3b-a0173e30dd88", "sighting--38fc6ef4-0e80-4b30-ac70-d9167fd7144e", "sighting--8d9fbdff-dd81-41b7-8b46-03c0b3625faa", "sighting--e9e9900a-6214-4ff1-89b8-94a2ea63a75e", "sighting--0f8e7a78-3c5c-4e41-9e22-a4617b1e072a", "sighting--a38f7478-ed42-4226-9c10-9000ed995ca7", "sighting--687541d5-c8d4-458b-afd9-7d5f2fb446ab", "sighting--05178d39-132b-494c-94f0-c8f937dcb5cc", "sighting--a02af78c-2589-4d4e-af9a-159e7091b6bd", "sighting--bd6120a9-83d7-44b3-a788-d9f0a7548a4d", "sighting--2105f5d2-677a-4d7b-b9d2-f11a1f309213", "sighting--f36f5691-981f-4ab0-a8d6-7817611ce83b", "sighting--45bf9e95-f40c-44c0-ae38-05c5d848dd9b", "sighting--14393e0d-2f99-4340-8ca3-129529894d2f", "sighting--05f95926-2426-49c6-833c-7ec7eeb1f6f3", "sighting--c4e4e150-7131-4785-8b97-6154060be457", "sighting--89f0c886-5d04-462d-a08b-70c036fdc8f1", "sighting--42247d6d-5273-470c-8477-95091b3acfb6", "sighting--e589db65-9d3f-4edc-9c88-7cf2f7f30325", "sighting--a22b3bac-9c66-46b8-8edb-360c1684d8bb", "sighting--45feda6c-7056-4a50-98cb-927166f8e0a8", "sighting--f80252dc-fa04-4062-b33c-5fd40ed591df", "sighting--89631d68-6ee7-4342-b5af-84b6448d5e96", "sighting--e50a4893-3931-4090-aeaa-2b8cc63b2d90", "sighting--52c6b5d6-74ef-471b-b6b5-f3d3a0f0a9af", "sighting--dacdebe7-8df3-4079-88f4-5c18862fd976", "sighting--5b63ea87-3556-4828-a44e-f353702e373f", "sighting--7d192423-904c-4150-93f3-71abd345335a", "sighting--5d158a9b-069f-444d-a5d6-cd19645ef058", "sighting--43e3a193-04a2-468b-a488-6d6bca346e96", "sighting--c36603a4-9fb9-422b-bc2b-bcc158db33ba", "sighting--6a647d2b-03d3-4da3-8382-39e154b026a1", "sighting--93ec7432-20aa-462e-bf37-b7884c0a9321", "sighting--04ca6ea5-a79c-4e5d-9c3f-604e4e34570f", "sighting--611b506e-0483-4a3d-9aef-e508d55854f1", "sighting--a4411095-702a-450f-9f59-9e999bd88229", "sighting--b49b90b1-2061-44eb-8b49-d3994ce0bbff", "sighting--08eb2c66-4c75-42ee-b339-9170c2c5f11e", "sighting--f1817b96-343c-48a3-a895-bef0afe63f53", "sighting--38c0fd6b-5c7f-43a8-84c1-2b4f1e6bf7ee", "sighting--b8d45e88-1146-49a7-8d0a-46e0b7dc6f23", "sighting--0475c047-a9b4-487c-8ffe-08e9f94d4676", "sighting--b1297ade-d807-43f6-bb1a-40da6066fde6", "sighting--0772aa0a-8596-4da4-8c5e-6935a2d47031", "sighting--9502d7c9-28dc-410c-bd87-97d0989d43a8", "sighting--06d0f268-26bb-4eab-9259-bc75e315452c", "sighting--87a928c4-f837-499c-8cd8-c94036781679", "sighting--d1fe0ee0-e88e-40f0-b978-ad49d0ec9b57", "sighting--ce5ab356-7089-4d70-b2dd-a566293b0d64", "sighting--d473babe-baa1-4141-a7c7-0d69090c565c", "sighting--cbaf0f37-7e33-4cc5-87e2-4aa7ac079549", "sighting--ebf5f1e3-9006-4fd0-af1d-0033b2cd471e", "sighting--83476c85-5ab5-4e92-a80c-735722ef26a7", "sighting--77424543-8348-4b8c-87de-c341eebe025b", "sighting--8c29e65c-3791-4a58-993a-237c5ed6ba70", "sighting--d93c35c0-6795-49a8-b408-72207667b9ce", "sighting--d11a1682-f0d8-4081-bd45-00bb21a9058c", "sighting--0413ac2e-1c53-4d11-b128-c312201bb65a", "sighting--8d4c9a72-6e4c-4199-9abc-40d6f6748d57", "sighting--226c13b1-7baf-47ee-84d2-eb40511665df", "sighting--814a943e-0720-4c88-a418-84ffe198a8db", "sighting--466c67ef-628b-4b9e-972f-54184ed60db0", "sighting--565a2a56-6519-4fa7-8767-d5a2a7640672", "sighting--d6d8e3ca-3bd4-4be9-aa64-0e4c98f03a20", "sighting--804d736f-6351-45c1-8a67-7403fb3039ed", "sighting--2937f35e-caf9-44e3-bc03-afcd186e03ff", "sighting--639ec0a5-a59c-47b8-9e67-bfdd7821d24b", "sighting--d2fc89ac-4173-4ac1-b0f2-40a8bbde8b03", "sighting--429aac2f-8c79-4989-954e-d91f267604c5", "sighting--fa6b211e-b2ed-4e8c-a5da-3900d4c0ff22", "sighting--5d721a25-e112-419e-8cc8-361def2fe267", "sighting--9eb8b571-077a-4228-a1d0-f7d5d5a92e48", "sighting--63651446-acd7-4017-9018-250160d6cac8", "sighting--9fd47575-f8d2-4474-aba2-8c46dee77ab1", "sighting--281a9797-314e-40aa-bb73-912b5d69ef0d", "sighting--6e8bd0ef-6cc2-470b-a3c8-dac0e07f85ee", "sighting--034d756f-8003-4469-9152-34f4a7d58e94", "sighting--d9575ef6-c040-4c70-954d-17aeab311031", "sighting--061cf378-4169-418d-9955-62fe82392eb5", "sighting--2a062aea-dd9e-4752-a87a-624add79e5cd", "sighting--28d30696-13bd-4985-a93e-f5147099ded2", "sighting--b684d894-b916-4516-a829-c8959bd9e923", "sighting--c1bd5905-4eb9-4cac-860a-d081c13329cb", "sighting--1a52f5f6-4379-49eb-a977-d94a49d92fe9", "sighting--ce65a2e3-cb9e-4481-b259-42eac420b27e", "sighting--c3ddd24e-9f1c-4d8d-92ae-b0a9bc567089", "sighting--9f21fb99-177a-458d-8c9a-86ec6c661ce0", "sighting--fc06b955-beb5-4b0a-bc65-0f1b3d282472", "sighting--cac20eb0-c215-47b2-afe5-1e0cd7326ccf", "sighting--3643dd9f-1459-4d0e-81f5-5fc66d841cf0", "sighting--a4cfb8fc-be82-4cb4-ac58-159f4d2c6f9b", "sighting--790e083a-56ae-45dc-a197-ecee097dc3b9", "sighting--6d798350-590c-4b66-805f-f4726e233900", "sighting--92b63c77-7e61-434f-b395-00218413ed0c", "sighting--955d306e-71a4-4f2f-94e5-3e9bfe6c1f51", "sighting--154c41ac-aa3d-46c4-8d63-905338662b94", "sighting--be4cb40c-9e39-46c2-8ed0-a8f109a22150", "sighting--993111c2-f185-4036-9d20-a1dae22d8c61", "sighting--f7bcf1d4-28c5-4d2a-a786-098366c6db38", "sighting--93bce368-102b-4d1e-9a82-a5fe6864c34c", "sighting--b0fda1b0-01b2-4559-a721-2b19d2570800", "sighting--626722a6-24cb-40f6-8ccd-f2fc8730dc8b", "sighting--793d3234-663d-4bfa-b07a-6e46c4d4ca18", "sighting--1ab14f0d-5e08-46e6-9f6e-a00e034b8eca", "sighting--c3f05140-772c-449c-8e9f-c23c8d1b0da3", "sighting--a7bc8d1d-f7c8-488a-837b-ccbdcd7de148", "sighting--f3b6a548-adeb-481a-82c2-92537383b22d", "sighting--a17d6303-6930-4c25-b966-ac76bf06cbdd", "sighting--ce562ece-5885-4dc0-93e8-184cc108dd2b", "sighting--7b4bc0d5-ab1c-4766-b198-2949051155b2", "sighting--2578e854-fa6c-4436-89c2-978046bb9c80", "sighting--20d04bf8-65af-4865-a5dc-e877c92a62a9", "sighting--c91f82c3-f20e-456d-9216-3cd2d5316a13", "sighting--cf5f0dd5-3b6c-4d89-aa1f-228e4c7281ee", "sighting--342a7b15-5dbc-4156-8c94-3ebca6678095", "sighting--44265399-b367-4de5-8e45-8aadea5cf3e6", "sighting--b9031cd5-cfa7-4614-9955-3c57d1ff260b", "sighting--c0518686-9052-48d8-997a-cf9087db3ab1", "sighting--28de56d5-eb5d-433f-9a21-3d1102c1d2f3", "sighting--8d3e9e99-90e3-4f15-988d-d91a26b9c6e4", "sighting--de5a7636-c828-4ca8-bfde-955ef9f8e324", "sighting--87a6f1ed-a1e3-4f69-8349-f5d4ce1edf24", "sighting--a3b2c3ff-15bc-41ce-a867-d144db328a88", "sighting--53f246e4-d9da-4a22-a19c-d388ea49d20f", "sighting--d558d2e3-a140-41df-9b0d-bb5f8b62957c", "sighting--fbf28f8b-34ee-468d-9f4a-a01e8cfa4c48", "sighting--44946e39-4f53-486a-a438-182061366df3", "sighting--f9056ba9-55fb-4fda-87ea-72f0fd3a291b", "sighting--b5169006-fcca-44d4-9883-80cbfb768d82", "sighting--eb57b667-9224-40d5-b63c-e4a271713653", "sighting--c97398a1-29d1-4287-b47b-db8b34488d77", "sighting--e497166b-2d77-4997-8ae5-0d8bb0909959", "sighting--d6ab5e6f-f21c-47e7-9306-9b16f7eda2bf", "sighting--da34d956-8a21-4f4a-a79f-4aa0df671606", "sighting--63d6a431-f0d5-4b00-9104-6984ff81167d", "sighting--1d35bc98-e752-4665-a991-9fde51de4c90", "sighting--b36cf8e3-9430-43d0-9afd-7be16b4e1821", "sighting--d72d0772-4396-4623-8478-517a02776bd1", "sighting--3914758f-6e86-4d26-a9ae-19d8d355bcd0", "sighting--fc57f891-b08e-48a4-b8fb-e96e4c72b58e", "sighting--7239edbb-6c69-4f97-96db-30bd1a795227", "sighting--abd47101-926c-4166-a560-c1d1df9baa8f", "sighting--02de0c0c-fde2-4a0d-b55d-276cf9ae5695", "sighting--59c1bd67-cd8e-4bde-8e50-fd837cc4af71", "sighting--62852177-7449-4191-ae56-a886d61a6875", "sighting--cfb229b5-cb89-40ed-8f9c-7c8d3361dd28", "sighting--90da4022-d96c-4410-b144-a4080766a8f1", "sighting--41793543-92cc-4122-af91-319627428eec", "sighting--35f0fd8e-cd27-48dc-94f2-e54c6c49fc0a", "sighting--138cfd7e-3793-4ea2-8325-ba6b35c4385c", "sighting--74ac1af3-7ba7-4c38-80fe-3145a940d1d4", "sighting--aec9f0a2-63ad-4056-8067-b33096ce71de", "sighting--8d9357e3-17b7-463a-af45-64d6f9b52ec3", "sighting--13a686d8-6dfc-48ad-8383-2fd2aedfe5fb", "sighting--32e6f9c8-1520-496d-8aae-4f90ef2c8f40", "sighting--199b262f-ae78-42e1-90f5-62b131a6f24b", "sighting--1b882ca8-f487-4afd-8ea9-f0908c058499", "sighting--0e72ef4d-06c3-4db7-95f6-79ba7ae0bd4d", "sighting--00058813-5a42-4785-8c2b-5f0a78bfdf44", "sighting--a586dea5-2d7a-4b16-beea-74c1447c392d", "sighting--9dce3392-dee0-4a5d-80f5-146d244962d1", "sighting--78168b95-e27a-40e5-9b14-043b093b5405", "sighting--5f2ec273-87c1-49dc-9f10-1bd7769e9da5", "sighting--760979d3-384f-4c58-8b85-cf5b9c9f381d", "sighting--291a912d-01d2-4a08-8cf1-4e63ff037100", "sighting--880b6af4-3d43-4894-9568-1d19865f443a", "sighting--c75d0ccf-b63b-4869-b3dc-b16af447c78c", "sighting--538d57aa-5bcc-4c14-96c0-a7261149a6f2", "sighting--3e9272d3-43b5-49f6-81f9-c5e83eb09f56", "sighting--1574e27b-6c8b-48c4-a343-7f579bb4c3db", "sighting--4c7e239d-a2e8-4166-a933-5ea73f02fe03", "sighting--3a3630f2-22ab-4ca6-8d4c-994321a8e6fd", "sighting--f80754eb-36de-43a7-a202-3476cf68d0a8", "sighting--26e60c5d-40fb-4c4a-974c-c1c28496ea91", "sighting--bbb63e12-e278-4c8a-bf22-7a1475f399dd", "sighting--98f30bca-5146-4f52-83a5-4b8883cec846", "sighting--a617c443-0695-4fdf-90a8-2448bc9d28bc", "sighting--3f24f89d-923c-49ef-9c92-fc2ff65c5a0e", "sighting--1a9f3d32-70ce-4e01-8e94-e7945656eebb", "sighting--d9857cd4-4a46-4ec7-8643-a1c83460e4e1", "sighting--5a50b9a6-7d9c-4b66-b9ba-9765ed3eb26b", "sighting--f28617ee-ae1c-4f7f-b6fe-d47c6ec4bfb9", "sighting--b0fa8c40-487d-4815-b9ba-53662e621550", "sighting--78e7abc6-125e-4bfe-85fd-2b1c73ef33e1", "sighting--15e3fc29-debc-4273-b107-a01e01f40a93", "sighting--b022e144-b535-46e0-b7e3-cccfd8ba7b4a", "sighting--06e16c7e-ea13-4e3b-9127-0caf4f86911e", "sighting--30e7d427-1edd-4727-b19b-d18be7f985fa", "sighting--70738890-c1ea-4fc0-8b2f-ede0ebe28d82", "sighting--87b4cf52-ae4d-4b8c-ba4d-8b108a4c5613", "sighting--30a35edc-df8b-4f3a-841d-3469537e631a", "sighting--88e50068-3ab3-4bf8-a6b3-b17aa69a693f", "sighting--0e5004bb-8b2b-47b7-b565-c2a1019fd5d4", "sighting--defc3e85-5b42-49e7-96f5-eef6503e6320", "sighting--ed162ea4-263d-4583-bd3d-7a238783cb78", "sighting--b2a9bfc4-63bc-4921-8ed7-9643b67da403", "sighting--5ae18a7f-8e58-4dde-9c84-7427d85d6f0e", "sighting--a060ee31-93e1-437d-81f4-a3a6a6f6c3fd", "sighting--795c3db7-9c7e-4196-bea1-5642a751e777", "sighting--3fda1afd-3911-4dae-a89f-5111618ea5a3", "sighting--3974afa6-4725-44ad-8c46-dfa479aaad0a", "sighting--dbe59255-ba28-44cd-b430-edb207978a4f", "sighting--71065dcc-2a58-412f-82aa-dbe8bbc2b098", "sighting--c493c68e-304b-4b3f-8e68-694b3449644a", "sighting--9767ddfc-b9f9-44a8-ba1e-7ef4b77caea1", "sighting--8040b1c3-0a8e-473d-af3d-a84f94c45f6d", "sighting--431d3651-5ec2-4430-be29-d7515aa29513", "sighting--bfd1ef02-49a3-4c72-9644-7430cd16ffc3", "sighting--25511f1b-652e-4ef0-b260-2716b32e8a4a", "sighting--ca0cd453-489f-4da0-8b99-954f78f677a3", "sighting--7b5b997c-7ed6-4994-8b3a-621f68aec1a7", "sighting--2e20018f-d090-4c47-9536-c273e5dcd9f1", "sighting--0ca317fc-0491-40f9-b2b5-0ea985bb21af", "sighting--8f75f4ab-58d1-40f6-8ca6-69faca8a8927", "sighting--ba0c4519-44f4-492f-b734-d0bfd5dbec7d", "sighting--22c64a46-2889-4615-a556-bfa4cf085d75", "sighting--8fc0ec43-8af0-4b78-a3cd-c6ee5fd6bc7c", "sighting--fb100bd7-3457-4116-a47d-66585a5225a4", "sighting--e788a71f-282d-4524-96f6-ba897cd35609", "sighting--4016ec76-82c4-4799-bb60-6df2472ebf7c", "sighting--bed36ce7-f0a1-4d77-9af5-ae47bf7a6704", "sighting--f46ca0d1-6b5a-44c6-9dce-c920c8c6cd4a", "sighting--698ccaed-70f3-4ca8-a229-3a15d449dbcb", "sighting--470cc4e0-2afc-4cf9-b07b-24e019bf22f3", "sighting--cba6c287-fe08-4c1d-b603-856a60750cfd", "sighting--dc7ebc87-ec43-46d0-b156-c04dd0515db2", "sighting--758d743f-e0ae-4f77-9e44-b59aad211b7d", "sighting--5b5e60ed-b5ec-4620-87b5-50e4c4ffb901", "sighting--3538b9c7-ed7d-4cb2-a2ff-71b01cae1a26", "sighting--c889356e-5e64-4d78-8e69-d89b5a1d0def", "sighting--9f2e8d84-421e-4736-829d-433bec818794", "sighting--143e4c9a-931f-4379-bfe2-e40ef952db76", "sighting--5e404340-6a91-4511-8550-01d46cfed904", "sighting--9e04970c-1dd4-4a23-8a63-46c5ca5de804", "sighting--1898f494-b1b2-4cf6-98cc-34da530a03a7", "sighting--ee38d17f-7011-4d05-aeb6-fef85c2cf621", "sighting--45111e26-37f6-46e4-bc3b-e0ade8c0a846", "sighting--718113d7-8926-4c52-bd0c-0428589c37be", "sighting--b1451310-4fe8-478a-8d03-8a7fe58fc822", "sighting--9afa0cf0-15bf-4e3e-bee8-e280691ecc70", "sighting--84f597de-6ee7-4ecb-9502-afd0cd092390", "sighting--17b21cb4-8812-4b7c-abb8-582bb6911e04", "sighting--092635f5-e044-410f-be4d-82f2563bdd5c", "sighting--5ba4f8aa-2ffc-4100-8742-a5b8a64f4d15", "sighting--ea7db5f9-e8cf-41d5-a797-6b50f415d324", "sighting--66552dbe-0b6d-4b6e-a55c-30ecdfe70c34", "sighting--f294b4ed-65b5-49e0-9008-5e23be3906f6", "sighting--5f66cc0d-c146-4051-b27d-8639e5d71d1f", "sighting--a44d0f49-cbb0-470e-963a-cb0c5f96d453", "sighting--4258061c-612c-484e-b35e-f0d7e73478b3", "sighting--0569605f-96ab-4b7f-a960-dc5b51e24fa0", "sighting--ad0477be-ab1c-4186-8903-3e1d70f013e6", "sighting--71ee32c8-4827-4f3a-bc8f-4b1abd31022e", "sighting--5221c5c3-b1ab-4ba5-91e9-6b35fc9fbfc6", "sighting--aeff62d1-c2ee-46bf-9e36-2542d918c34d", "sighting--cd7f841f-07cd-45b6-b158-e355b639e648", "sighting--e8276d93-dcc1-4dcf-b03d-7416b986bba9", "sighting--3a0cdb80-f459-48aa-aa85-03d3128bf540", "sighting--66f7827a-675d-4c55-bf99-9f572f5d38d8", "sighting--bf4a65b8-38ba-48d3-80fa-b6813ebc0e22", "sighting--fd855853-b53b-4748-9601-b365769668d3", "sighting--f4dab71d-9be4-4add-bc7b-93fe2b4d064e", "sighting--9296d91b-bcae-48cb-856d-686d5d08ea54", "sighting--19cf3f23-859e-4e12-b022-acb5e22a6879", "sighting--e6dcd8aa-3ca3-4275-b8b9-699397cfc42c", "sighting--7677d7fb-793b-483c-a749-ff1b78757cfa", "sighting--e22d4062-ee16-4ad8-81eb-05ce48fe8b6a", "sighting--775313a7-6aee-4bd1-a7e0-096abe999570", "sighting--ae9094ef-f034-404b-af33-30121211e7d4", "sighting--03483f8f-5bd8-42c2-8a29-5d494b15faff", "sighting--45ef036b-06e0-4dad-b36c-1f7c03f152f8", "sighting--34699af5-0f59-4756-ad47-593d94652e78", "sighting--5f95de31-e380-42f1-b714-bfbe2b705b97", "sighting--9dd32dda-5a2f-4e0f-b5e6-2b2f4ed351d3", "sighting--21c80681-6583-49b6-98d3-99e28c7c4dc2", "sighting--9d354fe8-0027-48d3-b953-6e65ca6d49c4", "sighting--9e679cd8-2cd6-4324-95e1-35bf28d83828", "sighting--ec4083c6-1ee7-4cc7-8eea-cbf08755d3da", "sighting--62754c10-d024-4de9-9cb1-2056b2c57544", "sighting--e9849c79-2ebf-4e73-9c56-63968d5b04a9", "sighting--9a63489b-d719-46f5-988f-23997a80ca2a", "sighting--73060467-096f-4eaf-8940-adeab0ff153d", "sighting--72d90134-905f-456d-acf3-272e74a75a76", "sighting--904e2e20-2af9-4304-9853-3277be42fefb", "sighting--08fa812a-ea93-4a78-9ca8-a06cae65f9a2", "sighting--6544c0cb-d1bc-42a1-ad31-4f6ed00dfacd", "sighting--41cb2dd5-c714-4ad3-83aa-572618abb83a", "sighting--806fc0c7-3877-48e6-9d37-65939b67d85a", "sighting--0805605b-1ff3-4843-856e-6807d8bf2fe7", "sighting--356e1fbd-d883-4bb5-820d-1097cc4f2c07", "sighting--9aff7d01-5853-4309-9629-adf2a44fee28", "sighting--d43cc90a-e28e-4d2b-b01e-5eec31a07509", "sighting--06421f20-46b8-4075-b2da-18dcec16da09", "sighting--f280404b-6289-4f82-baf3-774b58282cd1", "sighting--f2a093a9-845e-4728-a130-5088271306c1", "sighting--2279df10-37ac-4e9c-997b-cb8037c9117b", "sighting--d4805d26-518b-44db-be39-618d7b8a4a31", "sighting--b701f8dc-e4b5-4436-b2d1-1dd5a5b3d45b", "sighting--acc14fcb-a267-4deb-a1ce-a6f9218fdd78", "sighting--4b065cd1-c0f1-4528-bb7a-b27479c08d9b", "sighting--7db85a13-4696-42a0-91ed-d9eebe48f70f", "sighting--ba34f4d9-764f-4e1c-aaa1-8eb6195a38d8", "sighting--12a97a9b-95f4-4a03-81ed-a6f374d8aae2", "sighting--ccf1f307-ff38-4bd7-88cd-03960d2c1bb2", "sighting--9c645636-ca8a-4fe1-ab80-431c059af2dd", "sighting--0c32cc1e-4491-4ed8-9dd0-99ab3cc4930a", "sighting--f4cc375f-d233-4527-908f-5ac094f5e2ca", "sighting--1f8e2d58-2f0b-447f-8f50-065606bd9384", "sighting--18aebc02-ada0-42f6-8dbf-8762a077af3f", "sighting--352eb9bd-40af-46a3-b358-33e64dd50613", "sighting--62e5d56b-2e5a-4ade-a8ac-a6a0856b4180", "sighting--76987403-bbe6-4e93-9ccb-ada115644fbb", "sighting--9c9b0f3b-cb02-4f62-a8bc-f206d0744079", "sighting--27bb7ca0-8ddd-46c9-ac60-50add31b7af6", "sighting--a6ccfcb8-b8e4-402a-9df9-d74935c058bc", "sighting--2afbc6be-be4f-455e-8e4d-ca026623d1fe", "sighting--ea57b32c-0d59-47d3-bda1-10f1f3f7a1ee", "sighting--710b0d7b-6845-4bc4-b690-ba8542dd3920", "sighting--c52de4ca-e8f3-463a-81f7-bc3c8722bf9d", "sighting--75c7eedb-c5f3-4525-932c-69923d2ddc54", "sighting--a3c9e45d-f7e8-48f7-818b-2874990f6624", "sighting--6df1e987-0b68-4bb9-9012-c16dc3da4bf0", "sighting--24225398-da4f-4c19-8bc3-2a56c1288d59", "sighting--d9d5751c-c644-44c9-9ad9-c6f4ce17cb9e", "sighting--1123d8eb-22a6-402b-914d-4fe560d3202d", "sighting--a8a857ee-3705-40df-b111-0d0bac7c20d1", "sighting--4cbd6e98-4ba0-4e1b-ba7f-b5413b1ac3c3", "sighting--0a596171-00c1-454c-b9f8-6d3fec824d0f", "sighting--bc7d3268-76f9-4d14-8e5a-82eb6afe78c3", "sighting--c32128ab-c944-4579-8057-d45223418599", "sighting--c2120f32-1e9b-4d64-ac93-7644ed5edfe1", "sighting--4bbf80ba-59ca-4077-8af8-d64f734e564c", "sighting--be58ece5-cf7f-4dcb-869f-f830efdb891d", "sighting--b2091f6c-4713-48f7-9a7b-adb018c060f4", "sighting--5549829f-905f-4605-a798-981d8de265fc", "sighting--66497143-2c69-4fb5-98ec-00a13b97dd93", "sighting--2fe6bd9c-0d18-4896-b81d-814e3b10dcec", "sighting--5fdb5833-14b9-4c23-b36e-869711702569", "sighting--dce5ea5f-41d9-4cde-b71f-4ed0b9a7343f", "sighting--700cca84-49be-4268-a062-3b47fd88807f", "sighting--651a62fb-747f-49c7-84ba-8c26166c7dd2", "sighting--023e5a23-6a4d-46d0-8a00-ed518720bbad", "sighting--428fb12b-c700-453d-8d48-450ae266af84", "sighting--7636dff6-f51b-4c28-9259-402ed1e13473", "sighting--436f5f93-b106-4a51-b372-9794561ec8f8", "sighting--b34726dd-f85a-4e36-b6be-7d37bc8b7061", "sighting--24398617-c4b5-425f-afef-9a6ba43ac912", "sighting--b25ceeb5-b7d8-4838-b269-e59597915338", "sighting--85fdf070-628f-4c2b-bd02-ded4d64ba6e4", "sighting--df99f5f2-e2c5-4843-a3fa-3f6d3be245a6", "sighting--3f3ce3a1-6605-4633-b606-d8571aa15ea8", "sighting--cd822db3-e1fc-4fd8-9668-a75f121dd4b7", "sighting--502d6ab3-f20e-4c38-8b3f-f2829a7bdd2c", "sighting--1050d70b-5b14-4528-b0d3-e3f422793b5a", "sighting--13b85928-f547-40f4-a8a4-78410df2e02e", "sighting--d3875003-3b34-4718-b7e2-89e244328583", "sighting--16e99735-6a21-4ea3-b333-531ff64c84d7", "sighting--0b7ae58d-762e-4f64-a397-65fc290aeaa8", "sighting--578f4663-f5f9-4c96-9407-c1ab45aa1372", "sighting--782181d3-2243-49ed-af11-068cbf4e44f6", "sighting--e17bd31a-d290-4ae7-9b7c-50746e20a87a", "sighting--1af12ee4-aa66-4f2c-92fa-82bc08cac07b", "sighting--bc374b90-4119-44ad-bc6e-30b59e044713", "sighting--1aade7f3-b897-4f9e-8190-3aaa8c752b28", "sighting--cb085e78-727c-486b-a1f6-b3b6fcb9ebd8", "sighting--f1df2577-b06c-411d-b350-086b07b8ed1d", "sighting--05ac9ded-993e-4c5e-b9ae-ce8f4a84d1ca", "sighting--99bff3e8-8098-434a-9373-3241d675c396", "sighting--d5373de4-8a9f-471e-b824-25faf7ced87b", "sighting--9f6e9b41-1e22-47e0-81ae-e44cae534b26", "sighting--27a36a41-88b0-4e8f-8d83-e4c66db49fb8", "sighting--ed7691e2-a31f-4e24-b4ea-8687fad91e9f", "sighting--0d750863-5827-4daa-ab27-04566ea69c56", "sighting--98d79996-a8f2-4f25-92bd-e6e9a3ee7fe0", "sighting--7ca4d9c9-b3ea-4f9e-9da3-0762604d3348", "sighting--00b26342-28c2-4459-b52f-7736cdd32259", "sighting--47d26d04-2af0-4fbe-bfe8-00ec25f0d7df", "sighting--03e085f3-98ec-474c-8a9d-127a24a7d9af", "sighting--1ea983d5-be1f-4058-ab79-9b87f023e3f1", "sighting--279618b1-27bf-41c4-bb47-9f22299db759", "sighting--6069c047-5d40-4650-9c23-287766be5ef7", "sighting--ba7d52e8-1d41-4020-a2d8-a92227de069c", "sighting--014271bc-4ef4-40b3-9e03-38a5eb986cf2", "sighting--4fc05d8a-c74b-4e77-bb0a-11f2a90c5c06", "sighting--d9864d31-fdc6-431f-829f-a772d7ad0b35", "sighting--7b4b0f11-7b65-42af-8643-f0942311bb3d", "sighting--fa50e830-825b-46ff-82a0-08481d9e6d16", "sighting--fe8257be-5cf3-4567-be56-41fbbfb42b52", "sighting--ed14a1e9-81f9-4fbe-9ee6-9d912776e50f", "sighting--0866d9aa-4fb5-4a13-a018-6a6435404cd7", "sighting--a1385f35-9a5a-467a-a444-799e0c873025", "sighting--49293202-78d1-4450-9f5f-509ed06ddaa4", "sighting--c242c8c7-3b18-4eec-90f2-f48806e55185", "sighting--39a9878e-80e3-4bbf-b2ca-7a564f894374", "sighting--ba4e70a2-bdb7-4dfc-9525-00e9dc6b9e8e", "sighting--30c6e173-9abd-4202-802b-c2464506c3ac", "sighting--21b7e9b9-7705-4b51-bdb8-ab802189dc9b", "sighting--8e45c99f-f811-484c-8f87-b8b7b688aff3", "sighting--815e9f0d-5556-4d0d-bc0c-ab0175a82552", "sighting--a94e0f7d-1c94-4efa-8972-8b5c71fad652", "sighting--6322f7ec-d085-459e-94ae-8e5e99d5573d", "sighting--89badcf5-b1d7-4105-97a6-bfa0bd4e9bdb", "sighting--4f5b6c2a-63e2-4074-8ceb-b51e2395b7b7", "sighting--6e469764-2f15-4795-a935-61e34717bcd2", "sighting--bf3a07ad-09f9-447d-9e60-9a304a98e3d6", "sighting--8069e83d-21d4-495c-83be-fe160c0e84bd", "sighting--194c213d-f0cf-4dc6-bfe3-6b9360a2ea93", "sighting--c7126b93-b293-4627-bb78-7afee88de439", "sighting--538cf016-6371-4358-8694-d90cbf3d485d", "sighting--5e67b253-2e3b-4efb-9cb6-d25a92522931", "sighting--6acd5d6e-f98a-4b81-ad27-8991998c1f46", "sighting--e47d508c-bcc0-4b8d-9ad4-2dea279250ce", "sighting--46e66855-2176-4092-ac3a-430e27c3dd0f", "sighting--5b0acdd9-b41c-472c-a994-cf945998c9cc", "sighting--bb36f56f-8aca-4408-aed4-f472077bdfb7", "sighting--347a1714-32a1-4b72-a6d4-fad49df009a2", "sighting--cde06cb1-f22e-4174-9169-98b39066a251", "sighting--409a9814-2308-494e-b47f-89a7ba1e1ff3", "sighting--2755620a-6f0a-4ce4-84f8-2fbdf6986b20", "sighting--f541412f-744e-429d-8b9b-84840aebfac6", "sighting--313f8865-eb45-48cd-b7f7-db7f1ad1cd9d", "sighting--2c9c6a85-32db-4358-b2b1-5f3c84c9bb9d", "sighting--f0d16547-5bfd-47b7-9ddc-c1245d0deb21", "sighting--d2c0ebac-c15b-425c-8ae9-a110e4b61815", "sighting--8a5da04f-d153-4361-a94b-a85a02bbc2a4", "sighting--0a8bbcc9-f7ff-4d26-ad15-3a043b873285", "sighting--eb4df751-bbd3-45b4-b06f-82868e6b71ec", "sighting--407403fe-def2-4d8c-b42f-c5d40a0c9c0d", "sighting--b5e00c8f-c3ce-4bfd-81df-5afb7c9cf9c1", "sighting--68f41ba5-4f75-44c4-a5ea-0031ee34e7d8", "sighting--89e87074-664a-4a7f-a169-5b40b73c3030", "sighting--c76b0641-98bf-4477-9583-7d5d3887a6a1", "sighting--cdd418f8-b727-4702-b10e-991bf87c6fe4", "sighting--73591e3a-363a-453d-9f54-f84d41175359", "sighting--ef04dfb2-9768-4552-82b2-999ed3778614", "sighting--c21cba97-8f02-4f4a-a2ef-cf26aa1ddf29", "sighting--9db76bd8-05c8-4d3e-92fd-57473438dcc8", "sighting--1df79419-cda2-441c-aed2-f015e7300670", "sighting--6d349b37-2283-4e74-bbad-2dc3eb296c1a", "sighting--9b1ecf14-1351-4683-a75f-c9d4a0025836", "sighting--af4a4233-65f4-4258-90f6-f2391601f485", "sighting--43c66ef4-b848-401d-b0e3-6872e9791165", "sighting--f31f8c3c-45cc-47c9-a679-549335458f65", "sighting--0909fa14-de06-451b-b92c-714204908e77", "sighting--b5d0735b-91de-4e40-b361-cafa7caf8e25", "sighting--a026727a-e2d8-4173-b47f-06c683dc3854", "sighting--fb3812fe-a5eb-4a2b-a513-dd60447dc2c0", "sighting--6f8adace-37f6-4e46-a0d8-eda9d57e6415", "sighting--008bac22-1006-4eff-8985-78d20c4976fa", "sighting--bb32673d-0ddf-40ce-8c2e-12595e2c62cf", "sighting--1e1f53ed-f61d-45ea-ac88-979f27125e6e", "sighting--cff62c3a-fa71-42f5-9555-ab3ea38b9640", "sighting--baea10d5-9374-4793-bf7e-de7d83ba29c9", "sighting--c0d4e81e-e334-4ebb-b0eb-8f32a120ca65", "sighting--61d15f8e-9b72-4fb1-9a27-b8293c9a1245", "sighting--b5f6c30f-9dad-40b3-ae0d-ed4c6d663821", "sighting--abfa9271-44b6-433c-b6cb-47c5af5df59b", "sighting--00be04b1-eee5-4511-8e2d-92eb612b572a", "sighting--ec944eb3-af14-4f73-aafb-d49ef0e3965c", "sighting--0e980172-4c60-496f-b87b-d6d010a685f6", "sighting--bc182527-af44-489f-8f9d-df225c9f1f11", "sighting--2ca3e2d5-5c5a-4ba0-b04d-6d9f86515243", "sighting--1d6a3ccc-e050-409e-bc88-5aedd68c8546", "sighting--055d476b-192b-48c7-b6ea-7e5d86cd0587", "sighting--de299612-400f-47ee-8fb9-9a44323f7695", "sighting--c31b4a9c-4ac9-4793-b418-def9f30dce6c", "sighting--4ee5a631-63a2-4cf0-8559-489483b21308", "sighting--631d0eac-7ee0-4f62-9fbe-7b79f3169f77", "sighting--34e13319-3c02-4571-90d0-72c1ba39ffc2", "sighting--f1435a7c-dbbc-4cf1-8516-ed5662580979", "sighting--cab09ad9-15cf-4eed-8c04-51aef5e1446d", "sighting--ad0fa161-3d11-4cf2-9aee-f4f5d131a6a1", "sighting--9a742b5b-70ed-49e0-be1b-2f7ac4db65be", "sighting--99b35897-e53b-48cc-be6a-a12eb1eda1a1", "sighting--d3faaae0-326d-493c-9667-924ba8d70ecb", "sighting--393d8237-0b68-447f-870a-a388d5b0bff1", "sighting--e403c68b-8f2e-4b22-b0bd-16de6bb5f4d2", "sighting--1c5bbbd8-83fb-498a-af15-2bfaf0321c21", "sighting--38974bfe-51cd-4b1d-a1f2-1ee3725a8459", "sighting--d125958b-6b2b-45f6-a558-ac91c5026bed", "sighting--3caefe4b-f855-48be-870b-f16e07b0b196", "sighting--d860437a-2a6e-4295-b9fd-e01004e2f009", "sighting--5a24ef10-e25c-45ed-ab23-1a6b0d7e22c5", "sighting--50fd77d0-e0cf-4b28-b2bf-d832ec65f718", "sighting--bf24139d-73a9-4d77-a33a-cf17bd006be6", "sighting--1ac57170-8fae-40e6-ad37-63f381d3ed5c", "sighting--76d1f2f0-b3a0-4ba5-a047-53399281ab28", "sighting--4544ef8c-f741-4c75-a86a-889214f05d98", "sighting--aa0e6fd1-6dfd-4f8f-bc3c-d4feca82d6f8", "sighting--c0f289b3-8a2b-465a-865b-8e321c3ad5c6", "sighting--566ba1d2-5109-4761-81f3-140018a5b605", "sighting--d36e52e6-ae2c-4b1f-a6ca-81987fd4f364", "sighting--3454814a-8cc8-438f-8090-c0a9e5dc28d8", "sighting--532775af-ffb2-488e-b28b-6a48c99e88fd", "sighting--838b338b-0f7e-41d5-8102-dae2206c7a02", "sighting--af5b493e-b73e-403d-918d-74fab4a6ac57", "sighting--fbd64e4c-d4ac-46e0-ad72-ad19f4a7dc29", "sighting--d6ac5d0a-5fc3-41e1-822c-3ac88e1ad103", "sighting--e8593d4b-3785-4b4f-8e95-03ee4698ffca", "sighting--c8b7199b-a78c-494e-a432-fe64bb24f4e1", "sighting--7e2b1bce-aea1-44a0-9009-3d770c922f03", "sighting--b510b566-edc8-46fa-b741-d60d4c77433f", "sighting--989231fe-41ce-4e42-877f-59002a444b7b", "sighting--cdbd0746-bd4c-46f0-86e0-d44636d5e896", "sighting--ebd5fe5d-48d3-49c0-8fe2-eeb58064da57", "sighting--9667ac11-db9e-4980-8925-dfa93258e711", "sighting--6659d652-6097-4506-bcff-8a1f971db6ef", "sighting--bcb86fab-b7bb-4963-8125-2daa982cebb0", "sighting--1ec9986c-ceef-42f6-a442-23874f7fc9b4", "sighting--20dfd205-be40-4b2c-adb0-98237597f21d", "sighting--c438bb69-41e5-4994-9507-12652a047567", "sighting--4701b4fb-f3a6-43a1-84e5-d0cbb9dd7279", "sighting--a6c1219b-a2dc-4f65-8126-85263c0ee71a", "sighting--73c9a871-5d60-46cb-8969-53d78faa191d", "sighting--44b51a3c-1d01-427b-bccb-9fad719a465d", "sighting--e7e1a67e-8879-4720-a2a4-f256370a3af0", "sighting--ca367776-7158-4e0c-8bda-231a2c102c7f", "sighting--6cbdc8b9-34e7-41c2-b3dc-b117f017992b", "sighting--9758eea2-451c-4f6d-a041-7fb7b0a2d97f", "sighting--e9b9caab-0d20-43db-af9b-67c7dd62e894", "sighting--92f32f87-f6ad-40d6-9534-c0d3aacb695e", "sighting--9657df8c-9a50-4331-bc06-1a5cdeffaf21", "sighting--767f6e86-4fa1-472e-9df8-07f682badb03", "sighting--95076f7f-68d0-4811-9ba6-141eb1877627", "sighting--eb40c4c2-ff10-476d-bb34-241f882ba898", "sighting--a887702a-11c1-41b1-b725-124c98e7c7e6", "sighting--949a8402-eb00-4d4e-b2aa-e25dc83bb248", "sighting--4990cf17-68ce-4bd8-afb5-a2c864209f2a", "sighting--261bd917-fa8f-40a2-b502-2fba53b5d985", "sighting--c6917e5e-1664-4460-8c92-ecac99219f3e", "sighting--77d30502-ecba-438e-aa7b-080748a4e649", "sighting--23bd477f-c412-43ed-a244-09dcc9041e62", "sighting--d9124345-19ea-4a7c-8528-fa222640d3eb", "sighting--5067e8cb-f16b-4f65-9e05-08668acf91c1", "sighting--eb759911-95ed-48e5-b29b-ce51ec0ba150", "sighting--1fb3a82b-0f7c-475b-9f2b-a08cb7690236", "sighting--3ff7cab9-2ed6-45e1-a478-28b372fef2f4", "sighting--cf99641d-56bf-41e9-924c-fe20c7d1da69", "sighting--c160b2f4-2cea-43f9-bf70-6ca5c43d1471", "sighting--dca36b80-b3a6-4276-be85-958e09bff527", "sighting--8eedca91-1852-49fc-82a0-b2f43f4f4c0c", "sighting--6cfc19b0-09cf-491c-b3b8-6d9af8ec6e35", "sighting--9478a7a3-fa38-4e1f-b322-55a7f31963ec", "sighting--75eab0c1-d993-407c-b532-43ec54b8d681", "sighting--ece2df2e-48f6-4a13-ae6c-970b67aeb34a", "sighting--c7b9474c-2434-4191-b395-8a4f1aa80d5c", "sighting--3572e1d8-2705-467d-8725-fd3be91ecd32", "sighting--33b0a590-e877-42cd-91d5-91d3a2ddeb0d", "sighting--550ce786-6de1-4187-ac79-90d8f2c2cddc", "sighting--ecb8e7d8-6161-484f-8f33-40ae60cc2999", "sighting--038e1bca-8768-49ef-a39a-3d66f1b4b7fe", "sighting--36a0f096-0ba0-4823-a394-3e86caef28ac", "sighting--2020902e-aa03-4daa-bc8a-b09806323ab9", "sighting--0f398ea3-e646-4bba-b7e8-43d07cc09891", "sighting--f6782d06-226c-4180-a0ba-a7c055f55dbe", "sighting--fbb8d660-51ae-4103-9ccb-080ec51fb1d8", "sighting--6fdea6d6-bfa9-4fdd-8595-6f35d10900ba", "sighting--3c8a4f24-0103-4e8e-9ca1-0a027b000547", "sighting--72482678-8379-42c3-bbee-47829f965396", "sighting--e6ac6499-c4a1-4699-a6fc-81ce0fad896a", "sighting--a92c7835-6dc1-448c-8a57-d376a0299585", "sighting--b5ef391b-fb04-47e7-861e-66c9fbbf5fac", "sighting--b782985b-5d7a-43f7-8797-1e5cffe3774b", "sighting--23bb5386-e366-432a-b54d-a9d43837c7c8", "sighting--f0916436-10c3-470b-ab06-a6488d06fe44", "sighting--dd30bccc-575a-4eac-b428-210cf377eeff", "sighting--f37841cd-7b79-46de-bf6c-18cd6d22d579", "sighting--1c5d6cee-6840-49ad-956d-54c129c135a8", "sighting--13d13bd3-3652-4137-8b06-c6741e1c2f4f", "sighting--b11df033-cf0d-438b-8094-5e2f22c521e5", "sighting--86a8a489-4b7c-45b2-80b9-85fcfbc7f726", "sighting--e2841787-cef4-4d4b-b761-c51cc7dc2163", "sighting--fe0bbbd9-a746-4b51-affc-8794889f5702", "sighting--f1711d56-7da1-47b2-af38-9d32f73ece1d", "sighting--08544b87-4494-43ad-8daa-83f495c8711b", "sighting--be1772c7-f28c-49dd-9a70-a230c4c3f3c1", "sighting--f94dcfd9-4201-4553-92ff-4f9dae1b066c", "sighting--7895ca2d-0ead-4ec1-bc0b-22d5d599b294", "sighting--ba6d3c74-614b-4e41-975c-3604debfd409", "sighting--15da5987-06bd-4c64-910d-b356f7541294", "sighting--1f889cd5-9a9b-424e-83c2-8ce30fb36976", "sighting--5cdd5673-9ce3-4308-acec-a3c5cfb450d8", "sighting--02a07c5c-0a93-4502-b7ab-b29e56a61bf4", "sighting--14a532b2-ebb7-4d07-a4a8-e03c9c31333a", "sighting--5757a91a-b1ac-4a12-aed5-7b4650fcbcf2", "sighting--15c26914-eca7-4b66-b917-bfda84191fbb", "sighting--107be659-93f1-4ea6-93c2-047de5d3feb0", "sighting--08a67beb-0235-41b5-9def-19ccbdc2bd06", "sighting--192abb06-074b-4dac-80c7-d01c079f3925", "sighting--a0a4c73e-19d8-40e9-8130-89fe4c266a96", "sighting--fae54228-d07c-491d-b69c-eae60a246fd0", "sighting--cdaf5052-49dc-4706-aebc-3e30d20d5eca", "sighting--165481a2-8224-4a10-b1b4-01b1fedfcfb7", "sighting--0a897448-a883-41d5-bf01-c76f4aa3224b", "sighting--595e96e7-4029-4a62-bd33-ed36a35f2b3c", "sighting--37fbd36a-0bc6-4e94-b308-18b0e861c554", "sighting--acd0f73f-fd8e-47d8-9348-f84aaadbd460", "sighting--37bc5f63-0c56-4303-afc4-c011af408cb8", "sighting--d8f7d8d1-8c48-4d0a-9b38-c3c13190a675", "sighting--81a11468-5389-4fc9-98d9-7a18401d3cae", "sighting--eddc089a-94d1-43c7-86ea-3bfc998ba1fb", "sighting--b449be3b-0822-4663-a269-bc17544cb0c7", "sighting--e3dde8de-bea2-4aa1-be1e-0a07d5e59996", "sighting--4b6a0be9-8571-4138-b735-73d5cacfb780", "sighting--7764531c-1a03-4efa-8d56-f97f9a5a7744", "sighting--7de367fa-4ee8-4e1e-957d-7a9330b0dfd5", "sighting--2b963d30-bbe5-4dc7-b8b1-eb545f54cde4", "sighting--9dc673e6-409c-4f26-9dba-8f9be3d6c73d", "sighting--79ea491c-26f4-4fba-8410-06e55b6dca29", "sighting--b2d85263-f06a-4dbc-b135-c0ba4122d396", "sighting--a60a7f5b-4b96-4457-a75a-b57fb204495e", "sighting--333c5e21-3110-4726-88a6-01e2793ac18d", "sighting--c8aae363-5415-4d87-b668-e04abcce9d9f", "sighting--1cf4dc02-d2a0-4cb2-bbb6-dc4ceab389ad", "sighting--9a54e699-1c65-4065-92b1-7f07b25bc4c7", "sighting--b8810ac2-5aab-44e1-b00e-913840603ae0", "sighting--a39c3536-bbdd-4b74-9150-e7f7c0c5bb1c", "sighting--3895c8b0-20a6-4881-93c3-66a998c26981", "sighting--a0308cc2-e770-410e-b37c-3454f704153a", "sighting--8bca61c3-dc1a-4db3-9b1c-3124bfc2501d", "sighting--e97901de-4a37-427e-9813-b51e339e6813", "sighting--0a8f575b-df2e-4f61-a460-a75a28890dfa", "sighting--99aa3c76-a458-4777-bb08-435427019134", "sighting--09db5801-70c2-4f40-8135-55b7aac1c3ec", "sighting--004b573d-81cb-44e5-b33a-69a1a03613d6", "sighting--51fd715b-9a3b-42a1-98d2-ea5d573e077a", "sighting--aa36090b-2dbf-4983-8d5f-6a145573fff3", "sighting--6b70c5f7-6ab2-4ef2-9c53-ff1bab3e6d79", "sighting--912fa5bc-ddc9-427c-85c7-6ef1cf19a71f", "sighting--2f06d9c9-9496-4aaa-b02f-d05e35f2c249", "sighting--481b048b-b8b4-416e-8113-95921f67a2bf", "sighting--d8e2c2a0-a66a-4608-8389-594e755d76df", "sighting--29e1f11a-5439-42b3-a338-a73426d9c97c", "sighting--18439a4b-c3c7-4fcb-aa59-246af53cd257", "sighting--750cc60d-5242-4927-bad1-fc2663df38f9", "sighting--d1916506-55b0-4bac-9936-e8af616546e4", "sighting--d3e69979-3421-4e77-9022-1c9264138767", "sighting--3dc1777f-0962-42de-a712-1725ab43bfc7", "sighting--e20b2c60-8606-4c57-afe7-31f70a4f02b0", "sighting--2e53901f-2206-42ae-ab32-43d6b9804c11", "sighting--a9546171-d02f-48d4-b6e7-2c5a38db05bd", "sighting--a3bdf147-c8f6-4894-ac05-6ef8acadf152", "sighting--8e6dfebc-c69a-4def-b43f-ebc6493cc3d6", "sighting--1d857ad7-bbd1-4b17-b12f-da0ca5920e53", "sighting--f6245bf3-0fb9-43dc-82f4-a1306abcc360", "sighting--8a2a0c70-faa6-4d96-b962-41b9b9a481ff", "sighting--fd2d6251-9b2d-4ed5-8a71-ffe53b3656ae", "sighting--8ce9b023-177e-4a7b-924e-48e001c266ab", "sighting--f73f6157-7a8b-41bd-b36a-c0e29e908b13", "sighting--2c8ec138-e0c0-4b84-80ad-d499daa525d3", "sighting--677eeed4-51cd-4215-8775-2f30552cb30c", "sighting--67e83c97-4f4d-44a6-9281-be5ec7f2a3b8", "sighting--5148cc8d-f95d-4832-85d8-4d7b63bd2f5d", "sighting--7494de89-031b-47d3-a17f-2fd562bc006b", "sighting--41df11fc-7efd-4de3-9b13-e3156e9efc04", "sighting--29780a1e-dea6-4956-91cf-bb5e48ed0f29", "sighting--25c2d0e9-1c92-4b9b-a1ed-52b934960afd", "sighting--aafcb10a-7508-401b-be43-32abb4f96bdd", "sighting--070997b7-0d54-48f7-9677-83cc277ec0d3", "sighting--d40699b9-e11f-499c-838d-193dffc4e664", "sighting--af37f194-01d0-4008-8e08-305abb789c23", "sighting--4cd2cb22-e53d-45af-a287-c56fad5fe28e", "sighting--9e043a5d-8c67-48a9-9835-ff7eea8ab3fd", "sighting--b043d3fe-937f-44ad-bccf-d875fbbf4453", "sighting--8beb1196-9307-4dfe-81b3-d01c28ec428b", "sighting--a3377599-4bc5-47bc-bfd6-9c47f30b195b", "sighting--7dc989fb-82a6-4f1b-91af-8543183dcd99", "sighting--a65efa91-92b4-4445-87c9-c2bd7a9ac9e6", "sighting--f60f0dfb-36fa-4b16-ae86-126acb976a2c", "sighting--38c00a9a-e4ff-4010-8318-f469c0952cfe", "sighting--2f6e92b5-6499-4acf-a6f7-eb790f653e68", "sighting--2c41344d-4fa2-46e3-85ff-9a28a3ee518e", "sighting--da1e8d08-7093-4a24-a5b3-320ce9d38291", "sighting--4b6e34fb-afe5-4164-9453-367f3d093b2c", "sighting--dedbfc75-c373-49cb-bf49-e7e3760ada73", "sighting--9ad3eafe-4b4c-474a-9677-30cd06acda04", "sighting--ab88e11f-0e88-4328-aa33-bde83f75a422", "sighting--8f95418c-2871-4ddb-9d8b-918d10df4683", "sighting--99d46a4c-12f8-4a95-a052-bb6439bf9016", "sighting--5a96a966-8645-4520-b5d1-be82d64004a6", "sighting--8f8132a3-3530-4965-8c53-773d77490330", "sighting--c1278962-5cd3-410b-a07a-e2c14ea0bd21", "sighting--fb57140f-51b6-419c-a804-22fb26676935", "sighting--98fc7dca-0f03-4d9e-9b55-423e0d82607f", "sighting--ac182a27-1e06-4ce9-946b-e446f3a62ef3", "sighting--8e0d90cc-a095-403e-9235-2f59956585b5", "sighting--36e6c700-ba0f-48c1-bb04-0856ec548580", "sighting--ec78daad-a469-4911-a581-c1278021a4be", "sighting--7eee23eb-50e5-4f50-931d-907c5408bb4f", "sighting--4bb83101-0b58-4f30-88b1-31a6cf2ba436", "sighting--86ee4c4c-98bd-4d12-b3a1-7090730a70fd", "sighting--7bbf99f5-c23d-439b-bae0-ddcfc20de9c9", "sighting--3c4421c1-143e-43b9-afc9-7475b324dad0", "sighting--0b126774-1f1f-4170-b7ba-acf8427c2f14", "sighting--95cdcda1-ebba-42f9-8d54-dcab8919b9bd", "sighting--bc575fc7-b96b-4dc2-b779-71bf66a935a4", "sighting--e663ae89-81eb-4c56-b89d-5570e0dde050", "sighting--16be80aa-dd41-414d-84f5-37207ee27c43", "sighting--bd021c00-f651-4974-8bc5-d788fcbc187b", "sighting--bb658ee2-b448-47fd-a8f2-b198ed7f220d", "sighting--7e134934-e79b-4f7c-b58f-3ac2db620973", "sighting--d9007f6c-e78d-4caa-9ceb-d4e18fe456a1", "sighting--2bddd316-9e26-4f88-86fe-0e2169d7551e", "sighting--18272423-7711-4a13-936d-6c10614ea621", "sighting--e17e424d-112c-409c-9314-80131f005cc2", "sighting--88d5e393-5bfb-4658-851e-5390469ba8fd", "sighting--6fc0ab7c-b996-425b-82fe-4960d6212c0a", "sighting--1c0272ed-4894-42f7-a04a-7c19146a3a74", "sighting--1bee13eb-c02b-4f41-a1c5-808ede3d26b2", "sighting--2481df2d-93cf-49a0-b102-a47e45ede662", "sighting--8cec7b49-cfc5-4ae0-aefa-b45668d35e6f", "sighting--fe54f284-f065-4a70-b2fb-f94b747b2904", "sighting--b4c0caa2-60ad-41d8-85cc-c73478c53703", "sighting--71e0f0d7-6ac1-4e8e-b77b-9fb956171d07", "sighting--3fa97768-460c-4b54-bfaa-54df67dcf7f8", "sighting--aba25f77-b346-4500-935a-907255ca9c80", "sighting--68b1d515-3673-48b1-ac2a-7d4853211b8d", "sighting--a0e7ea4d-7fe6-4f99-b0d0-87793f89d2d3", "sighting--ee91c257-3048-4648-a169-de799543f94f", "sighting--28649422-bcb6-46c4-94dd-d15dc0731465", "sighting--64ecdb84-e50a-4280-92f7-9ef121f50825", "sighting--0fdb1651-3980-4681-ab1c-ee0497f044ec", "sighting--2609d960-aa26-4014-852b-368dcce155da", "sighting--87d254de-24e7-4cae-b760-531ab749ef65", "sighting--0c44d289-e4d6-49a6-a06e-55c6c4ac50c2", "sighting--8d53fffa-fc22-4d4f-b437-676bc44606b0", "sighting--f64ab295-0916-460a-8969-b7970d591f29", "sighting--e07c50b4-6a5a-4be4-b602-5eff6b7f14f5", "sighting--fed2d148-f26d-4b13-848c-a2cd807c382b", "sighting--f308be84-daaf-4c91-9d66-520a949427dd", "sighting--6a1c0136-89a8-428f-a9ff-486ad7082695", "sighting--13460b95-4432-4c0d-852f-8497ac65a1cc", "sighting--8af6bcd5-7cf1-4656-aa1c-7200386e2c48", "sighting--eb8f9dff-0b99-447e-9292-ffada6cd8a54", "sighting--47e1525f-3d1b-4710-a653-28e48549c607", "sighting--a980bd41-e544-4c0c-9c91-5bfd29ac5e23", "sighting--07a67436-b24a-4672-a4d7-3759733ef8d7", "sighting--23bd6595-4027-49ab-9dca-72a6edd9c5b1", "sighting--10e22b7c-a7e6-4cc5-9a8c-7b6438c724bc", "sighting--99661fcf-202e-4349-8152-68f0d98baff0", "sighting--2e564e52-289f-428b-b9f3-429c96ee0eeb", "sighting--ba1a8818-c53c-49f6-97e0-fc77683a3e5e", "sighting--7c62196a-8bee-48c1-b832-83c3484d52a1", "sighting--37d4556a-b2e3-4862-a7e2-eafc49ee763f", "sighting--27b57e00-8cab-4514-b02b-8cd296972536", "sighting--0335b339-c0f9-4211-bd49-4cc7b91db78d", "sighting--9b7f7b7d-58a2-4b35-9aa9-037287162005", "sighting--2590027e-bb19-443a-b887-a392b18dc267", "sighting--69568340-c308-4b6a-864a-b1641c1134be", "sighting--514f0fe9-674a-48c0-8d0d-a2588f3d547e", "sighting--e03470b1-028b-4a5f-b2bc-a438ad74999f", "sighting--4fae2ae0-a276-4bcb-ad9c-9efcff7dc95e", "sighting--7e9fc0e2-e8d9-4fd4-bab4-2d109504e6a9", "sighting--64b38817-14e2-4492-aab5-3601e2874519", "sighting--f9c720ba-1def-4611-96dc-c2249c3480dd", "sighting--e4c96c6b-b1b5-4d49-a368-d044f1987811", "sighting--f3625e10-a963-488b-9bb9-eb72a6cf174c", "sighting--77205c0b-7d25-41d1-9d52-5c82179eaea1", "sighting--907af5e3-4950-42ea-8802-eeb78f938930", "sighting--90314bd4-e75c-4b09-a673-dcf48d13d020", "sighting--db7e2ab3-1bc5-443d-b55d-0f1996efb4f8", "sighting--1828a8c3-48b8-4684-922c-0fc8ec747dea", "sighting--0dbabe78-2b45-4144-b269-b814dda08ae4", "sighting--d6d8c382-506b-4aba-89cf-61d3af60f294", "sighting--9e72f1dd-f8bc-410b-a513-6f6a518afc32", "sighting--e17dc460-2eb0-41b9-ac08-b092f3cf3086", "sighting--974f5317-63d9-4944-affc-3c61342a0dd5", "sighting--fea2a56a-7f96-46eb-b3e1-92ae11d12e43", "sighting--5874b0d5-d1f0-4d4c-bbae-b023b8a8145b", "sighting--878fa23d-52d9-470e-b2d0-28bb6e3adcb5", "sighting--524fed3b-e35c-4c32-8d68-f1f2ce806acf", "sighting--e8aa83af-13e5-435f-90d3-862e434b8b97", "sighting--171f5a86-6d0a-472b-b23a-9726e0c6b062", "sighting--60e49e7f-1dea-4a2a-892b-7e71caafb609", "sighting--69c1a05a-faf9-4db4-b891-f6439b6cac1b", "sighting--1c1bd289-1804-42d9-8d1f-3f60ee35a27b", "sighting--430d377b-3627-44db-8aee-eeefa5237e40", "sighting--09c88bf4-aa9e-4f9c-8dea-b9626945b95b", "sighting--f634e596-0fab-4271-848c-855ebbd9af59", "sighting--a4a9fc36-1284-4ad1-91c0-6eeb9ba7c409", "sighting--62c0069c-3d96-40d1-a12b-7d6d2312a4f2", "sighting--1eca52bc-20bf-49c8-a70a-a5721bb71564", "sighting--f8e66bc8-1be5-44cb-ad64-a565f5d80366", "sighting--b4970ee7-da46-41a2-a557-69422eb835d6", "sighting--43888a63-b47f-4a48-ad6e-18dab8a9e3c8", "sighting--40e9a81c-3b75-4e9c-ad82-b7b8eb67afc1", "sighting--34fe8fe8-138f-4391-8d6e-f60c95575dc3", "sighting--69a3a335-cf20-4cc7-9c1e-79af1d68c49c", "sighting--83b8bb52-861e-441b-b631-e56448155160", "sighting--1ad3d771-36ca-48d3-b5d7-7048011884cd", "sighting--10d5c713-4bee-4fc2-bd48-cd0bd6f676a1", "sighting--f5830080-c66e-45f7-b338-6b9f374441b0", "sighting--7eea3424-d95d-468b-9fc1-f5b9c51b1ed6", "sighting--5eb09c39-0790-4075-bc2f-0a72f1191d33", "sighting--b5954a23-bb83-4c5d-a793-17099e15cfd0", "sighting--64bd34a9-27ec-448b-931e-e4539b532f81", "sighting--4145c562-9102-41ef-acad-71b054bcbdb7", "sighting--6982220e-8d13-4a3a-9ef5-cef957bfa718", "sighting--a141fd3f-0971-4e91-a7e7-cb1eb1af1b2d", "sighting--c43b5387-9e89-4f09-8b70-d8c53c83918b", "sighting--5aca6639-2ebf-4db2-8923-eace4eea3b4b", "sighting--be44aec2-ad7b-4f29-9f56-5a17582a0034", "sighting--9e6d97eb-34dd-4e87-ae3b-89c9f5927d76", "sighting--ff0b8bc2-cc30-4b20-a496-f0d4f487ff65", "sighting--588dc899-d832-4d3f-9ef1-770036b7c2f9", "sighting--487c2cb4-01ff-44c2-a575-c1d015824ac8", "sighting--b0cfd8b2-3b5d-44a3-9da4-08b85437ae1e", "sighting--4c2a3974-2bb6-4ce4-8be8-63f895e8c4be", "sighting--dd87d368-92f1-4ba3-a066-18b0fff30dd0", "sighting--fd070781-3902-419e-844b-21dcd609c5cc", "sighting--798782f3-6f49-4f66-9a51-e2b5cb7895da", "sighting--8c095197-616c-4d0d-8bbd-2e04500d880d", "sighting--2d106678-f979-4bc3-85fe-b9fb5e656b16", "sighting--87d16992-632b-40c3-be94-ecb2338fcb34", "sighting--9a66bcfa-8db6-4b61-a1c1-9df5a422471a", "sighting--aba3aea6-14aa-4b3f-82e3-d5056b5cd06e", "sighting--e8f76a5c-435b-49c6-ab71-44883c3c04a1", "sighting--1ffba7c2-846a-4629-b55e-3a6bea24f1a3", "sighting--2b7eba3a-8d1e-41d3-9d2a-fe32338a8bf8", "sighting--e538e9fc-70ce-49f5-bde8-2b707b41c1b2", "sighting--115b994e-1152-4cfe-aea6-d73681f6c247", "sighting--71038c1e-3be8-4a82-bd87-ee4f7ecff79a", "sighting--0765ec61-161d-417f-8b96-f99c84f5fe8f", "sighting--654e633c-71b7-4771-9713-38751dd9a9ec", "sighting--65caeb75-3cee-4fed-a745-1cd8a7479bc8", "sighting--cb4ea2ad-f724-4fa7-ad63-ded1a07c1d70", "sighting--0c259b4c-f8cd-4e1c-aeea-d00f13f7b381", "sighting--81189ba1-e074-4a66-aeb0-1bc016ef529b", "sighting--ec25cd1c-d056-4196-84c2-1653bae1ee74", "sighting--cd44ee0f-99bd-4127-80f4-f1edf9ecfdca", "sighting--475a8629-7f6d-4be1-af73-350ae6f19764", "sighting--1e350d03-97e3-43d2-916b-6d95dded6baa", "sighting--df500f36-17bf-4f73-a258-6ad9f6072beb", "sighting--f08978cb-b32f-46fc-86e2-ef11b551015f", "sighting--9db5e363-e5aa-47e3-847a-c04625047bbf", "sighting--e04bd544-d975-49d3-983d-999e459c5649", "sighting--edd7c136-7aa6-4189-8910-15efba6fcd10", "sighting--a5a241f9-1642-4d38-9f79-dfbe5cd62b53", "sighting--5ace1380-b5c2-4896-ba54-3a4d92134048", "sighting--dc91ced5-9747-4892-ba5d-a7c21bc07061", "sighting--83b3b929-2224-4fca-aaf8-444d2234a131", "sighting--bf0d899e-54e9-47c5-b71a-9a69ade6a27a", "sighting--4b6ca395-fce7-4520-8066-d39f6b1f376c", "sighting--ae99b901-79f9-4b10-9dec-851ea2451e75", "sighting--f93bb610-9cdf-47c5-9ad6-b51b41abdf85", "sighting--79dac81a-bb39-40b4-922a-577bbe0a1c82", "sighting--e3b90ee7-b9e0-4ea6-b55a-544e1fb24d28", "sighting--83e4bd82-68bb-4fae-b3ad-97dc78ea13ab", "sighting--ebcdd605-0c43-423e-bfec-d8fa8407145b", "sighting--cf50e1f6-82fb-4864-88c7-1db6138b2dc3", "sighting--62d6366f-d3a9-4ea1-aead-fc9d93103aa7", "sighting--059711bf-a395-4d16-8988-75742ec9be03", "sighting--31819d1b-1c04-4f5d-9e63-b0a498a1c600", "sighting--fff6e4d4-2c42-469d-8857-5b9dd4237f52", "sighting--37c3c0ee-7449-4917-b457-c620a39a7d24", "sighting--73053733-0e4d-4131-a0d7-1281bb4ca10e", "sighting--4bdd05fe-7110-4793-822c-927b6bbf6300", "sighting--6c6bb8fd-a20a-4e72-847e-a12193f8d49c", "sighting--46c256e2-acdf-49e1-aa6b-94fc4a1779e2", "sighting--cb2da720-6793-40a5-a590-ee6c28c0d224", "sighting--4b8441e6-9479-4f4c-8a4f-a09dabb147b5", "sighting--edd71694-0820-4ac4-99de-6e838292d1ba", "sighting--7d5277df-5b3a-44e5-9b70-65e225a45851", "sighting--3a1b5d72-a466-460a-bbc0-c8b35c1dcedb", "sighting--002d5965-ca25-4ed6-82b9-bcdfd28b5623", "sighting--4d4d479c-c758-4c20-8c7e-681fde3a8af5", "sighting--ebbf5ccc-7a42-4da3-a592-93b9320cd99c", "sighting--26c8f94d-84db-47bf-95e3-cdcd4c65ae72", "sighting--4caff477-71e6-4bb4-b16a-0bbaa7699c93", "sighting--f2fe1b3f-d63e-4779-8fdd-2b9adfee1b12", "sighting--401255d2-4638-4122-a355-181e6c90a724", "sighting--ff7105b0-e568-40fe-9b3e-98df9a3bfb4d", "sighting--6fafde43-f2fc-4247-9d13-936eb3b48772", "sighting--9897de34-998c-4977-a971-d44cda434413", "sighting--358ce21a-4a3c-4651-83ea-55bb9e13b174", "sighting--a271900d-5a3d-4085-b61d-2a5888d2988b", "sighting--dc8c2ce7-6420-43b0-9a87-7d65d71fc35d", "sighting--683935b9-61c1-4ddc-8fb3-d4a9a53ddfb0", "sighting--bf0e8d24-e50e-4d99-94f6-622b53bc522d", "sighting--36109284-b284-4316-bcdf-c9bbaa5a47be", "sighting--d083b14e-62e4-44e5-857a-3b168b1d0c6e", "sighting--a75a5169-2979-42ae-83b7-ea85dce1d555", "sighting--93f2f7eb-f766-49c4-90f4-7f82bd9a0278", "sighting--5430ab45-8285-4860-a6a6-8e678d210f2a", "sighting--b2a3c084-dd6f-4f5b-84ff-9eb43591fa8e", "sighting--3792e71f-fe4c-4e85-a022-17b719bf4f21", "sighting--f224bbc4-bff5-4665-bdb8-ec1ab0962d55", "sighting--616c351b-aba7-41cc-89be-b06bad7f452c", "sighting--b92b46bd-b2ec-49f6-a391-4345c77b6b1a", "sighting--930dec24-9bf6-436e-9357-a20638423116", "sighting--67bb957f-adaf-4773-b42a-169d72aad3b6", "sighting--7976d281-e3e4-49f3-b19b-7fb03f88041a", "sighting--a14a0a37-b318-41fe-99a5-732c9fdfe359", "sighting--9fd2dad7-10e4-46df-884d-d7b7d23551c0", "sighting--d2e36017-3f5a-4ac0-a217-2443a32bc3ec", "sighting--a7fe4849-5c59-4ab2-a28d-584b15bc4a66", "sighting--feea007f-dec4-4f96-98a4-2ca3c11026fe", "sighting--6ae6ab41-ad9c-45d2-8ecf-f524c8ec1dc6", "sighting--892809c8-ea56-4a29-bf01-8cea7a8810aa", "sighting--0a64dfb4-5526-4747-bd71-2fc8c4348b7b", "sighting--86fca5f1-d365-4fcf-8d1d-e64f91c2be27", "sighting--5257a6df-d584-4010-8889-14c1edc580ce", "sighting--7302cb9d-c53f-43d3-a64d-cf4d007e6658", "sighting--73ef9bdc-e24f-412d-b07a-756b955f6dea", "sighting--0325cc5a-1458-4dbc-8b75-1dc8d2cc69ba", "sighting--5630a43b-eaec-49c9-ab62-0d6ec325abfc", "sighting--246fc2ef-89c1-4db6-a825-864bcef1eca4", "sighting--469aca79-7735-4e6f-a618-70fe08c2f554", "sighting--9b8e1c59-7f9d-4048-ba8d-89762117995d", "sighting--0c7bbcbb-3b7b-477c-9bd5-d2bb50d90250", "sighting--ea76e377-f8cb-4f35-a992-6e157a7faa3d", "sighting--51f484ea-40ec-4591-ad0c-6ad4e1f0722b", "sighting--1fe35ea8-5680-43c9-bf8e-e4ce447e0a2f", "sighting--0c1a36e8-26b0-432f-9e25-8ada96c66afc", "sighting--0e6e97f8-2365-47a1-b17e-29ae236e34b6", "sighting--d09ddc29-fe08-4d11-ae4f-714a26467ea2", "sighting--2825be57-3ce9-407a-b48e-b5f7089632a0", "sighting--8a4ebf84-35e5-43aa-b4f9-a42b993cbf66", "sighting--e929cfca-5020-4142-b741-641015e41952", "sighting--70a42d66-14fd-4304-aa4f-ccd2de0655e2", "sighting--99f61658-e128-429a-a669-05ad90b21d46", "sighting--05dd010b-8151-4042-aa28-0dbad1630681", "sighting--91ea6e61-a2ff-4964-83f2-06d0812927e6", "sighting--6a5c2dde-1dc5-40c6-a964-dc3a110e5c9a", "sighting--c78bd1fe-f363-4633-848d-f38ddcaddd6f", "sighting--2173b462-f619-4340-9930-09647fd67f61", "sighting--c18841b7-e0ac-4bc1-87ea-c1f89a702f8e", "sighting--84a5497d-b36d-4917-a75b-999bf0165682", "sighting--fe463841-74cc-45cc-86ff-2e76a3f3e532", "sighting--6a3bc2ae-b62c-4355-8526-a696b4cbf3c3", "sighting--a2ce976f-d441-4320-8881-38a8e7666c09", "sighting--4cbd0fc8-4298-4ad4-92b2-14e300c625dd", "sighting--89026958-d0d4-4e62-835a-f3d7e82c8f92", "sighting--cbd9d2a6-eae5-4134-8a69-dca7923731a5", "sighting--43616bc5-3bf0-4a21-970a-313f6f65a3b9", "sighting--7a1600c5-ebd9-4fb1-a905-1399cb2de73d", "sighting--b9e9f407-1791-4f13-bc2c-8dd2eb6aaadd", "sighting--64494485-c4b5-419e-b459-2b837ef221a8", "sighting--fcfbcc79-9722-4781-8ac9-07752d4803ea", "sighting--603f91b0-87a7-4690-905d-04e3ef505055", "sighting--3e3d2ba5-fe27-450b-9a87-fa425936f2d7", "sighting--2d208613-5089-4ee3-a613-db123256f1c7", "sighting--392aff9e-3252-4385-8f4e-6f0be7e46868", "sighting--df832f5f-86c2-489b-bc37-b7c09586bd6a", "sighting--2821bca7-332c-46d9-996d-96e1684156aa", "sighting--5f75dd18-1dc3-4b00-a42e-30c106a58f66", "sighting--744702c4-18cc-4ac5-a16e-0514191984d8", "sighting--43ec98bf-9ff5-424a-b327-2690bdc4a14b", "sighting--b3e1de85-27ca-4e60-a18b-aa1913d0b20a", "sighting--a50da030-746e-4573-ac14-1ebd09f6c696", "sighting--20df4a40-6074-4696-8706-64dc90e1a12f", "sighting--52907601-0477-4b24-a644-a90ecb13b602", "sighting--5cb19498-fec5-4c01-88c5-2ab71259179e", "sighting--0597ac85-c0bc-42b0-ac82-052da93ac5f7", "sighting--cf6b49a5-667a-4675-af16-1256d49d62a0", "sighting--f60c105c-53d8-4a17-b3a1-45a44f92d1f1", "sighting--112dc472-9662-4fd7-bc4f-f696d5aa3252", "sighting--f3b9b2a0-ce66-494e-8986-b54b3df05a2d", "sighting--0d1b80e1-b899-49ce-834b-11cd030542bd", "sighting--2be8c37a-6883-4fba-a9f2-5841e57116f2", "sighting--6a6d5eba-9464-45cd-af05-71c6c027d24a", "sighting--2c6b5770-e5db-42ab-9790-2e9a6ebffaa2", "sighting--307451d7-33bd-454c-b99b-3008e88f581d", "sighting--aa572a81-0919-478e-b037-3d3437578f6e", "sighting--cc7ef6af-4c75-4824-bf2d-61d0d32cd010", "sighting--5d410030-338c-4721-8c21-8a7b41a64fd8", "sighting--cda0f4a5-96d6-471c-9980-35655dd68238", "sighting--aefdfe15-faa0-48dd-96e4-ab88df03342b", "sighting--3e566bca-f243-40a3-95f2-ff831a4d8c5a", "sighting--05774fe9-bf13-4299-8ee4-99fb4140facc", "sighting--c231ce04-b361-49b1-98c9-29f82b32fadb", "sighting--968a55fa-b240-43c7-ba66-2ac9577a8a4a", "sighting--5195781a-ad8f-4faa-9bf9-66d06693f6ef", "sighting--7d3b4733-101d-4359-ae62-455978f60238", "sighting--90e22dec-02d2-449d-9cbb-461fb40c1dee", "sighting--ffdd9736-c141-4e43-ab97-e84600e7e858", "sighting--4f980887-6862-40e0-9ad7-7bbb4eb04e62", "sighting--ddbc6208-d42c-4476-b334-1da3ec9a6359", "sighting--a93f540b-8ada-408b-827b-710ff78287d3", "sighting--701f0e40-e282-4639-a861-75496e8fe990", "sighting--d31075c2-288f-4d68-8763-4237a6dbc15b", "sighting--346e9c36-ac0c-4c69-85f8-bdc1fbdb67e9", "sighting--2fc3484b-bcd7-4a32-b32c-3c244a268914", "sighting--014be72d-3eed-4ae7-b45f-8a40d1e26c99", "sighting--5ffd0dea-6e23-4734-9948-da90994bcc7a", "sighting--39c002fb-c96a-4ee6-9605-a6bfa6571e5e", "sighting--f68798af-00b9-4aa8-bcbb-1d8dd009d810", "sighting--58c33c4e-64bc-414d-84f2-ea7f11c23319", "sighting--f245e143-9e24-45e6-b011-15b87742cbb0", "sighting--a5f3542b-c009-433c-98bb-18f0959e0dbd", "sighting--38e74822-47b3-45b5-9629-bc39f33680d9", "sighting--3bc256d5-8fe6-4390-8480-17777d96b84b", "sighting--c7ae50cb-f84d-4d3a-ace4-447d7917797c", "sighting--fb13d247-65cc-42fa-8f5b-a242d5b9d142", "sighting--583cc48f-0274-4d0d-87f5-fce041e048c6", "sighting--63133921-10ca-4d1d-bd13-cc34b032b6eb", "sighting--b17a5c5c-4fb3-4722-b334-ed398f093e9c", "sighting--ebd43877-bc25-4b2f-bfc6-dd1121403098", "sighting--e9a8806f-014f-45f1-a14a-c746478c5335", "sighting--f4cb66f1-8114-4276-9202-a93b0094637e", "sighting--09441c7b-b44a-45f8-add5-f3b4a28f39eb", "sighting--3d9e4aa6-884a-4787-95dd-dbc2358df178", "sighting--1e5a3348-fd8b-456c-a6d4-d0638c4e3b7a", "sighting--aee2d144-bbb6-4821-98b0-31dc622064f3", "sighting--e24b0527-6f47-4fd0-a9b0-ab3a2338c91b", "sighting--750b2e6f-3d2b-4c11-bd23-a26566b3a5b9", "sighting--10b440a4-c529-420f-ae73-9d83a177d2f1", "sighting--9f63ac04-0c17-40dd-893f-16bca754dc9d", "sighting--129b5f15-1bf0-4ee5-ad8e-f337a7141d04", "sighting--5e1e5eee-39c9-4695-b720-f5fb60789910", "sighting--971f1355-26e3-4912-8eac-388b25052193", "sighting--c5aac36c-cc9b-40ca-b106-a55fc8f66425", "sighting--f5f8ecba-c2dc-4caf-9c4a-b7b29e394cbf", "sighting--0a427944-87e5-4b89-b113-4af2610b5e0b", "sighting--0639c922-a78b-44ff-98ec-defcf82a470a", "sighting--b36e881c-ce53-4ecc-8751-ac4889936b2a", "sighting--a715b9b3-30c5-47eb-aff1-83fd49755d4c", "sighting--c59b6f21-f973-4d09-bb6f-7360c4b24aee", "sighting--88ffa990-f8ee-47c0-9095-c2b489467cbb", "sighting--b048211d-ea92-4ac6-988b-068ba45ba518", "sighting--6a34cf20-8718-4496-9e18-4bd57c389ba5", "sighting--eafc9c6f-414c-4169-81ec-0a96a8554945", "sighting--f8c20695-e204-439c-a848-84bdef3dac6a", "sighting--ad6827ee-e566-40c6-92a0-f012c7535041", "sighting--3ae41770-fda9-4dc5-9095-b6cd3a31dc16", "sighting--d6d7af64-9da5-41d7-b4d7-8833e9400094", "sighting--67b24d44-eb24-4b86-bc00-8cb2d8faaa3a", "sighting--35369efe-1b9d-4ba6-9445-c147e68e2d03", "sighting--fa6f4e11-3b68-4151-8380-5f023d3dae61", "sighting--ad6f8d64-2fc3-432e-97bd-05f6fc8f3e88", "sighting--b7d6dfe8-179a-40ec-83ef-5f61fa99f9a9", "sighting--6f8aed1e-b09b-4f7a-a327-96037f3fc973", "sighting--52eff07c-d5dc-4573-9a53-1e7ba501cca5", "sighting--fe3c531a-65e6-4151-8953-546da41a7b49", "sighting--8c54738f-fb94-4666-8677-7c2816519292", "sighting--9c8444c9-895e-4dbb-80f6-2629ea828e22", "sighting--e4e9b577-46af-4d35-80ee-b018e9fcd291", "sighting--99ae7a6b-a456-4d42-b9a7-8a84696c34cf", "sighting--cb8595b5-592a-44e0-8e21-1068a731a8d0", "sighting--6a624dde-d7a4-44a4-90a2-be7ae30443e3", "sighting--6e830b2a-64e1-4fde-b667-d28bd3b0e72e", "sighting--b211c7ed-fbae-49b1-bedd-cc1a70524482", "sighting--b0cf1636-78da-4ab7-981d-4443a1cbfcb1", "sighting--a96bff42-7ee7-4a22-a8d7-2591e662dc28", "sighting--f2fc52f7-f385-4cb2-9e1a-a29d14776355", "sighting--1f7c1992-2c06-409c-b22d-f66fd70b50f3", "sighting--4e7ae6fa-4706-424c-b4fb-84f9ed0e04a9", "sighting--0bcf7711-6cec-4ccc-9d02-8539e6f460cf", "sighting--c2b6752d-bf2b-4462-b2c5-414eb0a72243", "sighting--8e6bc4df-0062-4e1d-87c0-5e60fd7b2924", "sighting--a340d465-1b06-4064-84ab-110c01168f8b", "sighting--b16eb39d-8a06-4550-a4ff-36b6af464975", "sighting--fbb5406b-893a-49e0-98e9-ee01b7f1946f", "sighting--e02d4580-6720-4656-93e3-4531cd42166e", "sighting--419f2892-4a5c-4d4d-ad7e-77237daeba19", "sighting--e96fec31-0b56-454d-9ff1-0fbd332419f9", "sighting--4662baaf-9088-46ac-a855-c5130ad97b40", "sighting--533b3f4f-273a-472b-b5df-908d58c41ebc", "sighting--c685cdc9-746c-4499-98c1-9a1bcc552519", "sighting--f9b66db2-3554-47c8-9664-577884012255", "sighting--e3a3cf1e-4091-4f2f-b686-4fea2bf1bc12", "sighting--bed12efd-0597-46cd-b2b6-28193f96b6f0", "sighting--03197a0b-4dac-4bee-b9ba-214e3d5c60af", "sighting--ed6d08ed-370b-492a-95d0-04e7e980cc37", "sighting--38573250-c046-47ed-94de-681a5270ee9b", "sighting--b57b499d-f0d1-444c-9e6b-fcdaabc771c7", "sighting--119284d0-bb0e-4d3c-9352-574266c68b7c", "sighting--a3f25166-a822-40c1-a363-fa02feb8362b", "sighting--49b56ec4-4070-4424-9c68-90546e65d8d6", "sighting--50b4390c-15a5-4968-b430-d43a688aa4d7", "sighting--9aed9580-273f-4ce2-b7fb-eac7fbfb46a9", "sighting--bf3aa4c8-80a6-4bdb-bb68-da3bf5e8cab9", "sighting--b27c7e2b-1593-459a-b9fc-85658df22dcb", "sighting--3f55a739-fa87-458b-be4c-12d19dba8844", "sighting--158a8755-9f2a-4f8f-b050-1e8a814acee8", "sighting--5818a677-8526-44c0-ba07-c20d3327861a", "sighting--1e92e2d6-1062-4339-a747-52997ea11846", "sighting--369f63e4-7fde-49c7-be94-a2335d98ba09", "sighting--9eb2bbc4-3f51-499d-8fbd-749ce3317306", "sighting--f0b5b0c2-81bc-4440-93dc-1eca54619d38", "sighting--c490e5b6-a030-49ea-a95e-415a15233ad7", "sighting--a7187c64-b2de-41d3-aa8d-eefc63e5d243", "sighting--739827d9-7fb2-4ae3-9523-c96e15ac5525", "sighting--75a9a31c-4551-43e2-9881-be5a5b8a4f8a", "sighting--d7dff6d7-48b9-429e-b0b0-340478c969ef", "sighting--08ec819c-8408-4761-b8ce-735fb033d522", "sighting--1ef26182-4803-4950-8aa8-2f39fb86ccdc", "sighting--ced87d14-2581-4a97-ad44-f3c503a35e62", "sighting--a157c3bd-c368-4ce0-a85d-e867b4e9e37d", "sighting--7bb7c27c-39c5-464e-b649-fba898f142d2", "sighting--aae51cfe-c9b3-44ce-a222-a7b5e843c202", "sighting--c4f2772b-36b3-419b-8ddf-89dc6453704f", "sighting--6e98d54b-388d-4564-b292-52c13c538a43", "sighting--720d5fe5-042c-4395-b1b3-14c029945b86", "sighting--cf8b59c6-b9bc-43f0-81eb-10fd2c30eb60", "sighting--78adca07-d37d-4008-b2e0-ac43eb802c2a", "sighting--1253a677-70f8-40f2-bec7-e622bdbc65ec", "sighting--3c367538-78da-475c-8a7b-c1741350eea0", "sighting--656e7b41-be1b-419a-80f7-c7c06f7fe637", "sighting--ba2b3414-7528-4947-9fc0-4e7d7a9bc9b2", "sighting--958930b7-acf2-4604-b360-4b1903cc7a9e", "sighting--46a81e23-d856-47f6-b0be-bdf253054fdc", "sighting--04f19e73-e412-4972-af84-a26311950c75", "sighting--97a64d7b-59a6-45da-8e93-1921f4ae5a3d", "sighting--7fabb128-b6d2-4bac-9427-563940494883", "sighting--f778e0f0-da57-4c38-8a25-47202e1132de", "sighting--7cf2d6ff-9fa3-4785-9979-cecc418d5786", "sighting--d20f8444-9696-4386-8805-3a8afe305de2", "sighting--ccb77e43-81e7-407a-9cce-e15282998ca6", "sighting--71ee991c-45f8-403e-aca9-5ea64ccef193", "sighting--262d89b6-6448-4226-9ae9-1896f47083b4", "sighting--143278bf-cdd7-4c08-8a53-73d4c73a3a68", "sighting--ef7a6193-fb4d-4d0a-b3d1-8a9b403f66dd", "sighting--3bb4dbee-ef9d-4a0a-a496-2bd357224f9f", "sighting--7fb482db-51c7-44d0-b701-0ffcc2eecf67", "sighting--c8a4317a-9721-47ae-b284-dc51b6014ac6", "sighting--262e8daf-2c5f-47be-b0c9-6ee4917f4064", "sighting--10227831-6d14-4f35-98bd-6e47bb4e0e35", "sighting--a43cfba0-cae0-4754-9034-5d85d6afaf19", "sighting--a541b9d2-fc6c-44b7-b797-694c21a0c398", "sighting--ca504469-5e6d-4628-81bf-6969c576e08f", "sighting--d441d950-184e-4134-8e3a-67f82299a3c9", "sighting--b35fa7f2-82c0-4620-9ec5-98b109f403fb", "sighting--dbd08277-f5f7-49ec-a5af-8b87960d13b3", "sighting--73c0bca7-180e-40c1-afd5-a2f98a0899c0", "sighting--5bc567a1-1b4e-453b-8e81-b26d8cca6303", "sighting--29aaaf18-8059-42a8-9c0d-c317912840d5", "sighting--3511782f-abf1-47f6-b0fd-d8d03d29f173", "sighting--0c2f31a8-277d-4e1a-87d1-81215347b4c1", "sighting--fbca6a92-87ab-43b5-8788-49e827b433f4", "sighting--88567155-c17c-4e8d-afba-9221d0b3ace2", "sighting--4d486def-43f8-44ff-a7ef-de57532bd883", "sighting--f1f98d3a-a6f2-48dc-9156-20255de1dcca", "sighting--c78b87ea-e7cc-4037-9a96-2ee43cf982ea", "sighting--a007f772-e068-4a46-b8af-affe9aeb6c5d", "sighting--556460da-3f71-428e-a55b-83967d140484", "sighting--5bec8d21-020d-47bf-bfc8-3b42fad7b841", "sighting--da063140-9e72-41b7-92c4-c62efe358203", "sighting--8f1794aa-cbff-4920-b46e-0aeacdc4ff70", "sighting--e835b7ae-1a5a-4211-8e7f-a479f06affe3", "sighting--d18be51e-eada-4a61-9cc6-6c9cf550a9a1", "sighting--128cfe56-0140-490a-8baa-0bb86f88b903", "sighting--1b4eabd8-1285-43f1-a46a-37f79823bb79", "sighting--75777660-701e-43b6-a914-612fa696da90", "sighting--53baaca0-e306-4f03-840c-ba57a2ba54a9", "sighting--62a7fcbd-641d-4472-a7e9-65ca0f855595", "sighting--e8a8b68d-5eab-4df2-97ec-c503062077f9", "sighting--eb2f9977-f123-4796-8c28-8b21120ab025", "sighting--b16751cf-503f-4bb5-ae7e-5fe3cb5de0d4", "sighting--b71c654b-30af-4795-8bf9-7bfa321d9c1c", "sighting--1b7d036b-2e43-423d-913d-404726854d8c", "sighting--5aa0b6b3-b4af-45f9-b3ea-d2df33e409df", "sighting--586ad1cf-bf8d-45d8-91fd-227844bd75b0", "sighting--ad4d7e7e-d119-476e-a794-9419ae71ebc7", "sighting--77a425e2-2834-4a78-83a7-d63856a9a236", "sighting--b7445790-f8ba-44fc-b269-062920a1f6ce", "sighting--9bf7f97c-dc79-4556-b33d-ad8066344176", "sighting--1d09d0d8-3fbf-4fd5-9960-60c9e4984902", "sighting--ca033468-1f70-457c-934d-a0e2aa6560e4", "sighting--f941223a-802e-4895-a03c-f4bf69dc6727", "sighting--bf51c417-39d0-4218-a0bb-fda2bb761fc5", "sighting--47898244-82af-4f09-b73b-446c37cb32dd", "sighting--c0bd5b98-f91c-4680-b874-51fa565d114b", "sighting--8566bdec-ec5a-4b66-8a02-15f96ba7939b", "sighting--fd7fe346-7ed9-406c-9527-355e04ba5b59", "sighting--41e5b317-e933-4c89-8c41-6394298ac447", "sighting--0e6f92af-c489-487f-b5e2-e4ebeffdc116", "sighting--aef78458-62d4-42c9-925d-6c8b122cce18", "sighting--4ac2ae58-4a45-4650-b146-3384444bcd2d", "sighting--3c718a40-1ae8-4138-9d8e-fd3e6bb7c760", "sighting--e9947bd4-c0f9-49ba-a233-2e355e6694bd", "sighting--82b43a78-2917-49a1-9156-12dfb68c01ff", "sighting--3f6491be-8532-4783-8500-8e9663fb9359", "sighting--2342aa7b-311f-49b6-926c-767c24530cbc", "sighting--ed04c59a-2e34-4487-845a-2e211e6bf415", "sighting--feaedac3-313b-4345-a904-39b3020c4fec", "sighting--1413af7a-d6a3-4cf0-a90b-68e6f6d9500a", "sighting--af457e7e-42ce-4158-9644-852a503ee74e", "sighting--6e7b06ec-7afa-4df7-818d-803650bbc89b", "sighting--6630599b-e6e7-4b85-bb31-a68c946087d1", "sighting--15ce9920-0603-4952-9182-f8523a01063c", "sighting--ae8b49ef-97b3-443b-9861-4a0965272a6d", "sighting--6dfdf834-aaf1-4c3f-a753-f5e7ea2859ad", "sighting--a80a47f7-4fb5-4d35-89a4-07a948fd244f", "sighting--a820898c-b940-43c6-a486-affdd0eb6606", "sighting--55891202-7607-46ce-93d9-37bbfe66577b", "sighting--ef5b267a-3434-4f99-9a98-990de92a0d79", "sighting--a1bfc0c3-0c68-4844-98c4-aec1dde8473f", "sighting--4a196248-5c92-4ea7-981e-80f85024cb99", "sighting--75b2d398-3bf9-466b-9a19-67b5fb724427", "sighting--7a29f497-77a9-4f3d-aff5-31bdb83e1869", "sighting--290df6ac-24d1-4a0b-9014-2527f1d537b8", "sighting--a3b0c8af-4321-464b-82f1-65d3fef6eefa", "sighting--d39bea87-4655-4352-b47b-a78fdcbfc735", "sighting--df6d032d-dd04-4098-856c-a225edff33ca", "sighting--d161efdf-5c00-4cbf-adce-95ae2c90ad42", "sighting--e768fa6b-dbe0-48b1-8d85-b08f9c25c361", "sighting--879f9fd2-1f72-46bc-9ad5-2a6749fe2feb", "sighting--33361437-19ff-4d31-90d1-8dcbe135fbb7", "sighting--e9df6d10-7ca5-4cd2-bb45-8cde078cd654", "sighting--a1fb6f73-853f-46ed-b7f7-05d1fa1cf37e", "sighting--ed029993-1413-450b-90b1-68ea815475a8", "sighting--c47ebc4e-617d-49c6-aacf-6e9f2fe3f0bc", "sighting--bd24ceb6-8119-43ce-8323-85c2e1d742ef", "sighting--630d2c84-18d1-467b-ad17-46ded0dfd6ab", "sighting--9d750fc8-d261-4290-9c11-4073c414cbc2", "sighting--9e8e9c02-819a-4e4a-8651-293dfff144ff", "sighting--93c65262-719e-438c-9b18-2583801c00d2", "sighting--d9b4a53a-19f9-471f-9c54-001705bdfebd", "sighting--52aae7c1-1072-4f3e-bbb4-69fb3c9a419a", "sighting--35409d39-dc0b-46ad-837c-dd2c216889ba", "sighting--7afac205-cea2-4211-b4f6-131f5f074459", "sighting--93b135f9-12f6-441f-a35a-27532517c767", "sighting--02dd9335-4c83-4367-aa47-60b24cd791db", "sighting--1818ad89-3762-445a-afd7-40b34a56ff33", "sighting--ab84eb9e-e9d5-4a69-9708-ef1accb35a7c", "sighting--d1ef00e3-6ba3-488c-8cdb-d197ed6ccadf", "sighting--b940f6bf-0deb-4acd-a56c-cf09039c9915", "sighting--bbd18086-80d9-4262-905b-ae91d7a4c6df", "sighting--2369a11f-81af-4c78-b683-7cfb5c35eaa4", "sighting--9000ecc9-8832-4d98-b69b-9dbc6fccd7ed", "sighting--01327bbe-ddb3-457a-bbee-439462c0bbae", "sighting--dbfd5107-bab4-4f15-a022-3353a029db56", "sighting--b27b0315-bd13-4eff-8c10-cfc6655c9310", "sighting--27c86bee-2c28-41a0-86db-30fb4f12d527", "sighting--41d25d70-6b28-4e3b-bdba-9c0e067c60ba", "sighting--a036c437-e3d4-497d-a8e3-93ea27a69566", "sighting--8aae92ca-2462-4276-8972-f3c894f866b4", "sighting--f00d6e37-e4f7-4ac1-83be-bbcac4124d0e", "sighting--1bfae59f-90cb-4064-b827-7ff7cc921fb8", "sighting--72ec6c3e-f5d2-4cf2-8bbd-721f7ded0241", "sighting--c9fdeb40-9cf5-49b4-949d-509aafcb5168", "sighting--d9cfff69-0f72-446e-a58c-7738ac4f6d71", "sighting--53cd7621-84a1-4ca6-ac2c-033916543811", "sighting--3659a34c-8a0b-4e35-b055-53cd62964de4", "sighting--65fd3e53-97cd-4b46-9036-8971b13237b9", "sighting--3e524c98-827c-4e16-a140-d22aa440d02d", "sighting--7ec95805-0198-4ee5-9087-e147c6237e3f", "sighting--8496fe58-2309-4330-8da2-28f26890b681", "sighting--458d74f3-f5ae-4701-b542-0b7fe60ee236", "sighting--91b04ccc-6987-43a7-b812-ed6eb5fe8c68", "sighting--2e2803f2-536b-47cf-a6e1-a49c4779d8f5", "sighting--58ee7b42-2a27-43cf-94c4-2d816dc39b7e", "sighting--1d43007c-ed99-4ec1-9806-4fe0585b2009", "sighting--e8752e15-94c9-4b73-be55-0e17e52d6d55", "sighting--a7e14c3f-91ee-417f-bd74-abefd20ec890", "sighting--ee41b89c-1172-43c7-a4f2-d36666e2d89f", "sighting--e0f8964f-4878-4001-ab76-09192e8535a0", "sighting--49c851a7-e24e-4074-81c6-0d3137c3a589", "sighting--5fca5586-db02-47b2-9d3d-ae38520751be", "sighting--c504222d-f785-478f-8bf8-abd541b7060d", "sighting--f0609807-c0f2-40d6-8060-7a50f9915f25", "sighting--1e066d9b-1754-4d3b-a511-ec7ae4423a07", "sighting--6d96491f-ef2f-4e4b-aa4b-bc2f447dc835", "sighting--f8ee4115-6030-4a3e-9c54-5f5ba9031463", "sighting--8b612c64-39fb-43d7-bd72-2112218955f0", "sighting--eb08cb28-36bc-48b4-a605-e0fb992098b3", "sighting--b741b2ef-9c27-42a9-ac33-baecf647d0a0", "sighting--5548294c-615d-4591-b4f3-486ee1684f0f", "sighting--499c0592-10ea-474e-a5a2-4af5b10f1368", "sighting--02d2c5cc-ba47-4c11-8374-477279de1935", "sighting--0bff9458-67b0-4783-9efb-fc491fa9205c", "sighting--060e609c-f4ba-447e-8ef8-a55ecb4f2272", "sighting--7205af1f-dec5-4812-8047-3d89bf6cff15", "sighting--46035ac0-429c-4ff8-a08a-917cdab1cd7f", "sighting--25a242a1-f2d7-4993-8c00-7dd3eadaa04b", "sighting--bd6893cc-a3c9-4347-a74b-2d9c8eccd73b", "sighting--c89f1802-bc07-4dc0-b086-aa71ee66a905", "sighting--24f63504-ea7b-4bcc-a847-c29ca6faee8a", "sighting--dd6cc867-29aa-4b68-9733-d0678969c4b7", "sighting--1b2b60a7-a55b-4c7a-a030-95c5a1c39892", "sighting--c437f075-a806-4f34-81dd-c61a37000ce8", "sighting--3aed81d0-7c87-4e31-a733-ea2e18120943", "sighting--cc71f82f-45e6-4c69-92a0-d0e188b1be41", "sighting--b6eaff47-042a-41b5-bf39-6f69b5e51c9c", "sighting--edb7771b-e150-4476-b65f-2c7975bd7ce1", "sighting--80da58e6-6ed0-4599-95ad-5b4d67f68d98", "sighting--b4ed1001-bace-4c2c-8140-3949018c0e26", "sighting--eb561b9a-686f-4c2e-8be2-a4de5f5182f8", "sighting--ef2ccdbd-0ea3-4751-8f1a-86de192789ed", "sighting--b12c31a6-dc9b-443a-9ac6-f3057635cdbd", "sighting--4068070c-c118-45a1-b673-6f922fba1e77", "sighting--0a448cf3-cb7e-494b-8351-98e028718d27", "sighting--2202efda-2174-4679-ba27-91fa8aba8a14", "sighting--13b48e1b-57b9-4787-b04a-fb6814be6cc4", "sighting--1c727ecb-b1b7-474f-9472-762410268c6b", "sighting--b3496767-2e80-4de1-85d7-0e80cb375c8c", "sighting--3fa4a0b3-1962-440b-91fa-004a33cb27fb", "sighting--6435e98b-bf4e-452f-9208-e149295a5f49", "sighting--68a421e4-4ddc-4a2d-9667-1b5e8fd021dc", "sighting--ffdbbf4f-cbc9-43e7-bc37-454093ffb093", "sighting--a6c34cfa-bd8a-4d4e-a3ab-6d31f3630811", "sighting--d8834ea1-4bd4-4745-bb0f-fb110dd72220", "sighting--6b353681-6007-48bc-9476-bcee3cf483d4", "sighting--5f44b236-3a40-477c-a286-9c627180eb43", "sighting--9367b384-c961-42bf-a416-d717ea3f9d5a", "sighting--d39ca5fe-b553-4726-bfbd-fc1513633320", "sighting--11e18dd2-9012-4915-ac4f-d9eb32f7e95f", "sighting--d4638689-a662-4d04-bae7-bd95ab01058f", "sighting--fa9b80f8-7dd5-4d34-8752-02057e5a990f", "sighting--1258c298-5bb1-4d7f-b297-d2aed4989a52", "sighting--8ef43138-11a3-4532-bc4b-4f1ab74056c6", "sighting--0eab49a5-1321-4e28-8d8a-fab6be7f9189", "sighting--ff6ec4fd-bd85-4047-a1f0-cf3b897448a8", "sighting--30ac41ad-ce50-4544-8b9e-ced8ed2f85f8", "sighting--2d6e8ddf-b685-41c1-b2f5-a0bf63f3c183", "sighting--c379ab2e-e035-43fb-b52e-6f9a8df51a0b", "sighting--413ec4b6-4e0e-48d4-8e9b-122b0320501d", "sighting--cc0fde36-ff50-40fd-a9b2-f1967d084034", "sighting--9f10e28c-515e-4127-bd17-6d6d822dc4ef", "sighting--f7791d0d-d0b8-44ca-bbbe-bcb5cb333b36", "sighting--9eef5900-92cc-4e6a-81db-f8393368792f", "sighting--1a12b2d6-33fd-4f80-b20c-9378ac727279", "sighting--48060142-8d1c-4179-bcf1-fae048ff806f", "sighting--9544b680-173d-4bd8-a580-0f5b7e3943d2", "sighting--4049d381-da03-41e4-b802-ec0e333e7bc1", "sighting--28c79813-dd33-43f0-a38b-0b8a4c7efa50", "sighting--437526d2-79e8-4639-a698-30852ec2f1dc", "sighting--0e339db5-ba8f-43c1-84c3-5a275e1bc042", "sighting--f01ab349-5f36-4b30-b2d7-8828f67a6675", "sighting--9e51a166-3b1a-44b0-a830-0bc1a0eb4d5c", "sighting--be3ae3db-1b89-4c91-85e8-652dad76146a", "sighting--77a9980d-1fd5-49f6-b322-3dcc1b008d2a", "sighting--71819096-f030-4d01-9b16-369e70fe362c", "sighting--c5b8cb53-b632-416f-997d-27a46b7594eb", "sighting--c6826529-f6c2-4c7a-a660-b0d4f7a32fbc", "sighting--543b90d7-9547-46c7-ad28-6860e112f910", "sighting--1d61cb35-7bef-442b-8703-0ed5943813b9", "sighting--14f8093b-c028-4b2e-b4c0-a8237b515d36", "sighting--27a084a1-32ac-402b-999f-1ceec870a0b4", "sighting--29ddedeb-c4a0-4caf-9225-825a20cf8b08", "sighting--2f0ffef0-6e5d-45f7-998a-c025769deaba", "sighting--ef751898-6eac-4e02-a946-814a2adc8387", "sighting--fe9e6c12-7d0c-457b-8a88-5feb9424b0d3", "sighting--31f8b8f9-da6b-4ff6-9c30-78178ba82258", "sighting--e3561575-41a9-493e-92b1-f49cdb3d6d2b", "sighting--3ed3ac73-ce70-4a18-a6e7-2f86538b3f76", "sighting--24fda2c8-3d10-404b-9933-a251013aa0da", "sighting--eb44d17c-19c5-468a-9c84-4e4f067b0437", "sighting--df08d83f-e15c-43f6-ad6c-78aa9f08a7a1", "sighting--dd784fbe-9a43-48f3-ab4c-dee71bc9662c", "sighting--98159588-d8e7-43c3-8749-8d6f149fc5b2", "sighting--765c8f7c-e60f-40f3-b5f0-d26814c391a9", "sighting--f776e485-f6c4-4280-b835-4ec9ecf57546", "sighting--1227a694-4c98-499b-8f18-6f39e506f091", "sighting--2ff405c0-c717-40f5-bc11-cee695984965", "sighting--3606498f-6350-402f-bcfe-0fbb4c5056fc", "sighting--c5b82e41-9f65-443b-9395-6f351480eb29", "sighting--fa3caa54-ec89-4cec-a7ed-95539b994f6f", "sighting--70a19da4-4984-474a-9389-376c4215e7fa", "sighting--29f187f5-c628-4fca-ae89-edac1ccece6c", "sighting--4b24c470-3b3e-4ffd-8b5b-80b7ae1208c3", "sighting--640a9ba2-ba65-43a4-aa4b-1a126ef695bf", "sighting--807990ab-76b1-43e8-875c-6023f5cd2b83", "sighting--8f13da86-5a8e-4059-87cc-4e6248fae26e", "sighting--21dbb78e-7432-4bd6-bde7-e694983632e1", "sighting--e9bf56f5-ca9f-49ee-b0ae-2f3ca4f8b1ef", "sighting--c62356e9-b687-46b0-b2f4-8004c4e27ebd", "sighting--aab2d623-ba5e-40a2-976a-6dc767692d68", "sighting--5f537ba3-f47d-453d-b743-03a30ee36567", "sighting--6f6396a6-5e8f-441d-a167-9fb8c6afe559", "sighting--3e38e3b2-159c-4868-aeaf-58c42b78b2ad", "sighting--1999d3d8-8227-49b3-9b0a-b23491b99be4", "sighting--5a55c37f-47d8-4cb5-868f-6c3db810b384", "sighting--22e952be-7917-4f1c-9815-72092d971539", "sighting--827bbd4d-6402-42ef-94c9-f904c306cc84", "sighting--1aca0d94-52ee-4418-8d39-20359b93a9fa", "sighting--91c53c25-add8-4ab2-ad7f-0f46fb66a76a", "sighting--14d8a9ca-2a23-4c00-806f-4cd683574061", "sighting--c8c2fdaa-e23c-4894-b966-a9aa652acaab", "sighting--55712477-5aa7-4de7-881f-469ed4014b6f", "sighting--0caf4584-7cd7-446c-857d-47d3ed749812", "sighting--51efb293-a5c5-40c5-ae78-b6fe58a2437b", "sighting--5a61003c-1f49-4175-9bad-df53a86a291a", "sighting--ee3b6eed-3a80-4fcc-a0a9-a2d079a28772", "sighting--6e81978f-acd1-4df5-8ea0-ab02e2e716f2", "sighting--1db964d6-86c3-4e29-aa78-860673169c51", "sighting--b46c352a-91ab-4c47-9b65-e2675e51fcb0", "sighting--8fcf99be-9933-487a-bdb3-b7066370b111", "sighting--d21e705e-369c-4d67-b9e6-6efb9ef98f09", "sighting--70049c69-7e75-4d88-ab4d-9ea8677ca2ef", "sighting--3f3675bf-7621-4f6a-b2f0-6f024ab8a371", "sighting--c2ad4bb3-4e28-49c1-9949-0ea3a2bec218", "sighting--7b5e94a6-9942-4f7a-8cc6-9b37053e3936", "sighting--d2b041d1-e8ae-4454-a55e-74b2caa986f3", "sighting--9ef5b2af-95c1-4f29-9b2a-bc1e981c825f", "sighting--25ca058d-5712-4289-9188-a2923f123903", "sighting--192b2aae-8cce-4a2f-b422-781d4ad2548a", "sighting--1428c6af-4e81-41e9-ab1e-7905e479127a", "sighting--17cb9dab-bfd5-4450-8949-f2138cf556bd", "sighting--bfae8f93-5721-48d9-ae00-cd9dcbc4a4b1", "sighting--e6c3acad-9428-401e-8965-253d39eea82e", "sighting--88a54494-9e5b-4d06-8b7a-ba5500267211", "sighting--ece1c49f-3534-4411-a1a1-ab0bcc713d97", "sighting--efbf5074-87f4-4451-ad02-55176c14d754", "sighting--1d4d4361-c906-4a2b-b604-89cd8554f016", "sighting--eb7886b0-03b6-4aa0-bd2c-45b91dabda6a", "sighting--5e9f3bea-9af9-433b-ac86-87ec49db0346", "sighting--e21e9c8d-ea93-43da-8e57-2a1420d47630", "sighting--8765d4ff-02da-45e4-998b-508d67744bf4", "sighting--f432b5c3-2fd1-4d56-8283-1c65e1c222c8", "sighting--6592eb39-a443-4d40-a818-9c3ac4715fb7", "sighting--2f916894-2db7-4241-86ec-ee1e08d4b326", "sighting--20a4095e-7f94-485a-9c16-b6495199e53e", "sighting--a3d1a5be-3460-4fbd-896b-d85143c153d9", "sighting--9a3d1db0-8a4a-4c65-b9c1-b4194e5e9bf1", "sighting--080db6fe-442e-4a78-bfe6-14d2b2a0214c", "sighting--ac47b32c-3e14-4d96-b1d5-49f61135927b", "sighting--2dee0d57-fcae-495e-b9a7-f1e7a46f67ae", "sighting--1de9f17e-f209-4958-ab07-5ff3927438c9", "sighting--956a8da6-a4a9-47ba-9f7c-330e0ae31a41", "sighting--bf5ed39c-f0db-4949-98aa-f87a4284ff58", "sighting--0b94df0a-f131-4352-9a82-49c33711a5aa", "sighting--0dc16c51-dd75-425d-b1f0-b61b066f8e27", "sighting--b948649a-ab0c-4c18-b7d1-d70f2a97dbb3", "sighting--93b60a05-e318-4f6e-bf33-aaa56503cb86", "sighting--be64e088-df47-4e50-8fd5-f85d17133d3f", "sighting--5a247ec4-2d17-4d93-878d-ac91e8ce3153", "sighting--4d8fbad3-a01b-4770-88a9-36d1ad621721", "sighting--ff5baca5-0508-4176-8448-45c75ddd8a21", "sighting--ddfb1594-a484-46cc-b748-70766dfbc235", "sighting--78e68256-b683-41f8-b92b-1c00f886b1ae", "sighting--2d9b917d-289b-4832-b23f-4754b1cbd1f3", "sighting--19fd8e85-5368-4285-83ea-991452feaa39", "sighting--4324a500-b900-48c3-a4f6-f6bf4394d7e9", "sighting--bd730c87-fe96-42d9-8a9b-68a89d9e99ea", "sighting--84c6bb51-8b67-41ff-9e64-23bc1c9a62cd", "sighting--47885da4-74c9-4e19-8235-14635b08175c", "sighting--b6de43e0-b3cc-4b0a-b7ce-1576dc8112ca", "sighting--37f7c268-75b5-4954-9f78-d980f2a4274a", "sighting--7730de29-ec0f-43ef-b3de-72945b9d2d24", "sighting--f5ece771-388d-43bd-bde4-4027b8ef091d", "sighting--8ebf0788-45e8-4e22-a221-21fcb185b3f7", "sighting--ba5fdd18-4a64-41dc-a75b-4a971641d0b2", "sighting--1bcd65fa-0f3b-40e2-a222-8abf35ff7a41", "sighting--a65ff45b-1e49-4acd-a17b-074ae99c0c5e", "sighting--a38c6962-3986-4310-b8d3-94837d0c698f", "sighting--305ed447-a0ba-4490-bcef-b4d2198f41df", "sighting--16119648-05dc-4b8c-9124-a6a958cc9426", "sighting--35d2c23a-555a-47eb-b98d-4155758b4171", "sighting--bd897956-903a-4984-bab6-cda674fea6fd", "sighting--272b510f-31ef-4b00-bb74-076a87d6ac75", "sighting--1d44c5a5-d4be-4c17-a218-5e68d4587021", "sighting--82bf9718-bee4-400f-aac7-3f9e5ed1583d", "sighting--163de957-b9ca-4a9c-8e91-ed6875d1aa67", "sighting--d4c4626e-210a-4046-b490-de96b049fd88", "sighting--9b1c3870-8fc6-4304-a81f-6a21efcb6ea2", "sighting--74fb6452-0a89-47a9-9cc1-1582c4d9cc36", "sighting--ab45b1c7-de23-4364-8df3-d608e2e77066", "sighting--3c7819da-7af6-44ea-9b03-b4c08d6edad9", "sighting--f4e3adfe-c5d6-4ebf-b424-dcc882fe38ca", "sighting--04eb2ceb-8f9e-4fd7-9bc6-95d826e35601", "sighting--c491cda2-91d7-4a68-84cc-5dba60b77e03", "sighting--68798836-b6fa-4de2-94d9-4b2cc8a49bb2", "sighting--e352e9e9-596f-47f2-9060-d2d0bfdb184d", "sighting--93622633-d6b2-45a3-95a1-e20bb26fb1a2", "sighting--6ea1973f-d0b1-4891-9f38-1cfbc130f19b", "sighting--29d676b2-af10-45c7-83b7-63219d3f3af2", "sighting--66060a72-e48e-41d1-a335-d9bd62d8896e", "sighting--5335c0be-7d9e-4219-8e1c-06f1c43148ba", "sighting--225ae47c-cc09-4546-a4fe-eeca0d988ed0", "sighting--87881f35-2759-405b-80ff-79d7a3a459ca", "sighting--3c3c66cc-1731-4520-9f99-77b1ac57c5d6", "sighting--3c0a61eb-0112-4def-8f20-25bcef3530ab", "sighting--cce27a8a-3b9b-4e0f-a019-7a361fd3cf4d", "sighting--d3ddbb84-354b-47b6-baf3-f17d80ed4167", "sighting--70ba1786-4278-4fa4-901d-59fe7b062246", "sighting--d619b8b4-4b12-462d-a7cc-f8b34ccc7906", "sighting--8675617a-b16d-4235-bac0-9c57823f7370", "sighting--38fc4709-3205-482a-9019-91c8189de203", "sighting--536ba3c9-08d0-4d6c-81e0-638d889d9f25", "sighting--0b565821-7aab-4ade-80d2-f8b0abcb3117", "sighting--840577d8-d8f1-4de0-80cc-14e235d01289", "sighting--2ada4fdf-82a4-434f-af9a-945ab35d4c6e", "sighting--82c0b3b0-4053-425d-a000-3ecd1bbeac7a", "sighting--87a9b94d-6d53-4305-a48e-43ce7194b21b", "sighting--653f7c8e-78a0-466c-8264-0a0b27d6b743", "sighting--13181b58-4c31-4f49-9c0e-7a98e52e502b", "sighting--5207ec2c-e307-4753-b373-2ee3c6071785", "sighting--febff3ad-ec0d-4822-b23a-4012586b1265", "sighting--6a12bb37-2d7b-4de4-ae22-73c5b4338402", "sighting--3f7ccf50-b950-4d5e-bd33-c96b0d089e97", "sighting--76ac588d-9c15-4d4d-af81-59ef47dd75e0", "sighting--eba017d9-3695-4729-bfce-ab43d959adfb", "sighting--bd22be2a-4ae7-433c-b8dc-bcbe4acf480f", "sighting--8fc45514-82b0-4eaf-96ba-b01d31885232", "sighting--ff1384db-bfc8-496d-83ff-6ffa775a6827", "sighting--ed72624b-382f-4847-a306-8a159085b761", "sighting--a979378f-6764-44c6-ba8c-ed2f2dc36cb4", "sighting--d229ca0e-8855-4e58-83f9-c935e2eaa7fb", "sighting--d5234783-e286-4baf-b223-8a3f226f34b6", "sighting--ece61d5b-1a92-47e1-94aa-d7710171b0b1", "sighting--f22d4fa0-fd7d-4559-902f-d535783eddc2", "sighting--50f0fd7b-d822-4484-8113-d58bc5025892", "sighting--c29af001-98d3-4d59-ad71-22436255ddf8", "sighting--99d6266f-d74b-49fa-a272-4eccefbd7df8", "sighting--76182e14-b846-457a-ae3a-5f7768930dcf", "sighting--3bb78b4f-3600-4ef8-b3ad-791a16a480a2", "sighting--16cad044-acac-4e11-996c-ca20d37ef9df", "sighting--c268a10e-4be9-467b-85a3-78de06dca951", "sighting--9f9bf2ce-c961-438c-a559-827c26f1cf8d", "sighting--0df5aaef-3ea1-418f-b4c1-7212ae1cae62", "sighting--6a8631d1-aed5-492e-9a5a-47d063c93c98", "sighting--b1c67348-41c1-4147-b5a8-70fb549b8a02", "sighting--cde6a912-c7e1-4772-8366-4d7a8d712c48", "sighting--2e8b27dd-2c4d-4287-8547-d332d3ca6d74", "sighting--8c7fe4ca-01d5-4e48-a0ae-284bb9f13d70", "sighting--5e00b51f-68e0-430c-91f6-ea7ccc1f267c", "sighting--e7348219-55df-4213-8b5a-18cd1015fb85", "sighting--74bbb354-f72e-49b3-b83d-b18cc26f6fe9", "sighting--b1da30ef-2a40-4aa2-9e76-20f88d32d208", "sighting--3ae83fc6-6c1e-40dd-ac90-2fb1cce10ed6", "sighting--131b5c0c-f510-4c7c-8c0d-fd6aa6cd90c0", "sighting--96a7e043-adc5-4f3b-bd8a-4a25c19e6c3e", "sighting--4ec9938f-600f-407e-8a60-bc8c1b9a150f", "sighting--39604ffb-e63b-407a-b841-48bb018dc490", "sighting--507ec6d9-823d-4405-8866-ce836220a9c0", "sighting--76e46c53-a675-43e8-a968-5d6a791b1272", "sighting--71340ee9-4e01-40d3-8911-756014e2b2b1", "sighting--2101f6c3-44f1-40e6-a67a-644f5d0a6044", "sighting--3ff7fb36-36b0-482d-9adf-6cb4832f5879", "sighting--5c48a738-f301-4b18-87e7-ddfb5d9bdd6d", "sighting--c4823b3e-db61-402f-8a34-3b072a924dee", "sighting--7782222a-726b-42da-bedc-55bb6a735b6a", "sighting--2055950d-59e9-45de-9e25-45b5766ecd19", "sighting--8df43cab-f4af-455d-b337-0c1afebfa713", "sighting--741fb017-0dc7-4906-a8c9-38e9478e57d7", "sighting--fc1c25f3-1a0b-4e2b-a81c-4e2448655f6d", "sighting--ba417854-7145-4cb9-aa38-1e21110f6ece", "sighting--1b5b85d8-82fa-4622-8139-5135ed4c23ca", "sighting--4f302d3a-92d1-4a02-b29f-9c07ac3327d4", "sighting--1f0ddb48-8b8b-477b-a4de-4bd049ef0214", "sighting--81e16f97-c956-4318-bec5-18482d5a38b6", "sighting--bc053566-955d-4708-9ef7-d8690a26727c", "sighting--ab7b4673-fa48-4ae0-8736-fb9c07d4f4ad", "sighting--b61158ae-4372-4dd3-9999-6db39c13aad3", "sighting--ff9deee1-087f-4f92-adbe-5efb4934fa38", "sighting--f254e1f0-dd12-4dc1-8ca8-49d21b3f67e9", "sighting--95966728-6de4-428b-9e7f-51ed55275758", "sighting--9fa4ca64-4814-42ea-9086-755b26b2a656", "sighting--58117f57-0a71-4b09-81a9-194c1fe0c751", "sighting--fdb126cf-1cc6-4d1f-8afb-0b374f17acc9", "sighting--e1b18472-a772-49e8-a031-311c02dde347", "sighting--e2518e21-df89-4564-9724-71a5e1410f1a", "sighting--e1e63393-2a5b-41f0-8775-ecf738f64505", "sighting--44cf96e2-b3f5-4cc8-ab66-9b5edc46ce6a", "sighting--dd034e72-82d6-4fd8-a352-ef5fd98358f5", "sighting--eb31a4c4-1e58-4a3f-ae25-9b90052031ab", "sighting--1a083d24-80d3-466c-a5e9-2094c190ae47", "sighting--41053e8a-c174-468b-93a2-1acba5b1eebd", "sighting--6cd94231-c706-4a4f-9c9e-00f2c1826275", "sighting--e72329d9-0fd6-43bd-bf88-3b28fbb9c3ab", "sighting--5a1e5183-d1f4-4eb3-b130-202400460ec5", "sighting--e9022a6b-36be-481b-91aa-a8aa3fc0c19b", "sighting--b41b718b-f8e6-484f-9458-0817bf00197c", "sighting--d0c9b343-d80c-4b46-9015-e17b59faa1d3", "sighting--1d1d824d-c6f2-46c5-ae4d-13994cff935b", "sighting--50ef5776-0102-4320-b491-05980605a817", "sighting--e0dd54f8-ac0d-49c8-9f95-dfc06bf9fc5f", "sighting--946bc7a3-ce1d-45a3-b11b-7240a52322d4", "sighting--b47d880c-342f-487b-b175-5f2440a9d509", "sighting--4eecfa15-c94f-401e-b68d-ba03357b8478", "sighting--1b840616-980b-4206-805d-cbea97f057c8", "sighting--6d481c97-47bd-4752-b4df-42ba4c4dfcda", "sighting--cd705c44-75e8-4c1c-8d1e-86361ae74c39", "sighting--dfd422d4-d9b0-46a5-b182-d4b31d4b7d06", "sighting--50d70bbd-eaa6-4560-8293-cb27ce9fab79", "sighting--5cb4ed89-a43d-4c76-94b7-6659b8eabd2b", "sighting--466db478-f6b3-4cce-975a-57d506f744b8", "sighting--1adace81-deb4-46e0-9f1f-ef738fb5829b", "sighting--b9befaba-0cdb-4b44-9310-af26242aa260", "sighting--228c34cf-6aa1-4b04-9d0a-b69d610ca5bb", "sighting--ed3141bc-8a48-4d2a-9c68-4901a5527bc5", "sighting--4fff12c8-70b5-4286-ab1b-c571c5db8b24", "sighting--90e43f8b-baea-408a-9b79-1ba00d8fc87b", "sighting--bd394bdd-e035-4c50-a4ba-b83eca2b4620", "sighting--13ff8a99-475c-4890-9aae-2c2bd2fd77e2", "sighting--c8811c39-0144-42fe-ad2d-dc5be154c369", "sighting--9918e1c7-d173-4b30-bbca-b3bafce3d70c", "sighting--07dbbc1e-d0cf-42a2-be37-d1324768200e", "sighting--5c71ed77-2f50-41f9-adcc-e1400011c52f", "sighting--65a7929d-6eb0-461f-a96d-c9d7bedac988", "sighting--2b318b58-e000-4e39-9157-b77b464123f3", "sighting--9d19dd13-9064-4bd2-8517-626d918874ae", "sighting--54717763-2f74-419c-bdbc-a5fc02854a68", "sighting--69eecce8-6af3-4e17-adf7-ee77cfdd3734", "sighting--1f91cfd7-7f74-4da2-bfcd-35372bd68ed7", "sighting--6c264258-14bc-44e9-82d5-3bfaae84da84", "sighting--39e9ba7d-a724-4c50-9ed0-92ef6dbcc613", "sighting--c6ccd8d9-4e80-4b94-b6dc-da5e39e26e37", "sighting--0676064b-35bf-4d89-ab99-48816ac110c1", "sighting--94ee166c-298e-4a9b-bb5c-03c7a03640aa", "sighting--3f9a481b-0a65-4e5a-8de8-5fdb345c3a77", "sighting--c3d0e6cb-f769-4196-b491-02683e910e16", "sighting--07192543-a46e-40e4-9044-e3399f01a716", "sighting--7b7758bb-d685-4c40-ac43-6495d481266c", "sighting--126645d4-7bbd-4df0-8d9e-e38915c2865f", "sighting--81210784-c0ad-4edf-9bd7-07e05e1a1ca4", "sighting--d08019cc-2ff0-4de6-b046-4b3306babb11", "sighting--92337271-eeb5-47c1-baa7-f8809317410f", "sighting--5919e7fb-38de-4b14-9675-43f44240b142", "sighting--e4e4e80e-bb48-4f78-9e63-ccd3d5df7963", "sighting--1d96a4ef-03d7-4a49-8117-6b39441e39c9", "sighting--76465b27-8533-45e7-9049-b3740dcee564", "sighting--88ace9b6-4fa6-4021-a911-bc1087e12a0e", "sighting--81c444a1-da56-4b6b-9533-2699d763c54b", "sighting--270b0fc8-4917-4798-b64b-2c86330114cf", "sighting--12e6bc80-6487-4fc4-ac0e-898dd8da19e0", "sighting--fcf1877e-4518-47ae-a6ad-97ec0232b7b9", "sighting--b637aa3a-2ef5-4b36-abfb-980cc63b763d", "sighting--2caa7f27-79d5-4a84-acca-f9c946c043ac", "sighting--fd9b520a-d3d2-4702-a99c-938957f7b836", "sighting--f5b5205d-5b64-4207-af72-ad8e4d182455", "sighting--bd9cbd2f-99ac-437d-9b04-6355eb7a5463", "sighting--67c80b0c-fd36-43a6-89fa-cc2ed3957206", "sighting--c6b8c961-2447-44df-a2bd-c10b90844bd2", "sighting--d23e196b-6558-40e7-83c0-d33bd2c021d4", "sighting--809ed70d-45bc-49fa-97fe-5112df9eaa5c", "sighting--f70c2515-16c8-4cc3-98a2-49c00bd012ff", "sighting--2394517d-a68d-479b-80d6-a76947771059", "sighting--9d736326-e823-471c-8356-04979cee999c", "sighting--60774fe5-1295-416a-afef-7fa37456d91c", "sighting--dd372b78-cafc-4432-ad90-d48f880cc314", "sighting--40d556a4-6204-4f64-8c1e-4440377be479", "sighting--7863daa5-b5e2-4ce5-8fd7-3149b27fa10b", "sighting--2391b8af-8a01-44c1-a651-60f0b2eb2bc8", "sighting--8dc5e032-1e14-47f7-bc9a-5a6ddf87855f", "sighting--b10df524-9f44-4c16-9181-f73150bd3bf6", "sighting--c2e08cc2-7788-4444-a8e0-1a6d98a883c9", "sighting--b88f9123-678a-40c4-8acf-09543cf7c50c", "sighting--aa397c07-d8b7-490f-818d-3ddcebd5ee83", "sighting--0b318326-7ef5-4ff7-b780-7f5283d5fba5", "sighting--25d81ecb-9f02-47d3-9483-b717bd7855bf", "sighting--206fb87d-f18c-49a1-8248-069aa395d985", "sighting--8acca433-21a9-40a3-a970-1608fffc0242", "sighting--0bdbfa19-d1bf-4186-89b5-542df5df192f", "sighting--bddb0daa-3d7f-4f27-a6b8-f00c02ccc9f4", "sighting--16fea457-f462-40e8-93f8-b2171583c30a", "sighting--49fadad2-6925-43c2-85f2-2cb881504b0f", "sighting--bbdc6a68-dc5a-48ed-bc34-4f4e47ff5993", "sighting--1c19c33c-6b75-4a2d-8d33-ba763e4e9713", "sighting--71fb733c-68c8-4349-920e-1d1f6a91a6a9", "sighting--1ec0f3f3-98d5-42e3-ab22-a05bfc77141b", "sighting--44bee03c-6d46-409a-a704-5a1dcf1d4789", "sighting--ddb1621c-0eb2-4a32-8c79-8f2adf50260c", "sighting--2ce45c74-e6f0-42a7-b253-67a6ce3cd239", "sighting--600f1dcd-275e-451c-955a-ecefab9b7fe9", "sighting--8bc43b6b-075d-40ee-91fa-83e985e301e5", "sighting--71ed9c22-9fe2-4ac8-8d67-42218133d52c", "sighting--bdf6d575-8fea-4834-a519-0d958f0f3d1a", "sighting--df812490-e99e-45c8-b007-d9682a7866ec", "sighting--e2e55e2e-5d22-4af1-8174-2b86e8f986a2", "sighting--f80ea8f3-b2f5-486e-8ad2-a8210aff0436", "sighting--6a3bd01a-03f7-4349-afd5-ee5690e803b1", "sighting--58e8a94f-8f45-4e19-968c-d7a64219aa32", "sighting--d7fa80e0-7de4-4705-81af-2f94e9b2e64e", "sighting--9b554abe-e834-40be-a716-e65e24accc23", "sighting--88666416-d09b-4dbc-93bb-788bec22b0d2", "sighting--b49b15d1-4427-44e0-97ae-dad36f8d5301", "sighting--5047ba9a-542f-4882-9087-baae031362c8", "sighting--1950bce8-7c22-4249-a2cb-fea4c09c31fa", "sighting--dad36734-9239-4c65-8df4-5fe06ef41b35", "sighting--97c39416-2bf2-40fe-91f4-11176a0e8adb", "sighting--180a5954-286f-40fd-a8c5-10c8e76ebcd3", "sighting--31342804-5f1b-46bd-a2d3-f7ff6c9e75a7", "sighting--6bc29e11-87bb-4594-a054-bae4ec348497", "sighting--ecd28520-3e98-42f1-b71f-1d4b5a7b4138", "sighting--c56b9d93-2e2f-46c2-9d01-070200fa5ccf", "sighting--7f7a8288-05f3-4acd-a38a-baebb0cecbe5", "sighting--e1262538-3aec-4de8-9e56-117c1aeb52b4", "sighting--d393e559-c748-40b9-9c64-6e09556c2ce6", "sighting--5f5d0cd2-94cf-4586-b4db-13acc29a010b", "sighting--589a91d8-70bf-4867-bc54-1f7548c997e4", "sighting--dee45981-dbe2-4781-bcd4-e42aa5068341", "sighting--63d5aa24-9389-4f26-8fce-0382e2e54652", "sighting--f6960b02-4e26-48b1-8164-4fd9bd3fe8c4", "sighting--20a713f2-59f2-418c-b4f0-d557270f3458", "sighting--753b35c7-7f7b-456b-96ed-bbcd63a64b61", "sighting--f2040089-88c6-4822-8262-1eb6b72c35f6", "sighting--49bdc76e-9513-4804-af30-451cb7b0ecab", "sighting--1f5e0215-5dad-4598-9ca0-e94bb354f360", "sighting--a2407659-46b4-456d-b2e8-5dff64dc51b1", "sighting--df5cb270-ec20-4f01-9bf5-68da124cb2f0", "sighting--42be85e2-ac03-435c-9c2f-448bdbb70e0f", "sighting--74a6fa32-3533-4435-89ad-b651ac3f6d05", "sighting--aac3c092-0af6-4a91-93ff-a081398287b1", "sighting--dfbb2d46-fb10-49b5-a804-bb5b3a2c198b", "sighting--15a571b9-a948-4f8d-9ab8-41e40d777caf", "sighting--4318ef3c-0846-4843-98fd-5ff5518c48e4", "sighting--4b908cbe-eb27-45e4-8df8-c86460fcbb5d", "sighting--66570013-a519-48f5-9ebf-078ad68caa6d", "sighting--4dab77b2-7568-4134-b9c9-1cf645524786", "sighting--1ca8b3fa-1f13-453a-b3a3-c3a6e6885a8b", "sighting--b388aaf1-68d0-467c-af20-492a4a75a250", "sighting--673d4f43-dfd0-4cb7-bc58-c41ed3e4a5b5", "sighting--00d6a04b-1d47-4482-bb9c-6f64d6e58981", "sighting--8e669e4d-8fc0-45c5-8301-504dfb2b17f6", "sighting--8ac811f0-b92b-432f-b435-39a0d433ec0a", "sighting--1dde32e9-3e47-49fc-bdbf-b731a8d07663", "sighting--146e09a7-8f29-4bf2-960e-b60e341fd1a6", "sighting--fd15ed7b-1697-4c14-a9d4-cba5639062df", "sighting--efe44b59-9ea9-46b0-97aa-b1bcaf585009", "sighting--2bd899b6-e6af-48a9-be0c-93711f7731f5", "sighting--807a8d96-8b4d-4102-9958-f7d145eec19a", "sighting--91232954-db7b-412d-8c09-8b827593df05", "sighting--479cf92f-fb94-4b45-9fdc-84f86a396fda", "sighting--77bf38d8-76ce-4964-b636-eb10934ce8b5", "sighting--278e3c9a-8ad6-477c-a702-704a0f028f31", "sighting--b9f4740c-a98c-4da7-85b9-47341028e96b", "sighting--ff3902db-4294-479c-944e-103199fac3f1", "sighting--d0beaf8c-5fde-4fc3-a2a1-06da5d4cb478", "sighting--00431eb9-e089-4390-8715-313a42e129f1", "sighting--ed5f6d17-2bfc-4559-9177-df2469455d88", "sighting--c46c07ac-9e2b-49de-b5d4-d5c22dda2e42", "sighting--25517519-f637-4acb-8901-d26303467bdb", "sighting--37957fde-afef-4ede-890a-39a7f4c58329", "sighting--7485bb36-56b7-4c73-80d7-ab51ef944217", "sighting--1f221462-6f65-40e5-ad12-6a0e68c4bf5c", "sighting--c401947d-5464-4d45-b0a1-86ddd40db79d", "sighting--99571a9e-4ed8-4fbe-9b30-546e895f72d4", "sighting--64d41f90-dc1a-4bb4-8e43-da61cc709989", "sighting--c6b441ed-fed5-4d2c-afc1-d2b7ecc69df7", "sighting--10e28044-5fd7-4b36-8f14-a44478b5502c", "sighting--1a49411b-94f5-439c-841c-a7ed32db0b27", "sighting--6f1b38c4-5b8a-45d5-804d-ba4652803bae", "sighting--0e6b55e3-2572-4c16-b823-c700576e1d02", "sighting--46b650eb-8377-4190-84a9-2a1b6fab7992", "sighting--1446caa5-3d1e-4399-9573-ceaf2e1a533d", "sighting--7e167679-c168-4a64-a8c0-f8e4b6afef9d", "sighting--89d4069b-f8f7-4e1d-8bbd-76dbf521aa95", "sighting--555153f5-2cad-4096-8829-c5c636e0c689", "sighting--f1f20ae5-0274-4dd8-9841-d129fba69c70", "sighting--acf1c838-16f9-454f-968b-c5dd075131b4", "sighting--7037ba49-8aa8-4892-ba83-729bf02f6c5c", "sighting--48b08ff4-75d0-4f00-9ccd-93801072e83b", "sighting--96ce687f-1c89-40a0-9b8f-1ddccdd3c6db", "sighting--685615ab-29cf-4f8e-a4eb-18f8c277d5a4", "sighting--df660c7a-5f3a-4a96-a52f-69f19f432060", "sighting--93b2e182-b685-46a5-bbfd-8c138660644d", "sighting--8053a209-fa69-4a7a-b66d-644da000c974", "sighting--dd672582-38b1-4b40-ab68-4ddbe6aff4ab", "sighting--e29504d2-2a39-4e90-84cf-ad2c8deea05e", "sighting--f0224b09-4164-4c2f-80f5-d17f2adf2a5b", "sighting--ceaa206b-b1d2-4d6d-8e16-054e57f9a696", "sighting--deac40fd-47b7-42e1-b4dc-2e127c3bffa3", "sighting--e4c7e8d5-dd36-442f-b7d2-6f475cee48ed", "sighting--44e790d1-1559-4621-aeb7-71d3a7306ae0", "sighting--d8fa11cc-5a27-40c1-9f00-e1dc2ccb26d5", "sighting--35cc4d7e-44d1-41b1-a424-c7ff3575bf6c", "sighting--0e0935a8-c8f5-4b5b-98b8-06b2a2327cb3", "sighting--b5b8ff78-1756-4e60-904c-ac0248308cbd", "sighting--471db684-8484-4a5b-a265-3ebaf6d4eedb", "sighting--b550d7bb-d15d-48c8-8bd8-66e1ba1d1bf0", "sighting--e58c0ce2-aa14-4491-ba18-b93d1a8b4eb1", "sighting--3c88627b-6688-42e2-9cdd-6edf88368dfa", "sighting--f99deb1a-d635-4723-938c-4ddcef7126bd", "sighting--1e73cfd6-3a09-43cf-a805-ca04cd236ee1", "sighting--b13883a9-73d4-43cd-a5fb-23908ce8e508", "sighting--a9a70bb4-69c7-4388-9a8c-dbc3d862856a", "sighting--7efaaf83-b6f0-443e-aa57-9cbf1f42d26e", "sighting--82bf0111-e372-44ac-8198-c47afdb9d78d", "sighting--3dcf62b3-62b2-4bda-9a8a-564bce56dc15", "sighting--10da812c-f65d-44be-b130-916823e645d5", "sighting--6e4de840-329c-414d-b3b2-cbd0a73983b5", "sighting--0b86c7f9-7e7b-499c-9f1d-ca49d61a89ab", "sighting--3bacac91-534e-4878-b8ba-f86d6e717b92", "sighting--b3f3c9ef-4ead-42d9-9881-5b952084bc5d", "sighting--94c4c106-663f-49b3-931a-8d4d97e2ed29", "sighting--9ceeb120-99de-4c23-bc6b-e24b3b532be1", "sighting--a58cf03c-33f7-4b13-97c8-23cd7349db7f", "sighting--8b9ca355-0a43-4eca-a102-d223e60fa13f", "sighting--dabcfe6c-9fc8-439a-8d07-96c6b76ab656", "sighting--f0c72b6b-9877-49af-b30d-ae703dc0227f", "sighting--7dcc4760-0e84-445d-986b-580d21578bb8", "sighting--b1453a61-49e4-439b-8b28-c360c784d1bf", "sighting--39244d2e-1f2e-47db-b473-c07c49543c5b", "sighting--294b2a68-5499-40b2-b527-e7d6f92d85db", "sighting--53ca4c5e-e1d6-43e0-8d3e-b9f5851d81b5", "sighting--5c3ca857-6362-4414-aebe-fe81b6879dbc", "sighting--15c12961-bc65-4908-ba8e-1af72d96c80b", "sighting--d5ade8f6-1444-440e-8f3f-9e25bd91801f", "sighting--25439639-505b-4502-8569-09e800609818", "sighting--3c7294f8-87c7-427e-aaee-b6ac3f2ec3ae", "sighting--5e5f7755-9053-4408-ba5b-e6e696a8efbc", "sighting--a17f2663-ae0b-4563-9126-31b0ef59cce2", "sighting--f5ed821b-b6df-4866-b01a-9332564aff65", "sighting--aa5122bc-c7c7-4479-823f-781939c7713b", "sighting--d88475d1-b03d-4d22-99a2-9577bcdde2a4", "sighting--0e42a0dc-9a95-4340-9689-6d8aea926828", "sighting--e143ea4a-ebe5-48f7-8ec8-be3b1ce471a7", "sighting--9d9738d6-1308-4b50-a982-7026fb0936af", "sighting--a0187b98-5104-4bcb-940e-f2255d515d48", "sighting--93f96757-a9fb-436b-a1db-a2978203125c", "sighting--de9bcd8d-f770-459c-a48d-173ed081a39a", "sighting--7c0544d3-68a1-41b7-9e62-613643fdbcba", "sighting--f683b411-3c55-4474-b9cb-a2a585c687ce", "sighting--c21cd8a7-61fc-4c3f-895c-ea7fbd98426b", "sighting--de65fc09-df7d-485f-969a-cf55f0f3147a", "sighting--2978b7ba-4811-4b7e-8401-31a83ee1cdb8", "sighting--f6be736b-2626-4247-bb99-dfe598deb63e", "sighting--d9698d96-80e2-4eb9-8aa2-cc2cee9c2ec3", "sighting--15c7615e-8007-4752-b0c6-c0a4a00a20e6", "sighting--db86ef62-9bf1-443d-89f3-7081fcb268f8", "sighting--725ca0e8-218d-4a2b-8f30-76dad994c93a", "sighting--607e9450-7d7e-4b12-96ec-711d81921469", "sighting--450b0b6c-a673-4162-b438-26fcfe5ca540", "sighting--b5079bb6-3772-4b49-b687-6ce96da8d396", "sighting--977aae66-06e9-42a6-9525-f9220673ac3d", "sighting--4c234541-414f-43eb-b58e-5bd3ec91e6f1", "sighting--af4ca6a0-48ef-4f4c-9c9f-b31cf859e328", "sighting--25158167-a40b-4c42-a6c6-583c250b6fa8", "sighting--a4fc8179-b2c3-4753-af05-fef9571c98cd", "sighting--96348d8a-0207-4165-8b74-b716f8ca7e10", "sighting--273081db-de4a-4a23-9a46-0401d7bff527", "sighting--793e410c-0e5b-48b5-94e5-c6c28d1a02df", "sighting--42cb4564-66e3-4ad7-adee-5a593ac5d6d7", "sighting--295d0640-2b0a-435f-ba1e-40a8134f58d3", "sighting--6ba5cff8-aa10-4394-8989-c75e2c336488", "sighting--87689f4e-592d-4aa0-8b6f-58c5b31e57f3", "sighting--4f8a85ba-7557-4d0d-bbf3-b8d9de01f7ce", "sighting--b64675da-f343-4a62-b71c-6278862d507b", "sighting--fc173ecc-9a7e-4817-8a65-530f8117b534", "sighting--02c96843-0aad-4c7c-a4de-1f7c6ef38b25", "sighting--7883d167-6ab5-4475-8053-e0d9f005de9d", "sighting--586002c8-a67a-45b1-9fed-a6171e7669f4", "sighting--013b9c2c-2abb-419e-855b-280ae2b31466", "sighting--520817da-9a62-40df-b644-3d699c7d81f8", "sighting--07f80175-94df-4658-95e4-e8db77c06b47", "sighting--f6ae34a4-1305-42f9-9906-a6ca3dadf70b", "sighting--ce1a4aef-db17-45cc-905a-7777cfbd6ea4", "sighting--50024815-dcc0-4e99-ac18-2b4a02b46a83", "sighting--6a5b8804-c14e-453f-ae31-6998e0b4d699", "sighting--a1a84593-927c-4a87-9236-9dcc8f2014ab", "sighting--d383051f-3788-4796-a446-965c5f11736f", "sighting--6e7b9eb6-8d4e-48e8-a640-156dd02f0558", "sighting--5fe46904-6519-451d-9d11-992e2e3483b7", "sighting--ef1db2a1-7650-43ed-9979-40d1ce21912a", "sighting--2d3b1dc5-a1bb-482c-86f4-3968ae6477dc", "sighting--cf768107-c5a4-4af2-8c3f-f4d204fed952", "sighting--0d18d429-0bae-46ab-b8a9-a762bdba82b4", "sighting--f576c218-28a5-47ef-ad97-16d51a04e40f", "sighting--af78dd83-79c1-4850-a7c6-5ee019a6468c", "sighting--96a99501-99f2-483d-aa9d-e487146471ed", "sighting--3b87e91a-d6a4-4b7f-91ae-42b4451eef8c", "sighting--971f03df-6ed3-4be5-b730-d6ec4b2555f6", "sighting--24d6c741-b8eb-43bc-adfc-ad0176857b71", "sighting--8c157ee3-814f-4875-8187-043fd8996b4e", "sighting--19448ddf-e093-4140-bb14-b62660a662b9", "sighting--dc7a9328-4c55-4256-843d-cca234bc3ae1", "sighting--a0c8fed8-a859-43a0-863f-cbd2bea9f03b", "sighting--fc8b8d0f-363e-44bd-9ecd-e0d404a58d3b", "sighting--e1f516f2-8400-4a3a-ae10-14209ba225d0", "sighting--bbf881bf-eb54-4d73-bee7-7388a1ff418f", "sighting--ac02befa-ea63-4735-906e-8ee877cf8f75", "sighting--fd008f90-96e5-4d81-961b-6d38e43fdec6", "sighting--b66a89af-a677-439b-9b31-6d8e4eb6189e", "sighting--9cf7fe6b-a4ed-4fba-80b7-b2eb12730fe9", "sighting--9d1852ca-5629-4d3b-acbd-cbe7899a0146", "sighting--2470ac88-c736-4755-9ac5-0b58519a8869", "sighting--c1dea685-a09d-48de-9efb-266a4072d022", "sighting--0753c633-8798-448f-950a-f6487565034a", "sighting--18fec067-1dee-4024-9f9c-ea7f0513c01f", "sighting--2b9c1bb2-8ce6-4d63-a159-dba255df0e01", "sighting--1e41e633-84ff-486e-8a4d-f9680cab2740", "sighting--b4c0a499-7be0-453d-ab8a-fbdff6874e91", "sighting--c2957382-e2a1-4a5e-8e54-79759f539891", "sighting--560c748b-dae8-4865-82cf-4578ceb1e4b3", "sighting--afd8cc8d-b92d-4d27-b5ff-0fe9af449941", "sighting--71f839b4-ace1-4c23-9dcd-6c170fec2928", "sighting--9ed44e71-dae4-4acf-91ee-56e5be1efd22", "sighting--27adbf8c-67b2-4cb4-9d60-5e447e34ec65", "sighting--5af31beb-473e-4be6-9d40-7b8f5f444cc7", "sighting--9251ce1e-64f5-479d-93e4-5fa4f9574057", "sighting--9ed89b39-dc5b-4074-b872-fe219dbba8eb", "sighting--2363f279-ba09-4861-a13f-781ae5189c8f", "sighting--218450b9-1aaa-4360-aa2a-8cbb210f777f", "sighting--02704c8f-c2c7-4591-b3a2-7c493ea4ad5f", "sighting--5fa4c07c-9cab-4a20-b0e2-c10c3347e3a6", "sighting--60de5b9d-6fe1-4b0e-a1d4-bdaa4020226c", "sighting--a27239c8-4d90-4a73-811b-eeb4a1796a0a", "sighting--e80abce0-8f7f-46dc-91bc-39ee86cb361b", "sighting--9cae981a-ae20-4e07-bde8-d39817bc9792", "sighting--3ee6ce74-283c-40b1-a44c-96fc817c7be4", "sighting--736758c5-fe9c-4f89-b1d8-2e1c6e4e5f66", "sighting--69ece490-f6af-4b53-8c67-321b3866378c", "sighting--39d96ddf-b7fc-4a15-a32f-4023573ca5f8", "sighting--9e0f8b22-6920-4def-a84a-d3f46a49c5b7", "sighting--01d0c55c-a54d-42fe-a816-fd8a7a39b1d8", "sighting--0558f84f-adf8-4ae4-9496-bdc0caac59f5", "sighting--aa4bee41-bd05-4eb1-a5a5-a11592ce07e8", "sighting--33c85fbc-654b-4bda-a58c-e6f04320dc8d", "sighting--0f6f373c-0982-4179-af39-108c1161205e", "sighting--6eed6626-fd65-4e2e-ba6d-44cbe678d114", "sighting--30fb6868-8aa0-42a5-954d-33614795cf40", "sighting--a32074a4-68e2-48fa-b35c-2594b8643d7e", "sighting--72fb6247-6044-44ca-a0b4-86a104ced2ed", "sighting--a665eb9a-8a66-4fac-87a6-2f63d6d2e1e8", "sighting--7e83dd8e-99ab-445c-a03b-efbfdbaa104e", "sighting--28df050a-9a91-4631-b218-998f1d2fcad9", "sighting--5f9574fc-e9d0-4e4a-950e-84ed196f3869", "sighting--aeaf274c-3b62-4292-8272-d20f271b8e8a", "sighting--ff96fadc-153f-433a-82d2-fa3558f70976", "sighting--a1eb09ee-1674-453e-90c0-08611fa239dd", "sighting--1c71a633-81ac-4772-aebd-328484c27a6e", "sighting--e1e08b8a-fb57-4a12-bd34-7446dddf8322", "sighting--65b239fd-d96c-40c8-9fc8-a4cf37b0b61c", "sighting--e1039fc4-a73c-405e-886d-b5cb5533b089", "sighting--7be323ff-74e3-4688-a4f8-2f8829ccc179", "sighting--ef88fec4-bcb6-412d-b368-1cc75b5ae197", "sighting--1df064e2-15c9-43a2-a401-0c92e8a79462", "sighting--44e2600a-0e37-46d6-9e23-d682cc726caa", "sighting--6258af69-7299-496b-ad00-cd59ac9e631a", "sighting--ce8f2e41-52a5-43f5-b0c2-9f5d3ff0effc", "sighting--fd81ab4c-ba06-40f0-b1de-d18f1d98c8d1", "sighting--d729518b-22d2-4076-acc5-ef8b961b9b37", "sighting--baabe035-ec59-41f3-945c-91f9a1c1e65f", "sighting--bdd99477-d879-44b7-a81a-232fa2b3bedc", "sighting--b5a9397c-cdc4-4f74-ae55-4f32aeb49283", "sighting--b359c44b-6277-451e-931b-148dd84ebc05", "sighting--19aee138-b426-4f37-a63e-f6bd54bc8cb0", "sighting--ce336289-0d02-446b-8076-aaf4d7f1481b", "sighting--9b0ed1d5-f4b5-4e64-8035-f0ea590eeda5", "sighting--5b069efa-ec3f-49e6-9236-8552b8c6016f", "sighting--4979214f-e6ca-4942-9f78-382a6896fb35", "sighting--23fbd882-49ab-4f69-bc3e-4c031b21ed74", "sighting--af7c4e2f-14e3-4a31-b24e-d202798f41a1", "sighting--95f1b863-a168-40fa-bc86-bf50ce063ab0", "sighting--859bb533-4b1a-4de1-8d73-6076b17a16c2", "sighting--bf2c0150-307b-4b21-ac02-d38a6d703e4e", "sighting--abdceece-9b6c-473c-bccf-71169b4b57de", "sighting--63faa77c-75ce-4f33-830f-1fb762822974", "sighting--b6eecc7d-0a25-41c5-bb33-91a10b462701", "sighting--97b087b3-343d-4ae0-b068-96c9c52c6031", "sighting--f16dabfd-e2df-4a9b-b1e1-5435e45ac17a", "sighting--a483078a-8291-4b13-8e98-b0c47ee8ad5e", "sighting--db21c97c-f4ee-437e-8f45-e57b52cab4b7", "sighting--fb45b860-2fb9-4664-89cd-2d15dd2b1fe6", "sighting--258c09c2-c56f-4cdd-b8ae-d66d568008ef", "sighting--a7bc809e-a657-4555-8d64-bbf0d0d662ef", "sighting--83102772-6007-49f0-9f23-f1c524a37824", "sighting--15313dd1-d129-4c65-8d99-e5359d79bff8", "sighting--dacd0aaa-4711-4337-bd0c-08d9369c1054", "sighting--e04e3c3c-ecb9-4c17-a1a4-80be47c0dc61", "sighting--b227d08a-1790-407f-a387-23dbf51fd1f7", "sighting--4a76438a-e8c8-4ab9-8e70-1b054084d270", "sighting--0998f2c8-ac7d-4739-9202-6fa5b2c1ff62", "sighting--3a811740-f5c7-4187-9ead-f5df7efd5c19", "sighting--49d65175-1d39-44b9-a273-fa2ad0046164", "sighting--e432cf06-846a-44a5-9df5-6379ee172113", "sighting--6c3f3f7e-266d-443a-a3c7-d18c57d58304", "sighting--374cd456-923b-40b5-99ae-0966d5edff35", "sighting--81715fb6-5b7f-415c-950d-c393b38669cb", "sighting--10982dca-f265-4fff-808b-e84d5df359ab", "sighting--da1bd093-163b-4c86-aaca-13d718363244", "sighting--c92cf2ef-2539-4ce5-af10-ce64c77ee9c5", "sighting--599a37c0-7578-489d-beda-2a87f6896d07", "sighting--ef24bf0d-5309-4977-b559-d2ad416eb7b7", "sighting--ebff5022-ee97-4b4c-8fef-b8cc2e1a0dda", "sighting--ecb62e0e-6a3b-48d7-ac4e-d76223307972", "sighting--e3ffc2f4-d83f-4a39-a3f2-a6fa0678ce33", "sighting--211ba11c-f1d8-48e0-b1cd-f429cb42ee66", "sighting--309f1bce-530e-4c1c-bcf5-fb5700d56a47", "sighting--81fc3df0-0cfb-4768-9161-47c02c720d2f", "sighting--451edcd3-5c56-4bc8-930a-e9497aa430f1", "sighting--8627ae42-5373-4147-ac60-1c817d93da03", "sighting--46765b0a-897d-4993-a7ed-70c01c654778", "sighting--d2ca665d-5dc2-4388-ac4d-72b874459a80", "sighting--f40f3b55-dcfb-4527-850e-0af623de7060", "sighting--086bb44b-0490-4c2c-b25b-240eadce13b5", "sighting--e5081d0c-9029-4fcc-b32d-0bfd0afb0106", "sighting--9a592373-c7ef-45ed-9225-ce10638674fa", "sighting--e13e2dd4-25a5-47cb-8989-e782c528e1a6", "sighting--ac6ec4ac-9a78-4c26-a7f2-c11961525eff", "sighting--748b2f85-5c01-4b10-8956-87f7a1074079", "sighting--8fd0000e-961d-40a4-ba63-34654dd5c77c", "sighting--8bba128c-f8bc-47a9-a606-5f1e5f22156e", "sighting--55ae637e-e07e-425d-9f15-fc972a370ae7", "sighting--5bd8da90-8aa1-418c-aed4-1d0dadea1416", "sighting--c5c553b7-e597-4910-a8e4-598bec4d00ee", "sighting--fbaa96d2-bd03-49f1-9386-4f455de652fc", "sighting--6246d374-ae85-43b2-8b49-3c71b452d080", "sighting--487ac63c-de18-4335-a397-4795ba4c8f26", "sighting--d8c30719-aa5c-4653-8ee9-66caa4ee6406", "sighting--a94ad617-1a7b-4fde-adc9-fe58e0c55eec", "sighting--7485f227-f60d-4da6-8aac-eb182a5583b1", "sighting--85e96ae5-07c0-47d0-baf2-9b788baeefc6", "sighting--685dcb29-c19d-41f4-aa27-5840cc153a25", "sighting--4f19052b-9cc2-4c95-a58b-b8ca04eb9a89", "sighting--dae5b669-6649-46b3-8091-4a55bf2560bb", "sighting--0725e81c-9af6-443b-be63-8163fbb5b272", "sighting--03b6de40-fce3-467b-b674-ad80963e730f", "sighting--0452018b-16e5-4940-913f-13ea75161339", "sighting--23ed304f-df11-419e-ab85-500caa83e5cd", "sighting--18041ff5-38eb-4086-90d6-eb7ad758e7df", "sighting--a0c0ddb0-857b-48dc-992d-52d76638a305", "sighting--caba70f6-d5fb-4867-b119-c7b553d1021e", "sighting--15f4b01a-2761-4d4a-b34d-df829eaff731", "sighting--b41d4527-761d-4efc-a2be-f4cf1d904f76", "sighting--ed6754a3-1673-46f5-990f-2a6e33d5c47f", "sighting--174b508f-0f69-403c-81b2-afca565a40c4", "sighting--a085ec3f-ad5a-4792-8cfe-d7420e4b0755", "sighting--419c7095-5d14-4da0-97f6-9ff22b6bd630", "sighting--c586b8ab-bac8-43b4-9d23-8c6802832892", "sighting--6390e115-7de2-4d56-8371-21863cafd057", "sighting--97dd05a9-88b7-4b1b-8040-1a1117f769ad", "sighting--8cc212c2-8af5-43ac-b314-72dab2fdc106", "sighting--4db00064-0869-4cc9-9e09-a8de889a50e5", "sighting--383075e8-6ea0-48a3-80e5-73cb9e96a18e", "sighting--de5a21d9-cfc4-44a6-b63b-9ec5747aad4a", "sighting--c2fca399-134e-43f0-a4bb-a9244a286b68", "sighting--c0a00ab9-0b7e-4a60-a017-2f627d34fc87", "sighting--e2165df6-1353-4cec-9a96-00385d72ac53", "sighting--5c73d8fc-6594-4fc7-84cc-2868a9fc190b", "sighting--da68944c-6c24-47c0-b8a4-bd04cf09cdf8", "sighting--e98b5f6a-2351-470d-acd3-08e92d6c01fe", "sighting--7d3a1a3e-d3fb-4b49-9ed4-dc2dce24afb9", "sighting--4f08aebe-63ff-4059-b0c6-3226f4ab87fb", "sighting--58b6120a-d624-42d7-8399-0f0e6d8fc221", "sighting--0e35f4bc-243b-4f23-9503-52113b4dd730", "sighting--3d7833a8-bc49-4efb-b61b-b7fb35260e70", "sighting--be671027-1857-4c59-a94f-4b2395168edc", "sighting--a31ad931-5056-469a-8229-db6e89378876", "sighting--876db1a2-8e3e-4bad-a8f0-1e205fc0b838", "sighting--8329dd53-1bcc-4436-8301-a16f41c238e1", "sighting--ce5eae13-c00b-4bd6-b88b-ebe21d3740d7", "sighting--bacce256-9fc1-4617-8551-fd9181dd7f80", "sighting--5a4d5339-34d1-4c18-9655-85c74a94f130", "sighting--1c69d41a-cb86-42f6-865a-3450fdd96f04", "sighting--4c7adc4c-3e53-4b27-ab50-7b84217f7240", "sighting--8e0e7600-da28-4095-9313-5614f06c8fd1", "sighting--19773cc9-19b7-4278-bd12-844c18bd74a1", "sighting--a40e4312-5d11-49b5-9cde-8e2c067529d1", "sighting--e9f1e218-e063-4b08-9e2e-eafac626303f", "sighting--4155ed51-11c4-42ab-af3d-a0b6a2dfb062", "sighting--853fb9ae-a2b1-47ea-a412-62a92523a0c5", "sighting--6a1826bd-2ea9-4877-8966-aa5d23820516", "sighting--b9042084-72ae-498c-8831-4e5607065641", "sighting--267f42d8-d647-4bf4-bc19-4a1b22272bbb", "sighting--e8b6eb05-e320-43bb-8161-d8a9149b5fb4", "sighting--eb6b2fdd-ce53-4bbd-adf6-d7ee8349d309", "sighting--164abc3c-8628-40cf-b8e1-35be6cd8e4c1", "sighting--e863d25b-8f77-4ed3-822a-8a10896379c8", "sighting--ab81e8bd-2558-4331-b0d9-30e09c6db895", "sighting--f740ceb4-957e-4629-ac87-c727c2d2e33f", "sighting--35d8f12a-2f87-4646-8c02-55e5b1946473", "sighting--4f9bee2b-538a-4568-82be-3ff74d9312b0", "sighting--e0486910-14a4-43e3-b545-fbe623b34a41", "sighting--8cb96d36-9ebe-4694-b358-d4000ec3e2ae", "sighting--fa82ef0b-3655-4bba-9fe6-2ae91c099a4e", "sighting--e0d535d9-40b0-4170-9553-6e3fb7467f81", "sighting--3fa39408-8d41-4e0d-b941-0db355457968", "sighting--30a4ca24-d5fc-405c-b102-fd38e221879f", "sighting--71a2baee-f25a-4c38-9681-51a5f09f381e", "sighting--08f717ca-c689-4edb-ab6e-cd8541f3627b", "sighting--9293fde8-8e6a-49bc-a5b7-7b0677c88c00", "sighting--0b355e73-5b43-4e07-a34d-502f6a96f1bb", "sighting--25af606a-8f20-49d8-af2c-0c5d5384211b", "sighting--f0eaa1c8-c3f1-4f56-9f7b-aff4f333f197", "sighting--0f71be54-5b17-4ab9-bef7-3b47432015b6", "sighting--9dec9f50-7c30-4fc9-b162-75bb71d582af", "sighting--39780b16-912b-4fe7-aaec-efef50500691", "sighting--fc4a28d2-293b-4b17-9ebc-a4877dfc3372", "sighting--5e2d695b-caf6-4464-96a3-bb4f0fcc7f9b", "sighting--4732a877-469b-4b82-a52d-3c4d4accc62e", "sighting--aa0167ce-1716-42ec-a8db-9989bcac556b", "sighting--a40503c9-72d9-4c67-bc7a-9ad4cba4184f", "sighting--00beb44a-d891-4b50-9565-c3e713f6aaab", "sighting--3506a01e-90be-40e7-9f37-7107346fa379", "sighting--c94a5c9d-690f-4be1-9ca1-86e18fa0829b", "sighting--35fcaf23-9d5a-415b-a670-ce0fa4b21ba7", "sighting--7d06bc49-3718-43da-9dd1-19b77f2a8c5d", "sighting--9c89a73a-1f91-4d06-9a09-844ff99239c1", "sighting--9972295f-f0f0-4a5c-ac11-05ecc1ae425a", "sighting--3f957ed4-ed53-4275-a008-ce173775fc5f", "sighting--a9349d56-22d3-41d6-9a9e-3f79c487d7cf", "sighting--18fb7ae9-147f-4e48-9e47-4e04ee0e69e4", "sighting--6f1cd840-b4ed-4f96-886d-c0f939dd9c56", "sighting--def70241-5b55-46bb-81ea-64a462c6e3a4", "sighting--c1e90a2b-aee6-4630-8f64-7e287d62938c", "sighting--959f909b-7c5c-44a9-8fb9-7a2c29ad977d", "sighting--374c5e63-a2e6-4a2b-89ee-add06411e4c8", "sighting--dd6eb625-d5ce-421b-8487-b59124b4b1e9", "sighting--8e25d0a3-63f1-4566-aa0d-9b97caefee25", "sighting--cc199358-8196-4db5-85db-ebb5ecaef450", "sighting--ffbccc75-7df4-4818-8215-fc490cf72928", "sighting--04f5d5d3-a392-4ad1-b289-09bb43947106", "sighting--5f98a68f-919e-419a-bf22-f6b6e7a339ce", "sighting--00701f26-ad97-4d9d-a8f6-feff52fb934a", "sighting--cdf62848-cdc1-4729-ade1-6e81a2d724f7", "sighting--de0e3a83-0640-46b4-8112-1dfcdd59b237", "sighting--b7882479-c4b9-4987-829c-32aa76914bab", "sighting--73464f8a-c14b-4338-8e3e-dbc2107667df", "sighting--8ed8efd2-8f2e-4576-bf94-15bde6840b5d", "sighting--375350f7-a3a3-425e-8baa-d0e7f8617a0f", "sighting--92c918d5-1f32-496d-a294-9e68556f3588", "sighting--28ef48c7-501c-46e6-9923-0a5c6f756d8c", "sighting--3c82da4c-a21a-4fbe-a94b-1e88143e0bd5", "sighting--e981de22-282b-44f9-98e6-8feeb311b680", "sighting--f0b0acb7-a554-4a09-b7d6-672692a721d5", "sighting--2ea524bd-a442-4180-9f8c-de924282fda8", "sighting--265fc58a-dbe4-476a-a3f4-c877f275fced", "sighting--af619d30-1305-45a9-be05-259529bbf7e9", "sighting--7a72d8bd-0f17-4423-b6ed-e19800946e36", "sighting--a5ad7a96-47e8-4162-9e62-a1bc5a90c89b", "sighting--b3b5ae46-8bb2-4441-b6a7-0d0c899d3c72", "sighting--84c5eed5-6cb6-43a2-a88f-ffa3bc6b1787", "sighting--799ed89e-1c77-44d6-ab01-37a4a81da57a", "sighting--e955b1c3-abb3-403e-820a-84ce6bdcb77c", "sighting--dd416781-f60e-40b2-8917-5df3aa69965b", "sighting--3d75112d-d95e-429d-a21a-2c751ffd86bb", "sighting--4bebbecf-7b0e-4de1-8f9b-54e62b3d31bc", "sighting--31604dbc-b6d4-4ee6-b213-e8f532c6757d", "sighting--1f93f6d8-6e52-4499-8251-fbe233d5ef04", "sighting--75dc003a-ffc7-4e13-a078-ba03c47744ad", "sighting--b42e3011-d93d-4bfe-aa0d-9c5309883af2", "sighting--1ef89e9d-3f58-40d2-a32b-5e7a372f6324", "sighting--71f1a39d-ecdb-4b0f-aef4-628e23e8d8cc", "sighting--e2e9e4ed-740a-4e68-a3ad-22090a56c5dd", "sighting--23bbefb8-e376-4a46-87b9-1b3205dfacbd", "sighting--613413fc-a1a6-4311-9dba-c33e9af93c2b", "sighting--0856147b-79b7-40bf-8bb0-1c5d7ddc9d1a", "sighting--32b86334-cea3-4039-adca-da780d1e57c2", "sighting--976f456f-96fb-4db1-b307-b504babcbcea", "sighting--52b62b97-dc98-4785-9493-685289aa323d", "sighting--f5b2d7f4-e2b0-41db-bb59-9ecada379ba0", "sighting--0218e6b1-2ef1-4c58-ae34-218f3ebebe49", "sighting--55100d9c-a125-4de2-88d5-0b2f5ddc5e95", "sighting--6829197a-2ceb-46e5-8c30-231be04c4265", "sighting--b4f7a2fc-d30a-4602-8f00-56fc3c03704d", "sighting--ae1f03c7-9b1b-4fd4-823b-1e3cf3cef756", "sighting--13106317-8f91-4dcc-8297-3f2d8b3417b9", "sighting--1e16e6c5-695c-41be-8fb6-e75f80fa175f", "sighting--b474953c-287a-4d76-8232-aa5c5486195c", "sighting--4ebf3f93-aef4-4d3a-8b21-0a8fdad1fa7f", "sighting--0f9544e6-233f-4c3e-a502-89c8e2d8d257", "sighting--2f2b03e6-9ec3-42a9-9a4d-141bdc382936", "sighting--bf247470-501e-4ea9-acb4-2c612460b265", "sighting--3efd85fc-19a5-4137-9999-31897a3bea6a", "sighting--357a8340-3d52-4790-ab16-2e68308d9b20", "sighting--f3ec0bb8-0784-4adb-af23-a0ca2e223555", "sighting--c6814792-1cf4-45f1-bc08-479d6e221db8", "sighting--b7b9ce28-ace3-4551-a033-0637f1a942ae", "sighting--26afcafd-d537-4460-a05a-00984877b30d", "sighting--5fbb2246-d5c1-43c0-941b-ff5e350bb01a", "sighting--ca609c23-168a-4f78-957b-34f074309290", "sighting--88c59b29-5978-4cc3-8310-83057e1858aa", "sighting--feffc74e-a7f3-43c0-a23e-34d2e66e9573", "sighting--204fb21e-779f-4817-bea7-66bfca90c2f7", "sighting--507f151a-6f9a-4659-9975-29e746a8cdac", "sighting--ca0db42e-f3f5-45ae-90e8-ae0226ac1965", "sighting--85ed9301-701e-4549-ade1-d735aba2a6e5", "sighting--204ab2a1-1a39-4291-8688-8726faadb2e6", "sighting--99bf5e9a-e072-427a-941a-d97b17bfb2e9", "sighting--8eea0c6c-aac8-4461-b463-5382c972e1e4", "sighting--79c9fd40-c4db-4686-8848-93af8dd92b71", "sighting--31d0359a-2002-4966-acc3-1c06518c3c87", "sighting--31e05ddd-fab1-446f-ad6b-5824ed7566a2", "sighting--e0094db6-ee8c-49f5-bcf3-ac136ddaf2e4", "sighting--adf7d679-b328-4396-ba90-9d1f5a401c42", "sighting--24b4d181-ce91-4593-a191-0217d509a103", "sighting--4bc5be70-fb01-4ba4-978c-aab608906867", "sighting--598648e1-4dd5-4985-9346-4b8b7019717f", "sighting--42d6e663-6ea9-4d25-89cb-2dffd27dbea5", "sighting--3ff469a0-bcc2-4855-8edf-91fe4b8cd8f1", "sighting--101c8308-7ab2-4233-b605-a09efcbd1ce9", "sighting--7569c1bf-fe78-4bc5-8c37-d95982e04a01", "sighting--1e0096b3-f761-412a-bb07-2b3a56813f84", "sighting--e8319c9e-f07f-465d-8d72-852dd903a8f6", "sighting--2438be1c-970a-4715-9a92-e0c13ec0730b", "sighting--70f1c48b-7fe1-4d25-b6bc-9c78dcd5cb4b", "sighting--c952dda7-b79f-4df7-a59d-c28d9de1629c", "sighting--7375fa97-57cd-40e1-b6d6-de0afcbb718e", "sighting--c076b3fe-ce0e-402e-830a-6e38f4c1c493", "sighting--d02c9a0d-bbc8-4bf1-93d3-c77bbaa7c416", "sighting--43ecb0e8-9083-458e-aeff-863ded7f593d", "sighting--61ad74e4-872b-4854-8a70-56f5436e6e38", "sighting--692165da-8234-47a0-ba38-49087d7710f7", "sighting--a3cd8784-b338-4cdf-8f88-7b682ad8d745", "sighting--336b5dda-5d8e-4ad3-86a2-fe65b7229b9e", "sighting--06bcf882-1928-4799-ab99-688514fc0e05", "sighting--ebb5379e-3150-44f9-978a-63bb640afb10", "sighting--9a5189fc-80c2-47a0-b6e9-4c4cff4e2627", "sighting--8cca8bbc-7f00-401f-9817-cf5af64b931f", "sighting--1bb0525a-67a9-45bb-aec9-4b3144d741ad", "sighting--839be63e-0548-47f5-a0cc-2a55f58bfe2a", "sighting--9ba963ec-fd82-4cd3-a5c4-55818bffd40a", "sighting--ea0d940a-c779-4588-a097-b26cf164344c", "sighting--f8846c10-e91d-4669-93e7-ed988be09453", "sighting--f090623d-30d4-412a-8dd8-0962f01f3194", "sighting--b0877e1d-5aee-4930-91b9-c6fd3d8f5827", "sighting--a7619767-5848-413a-bdd8-fc5da4b30edc", "sighting--949a8a86-94aa-49f4-9895-a26fd43ea9bc", "sighting--aecac088-6827-4515-b4f1-d400ce473a06", "sighting--36acf758-c000-4d54-a3c6-c5f3703919e7", "sighting--b3fed1e9-d7dd-48e9-87ae-bb77e84d82c6", "sighting--ab886988-aa3e-4dd9-9f0f-fb280a66e621", "sighting--326ce122-7029-4f39-a851-6fd43407f770", "sighting--7d5ac9a5-423c-4a31-a727-f6fa8b7780e2", "sighting--5f6b9a3e-dc19-4a16-bfa3-ec74029e294c", "sighting--16bb8916-eeae-46eb-9dcd-d3e3b0ce178b", "sighting--f91508be-c2a6-4532-b9a1-5e1247ff030b", "sighting--45fc987c-539a-4cc6-ac33-d8f10e0a9ec1", "sighting--3e92475b-e6dc-494a-aee2-33272a0a1bf6", "sighting--fb489e8d-82f1-4b93-9bb1-60f3de6d5668", "sighting--35916dc5-8ca4-4a60-8887-d605d17073ad", "sighting--294d2517-6d05-4201-8b2c-10489e92bd74", "sighting--99a009b4-731d-4d97-bc37-dca8af01b1c2", "sighting--cdf7b98d-b1b2-46db-9465-3291187a5f20", "sighting--c1283480-a1da-40ea-af05-f6cca789df1f", "sighting--bb7f913d-59b5-4769-9c6b-ea173400a323", "sighting--1592999e-d647-466c-9ffa-4827c78261bd", "sighting--89515685-1e22-4cad-98f8-206742b1d61f", "sighting--9ffd4c90-f2be-4cc4-9ffe-c729294d3d4f", "sighting--fede040b-1a12-4e6c-850d-cb2bd15c5108", "sighting--2316622e-b71a-408e-8ea7-202fd44de514", "sighting--ae48482f-0fd5-4c50-8e2e-b38ee78fba21", "sighting--2cdae99d-6143-431c-afe5-93dfc07311c6", "sighting--9848959a-40b2-4bbf-a42e-98e47f2f089e", "sighting--7e2ffdbe-0769-4b8f-b7bc-d23c0dd5b37d", "sighting--c93d7f54-f298-4962-9be8-929d00545f4f", "sighting--5f5d282a-e81b-4a5a-92cc-4bb80d9b7542", "sighting--5afdf798-0c4c-4190-8f8a-a577a71cfdbb", "sighting--d09ec2d7-362d-4d7c-8334-88192d469ef4", "sighting--abcbd2ad-f161-45f0-a4f4-458b6ee651df", "sighting--c3387c3c-f646-403f-b7db-6118b6254cb7", "sighting--ad063d79-03d4-4e4d-92c7-7c487131223f", "sighting--a30d8d4c-11ab-489e-b0f3-a2e1792a351d", "sighting--4d659f4d-b340-4434-b640-e4f4facc39cb", "sighting--c77790c5-ef7f-4d0e-99bb-c43f3c26d396", "sighting--1ec3ca58-decc-47bf-91e9-d96d6159d755", "sighting--7524f579-d1cb-4801-ba5a-706e7a7a3634", "sighting--6e83189b-ed6a-4d52-92d4-e351bfe66a68", "sighting--e3c122ab-0fe2-413d-a880-5b200a906845", "sighting--6a7286c1-2851-48c6-afff-6a32cfd524ff", "sighting--43b2d0de-62c8-4909-9bab-c066e3318163", "sighting--2d835f92-44b2-4f8b-a827-a2f4e63211c0", "sighting--7b17854a-70f6-4f67-814c-2e3b41d77292", "sighting--13447047-a423-42cf-9b64-f47ad6558b23", "sighting--b3028b33-ff7c-47c7-a06f-3a84a9c6361d", "sighting--2b861a20-de31-4bcb-afab-9cd2bd31e446", "sighting--7208f132-af5e-44ad-a381-91c818779cce", "sighting--6963756e-d171-4434-bfb2-8c7a6d78366a", "sighting--7286e7de-e51d-4eab-b321-6e2c50b39e7f", "sighting--d481ca78-cc01-45a7-912c-26ff21a00b77", "sighting--dffcaa60-e8e2-4a9a-ab6a-6e0e21bfcf0f", "sighting--38b9ccdf-3574-4549-87ce-81d95ed1bc10", "sighting--6ad29feb-728b-4d9f-902f-b16a3a709a2e", "sighting--50a7a145-3ea1-42a7-8b5a-dc9cf61e5704", "sighting--a69dd9bc-381e-4c1d-ac16-3dc70da4505b", "sighting--d42585f2-02b9-4c72-b9ed-652983253fcb", "sighting--60a16862-3ef4-4b31-8651-07bbb22900d5", "sighting--fbca9234-049a-46a3-85b9-ad5c9b6e926d", "sighting--ab54ef30-56f0-4b44-b137-1590909bf8a2", "sighting--43bcdf1b-ae7f-441c-9cda-180d084d3c27", "sighting--8624fe54-c69f-4330-93be-34e1fabdb900", "sighting--4451e0be-3775-47fb-b184-bd6f131add52", "sighting--c6be1a92-a82c-4163-a96e-10435d142b10", "sighting--0b29d67d-0d2e-44cb-880b-14bad631de78", "sighting--51d70ada-84b8-4e37-adb3-8375c6c09149", "sighting--cb546580-14dc-4b82-93ff-518dc18f0eb7", "sighting--4dfd1039-f6a4-4a77-932a-2b84b40d0821", "sighting--aa9b4d3e-25c9-447c-84e0-fbc576dfbd3d", "sighting--647c78b9-e51e-4128-9a43-013710524d63", "sighting--2a82dd44-fe0a-4fd3-be1a-21d58085eb63", "sighting--d2621e73-94ee-40ab-ac1f-87c784659b6b", "sighting--12073eba-b69d-415c-be37-b2106afd1e1f", "sighting--d408bd65-4624-4858-8172-b50c08c36af3", "sighting--10648aff-5c13-4d4c-8793-0cef6e050da2", "sighting--a5ceb950-4ae8-420f-81c6-3a3769d9f20f", "sighting--5ba7be0b-70c4-4533-b2d4-80419f2d046f", "sighting--eb0c0625-0891-4ef4-8307-7bce8ba88a1a", "sighting--5adde8aa-c791-4211-aba2-96841aa52466", "sighting--34e75901-003c-494a-9734-8669411e105c", "sighting--bad2facb-90d2-4789-b5de-5a04414f4608", "sighting--898fef12-3257-4b18-bb88-dbf2cc395ba1", "sighting--d6e32750-66f6-4bdb-82bb-e05bc251dac1", "sighting--850e582f-6318-4e0f-bee6-3abbb03dac18", "sighting--25cb03df-18c8-4916-8108-0d046ba3f8f1", "sighting--8488291f-6944-4a3d-b790-c2890f82d40a", "sighting--4ffb8ad8-4edc-418e-a88b-1de0b738d13d", "sighting--fabe7d24-37f7-47bb-a9ef-0419d1dbda12", "sighting--ba342d74-c00c-4b0a-9050-5be0efd85f20", "sighting--11771034-efb4-41df-be14-e0e66579b0ea", "sighting--7bb9cb37-c9a2-4d32-88c1-c7ccb74e0a6b", "sighting--8b190021-ce97-4d8b-a398-fda13b2597ba", "sighting--d6744aa5-886d-419d-b5be-34f16b206251", "sighting--cd165aad-a173-44a4-a2ea-c081df2f908c", "sighting--cbc7336b-8a30-4940-bd94-4bb28bb12410", "sighting--62328697-8f86-4fe6-944c-d93a081ec744", "sighting--1e3fe17b-e6b5-4522-8d6f-12e86abf1736", "sighting--e89880e1-e4e0-438a-a1e4-09ebe35d61b0", "sighting--24fc0198-e2b6-46d7-a4a4-8d6da3f8cbf5", "sighting--bad8485d-5b1b-4629-8d51-eeeac49b36f3", "sighting--00838e6f-c337-45c1-ba9d-a8ce6eb2dcc9", "sighting--f26452f6-d411-4f94-9d85-dc2c90df6524", "sighting--52362f1f-beb3-4aaa-b83b-6b1ff8f04ef0", "sighting--515a96b6-1ea3-4950-97cd-d6bf49d07b8a", "sighting--6bed8bc3-c9f4-4e51-a2f0-2630908a7c61", "sighting--b48671fd-86c2-4af5-ba97-64e23b32d246", "sighting--9e460750-ed67-49f3-b978-930a4112f558", "sighting--04f5b2a4-05b8-4668-8e7d-4dcf0ce6f784", "sighting--266a25a7-c587-41d5-9e0d-247e04fcf376", "sighting--443f6c82-1a16-4959-ac54-5bd4e47df5fb", "sighting--0dab27cc-8204-4809-a2a5-e8f3554d0f07", "sighting--2ff15e8b-5e06-46ce-bc31-efcb3ba95f25", "sighting--3c4c44f0-0378-4823-ad51-b1ef5f39be70", "sighting--8931ec77-eedc-41ae-a8c4-3c0e35737ccd", "sighting--45317333-db37-4746-b8e0-8d1ac5e65802", "sighting--0ff6e441-9f40-449a-a9f9-9e5356026565", "sighting--26d31bd6-fe79-4e6e-9b16-15178dfbd2e1", "sighting--412ef759-aaab-4298-9659-c4c65ab3874c", "sighting--06b845ac-518d-4217-9ad5-0a8f0df19fe8", "sighting--fa139e76-489e-4718-bf7a-b7c8ecb43cd8", "sighting--e530c945-4b23-4905-bd96-037c92b6edb8", "sighting--7d5aca70-101b-4d37-9af4-75dd86d208b1", "sighting--07eef61c-8825-495e-91fe-9d93b3f7b6a8", "sighting--c03e62ab-9259-4d07-b240-6121959d55c8", "sighting--43b71771-2d21-41ae-ba6f-e5f030ff255b", "sighting--8ae055de-0b2f-4382-856c-4c99cadde508", "sighting--092f85e0-1579-45ec-a7ec-b141eaa7b9da", "sighting--e39185ec-c120-474e-a1ee-5787d90fb1d2", "sighting--6ce5c13c-b9f0-46f1-a6e2-ff6467a7dadf", "sighting--fbc75302-a06e-49f0-a61f-50c69ebaee10", "sighting--6d75b801-ec21-4686-bb45-57c0ed96ebbd", "sighting--1a515a75-6352-4f30-8081-cdd7789d3de3", "sighting--658a4243-20fa-4ab1-a7ad-1cc9c945d092", "sighting--ae3a65c2-aba7-42f9-a781-75b481549dcc", "sighting--173d6cb2-b2c0-4c9e-8c64-d62fbb9e143c", "sighting--8259d64e-9950-4070-8bc5-5ad1dc143ec9", "sighting--9924c179-3e1d-4026-a69e-cda45dad4827", "sighting--b284a76c-95dc-4f7a-9698-4614152a5785", "sighting--4145e562-42a1-4fa6-89e3-9924c9f07f1a", "sighting--0d4d6492-428a-47ff-922e-6c1853025375", "sighting--38586f83-5bbf-40a6-837c-bce11e61076f", "sighting--9b1e5bda-57bc-440b-9bc6-ebf7183a0134", "sighting--115a29db-162b-4904-8841-3a1c37c266ea", "sighting--08e94505-1a4a-4bdd-b797-2f341889d652", "sighting--034ae0d0-37d3-4710-81cd-39a94138cb8b", "sighting--a482dfc4-9177-4000-9ead-ce38defd6c60", "sighting--d6bf7aa5-9c0d-4fab-8019-13d748e731e9", "sighting--60fd4cce-9534-4532-bddd-d5b0b5fb5a5c", "sighting--a0eef918-23b8-4e07-981d-072d3037de3f", "sighting--09e236f9-3f2d-45a7-8105-9ce4464c492a", "sighting--824f7759-495b-41b4-bb85-74790e2eb9d4", "sighting--35b4220f-b792-412a-9acc-68746e5be829", "sighting--88dec464-91cb-46a0-b9c2-8441bf2fa2cc", "sighting--97f36a71-74c0-4cea-8466-03be1af11824", "sighting--cc809754-4afd-483c-896b-069971a931eb", "sighting--6f7f476c-83b4-41ff-b6f5-e8848a1dfa43", "sighting--e1a40ead-bd3a-47b7-8434-5acdef0e34ca", "sighting--4d655556-5255-4e4c-83c9-aa4f1677fad5", "sighting--229ac404-7002-4c4e-b677-78367dacf3b5", "sighting--3253b1b9-0b78-4305-bf64-032a4f65a64a", "sighting--fad295aa-65ad-48a4-b432-16abbd87b28b", "sighting--b139d024-2d48-4158-81f9-3c2f7cb78bef", "sighting--e114b73e-9476-41a8-8523-ae08c0850121", "sighting--0091fd5e-1b76-4398-945b-421f82d3ad3f", "sighting--c9b6561e-3c73-4dfa-89cc-f81b9605d33c", "sighting--7d376f8d-ac50-4b3c-95f8-7a5e22386509", "sighting--d6431962-84fe-4231-8af3-f1ae91b02466", "sighting--7763b262-8f32-4e7b-b992-167c468dbf17", "sighting--bba71e6a-ddeb-41d0-8094-5011841f48b5", "sighting--82ffe1cb-0949-453c-8a78-9b2fa2ecfc75", "sighting--4ca453df-ba22-4009-a19a-ddc9b48345c9", "sighting--de3c120f-ae5a-4c5c-97c4-6394fd0768d5", "sighting--544353f1-7c34-4f7a-9a1f-11f2bb73fddb", "sighting--4796a3da-d63d-43ff-9fbf-36eff22bea27", "sighting--14a85af1-674a-4412-8a82-964c2af0cfda", "sighting--aa3eb678-a944-4af5-835e-947dcabdd0e9", "sighting--dd52980a-d011-400a-a336-d18daf3dfe20", "sighting--737e7b1a-10fb-42c7-a0b7-7c3a00394d7a", "sighting--300db649-acfb-488e-a2fd-eaa035e33080", "sighting--8254b2f8-ddad-4061-b23e-bc994e508ea1", "sighting--b085d794-e629-4f5d-9dac-60d91f09d7e1", "sighting--9b81bccc-0f63-4b6c-ae8a-43e9adf98e72", "sighting--82af2e2a-5cc5-42a3-85cb-8fd6933abd9e", "sighting--62f1ca17-3cb1-4cc0-a1d6-cc3d1374f00a", "sighting--77821a58-f779-4af0-9254-20081e07cf15", "sighting--61764f38-f386-4376-b3cc-cd0e927cf50c", "sighting--162790f5-78a6-4b7b-8c83-6f2d90c62984", "sighting--6f45478a-def7-46c5-8ef5-41290bf4b4a4", "sighting--552fea2b-f467-4d2d-b8c8-a0276309ccaa", "sighting--a7555418-8474-438f-8c37-423ea38719fb", "sighting--cc46d7e2-5425-44c2-8c7b-e3ed2ec3c21b", "sighting--246741e4-1c8a-4bda-8dd4-852776903451", "sighting--997d0a0e-0072-4e32-bf18-a13914834897", "sighting--29d9ce37-d58d-440b-82d9-543a532d33aa", "sighting--997b9231-b7e0-4753-9d82-72b0cad4c4ce", "sighting--e1cb50da-7a39-4e3b-8a56-5d1807aa4797", "sighting--e53feb98-91fc-4be8-953c-4aaafe1fc408", "sighting--e66e853e-cc7f-44bf-aa92-2acc26fa0408", "sighting--a49f2283-3a3a-4350-9b27-9d80e69e85cc", "sighting--beaf2e21-b0f4-4a92-9a36-3054c45a7d4b", "sighting--840fe9c8-5512-4508-85b3-dce1fc092fc4", "sighting--3ae4b586-dff1-4d32-8e85-cb32bd45b64e", "sighting--c39c871f-2591-484f-9b0c-8cd159347bdc", "sighting--77e3ed16-973a-4252-b218-823b3e31a350", "sighting--a0663f70-a579-4082-9e04-a4e846398d45", "sighting--b061eb07-273f-4173-bc07-1ba70300a905", "sighting--38d8e2e7-d120-435b-a4c8-8970d536b412", "sighting--b7a848e5-e5be-4129-918a-67793c50ff8f", "sighting--c1cc84f0-dd3b-4793-93ff-306e9c37bd3c", "sighting--3a449636-31de-4b70-8568-50b180f8a0c7", "sighting--ee051993-d04e-4c92-b500-7cf97d2df296", "sighting--23a8460e-dd3d-46e4-bd1d-dcc721ae5233", "sighting--00aafdda-cb6c-434b-8c02-0ecd75594fb7", "sighting--c8b5be0e-afdd-4712-9211-7224f8bc04ab", "sighting--9853d614-ad90-43bd-a9a4-b548c54d56b9", "sighting--f3d7ae46-5259-4bcb-8bb0-b7a66b5ece32", "sighting--6c904b00-cb81-4dad-994d-9b630502b00b", "sighting--0454367a-829e-4b90-9560-848ae53a2bfe", "sighting--77f49c33-42f9-4fee-b7b5-09689e2fdf82", "sighting--2a2a6fef-d4b8-45b3-8119-7a58e6fb0757", "sighting--aae1baaf-ac45-4df3-ac12-8323941a8648", "sighting--8452b112-a89c-486e-b59d-e44619ed21b7", "sighting--5eea5616-5d48-4b0c-940e-aaf0040882ab", "sighting--20058a71-c4ff-4a90-8784-1abbfe9841b6", "sighting--56740f64-f55e-4d9d-a87b-e1eb1f77dd01", "sighting--9d68c568-d44c-4a67-bfaf-8f0a89fba082", "sighting--e1307633-e230-4b38-984e-82ef1d6916d7", "sighting--3b087883-ffaf-41eb-9ace-deacb0ed40d8", "sighting--cb5b2989-9437-4543-9c97-1f075be40d00", "sighting--00a10bd5-e9e3-4ea1-9cbe-acf30a2aa108", "sighting--d3724dc4-12da-4234-ba88-c7fa8a8dd872", "sighting--1f787bf3-c31c-4f63-a818-76c8a61ddfa7", "sighting--c2cc5b8e-f9fc-4a46-8aa7-65ce905ad0ab", "sighting--7ccb4265-4065-4bcf-8858-b9a6f3159020", "sighting--45604b6f-e96e-41d9-b669-077fc61aef23", "sighting--c6f3e9a4-f3bc-472c-8dff-69a1148d366c", "sighting--1667aad6-d03b-41a7-ac8f-973abf353109", "sighting--2b1e2702-73f9-4d11-ba72-bb06010583aa", "sighting--29c9b1d3-6653-4231-a383-ca58988f52d1", "sighting--7c15bae2-de6f-452a-9316-e66d4853c21e", "sighting--fe6a5e9f-d140-4c08-b946-9d31049b0113", "sighting--578797ee-a6dd-4ceb-a1ab-d410eaaf492b", "sighting--b30ea7f7-43c4-4c21-87b6-e27d47578ce3", "sighting--47ab8387-3886-40a8-a82c-9a11645c814a", "sighting--e23d7523-6d07-44f9-9bc0-48c6ebe7bd51", "sighting--b797d2b1-2c3c-425d-9fc6-6a3025034428", "sighting--42e1a7b6-427f-4062-b449-ac7f6bbeb1f2", "sighting--f392d9a7-c993-4fdc-9a1e-578ab4a0fb7c", "sighting--3299d393-d0a4-4297-bb4b-f1417d47926a", "sighting--cd897f9e-dcd6-46c3-b336-13dc5f46ae58", "sighting--ef27a322-680e-497f-aaae-7203647f9432", "sighting--e9a3a17c-3248-4e2a-9771-2adf8575bdc0", "sighting--6cc34dfa-ab61-48ab-835e-030913e7d403", "sighting--c53dc43f-dea9-4196-ab3f-940653028a8b", "sighting--a4930e90-586f-4c1c-8917-d450cb3677cb", "sighting--621fa28c-6824-45a2-ad88-a76ea93f39df", "sighting--12ae887d-d48e-44a5-b652-d025bc00f4df", "sighting--c99a5bc4-bc29-43d1-99bd-a33d91560704", "sighting--54a618f1-e988-4900-9f0e-19d98264ebb6", "sighting--7d549112-f192-4af1-b034-69b113e21839", "sighting--ee1de585-1345-4e1d-a8f7-377b5f332237", "sighting--8e6a9f53-76c6-4502-b07c-d3664a04e2d1", "sighting--4c1752e7-9fd1-4abf-ba04-241f8eb2599e", "sighting--33bc1ac9-4bec-4903-83c6-4d50ab3d3552", "sighting--252d1475-9c12-4121-8983-5d4ceb8b9f3f", "sighting--2b7907a4-676b-49c3-a998-83cbcaf361b2", "sighting--c6a0fb04-830e-4a70-8e33-58f035977adb", "sighting--80351749-7097-41a0-8758-98ee93aadd54", "sighting--044b778c-cf3c-43b4-aab1-1bf7558cce11", "sighting--20312985-7dc5-4b91-87ec-eaaf3abb8f6e", "sighting--1895d2f8-5c8e-4276-8ae1-d8cf238f811c", "sighting--2c6ad5ae-31f8-49f0-972c-0a239819de2a", "sighting--90797620-8639-4a6f-997b-e4c30820b7fd", "sighting--8d960944-fb28-4c2d-ab13-740072cf22b2", "sighting--de5d44f0-d848-457d-9a2c-98d9dbad756a", "sighting--a5f6f294-af87-4257-bcb2-62c5d5f673a7", "sighting--1705fd3b-d13d-49e1-997e-9a902aa60de1", "sighting--9bbe14b1-ef5b-433e-a928-61e641e643f9", "sighting--f0c6794d-3b21-4e5b-a0ad-2ba5b3aa7061", "sighting--fa39d123-0144-45df-b3a4-8ccc9f304e5f", "sighting--39f7c1ee-4c1c-496c-b30f-b09113074e0a", "sighting--925f6550-c4a1-46b8-90e8-cab390b3f210", "sighting--6e05c750-34af-4bef-88d9-2f4efcb73827", "sighting--d9f0ae1d-079c-464b-b2f7-ca0e01b5af81", "sighting--f76be2c4-c05c-495b-abb5-0c232671623e", "sighting--ba610721-76e0-4404-beb4-cf88d5988843", "sighting--ed786867-1f9e-4266-921e-055dda2d95f2", "sighting--61291ee1-1ee2-4efa-9ad6-06135fb9c064", "sighting--1d3ea706-58dd-45e7-b93c-903047dc070b", "sighting--e4497e85-17fe-4dd2-a654-b26ca439cc4d", "sighting--fc74df53-9dd1-489c-97cb-85970234d17b", "sighting--a7a917eb-882b-447b-94dc-999013f9a202", "sighting--d0e640db-f977-47d4-98e9-9f954a88c642", "sighting--0a7a62c7-40aa-44bf-9009-f18e51b9fb0c", "sighting--146b69dc-8212-4070-aac6-e95a1215c79e", "sighting--d448506f-e536-41d7-8fe0-4d52ad56a75b", "sighting--3122e419-877a-4714-980a-41aa97a11feb", "sighting--357602eb-380c-41b1-b5cf-998f12c86f3e", "sighting--6044a608-61d6-4e01-967a-7e6872c67654", "sighting--e6aa6d0f-39d5-403f-9c54-84677a621095", "sighting--f083d616-d836-428a-82f0-2b0b0abc4ef1", "sighting--ca742599-1c99-4d25-83ba-8d14d9d95011", "sighting--4c1aedd6-4de5-49c1-bd56-ec3282846a7e", "sighting--a1871e69-8ab6-4747-9f62-e91412e85a15", "sighting--34a6a7af-a911-468c-a057-0feec7031c8a", "sighting--6671d2fa-c1c8-4539-b6d0-b25c569572b6", "sighting--73457003-f953-4a93-9c84-ff68b14da2df", "sighting--9898611b-85c7-47b0-8bcb-82324587324e", "sighting--3b9210c7-9fc7-4787-86c7-4018245be350", "sighting--fd0cca4b-a5ca-493a-ab59-562d743163e7", "sighting--c26e554b-f62e-4a7a-b53b-fd8e7ccc158f", "sighting--a97a77dc-b3c0-4c3d-9388-69d961e363a7", "sighting--1e43c5f9-b0ef-4841-ac80-0b5a08061301", "sighting--a673c466-f1fe-4e94-8463-3b8102f404ad", "sighting--7d2d0eaa-020b-49fa-bb8c-562fa92caa11", "sighting--48abe788-8dbc-4e56-9b56-e442758e2a2d", "sighting--642e8dce-9c22-4122-9d45-6a60c8927a0f", "sighting--98c0c888-39c8-493e-ba70-5e9d52738fe1", "sighting--eb7d8eed-bd4a-4b3b-b1a5-6f90250bdb78", "sighting--8af7db35-d1a5-424f-9bbc-b77e6cc17bb2", "sighting--1ad67a23-9d79-45be-a8f1-cf9503ed0757", "sighting--0d57aa79-a208-44ff-96e5-be9b0fd1deea", "sighting--52809aa3-ee68-4bb1-9e71-57e3035bd372", "sighting--82f93199-3ca6-4c61-8c38-6c32da2638ff", "sighting--e6c1d2e1-16d3-41ab-9ef8-d579ba9831d2", "sighting--9d63cc8d-c2f7-4235-912d-37a7f037c1f9", "sighting--f2118fba-4d5f-4c70-8f22-493e9b946970", "sighting--30050422-b748-458e-90b3-f73a87f76f97", "sighting--0a477bae-d67e-46e3-86ff-76a91e9a5970", "sighting--71583a2b-2562-4073-bf7d-a2b6d7ea7076", "sighting--8a49634c-27f2-4957-a829-f60df10ae752", "sighting--b77fee6b-09b8-4bd9-bd8a-76b8e3cf2eb1", "sighting--e72ad387-ef48-4ee0-822f-19d43e183e69", "sighting--6cd62df2-4121-40e8-bddd-cb0065b0a73d", "sighting--3aace166-7caf-4998-ae69-d807d64d74e8", "sighting--06971cbe-4cea-4535-9b6e-b3c6178663dc", "sighting--98c81cfb-8391-4393-a3bd-0ee376a8008e", "sighting--fe9c2514-93e3-430b-880a-f7116420786e", "sighting--a34aa419-c6f0-4861-a6a8-f4247636ffed", "sighting--34f88af7-7ffe-44e2-a6af-8a13a033b4fc", "sighting--1595f7df-c3ea-4f66-88a4-ce4164626348", "sighting--e175a120-d4f5-4167-b1ad-cbae16b69147", "sighting--182d47da-1136-401d-9985-36c81f9005f3", "sighting--97e2b04e-04f0-41be-990f-cbb76232343c", "sighting--1580ef69-7cd1-4103-a921-944c48af5681", "sighting--a24711f2-2f74-4314-8b8f-143dd1bd580e", "sighting--bce9700b-fa63-496c-bd3e-c9c2215b0aa8", "sighting--e7bbf6d6-2019-4509-8821-fb4a85346a20", "sighting--89d1d390-5c02-4059-b9eb-759455c13011", "sighting--b136b7b3-c01d-4dfb-87c4-314cef373425", "sighting--b875a352-02bc-4c35-a0c4-b67c2dfe4c2b", "sighting--d78ac424-9d2c-470a-b0d8-2bdab1d6176a", "sighting--2eee1c2d-5e3b-45d6-b233-4924ccecf9b4", "sighting--f30772a6-a4cb-40f8-bde9-a1f13cc434ff", "sighting--96936e6d-ee1e-46b1-9c6e-96f09d1a5940", "sighting--81e50e91-3fa2-430f-b7ef-e24dc6fb9c98", "sighting--7ed13fe3-09fa-4fef-915c-0212a7cb53bb", "sighting--77401402-db39-44b4-a262-202c2c35eb9a", "sighting--dd40c0eb-80c1-4b8f-a31c-41c0163a6475", "sighting--f5e6cfc8-a5ec-49e4-a927-ca1a1d41a7f9", "sighting--2cc82cb7-c3e1-450e-8b3d-02b45454f9c1", "sighting--a38acd42-173f-483f-875d-cefd1063cf3e", "sighting--0d24fe99-f713-4b23-82b9-73b1e3b4e6a8", "sighting--dc636536-32fb-42e4-b019-eb02d3af7ec5", "sighting--5971522d-e9ee-4df4-9065-b4e5fa2656d9", "sighting--59f5cd57-0084-4c26-b76c-5ea80c7b9ef9", "sighting--37ca28ba-46e6-49d5-a4f7-8e512d7463d6", "sighting--6c3eb87b-e41c-4417-8894-0c10fd48d0e7", "sighting--d4edcb62-6f21-40c7-b970-7bfa5025b7bc", "sighting--d649f013-f954-49de-ae90-baef272686d5", "sighting--df871105-4d5b-4b8b-bd6a-07ef8f0d40a3", "sighting--a6a64665-0489-4e77-905a-1e4e6fcb6aef", "sighting--b89cae40-fc48-4742-8ae8-253003c9eb66", "sighting--7a4377ac-783e-4e81-9cb6-61ae7f4b4ef9", "sighting--0d1a1683-630b-47ae-b70a-c2ad8b9f887c", "sighting--4c59d184-90c6-487d-8731-1e31dea4a41e", "sighting--009ad937-5ccf-44a8-a7c6-795f8189de50", "sighting--5fd1faa6-7beb-4eb1-8e66-9de43ddbeebe", "sighting--84fd55da-52d6-47ff-8e16-9499e758554f", "sighting--fea8ef3e-ce3f-453a-9517-93178fe1b0f4", "sighting--93808cb5-9181-455c-b89a-dadec4b682c8", "sighting--f0f877bd-1948-446b-82c3-7a7d14aa7ccb", "sighting--1b812586-6fc7-47bf-9262-02daa95f74fd", "sighting--9bf9a375-f169-4eb3-a9f0-c50f9d6bf7af", "sighting--c294c33f-8e04-430a-9b68-4dac1088b573", "sighting--b12c0cbe-29ce-47d0-b2fb-108e116eb91e", "sighting--77b6989e-61fa-41df-811e-801508f710bd", "sighting--49420245-8690-4e98-a923-a03bb0bbb73c", "sighting--e4cbf160-cc57-4591-9cc9-4f3b430e6e4f", "sighting--71511ba7-8148-4aba-b8ff-9e7cc27af80c", "sighting--3e2f7592-141c-476d-a0f0-8f877b264219", "sighting--fe5a6a8f-069a-45bd-93ed-cb8bbe511e45", "sighting--9550b35d-2fda-4d94-ae0a-91425659df39", "sighting--022bdcbd-213a-4888-9462-f804134db674", "sighting--778f021c-66ed-4632-83aa-39dbb4b85975", "sighting--baae8021-46d5-424e-9010-a2e62151c7d1", "sighting--0fadc7b4-0475-4212-a48e-67bc33b5bfb5", "sighting--7314d3e1-4fcc-4b61-9089-ae0b8b8d3fe5", "sighting--139f7e9c-9af1-4259-b177-7e4409105480", "sighting--549511dd-b266-4e61-ba02-e7ab77da2354", "sighting--18aeaf11-0b8b-4836-8b00-3442034b971d", "sighting--5df4d96a-90f8-485b-afdc-00bd0558e4dc", "sighting--7daddc03-c4ac-4406-b9fa-6ddab761fa3d", "sighting--cf6a0141-ce44-40d5-b3b2-83d6d2661756", "sighting--782b053f-f128-4a51-a2c4-08d5e266bf95", "sighting--9f2436ca-a160-4860-8311-06061babf56f", "sighting--a329e22c-a7d3-4494-93ae-3e3e8a7c2102", "sighting--9a3d5e63-cedb-4dc9-84f1-a09ceee0388c", "sighting--4c459ac1-7200-4ee9-97c3-b932bf7728be", "sighting--eb214871-5e76-44fb-8a21-da56f7f91c65", "sighting--bf7b9c48-1f8a-41a6-b047-dcbedef87cf0", "sighting--0e45e3a9-0dec-4c3f-8fc2-8828c19e60b3", "sighting--9fdb0e63-f513-4a84-9d0c-da3b5d35a828", "sighting--5db99155-329e-4bea-a2d8-92fc6201f655", "sighting--cf9323a9-c309-4b19-9966-6f85db3fa6ed", "sighting--59cf257c-e28c-4e74-9ab8-23d7e7c303c3", "sighting--0a07266f-7499-4a11-ad6d-fee297d26886", "sighting--231115b5-310d-4731-8165-b074c01b432b", "sighting--d2a2ce71-0768-4c15-a45b-7a58918d8e63", "sighting--7f8eedd5-0d36-478a-a995-e8013af2d4fa", "sighting--9ee8312c-5ccf-4220-a662-e2d71ff0ddbc", "sighting--98acd498-2f88-45a3-a7c9-9b4ebce3c3a2", "sighting--1062fa55-74d7-44be-81c2-b360a206b959", "sighting--61565a24-eacb-4e01-8d25-e794552a0275", "sighting--a57fee99-1c8c-4eae-a502-65f601b2625d", "sighting--392a9b07-a1da-4a6d-a6a6-ba7f2e42b89d", "sighting--21d1be44-5565-48d0-813d-0d8359236e78", "sighting--b1ce4875-b53c-417d-baea-2d2a346c0e4c", "sighting--e8a3109e-d952-4c77-ae44-420e33ecc879", "sighting--e12fef3d-6ac2-470a-87fb-38ca72e9b095", "sighting--d012235d-2ea9-4897-bc5d-7356731100e5", "sighting--d8aa2d2d-9ad9-4468-a095-95f0b21b26de", "sighting--b6821d7c-498a-4ba0-9d1c-25defb8ff252", "sighting--e46e3bd2-01aa-40fb-af8f-7d7522100010", "sighting--c46d6dee-91fe-4fb8-96ed-62348450c242", "sighting--c399e574-8a26-449b-aae4-a41c411a4fe5", "sighting--393442ad-11fb-4869-8ecb-4f53f4be1559", "sighting--c18acd38-37c6-415a-9b57-97e2cbd144a7", "sighting--6d706672-1ccf-42ae-9ebe-755db4851a3a", "sighting--6269e10a-a648-4d6f-86b4-6dee70f18f79", "sighting--9547d7a1-fbcf-4fd1-a078-5516394f504e", "sighting--4d2164d5-1e6d-4cdb-94b8-915f02fd2d0b", "sighting--ed2b16ae-2a03-4a3c-b1b7-a04fa6a90972", "sighting--a4e2c443-e51e-465d-8b0a-f74148a11e2b", "sighting--0cc51658-c88c-4c50-8a31-2a6357280e84", "sighting--39d5ea8e-3ee8-49f1-9f70-6790f8c1cffb", "sighting--b588605f-9a35-4d7a-9e55-7337f0ee816f", "sighting--e5e05691-2d64-4d1f-973d-385ff3037f17", "sighting--09ecef8f-7cdd-4b65-aeb9-ca98477cc052", "sighting--ba4fe154-8b78-4824-a3d8-9123f37bfbde", "sighting--4f131d79-3aa1-475a-8575-205c8a852d81", "sighting--62dc1f31-263b-40a3-af8c-7add53c6859f", "sighting--1d752e55-be06-48c2-b590-0e8911bcc939", "sighting--4f89f9bb-8b64-4069-bec3-6a373beadc28", "sighting--e984b5f3-80bb-4eac-87c1-897477da05d9", "sighting--4f548900-5f39-4b2a-a20b-b749dd3b3538", "sighting--00955d4b-620e-4b09-91b4-4d4178a491cc", "sighting--be931c92-b9dd-4ba8-940e-672e3db9e23b", "sighting--72eda714-da91-48cb-9b62-ada6d3ce42c9", "sighting--23cfd108-8925-4e5e-aa3e-8bd7d3c5b758", "sighting--77609d31-fcaf-4cf9-af2b-eba4e3cd0a5b", "sighting--589d3821-72b6-48e6-bb59-f74b8e6714da", "sighting--c8662510-cec1-4adb-8754-e02893184eed", "sighting--09c7a690-2254-423e-a066-3834d69b94bc", "sighting--ba9a9b2e-159a-472d-ac21-980e2dce3b6e", "sighting--a660e7e4-784c-48c5-b430-480b4751e815", "sighting--5072557b-1a74-43af-9ace-7e755b5d4ac3", "sighting--279fb668-1000-41c5-a6e4-9facc2a39997", "sighting--49b8581d-4559-4a8e-807e-7a783f54981b", "sighting--c46e7146-6bd2-4d59-959f-5fc086a46686", "sighting--410ebd68-4583-439d-acf3-bc7888bda3f3", "sighting--f3b05e41-cc3f-4842-9ee7-2ca331bc88ca", "sighting--33217535-d4c6-4e68-a024-583611f21ae0", "sighting--6c73e596-628c-413e-a2a0-f6af3fe94ca6", "sighting--975e7d1a-50e7-4eae-82d4-871c2df91f42", "sighting--a37746d3-167e-47a9-8cd2-9790ae3433bc", "sighting--c9763519-e6b0-40ee-a6af-9bb14e4639fc", "sighting--0515571b-5b91-43ce-805f-44cea4292bf0", "sighting--21b90a82-425b-4835-aead-a2375c1f4a47", "sighting--ea77e696-b2cc-4800-88b2-151c3f0e5163", "sighting--3e7ee658-fc11-48c2-9e1e-50da25c51746", "sighting--b64f48b9-4279-46f5-a733-ef36de3c2ae9", "sighting--82305c89-21e8-4498-962c-258cd3928ad8", "sighting--89459b60-c888-465f-86fb-44c0d1d64779", "sighting--2f22976b-da12-45d4-8063-c0cc16eb3741", "sighting--f301c44c-b374-4bc0-98f7-15adb12f2a85", "sighting--6c511345-bf24-4e2d-8cb3-84eefc2cd3b4", "sighting--f7e11a2c-dd60-4bd3-8e87-82669c3f389d", "sighting--cde6be7d-37e0-4572-864c-27a598060315", "sighting--5bb7c19b-6490-4c3e-be50-803f49bac688", "sighting--6af2657a-d5d6-4e67-8087-4246c7c9f625", "sighting--6fa6180b-17d7-4e62-b878-535a895f7e26", "sighting--a978fd17-72ed-40fc-ad70-1a5217c4c5be", "sighting--f1c54281-a5ae-4ee4-a508-5f927a4ecce6", "sighting--c079882a-21f2-4aa9-92e0-c6d4eea062b3", "sighting--136783ee-5329-47fd-8438-e86b48cee88c", "sighting--1796876f-0a0e-417e-8d4d-2cca63f096a1", "sighting--3caf43d8-45a3-475a-980b-bfec52a271ce", "sighting--298b5062-f792-4f87-86eb-56cbb8407605", "sighting--90c42bcc-0a3a-4ef1-8ef1-e1f90350e1ac", "sighting--86d5256a-966e-4d81-9844-bb9b14e8ade3", "sighting--c829f3f8-0c82-4cb4-bad1-fe0381425fe9", "sighting--9c6e8db8-6464-4f01-a5b8-dda529a11f08", "sighting--7aefcd2d-4d1f-453a-8fae-ee9ac8424da9", "sighting--1e23c9f3-edfa-44b1-8c88-2dd11cb8ff95", "sighting--efa99392-4c17-46ac-a2e7-83ae86992550", "sighting--b4a35ab4-d6d0-41fb-aad5-0883a59730f5", "sighting--32b20fca-5875-4d32-ae84-c3a05d5d94f1", "sighting--10dd2b48-faf5-410e-8017-f4c9fa72cfa7", "sighting--110ac3b7-f835-4e6a-aea0-94a7544d7f47", "sighting--e43a79a6-005b-4cd2-b3b4-1ca7617b4618", "sighting--14cc4bde-57b6-43c5-bf41-bb29bfa9b1c0", "sighting--539bfcc9-e199-43f4-8e70-f0bb3e27809f", "sighting--c7a4c3c2-66d7-4854-b1c9-f43f0ac1a495", "sighting--3f4b3d03-82ce-454c-9d9c-f56b2ee1ee37", "sighting--70254ea6-7907-445b-89dd-6a0cb3fb0637", "sighting--63833420-dd77-4918-a5f8-25d3184187a4", "sighting--96bd52ea-221b-4b95-b286-66c1aa86f601", "sighting--6bed779d-b163-4eee-b34e-5cf57dc5a033", "sighting--e4e7f885-7e9e-4824-ab8b-8ecdef13c4e3", "sighting--3532ff86-ee7f-4286-b5be-de037c546538", "sighting--dd76b2a7-0936-4d16-828b-84f48df7259b", "sighting--d2c3b00f-85e9-47db-8377-06cc5b7a4b62", "sighting--a0e808ca-f189-4b49-8497-88b56585b6dd", "sighting--ad4926e8-9468-4dee-940f-59b58f2a5ddf", "sighting--60a1ed80-e135-430a-b9ba-83789bf947ff", "sighting--98598d79-d2d4-42a5-ac8a-6711c4d8eaae", "sighting--e1942ff5-9495-4ac3-a9c9-7458b979bb6f", "sighting--db422287-da4c-44b7-b054-fd169adb3b7a", "sighting--7aadc398-5a3e-43d0-b735-dd91c99c95ce", "sighting--55876acc-e211-44c5-82b2-283028df7444", "sighting--ce4e8bac-2a21-4db1-839c-ec54faaba064", "sighting--989117b2-46ce-434e-b9ec-eae43876f01b", "sighting--6f4babd7-7892-41f5-91fd-c540d0b56e2e", "sighting--e32c8101-a568-456e-ac80-8eab133fec2a", "sighting--8bafed4e-2b5d-4553-82f9-24c00ebb81b3", "sighting--f7672a12-79f0-4e3b-9645-0d737bde0918", "sighting--be5938a3-fe9d-438a-8247-fd8a9164069a", "sighting--ce4846b6-217e-41cf-ae11-691e20c319a1", "sighting--1f7d1189-e03f-4be3-9073-256ffcf993fd", "sighting--a4cf9fdc-ec13-410d-9fdf-d8514a161948", "sighting--89fed425-5084-43e5-94c5-e7a361148d0c", "sighting--a1b60d81-2c2c-4de8-8405-3928d97aaff6", "sighting--10c5a835-2488-4d9c-9908-0749f3b48383", "sighting--752f1ba1-69a1-4cbf-ba3e-d552831b9340", "sighting--62ae0656-3119-4670-8682-812d1eefea89", "sighting--271a47b3-4897-4bc5-97f1-9058ad513f66", "sighting--71ae1d70-a052-4153-84aa-cbb84d0955d9", "sighting--d1a475de-5689-49e0-a45c-c0b313231392", "sighting--c70f7a48-9961-4859-83f0-0a0ae29fdffb", "sighting--a86738ce-c437-4547-ae05-de9e74b10bc6", "sighting--ba93e8a8-2bab-42e5-aa4b-42b4c86170a4", "sighting--5c7b6ff3-f78b-4690-a00e-6394aa6eb43a", "sighting--8834e163-e8b1-4f72-b684-5bfe5cc29616", "sighting--e637a38d-81b6-407b-9ba4-d9ab31d02f3c", "sighting--d0eb7959-9d1e-475c-b165-3fffeb0d586d", "sighting--059b10d2-faab-47d2-a7f3-511c14fae8f8", "sighting--024694da-8b3d-44f7-ab57-f2ceeb6a37bb", "sighting--79433cc1-b394-441a-9300-b7309bda381e", "sighting--34767839-2729-4364-8876-e6039f99a0d7", "sighting--3acb21c4-d132-4b05-9010-f0a1e52ed3ee", "sighting--0cdfaf20-639b-415f-bbb4-1b09e91a623b", "sighting--986b5e6c-52d7-488f-a3e1-bd1f34a6f812", "sighting--17f585e9-682f-4a90-ab1c-399efd22d1f5", "sighting--1639f9ec-e05a-4427-a286-02f860309680", "sighting--483ce0a9-e36f-4d66-8a58-df25277ad82d", "sighting--c748846b-2b1b-42db-a378-f66035ac2031", "sighting--2f4c7b79-8267-4904-89d9-a940e2aefcbf", "sighting--41e20701-b0b6-4e0b-8491-35f560f588ff", "sighting--4c37e3a2-8cca-4143-87e2-36bd266e5823", "sighting--9f71dabe-8326-4659-92f4-528a55dfbed3", "sighting--3d558d1f-3485-4ac3-8ece-60d95aa90003", "sighting--6551c05b-64ed-4e93-85c9-0ab7fcd80607", "sighting--861498e3-4772-46c6-af25-0b5677287529", "sighting--150eee54-fe66-4e4a-a365-e253d19dac44", "sighting--89b6ea7c-f1e7-4c58-9899-51faa4640bb1", "sighting--e61d2a26-fc1b-4c5a-948e-ce6e230d83de", "sighting--5c28a31a-62e5-426b-91ca-a0f7e4af0c37", "sighting--45319cc2-9bdf-4061-942c-9c2fc1956d58", "sighting--3ca8279c-15fa-44b8-9c06-5761abe4aa96", "sighting--510f63d3-e100-4cb6-bd87-6a7dadfcf0dd", "sighting--2cfa81ce-583c-46b9-a880-0a397b229c42", "sighting--fba63026-f18c-42e0-b2ea-688e8579d720", "sighting--ba89a318-e681-42a5-8a11-4797f526efa4", "sighting--42fb0e83-437a-418a-840a-b69cd0514423", "sighting--4f3e5cb2-4771-4b2f-97cc-c8fb1d597b49", "sighting--1758a033-c05a-4679-b684-6b42bf5ee366", "sighting--23d74142-29b3-4a9f-a36e-80dd0a92ce56", "sighting--c526e579-0ea0-4927-ba0d-e9f35ea72918", "sighting--f4dc6703-7533-4e37-aa93-90cfd06ebec6", "sighting--bde50162-1ff9-460e-83e3-d2d97bfa6932", "sighting--fad1e9e8-3f63-4543-9903-53a3910a1e72", "sighting--41d8d657-5b34-4a92-90be-0e204166b6ca", "sighting--81df72c1-0430-4f85-8ce9-aa75bbc2f815", "sighting--a209d2a2-4afd-45e8-8379-b24bdcbc31e2", "sighting--eb3a709d-e55e-4573-80df-a2caca6d1be1", "sighting--78c3dcf5-8444-4b72-96c4-b7b43350dd0b", "sighting--6739d973-2af5-4154-be50-c2c2700caa6e", "sighting--b387f686-967e-454f-a3ae-0c1cf739c77e", "sighting--7eea13a0-2906-44c9-8c76-b744cc95423e", "sighting--c411b01a-70a4-4a7a-81e4-78110d946eb5", "sighting--946fccee-a863-4341-a638-e6f307a59edd", "sighting--c112979f-f35a-43b6-9496-d0ebc15a7291", "sighting--59af44d8-8af8-4846-af01-c1efa1fa843a", "sighting--273a2bc9-ca49-4de8-bf1c-a02d1a361df8", "sighting--bee969ff-5b3c-419b-95af-bfb4ad491b1a", "sighting--e69294af-b890-48a4-9465-c169f7ac607d", "sighting--5f0589c7-24b0-4e8e-ab2e-90953ae6ba29", "sighting--b789f97e-d9d7-491c-b7f6-c27316900236", "sighting--78e7bf25-ed15-4ccb-8418-e35122ef7601", "sighting--fce72c49-d1ab-4546-9f10-36d978ab1635", "sighting--e2d81f21-61e8-4d76-9f59-f868208a1c71", "sighting--985c2f1e-b1b4-4a0d-a9b8-bbb19f31222d", "sighting--59631e7f-b4e0-4d0d-8e2a-aead7786d8d4", "sighting--9081c84d-8d81-430c-98f4-225d8b6c3af3", "sighting--824bc17a-c249-40b8-9d8c-bee5deb98761", "sighting--019d1773-4d97-4c91-af84-323c73d0ea82", "sighting--15dd913c-1290-4b95-83e9-32f4c9e100aa", "sighting--bc28e6a2-e130-4f43-b3d9-0c6556bc7648", "sighting--2e5d8fd0-0904-4b7c-a57d-0d357af354ff", "sighting--7671b052-6f30-4618-b5b5-83cd788f974b", "sighting--300bfb79-e37f-4fea-8e30-5237dc77c066", "sighting--43733c3a-a4d9-4bf0-b880-74fe36d763d1", "sighting--b47dd2e3-6df6-4b07-9682-6b6f52483a6a", "sighting--0c737b24-df8f-4979-8e89-c852a08045b3", "sighting--ecf3f715-37a5-4140-881b-fde71f70bde2", "sighting--bc451a15-f724-4652-8d45-486adb12b898", "sighting--1b0e035f-26c7-4c7c-aa2c-14254ab883b1", "sighting--7a06616f-e275-41da-a959-c54ee0d0faea", "sighting--6225c4cc-ffca-4236-bfad-92394a730aed", "sighting--29fc0d54-b36e-4a8f-9eac-9c41983c7cfc", "sighting--2bf73857-78b8-4941-8ac9-ee50887409d7", "sighting--35d5f0b3-c9a5-43c4-8958-ee42b2939ee2", "sighting--68225e98-ab23-4432-85bf-5abeb8367610", "sighting--62265212-9a9e-425c-bd62-63bea60b752a", "sighting--22bead93-76e7-426b-a030-f180d45a40d8", "sighting--713ffdb5-6f11-457a-bdca-2e315ce5b077", "sighting--6a589949-9c74-4802-b613-e5c57a19300d", "sighting--8a6c8999-997f-41e6-aa6b-7bb65406315a", "sighting--fba3b1d9-af26-4daf-b43a-c07d2e30a614", "sighting--20516388-451c-407c-98cc-aad048a8d41d", "sighting--50b6e636-1b86-451b-92b6-763d7850aef0", "sighting--a03bdf95-6314-424c-a214-1eb2af61a9e7", "sighting--1ebd94a1-96ad-4289-a090-4ad7ae5e9563", "sighting--1eeb1c6b-bb08-4c6d-ba62-2dc92648d561", "sighting--38906ac0-4eb4-4e30-a0d3-f96658b1e87a", "sighting--ab987a88-45ef-46f8-a323-2e952d973d43", "sighting--8ca2edaf-6fb9-4b97-92c4-0986e8006080", "sighting--18c910d9-a1ec-4f9c-95fe-86e9b3cd0907", "sighting--1cbfda51-c86b-4f9d-ad38-11d3ef641b96", "sighting--1d5968b6-ed7b-472d-8aa7-273184842762", "sighting--9ad26985-9e9e-4045-8475-f8b1001292d3", "sighting--d85d659e-350c-493c-9f33-500898099145", "sighting--7a48fd07-ae38-48ea-8562-45dddcd0bd4e", "sighting--62522f09-7031-4d63-9ce5-c6ece98611bd", "sighting--ca2f2c09-ea6e-47cf-baa8-4a32e3078d38", "sighting--099d5d56-e1a0-4a6a-a8be-6a1f55a88c38", "sighting--5a8020db-ea3b-4806-8cfe-73df1aaf6abd", "sighting--e25f5c3b-545c-45b7-84a4-9d2a5a1ec64a", "sighting--2a0f70be-eefe-4296-8501-85cc19c8a8d6", "sighting--2b42f0e1-e63a-4340-bdaf-1eb6ac93d5ba", "sighting--c0fb4d68-52ae-4bbf-bd56-f6b2a7eba9b5", "sighting--aa4d5525-bf28-4142-8dc2-fb1153400c26", "sighting--309803fd-a2d8-4c18-bdb5-9dbec815eae1", "sighting--c4def70a-ec1e-40df-b566-613d070208f4", "sighting--58a8c87d-d40c-4e2e-ad81-5ddcdc4d58dd", "sighting--dc7a95f4-e1ac-41fb-b838-fb1c8887025d", "sighting--02d6cf72-b5d6-43c3-ab44-10973a3173b1", "sighting--e6ce6722-de07-45bd-adab-89f9657fecc2", "sighting--0c0d0a91-3130-4bbe-b6e1-4b40d08eeefa", "sighting--533e8fd2-e828-4282-a9f1-fa3383fa2ccf", "sighting--7bcd00a9-72d8-458e-9737-e8ea852c6d35", "sighting--0e7df629-ffa2-4614-ac60-7a9709ea748b", "sighting--8b4f10c7-3609-4fa8-a337-a2ab0eaa92e0", "sighting--f8b43c2a-5b0d-421e-8da1-7337baa4c72a", "sighting--b496f72c-ae43-4ae1-9366-433edbef5bb4", "sighting--d96db2f8-99d7-4126-bcde-e77e8faae7d6", "sighting--dbe7f019-b275-4a1b-a060-9f43b8dbb366", "sighting--3a5b23e5-154f-4108-8336-636ee8b62060", "sighting--a1b32f0c-5592-4fc2-85c2-26c74e7c8a70", "sighting--66d7c904-15bf-4c37-934b-4f99712078c2", "sighting--ad9ebc57-71fb-415a-8bc9-00b29d927264", "sighting--2fd2b258-5ba4-4fa0-84bb-74e234cbfa7a", "sighting--71c6f673-b1e2-401a-94fe-99bd8d317d1d", "sighting--49436645-8321-4389-a372-0fcf0a240339", "sighting--7a54b5f4-c026-43e0-be70-47a0a57b9736", "sighting--5a6fd4fb-4948-4d23-a8d5-1d6685120929", "sighting--7029f3f3-3b25-4366-9ee1-31c1d481f218", "sighting--6b575aa5-b5f9-4975-bd66-95bc022c425c", "sighting--c4a378cb-8db5-462b-8af1-2aa9e8cef851", "sighting--2b462a47-4d6e-49da-85ba-70da592255b0", "sighting--e24e7733-df3b-42db-89c5-f432c2c8dbbb", "sighting--d1a4629c-f3b7-4ab4-b29b-effa7f8c1587", "sighting--de4cdc5d-21a5-4698-97de-7cfb7301d86e", "sighting--5e42a849-9955-4c52-a157-e08f47b2d8b3", "sighting--ffe51868-8b88-445f-9fb6-4daafa6ecbee", "sighting--4383f576-b7f4-490f-abd9-02b943c4f4a3", "sighting--e367cf1c-d573-4add-b05c-2fd924490d35", "sighting--95ddca5b-c61b-47a6-b62d-669cdaef6678", "sighting--c4b692d9-0f95-4668-9c0c-2595ffc30dea", "sighting--eb25f7ba-890f-4b9a-850b-32be09bd45fd", "sighting--70c88305-cdaa-43e5-8e20-c3eb2a68c3db", "sighting--5d461a1a-7ac9-44e3-9d69-33de409ee3e1", "sighting--1ae5e09b-f15d-4244-bdbc-b77ef07923ae", "sighting--c9c55f9f-586e-44a6-b1fc-6164929b7234", "sighting--25b9d3cd-d2f9-4c46-8b68-eed5f75ebff4", "sighting--7b36a999-aaee-491a-9aaa-37e5047625d7", "sighting--92991ae0-35b0-4863-bf16-6158ce68002b", "sighting--45a10d17-b543-4723-bd93-2292c14d0fd2", "sighting--719e419d-3d7c-4a53-b722-ec1911c758af", "sighting--7ebeb2f3-cde2-4653-8cb3-5f15bc982802", "sighting--a683880b-56c2-4402-a5ab-6f4ab86e3f59", "sighting--4cb35390-9a72-46d1-a44a-98e8b4e0ac4f", "sighting--96e5383a-e4d3-422a-a463-5313f001497e", "sighting--ee53c8a8-71a4-4e9a-b2af-b03dff9cfaea", "sighting--5463f620-e02c-4f2c-a87c-3dd0bf56850c", "sighting--f2db0052-5186-4d52-85e3-cf5e6af1f6d8", "sighting--e511d753-1e9e-4d64-ad40-628821f1aece", "sighting--c33e70d8-23ee-46f7-8e3d-1d5b74d68048", "sighting--1319b5cc-58cc-4c69-ac97-f00962d2fe15", "sighting--1ee772d1-6795-49a0-925f-27d0cadca030", "sighting--5ca9a541-84a3-4c60-9fb0-3bd6ec11fdd6", "sighting--8a6c0e13-7cf5-4e89-bcbe-07b49f1186b3", "sighting--eb0317e8-072c-4ef2-a50c-54481237307f", "sighting--93252d86-f228-4a23-8c2e-5e9a46690105", "sighting--0750d1e8-0a4d-401d-b257-8b4f85637be5", "sighting--4094b998-0fc7-4f51-88ff-8bf642eb866d", "sighting--c847ad63-8b45-4a23-9950-865be8817e14", "sighting--874e5935-3abe-4f02-96da-0b72659fb9a7", "sighting--832212cb-b2f3-4c93-9bd0-4705077d0f13", "sighting--db52fb6b-05c3-4044-a1e5-ebe857fc4783", "sighting--834308d4-7c57-4201-ba38-8e30ddcffab8", "sighting--10e52fcb-3d12-45d4-986d-ab175e96e383", "sighting--bb909caf-a96c-43d9-8af2-cb53c5f757d6", "sighting--9fa010fc-f258-464a-8ba1-4ad1653a2fcd", "sighting--6172219b-9255-408d-8f2f-f74dc9c0a8c5", "sighting--32c91443-25fa-4ace-accd-f9bfc9d85cff", "sighting--f5fd1b1d-e5c4-4dc3-bbf6-09536a20c955", "sighting--f5c1c8ed-8874-445f-a962-d995f9605638", "sighting--6d4f6787-075e-4afc-8e31-eb3615a9cc49", "sighting--36b2f084-1eff-4f62-9103-1774be0f698f", "sighting--08f0b37a-d519-4830-b539-61818bb2b672", "sighting--777e32a0-f69a-4963-ae61-afe9645e50a6", "sighting--63b1668e-ebb5-4bb1-8b15-1e6b288d1dda", "sighting--bc53e978-5835-4167-a3a2-0f6ca5214d3b", "sighting--75032099-0535-447b-b378-b8b9527d10c5", "sighting--b0e9517a-5e04-4a62-9d64-feb754d71b9b", "sighting--7f22186b-81c3-4e12-b7fc-f30c176a41cc", "sighting--3301c2d7-1e7e-4afb-b711-7e5febb411d7", "sighting--9f75e0f6-c753-47bc-9375-11c49bdde4f4", "sighting--247134ca-6faf-4626-9c58-8ecd6bf63e38", "sighting--1e7e68f6-3ede-43b4-9430-aa5cf485a263", "sighting--8b593c75-54ea-4544-a95b-f52c593cd101", "sighting--9e19a1ff-255c-4ea3-ab14-5b29b1c47241", "sighting--8bfce81e-d4dd-4ff0-9a47-415515a28ea9", "sighting--620cb862-40f9-407f-92ee-6112b928b27f", "sighting--2f278bce-b9eb-4915-98ac-a021fc904bd6", "sighting--5dc472c9-cc56-40f8-933b-fa2fc87d028f", "sighting--6790a66f-9f92-4bf2-95aa-b11e1709f37a", "sighting--b52e3ad0-6f3c-46d9-ab91-3c56ae529f2c", "sighting--7d78268b-6673-4664-82d9-83d0946d6c14", "sighting--8f11be9b-4b79-486f-8560-76ad906d674f", "sighting--a5781cc2-a8bb-4cc4-85aa-3466f7be6251", "sighting--e157cf18-5a51-48dc-857a-f62967d2de73", "sighting--25f6979c-8bb7-49d7-8408-bff4e7fdf77f", "sighting--382bfb6f-b59c-41cc-b2f0-e022fdfe243e", "sighting--06d4a1ef-4668-43a8-9664-479f7a41677a", "sighting--35122dd7-d48b-4fab-b273-accd7219783c", "sighting--ba384cd8-c197-4a2b-a0ee-2c46c153708b", "sighting--c99b879d-b926-4431-80a8-a69f0a02f60a", "sighting--5fcf4354-bc6b-4f97-ae56-005fd53468ad", "sighting--ee50b27d-9b32-4722-8a43-649af0aa1272", "sighting--32bac34c-f261-4550-889c-3e0b2b85b725", "sighting--38ffc960-ec90-4399-a118-419206b8dc75", "sighting--1b21ab95-1440-4462-a554-7150d899d3e5", "sighting--c7ba402d-e6cb-4199-a303-203d7099d9e7", "sighting--1d6ebfcc-78e5-4899-ac12-519f5a78ef48", "sighting--45601048-b308-49fc-834f-cecf003d9cb7", "sighting--11d8b862-1951-4566-8dfd-16ca9e4904bb", "sighting--4fac886a-8f7c-4d8c-980b-553c77175cf3", "sighting--3c068b4e-3fcf-4ebb-a7d6-ae4051bbd16c", "sighting--27e27e2a-4a2a-4cfd-aaf2-8f875f6d7f01", "sighting--9947bf43-60de-4d99-8e87-e3ed1bcad540", "sighting--481d58fb-87a5-4fd7-bd07-aa8c7c591b74", "sighting--2e4462a4-f68b-4c75-9729-1977fc9fe887", "sighting--43a45704-9f74-4e8d-87b5-60dee9c03edc", "sighting--f68d67c7-fb41-4ba2-986f-f90c5f4d6f7d", "sighting--40c65837-ebc1-44c9-8813-f9d14333b6bc", "sighting--3f61fabb-fd3e-48bc-9385-a8649a0e7c6e", "sighting--9cd31d67-03bf-437b-9f9d-995bb47e2fd2", "sighting--d34defff-043d-4b2b-bf1d-1f27490d0870", "sighting--d3fe569a-2fcb-492e-9160-ab96e272797b", "sighting--23d520db-e64a-4f4f-b5b6-812fa6cc2c2e", "sighting--1c31a896-b789-4b4e-b5e3-bd058887b8cc", "sighting--124c3f08-f5e2-4267-8120-35d4e8077fc9", "sighting--a4109f0f-7d94-4def-b32a-e79a87ff68af", "sighting--5cd3d955-0816-414e-b45f-324ae6da2b08", "sighting--bbd1c58d-8956-455a-9abb-26f1878be1a9", "sighting--a65f30e0-51c7-433c-9e00-86afd4c0448a", "sighting--96167277-ce5e-4625-8494-9cb6d04b2331", "sighting--03e2ea65-d4b0-4072-9233-ed453af7afda", "sighting--9e02c312-50b2-4405-b9fe-bafa03b3f123", "sighting--bba3d662-b90b-41a6-bb36-11af701df2b2", "sighting--0f07b24e-fd21-483d-b6c8-8eb221fc5546", "sighting--18506628-96c3-4203-95ff-6a4bc7909077", "sighting--974be6c7-64f8-4a18-868b-f4dd29ed2fd0", "sighting--0b3a2c47-055a-4fba-8951-7148d6ddde5a", "sighting--6f7cd265-2ab5-4484-a017-51fec0a55cb9", "sighting--ded847f3-434d-4f3f-b73c-fa2a9bbd4e2c", "sighting--2f1fd217-9802-4004-bf7f-8b32244d8c64", "sighting--05f823bd-0d1a-44f2-a901-b7ab0481a4a8", "sighting--d219e57b-9147-4862-951f-1f934ef00587", "sighting--e3ddbb8f-5197-449b-81b0-fe9127cc324a", "sighting--127d401b-17c8-4294-9afe-b441e8dba569", "sighting--cc764d81-3064-41a2-9b8d-c65e6b11d208", "sighting--782629ab-5aca-4d90-b97a-dbf6493554fd", "sighting--7131f37d-ed1c-4b71-884a-54ffb6096793", "sighting--dd360101-cf38-4be9-8cc6-93e907bdd6d1", "sighting--e8a9eb37-da3f-460a-9c10-444f2607bfc2", "sighting--935f10e2-97d4-45ec-80db-701a64b2d597", "sighting--d0600df8-2514-48b7-b2ce-c8c57b6fd557", "sighting--20a569fb-1b2b-4535-bd1f-784d665b8236", "sighting--57e89729-f3ef-4e3e-92bf-0c6f2d81170e", "sighting--a54114a8-6ba3-4337-b0d7-45399b0cfd77", "sighting--47213aeb-a352-4c25-911a-d7f6f89eb055", "sighting--15f9fa92-d698-482c-a1b4-12987a9826da", "sighting--c6975cfa-3f8d-463f-8c36-4d279e5d14e4", "sighting--37df90cc-cae2-4196-b10d-95b492cc5764", "sighting--d04e0927-432a-48b6-aa6c-08774b99a534", "sighting--4207a9a5-d6b2-499f-92cf-3ed8339413a1", "sighting--9ca31149-8d61-469f-9f33-15a2f39e4ab5", "sighting--d100405e-5bc2-492f-a6ac-26bb7d265616", "sighting--49c464af-daad-4bda-b101-9d304e247742", "sighting--dc3d61f5-6bbe-406d-8d1e-875f26311fba", "sighting--ba83bd59-6318-413b-ba55-f04a873e5e54", "sighting--59673d1c-fc3c-404f-80e6-8a61a8971118", "sighting--f8a182b9-2f83-4bc3-a6c5-b14ef52cbc14", "sighting--42774882-4435-4838-8f27-b6cb09aaa99a", "sighting--1f3e500d-802c-4ebf-9441-027780fd138d", "sighting--3fb77a3b-24a2-473e-9a14-a28f0c4bd1ab", "sighting--47ec9b65-b4a9-4462-8459-2ddd2258b72e", "sighting--71479987-a4ee-4e9d-b888-fc67e21ea882", "sighting--807c54ca-f703-40c1-9998-8ef878168474", "sighting--c1241bbb-45c6-4adc-9883-0efd8264e276", "sighting--8ef4a0c4-fee1-4115-9071-2ea45599f42e", "sighting--bcf8ce52-7c41-4780-9f4a-6988516bc507", "sighting--d8ac58ad-f307-43f9-887f-2f910b09ad2a", "sighting--36968713-51b4-4801-951b-1d36639aaaa8", "sighting--eeff236e-f66c-437f-8c0c-463dbfc637f1", "sighting--0c079322-c83d-40ad-bf57-a22fe28ac1d2", "sighting--8d548e29-496b-4104-ab13-df3ffa5942da", "sighting--ae7e5b63-b516-40b3-9d0d-08fcaf75516e", "sighting--58f1db08-7406-4a28-ba7b-c26dc817959a", "sighting--693783d6-aa26-44f6-9cb0-87085acb977e", "sighting--603b94cf-90b1-4994-b463-1b374cdbc7aa", "sighting--9a02583b-6ae7-4534-bad8-84827c0d0bdd", "sighting--b9df53cc-b90f-4d38-a488-4b5069a8fa7c", "sighting--2a995315-8878-44ee-a600-361febe123d5", "sighting--4edb1aee-ef72-4114-9c87-1119cab69d6e", "sighting--6285fcf2-f835-4ce1-aea0-ec5fb41e4c94", "sighting--569ab3f6-fe8e-4b0e-9e3c-3e4927278446", "sighting--df93d2fa-a1cf-4f63-bb09-82000885062b", "sighting--7c36f8be-7fcd-4994-abcd-35be88365636", "sighting--fed78769-ed2b-4724-ad6f-bab4e1e4c534", "sighting--9388ce71-3fe7-423b-8f1e-00dfd451b735", "sighting--6b948084-f4bb-4c30-9b7b-dfc8c49cfe72", "sighting--2852ef01-3542-4100-aec7-1510c0924099", "sighting--921ff60e-fb7c-4fc7-bf0d-59349d0241ce", "sighting--a1ca12b4-7d7e-42ca-bffd-e4f306ca6ddb", "sighting--958f481e-d47d-4ea2-bff8-ae080745644c", "sighting--ab917c91-6b5d-4106-88c7-36a91b902ca3", "sighting--0265fa47-4f2d-4c64-b798-ff319ab4ea45", "sighting--4f9e5afc-72cd-4afb-9030-de0dabb01a65", "sighting--32c7d48d-e9f0-4b1e-8e47-835cf1b27475", "sighting--c3ea80a3-af2a-4c1d-9a8b-90ee6194d1aa", "sighting--9c26a266-cfdc-493d-99f2-245f3c5c6e67", "sighting--47f7e8e3-c424-4183-b065-d2c00eb3a277", "sighting--31c258b1-cd80-4dcb-8915-acbd83640fb9", "sighting--56c1679c-8964-46d2-a475-931e97724b5f", "sighting--8f7a349c-5497-48ee-9857-d2bfa6917b04", "sighting--393864b7-41d9-4120-93a3-9f9d94dbb62d", "sighting--95769a2d-e572-421f-918d-d706bc9b2e1d", "sighting--327e9655-5be8-4fef-9de5-6d26867dcbaf", "sighting--1e1d440e-9e12-4c30-8171-46001f28142a", "sighting--89c407b4-b989-47bb-9216-7c5ac7b507e3", "sighting--4f85e0a1-bd6b-4d86-b7df-32d0d5952460", "sighting--bc1dd5bd-ed0c-4245-bfb8-f0f7ca0ae433", "sighting--b42a1a84-d6ee-47c7-ae0b-9e8012ed094f", "sighting--f37704b7-3974-4c46-804d-cacc89d04036", "sighting--de473ee4-10e6-4841-908f-f339d85bc60a", "sighting--9041f785-0c30-4999-87f3-a1babf10df96", "sighting--661886b0-32a6-457d-b0e5-337326771330", "sighting--be20cae8-f56a-49ea-872e-b1ec6da5f614", "sighting--05120748-51dd-44d9-8989-73bbc0f15fac", "sighting--4b8dec20-ff9b-4569-8016-f1a9f8968539", "sighting--466dfed2-42c5-451f-b1c2-edf56e80806c", "sighting--725d8510-36a7-4b8f-b4bb-4400c6a02ac4", "sighting--08bed8b3-366d-40c8-8382-c1266217beaa", "sighting--81c98bbd-6f30-4ddc-b6dd-70708fb72f09", "sighting--68a9673c-3c32-42ac-a9ee-317652918095", "sighting--c886bbfb-1709-4b0a-be13-91d913993654", "sighting--7e617ecb-7a88-42a1-bfe6-be29c21794dd", "sighting--fe7e1267-0cd6-480f-b357-26d3ee24dacb", "sighting--8296afc2-c385-4f35-85cc-93ce60f74028", "sighting--e9f93a2f-0fd5-4ce7-b50b-4978758323d0", "sighting--e8e6a431-42c1-4463-ac97-70fbb296d7ae", "sighting--2b81ac0b-d2df-4099-b921-6399c93de30a", "sighting--f0a4a2ac-5797-4023-bafb-3c0a7c92cd63", "sighting--cb1b3369-0c67-4de7-979f-0f14825cf5f1", "sighting--5baa8e9a-80e5-454c-af6d-b0f37eef7ae2", "sighting--0a4073ce-1e3e-4b51-942c-7e18ea21ecfd", "sighting--1cf2475f-b396-4e35-a1a0-5a553b4315e5", "sighting--e99531dd-0c89-44e5-ab87-1a3eabbf30d6", "sighting--f287fe5c-e61a-4331-b161-99a84d0b2fee", "sighting--4458866b-8c73-45a6-86bb-32562b82176f", "sighting--1cfdd211-862f-41cc-a402-12e2b2e4efe6", "sighting--8db96a83-e91e-4c94-94f6-666210414ac7", "sighting--397176e2-eb83-4b60-83b8-2cfcfedf3bbb", "sighting--dee08a33-624d-4b17-9d6d-f4d326b36308", "sighting--d42782cc-0af0-4b56-a0b1-5a5cebf9e407", "sighting--7782a3e0-6771-4067-bff1-2f09ec0e1597", "sighting--520b2106-12a5-4b7b-87e0-f41dd1eff117", "sighting--72cc4eff-377a-4808-9d91-6359ba62f3cb", "sighting--89e2c172-763b-4110-81f2-392e97cc9417", "sighting--bdae3feb-4529-42dc-9ac3-8fa882c5ce05", "sighting--6f691a92-521f-492b-8c41-120abcdc0e1e", "sighting--13ab0386-aec5-4dc7-8b09-2f079d8aed1f", "sighting--5ca73fce-485f-4609-bd25-e5e51006e0ba", "sighting--f499f39d-4340-4539-92a9-edcb54bb162d", "sighting--fd8e5234-96ee-4574-88d1-84d0e12942c2", "sighting--b4aed0d8-973a-4b51-8441-f16b784031da", "sighting--b695644f-4578-4b3b-92ce-49ba24c9dc41", "sighting--df0f5dea-0081-410b-b1f9-e0ff961f78fe", "sighting--167c598c-51c1-4109-a012-3b4247d07777", "sighting--3bbd99d9-b9ba-44c0-8ed4-b36bb55eeb07", "sighting--d3e52d09-783d-4c13-ad94-7b52ae5b6161", "sighting--198d9020-0aef-4263-8a69-8552d721cedc", "sighting--6bfdc3bf-1fb0-472b-8fe2-1ef9f0d418a1", "sighting--34d15895-dc38-4f2f-a4d3-1f13398a962f", "sighting--2f6fbcdb-11f6-42d5-abdc-3452faf3414c", "sighting--58b3cb65-7a89-44d5-915f-aae3824bd8ac", "sighting--2014eb72-8e78-401b-b377-df6160f22b07", "sighting--7861282b-d886-4cde-a4a6-940c5666c227", "sighting--1a70961d-5f70-4eef-a8ce-9e857d7f5293", "sighting--dfc93d42-99c4-42ee-8913-e1ef9f177591", "sighting--dc09fce4-3644-424c-8244-74fc56d9f007", "sighting--563f4aa2-eeff-4313-b89d-981d9267189f", "sighting--9e80272b-02d2-4c94-b838-d16c0c7def32", "sighting--ca585339-c26d-483b-822d-0449950b3b01", "sighting--a02561fb-1c1f-4a93-82ce-ec68cd83b5dd", "sighting--beb52c26-c841-4825-a2f7-d57f03c53904", "sighting--569ed32a-26aa-4fbe-8a23-e1cdf6cdf94d", "sighting--73bfd132-b614-4505-aa50-dc1cf9f7753f", "sighting--297e683d-d9d1-4465-9de7-63894f25acde", "sighting--7353ba37-4410-49d8-8aaf-17169197516d", "sighting--125abdc1-d7fd-4cbb-b9af-bcf7d69a4cd9", "sighting--eca6416a-292e-46cf-bfe2-8efd5c375027", "sighting--988a8d86-c6bf-486b-a211-e4a89d9fc620", "sighting--e45f2e26-9bbc-49ec-9704-dae393d0cbec", "sighting--1e039d4a-7094-4a13-8d9f-a135f8c2b0bf", "sighting--b99eb151-08e7-4d6a-bab8-1205f9b85eda", "sighting--702ed576-e3a9-4ede-b04e-a8005913a999", "sighting--2ab80f6f-cd44-48cb-8aa0-3c2c1d3a016b", "sighting--7c882dc3-3197-4611-8818-a97fa6ec482f", "sighting--e123696e-9c22-433d-9c47-4055ea6670c1", "sighting--a972dbcd-ae66-43c4-b701-00a2aff17643", "sighting--56125ade-01dd-41e9-a907-5ac37a285b13", "sighting--11f52e62-5bad-43be-a1fc-e6f2054a0eca", "sighting--07ee7dd6-e178-4d61-9c31-800541fd74f5", "sighting--d8b7aca0-e772-4b4b-b976-565705304588", "sighting--d53e2369-806a-4f26-9b63-59c9b0bd1bad", "sighting--be4a7aff-c1dd-446a-a805-39b9ccbfaafb", "sighting--c87f8a2b-982a-4b50-91db-24786a07d73e", "sighting--23bf5065-4c3b-426a-982f-6be8db5f182b", "sighting--9b902bfb-b474-4100-82dc-f72364fea550", "sighting--dcc7582e-5b7e-412c-a490-af6f66b0b8c6", "sighting--d06befd6-6ae4-466b-80c5-bf303b35c5a3", "sighting--fde9eb5d-6055-4499-bd1a-606d80ea42a1", "sighting--2f9c5ec6-6ddf-4a37-80e5-326534a4cdd3", "sighting--ddab6c6f-975e-4c17-9f6f-5d30881059b7", "sighting--109a939b-a606-421f-b472-ace8667331d3", "sighting--b03e021a-2dee-4f50-9c7f-2329cc3425b6", "sighting--c1f64d9e-4041-4df9-8880-df3fdb04c33f", "sighting--6e2c16f2-3465-45e0-9bd2-2b78badfa24f", "sighting--71e0a763-54c9-46ad-8a59-6211d6588d07", "sighting--f8e7c3e2-68c7-4259-bbba-eb126c469837", "sighting--bfe2967b-f52e-428d-a805-8cf73b253166", "sighting--bcc20e15-6ae4-4cea-906f-e2e7bfeec71b", "sighting--8cade176-140b-4d90-85fb-71e31fc6eb21", "sighting--7523b044-936e-432b-9ac4-c1fd66d4027e", "sighting--34fddb58-d51b-4648-a2c4-f856eb6305db", "sighting--02a1c56a-e66f-454c-82e1-f990c62f4c33", "sighting--81817836-d2c3-4178-8396-b8612eec89bc", "sighting--f97940e9-7ff3-4b64-8377-f09be6e3db55", "sighting--f0330a41-27d8-4faa-9d0b-8a9636f0d572", "sighting--177d1a01-b222-44d1-8dde-97acdd44d447", "sighting--94c80cd6-2ce4-413f-bcf6-94dcf393384c", "sighting--0f965118-cc31-443f-9910-74220afa562d", "sighting--32fd4e66-3e7b-437b-aa43-521ac5dd21d4", "sighting--133c0a09-37c1-4d4a-aefb-fd3a4a6a1de0", "sighting--2a6c93e1-8394-4d32-9eb9-4f3d9ac192d6", "sighting--6f2dc1ee-b73f-4220-a615-0af68dc09c12", "sighting--468aa4c9-245d-45db-b538-ad20b12913a5", "sighting--1384582a-ee16-4f86-8eaf-d9747c328eae", "sighting--9c0c2c82-f6ac-49a1-80e4-d32b8f03c2ca", "sighting--29c8e1de-980a-45ce-8861-ceac2114b4e7", "sighting--abcbd207-2a6f-41ce-9ba9-cd31f71e1b5e", "sighting--94b772e8-43a6-47d9-bc60-57dda7b869c4", "sighting--3e4803b3-dbe4-4d11-80ae-0ba272da891d", "sighting--c1f89b83-cbd0-4076-b14d-54777635b858", "sighting--949b241e-6665-4d73-8462-e4581a03357c", "sighting--41b1c54c-b3aa-4758-a244-94a9c8ba94b4", "sighting--f074414c-1b3f-4c78-bd09-c0923ff89bb1", "sighting--49a972d2-f4c4-41d9-b3c8-40c90f386ab9", "sighting--afa8883f-3852-4b4a-867a-8f740079949e", "sighting--ada3805b-0355-4742-9198-c2f38ed3ffd0", "sighting--22620082-f2dc-4f53-bd87-01c6d72f355e", "sighting--4f485ba5-df7b-4239-a0ca-ee9d6f24a9cc", "sighting--4bdd1fe2-be74-4e31-ad1d-ec33f3bb47d8", "sighting--0b296b3a-e0d9-4f24-842c-fecd204e06ba", "sighting--a507e963-0f26-4457-bee7-30cb57cb1aa5", "sighting--4776d8bf-5180-4938-b7c1-5e4fb4ad3837", "sighting--1bbaa997-4805-4b06-bca1-6d45a4b20b71", "sighting--0a055a2f-ee96-499c-a544-352c4be9bcd2", "sighting--7c3dcf75-cc95-4c26-a50d-d80de24287c2", "sighting--5e91474a-3c9c-4ab9-9d65-8ee5c60e84b1", "sighting--b2215afd-e985-4d7c-bc1b-7167c49c983f", "sighting--827660cd-59f9-4a83-ae52-c80ab4718fd2", "sighting--3dce1a61-5cea-4fb3-b670-8fa22ad9a55a", "sighting--d36dbf80-a121-49a7-a336-b13de6351bad", "sighting--c5e1861f-2589-4bd1-896d-aff828bb612f", "sighting--f18413d4-0302-4f35-a94e-5bcb618bf6e6", "sighting--8632d495-3d09-455a-8dde-14f76cac0bc1", "sighting--4e215c68-b04b-47c1-aa22-5e2ea33ffb3a", "sighting--901e1314-3700-44dc-bdab-1e414ccadd7a", "sighting--0eebcb3b-d7dd-43f2-b11e-9aa9bcfb6624", "sighting--984caaf5-33e9-460c-920d-6b20ab84948e", "sighting--ea422ccd-0076-4b03-a5c2-29dc510c9b19", "sighting--589c876e-b1c4-4b54-bfe4-37cc61bc3353", "sighting--e843004f-fe43-44bc-8d97-8c3a15e28409", "sighting--6977ad22-6c6d-4984-9ad5-c99e88a4c1c9", "sighting--f0cbcfea-1c30-4769-8a5f-d849394e5fd0", "sighting--6e8c47af-a4fb-4592-97f0-8de21d975b49", "sighting--e0d9c8f8-e0d4-4098-9943-3fd8088ff409", "sighting--217665f7-3587-495f-8502-70cb89f9ce1f", "sighting--4c053575-5c0d-42cf-9cbd-f83b15835976", "sighting--90d28e04-3abf-47c8-8a54-b1c6d1779bb1", "sighting--89b7b6c7-d239-43af-9e3e-167d4007d827", "sighting--26865a62-20d9-443d-8fbb-7d24da63de5e", "sighting--19b3086a-310e-4265-9d3c-c45285bb58b7", "sighting--9f5678f6-6011-4513-ae54-f98cec824739", "sighting--6d3a09f4-65a5-4fbe-9b51-5c2940a73e8d", "sighting--dab6b290-4779-423d-b58e-d7d4eb4a5079", "sighting--38455abe-71a5-4d8d-822e-51f97ccc415e", "sighting--62321eb3-2d82-4b37-ad89-cc151ce484ec", "sighting--d549c444-681b-4574-90d2-77220fa0106a", "sighting--a8140b74-b40d-4d08-a337-68182a092bcc", "sighting--141c1a45-7c96-4414-afd6-f2675dc7c36f", "sighting--f6e2e56a-0479-4bf1-b6e5-9bb378c3b6a0", "sighting--c7321f15-c43a-43e4-85a1-a53bee93e507", "sighting--48b2f3f5-9bb5-457d-8858-08f63a850f94", "sighting--181e511c-b3f5-4bc4-8ca6-097b095275f2", "sighting--5c57b1a3-9521-4d23-b1f7-b00744011021", "sighting--f0506318-61a6-479f-b654-96c67516f615", "sighting--a7858d52-e833-4e15-8cab-2fc66af57324", "sighting--dffe8414-9dbe-4123-b4b4-426c6771ee67", "sighting--74bfe6dd-3256-4f7e-94f9-556d06397318", "sighting--f91a0326-6514-428e-a446-93186ac3bbde", "sighting--8951abee-0612-4f3f-a45f-2375d1ee24be", "sighting--03cb7820-b1ce-4a07-82dd-f3780e73b170", "sighting--6bd0ca7a-2b42-4a8d-98b5-622c2df985b6", "sighting--6028fd26-0ef4-4ffd-a163-945acc5740f5", "sighting--00f6af2e-130d-4ae3-b193-8bcd9f17f289", "sighting--98de62af-ee4e-48ee-97d4-cd9ff23270a4", "sighting--269d1a4d-6e36-41b6-b940-8fd07117e8db", "sighting--d6368e3e-235c-47dc-ae34-e7127062d943", "sighting--4c370607-40b0-42cb-a532-f06923937bdc", "sighting--7d1fff65-6eaa-4942-902c-2019ef070919", "sighting--ac5deed5-a0f9-45a5-8f4c-58bce5802341", "sighting--8da75f48-ca02-4a7f-af67-89017132fabd", "sighting--b776eb3e-2de4-4872-a2ba-e699a18a5d30", "sighting--fa6f7733-fc97-49b3-862b-4f04bd62a954", "sighting--40d1fcd9-399e-47c5-8c0f-c5017da6f602", "sighting--542bf42a-c0d5-4efa-b481-eeafe61d3c7b", "sighting--5d3eb898-a17c-4b78-9d11-6e533c84ece4", "sighting--f1e42b7a-c39f-4c47-ad00-d3d921804554", "sighting--56b4af88-cf2a-4584-93fc-c6118e791c99", "sighting--1449110b-c0aa-4f66-a32d-30c34831144a", "sighting--6b5ec413-2f19-40eb-9d91-947d409e70b1", "sighting--090bde77-5376-4cd9-aa91-c6ca8a6da8dd", "sighting--7125e4d7-e4f6-43cf-ba3b-e4947fa66a61", "sighting--27f31d06-8ed6-43f2-a8ee-3d477fbaa2a6", "sighting--87e3ab1f-6694-4d41-8cb0-c71a40e5cdbb", "sighting--7039322c-443f-48a0-8dc0-1ccdaf81d78d", "sighting--c45d36ec-da3f-4222-a227-09cfe1f31ecd", "sighting--a82b8c81-0d38-4773-9f49-8e404d8bd4a0", "sighting--e542aeeb-f285-4711-9978-ca8d410ada02", "sighting--ef8adc22-870e-4563-bf70-d8430ed59199", "sighting--79ff7071-682b-4d6d-b027-03e07e51cf43", "sighting--e88043dc-7943-4e24-8800-f217bfe4e494", "sighting--28c651dd-1454-405f-8272-08bad9829ceb", "sighting--5a7ede3a-8442-43ff-9f1b-59fd74f1ee3e", "sighting--69b5bef8-3df5-46ce-8ca3-eb79c50ca54b", "sighting--ff5cb5a6-99b6-448e-baa9-efe34bc84a74", "sighting--941d359e-8542-4aa6-9b87-235dea9abde8", "sighting--f1267e0c-cb66-4301-8961-0eed239d8ebe", "sighting--88724caa-3d73-4fc4-968e-55a283fc435c", "sighting--4fd393a6-9d28-45a3-8217-0d1edab663b2", "sighting--277eabd3-8227-4559-af6f-818f5e7f7623", "sighting--2b449d12-8119-47d9-86fd-9e6019251537", "sighting--16097853-fdb7-40e6-9ef4-17f91bb8b05d", "sighting--f7dd9ccb-44e0-47bd-90f2-4ac36744c818", "sighting--0c6017c4-3c54-45fa-bff4-847ab19a5577", "sighting--54682223-c507-488d-98d2-3d540b1f5566", "sighting--10379856-c618-4433-a733-5536a536b185", "sighting--a2f41e68-fda3-47de-a336-d9156cce035c", "sighting--6252c360-f8ee-418c-9544-52fc762cda7b", "sighting--154cfe31-54b8-4e3e-98b2-b2b27b7b8ef6", "sighting--55538027-e4ab-4ea8-acec-a48e2bb6a586", "sighting--8aa24212-593e-462e-9a9e-3e17a7e6751c", "sighting--d810afdb-d3bc-45b0-be5d-4bf2eed6597d", "sighting--c01d643f-838a-42c2-bebd-3aa8fcd87654", "sighting--e8dbf94d-0528-4a74-9b65-6961fc21b723", "sighting--bf95757d-41e4-41cc-901a-3acae91394d5", "sighting--eab6c977-dd98-4f94-a3db-a796391a23cf", "sighting--6257c452-35a0-444b-afc5-37874b8f9395", "sighting--9935e018-9312-47e5-a1ca-200e23aba2a1", "sighting--31b5e66d-f382-4fde-b75b-33efd8002a4a", "sighting--2178df07-4655-48fc-b2f7-2f37f94743cc", "sighting--3e7bdae1-6d47-48eb-8dee-b40f038a3c80", "sighting--ea59f6be-0cc4-411e-8dea-b9b1d93b16bf", "sighting--b0b8e08c-87ad-4c7a-a018-e19586619ae3", "sighting--d5a8d658-17d3-4ccf-baee-23f5b31613b9", "sighting--daf70399-8300-476b-9eec-6e5b62984725", "sighting--b5c62b20-05ac-4bf1-ab67-b4e18be45365", "sighting--b021e8f2-c559-40d4-9421-e4b8675e344e", "sighting--1c2833bd-47d3-4a29-9264-0f6df8e8abf4", "sighting--0b3103dc-421b-4ba5-a00f-b4fe3931f184", "sighting--87353de6-f195-4ea6-b705-c8a30d1e4c56", "sighting--d629bf6c-6f4a-4fb7-999e-1420314e47ea", "sighting--4e0d6b35-0467-4c05-a19f-ff95bba68f49", "sighting--0ab37e19-6a22-4a1c-b9c4-e152923253cf", "sighting--90950408-018d-4e0a-a859-92e500e95060", "sighting--e6f855fc-0b47-4ef7-bfb7-174475dea8ff", "sighting--4b51f722-b2d7-42c8-bbfd-b11cae467075", "sighting--26f4cac8-28fa-41ca-927e-6d358a50299c", "sighting--8107c51f-ffe9-484b-8fcd-6107043a5cb8", "sighting--bdcc72f5-63a1-4661-9320-ed0a68c74ede", "sighting--bae1d210-f3d4-4ce8-b270-2c62f5a5507a", "sighting--837135fc-ba48-48d0-8ebe-9819b3b78a28", "sighting--47d187bf-215e-47ba-808d-06a5c1d8354d", "sighting--8dc69813-f05a-4e8a-be09-0504a70abe62", "sighting--3ec0dd35-f046-4e92-a01b-ec4be84936ef", "sighting--0008e968-116a-41e8-96e2-a338b32a9427", "sighting--d20feb7a-d5ce-480b-a0fa-84bdab675ef4", "sighting--abcde2db-3e60-4be6-ad37-9df3db2e1941", "sighting--eb259559-0c7d-428d-8bd8-653acdc3657e", "sighting--04c4b5bb-f82a-4b60-87d1-1cd545829d2d", "sighting--902fdb65-ae70-47e7-8b13-7d27f0ebf63e", "sighting--a8e96475-970f-4673-ac87-e19b05a14b9c", "sighting--e8661478-c3df-45ae-9422-f0867a33a43d", "sighting--5b740cc0-e6c6-479d-8131-bf8930b531a5", "sighting--e4e33ac5-15fe-40e9-bbda-74023d8d4826", "sighting--6fc4ce46-7fd2-4cba-9232-a8941efab201", "sighting--32a26a2a-9335-4797-b847-c666e97fd0e1", "sighting--6362ed21-5579-4d8a-a340-09564b5b6b16", "sighting--9ae04899-064c-4ef1-bc0c-217cefa46783", "sighting--2b4a57db-2965-4932-aa66-c9c13811fd0c", "sighting--75f2625d-aa36-4b86-9773-a8abf2c7c82d", "sighting--35622aec-3111-4caf-878d-8ce58da275e2", "sighting--c16da6df-b740-4547-add2-782cc2c12c54", "sighting--cdd924df-6263-4e69-adef-43ea0949ebb1", "sighting--8efa9280-2e03-4220-a93b-9b3977eecf39", "sighting--9ca7bda9-c644-4c1e-9626-293c2550baa2", "sighting--51cef383-5094-452d-b2f6-6aed3bdb573e", "sighting--88eec879-bf17-465d-8a9c-52ba8aac620d", "sighting--165bd1ef-e49f-4549-a2d5-fae8e4a5c640", "sighting--83fb5945-30c5-41b6-9892-55c069209e3c", "sighting--e14608d0-9251-4979-80a4-cb48417b3896", "sighting--13963dbf-5e32-411e-a70b-b963bd43411f", "sighting--0f6d5be5-eec5-4588-bcf3-193bf13f0eea", "sighting--b97916ac-a056-4326-bf9e-66d8c6361bc9", "sighting--b684199e-fc21-4bd7-abd3-ebefb58b646c", "sighting--23833f8e-1ef7-4f00-9c43-494dc5950ac7", "sighting--e8dbc030-2584-4f81-a247-eaa9cc0b34c3", "sighting--b1aaa471-5a3f-48c6-9536-af52b514367e", "sighting--43d17191-75d3-4918-be5f-b589af928a63", "sighting--1fd3904b-7c7f-4e1e-942f-b5e0d717bb98", "sighting--e56460ea-571a-4a0b-8738-2a15dae54134", "sighting--75f51289-fe85-4eaa-8e34-bd5848de8b4e", "sighting--cc394eb6-ec09-48ff-8dcc-89964d46e5dd", "sighting--cf963df1-1257-4daa-9ed1-9c6fa85802f2", "sighting--45aaa248-eb32-490f-8be1-0907321961fe", "sighting--a8df4da2-b39f-4553-82cf-50bb8d5bc3f2", "sighting--1d8c5b21-f705-4c28-ac90-56d7fa1bafe1", "sighting--78e66fd0-f627-4547-90bb-3b2fe3bf832f", "sighting--173f3ace-4b06-48fc-b340-8a9a29189485", "sighting--e16ef105-8e68-4c72-9c51-f6f022812b5a", "sighting--580bcb12-f187-4754-8b04-53d2b9f83368", "sighting--b5d638a5-7e0c-495d-a01a-86d2830cae25", "sighting--43e73267-2647-4ec5-b257-6cdaab4303e6", "sighting--215eac94-a98a-455b-9a95-da01153eaec6", "sighting--00db8dda-99fb-44cc-a3ca-60208d675a0b", "sighting--f513b3cb-6fd3-4fd1-bf06-399a3512e468", "sighting--cff5b97b-7126-4a38-9ce2-93274aae7a26", "sighting--bc7c07ce-e9d0-4660-9871-b1ec7a7e947f", "sighting--b6778193-c6e0-41a5-8486-f4d91d0f0166", "sighting--d7541704-fe1e-49d8-8c50-024ecbf7501c", "sighting--286c5777-55ea-484c-a6a3-2d261ad4acf3", "sighting--b6d83447-c6f7-437f-98af-623046048a1f", "sighting--d0b3d9e4-22cc-43ee-b9c4-a616c290a016", "sighting--d10da5fc-099b-4db1-a922-04611ea448c9", "sighting--b787ea5d-13cc-498f-a604-8d1935f3ba0d", "sighting--0cddab45-6189-4fe1-a71e-b6fcb1ef3d2c", "sighting--b1041a66-a79d-422f-918b-12821abb1760", "sighting--ba289e35-a422-40c9-ae6e-72cb0d80adaa", "sighting--971c2476-f7c5-4533-9031-f9b8f10df434", "sighting--06ea2b16-4347-461f-82a7-77dc3bde5867", "sighting--eb0de3b5-cdae-450c-8cdd-2d959f32a908", "sighting--5af97aad-dddd-4c4b-9aa7-157618b8006b", "sighting--212f9d18-47eb-4361-978f-7ea4d2585b0e", "sighting--2a325ab6-3e68-49f4-a2a3-6c1c79eb8165", "sighting--c7bbdbfe-334f-4a6d-a30a-c0576d1efc49", "sighting--c38847c8-6f84-4cd0-b035-ad864e282aa6", "sighting--8e64e6ec-3c1b-4cac-9da0-05fa2c1b8e9f", "sighting--491df8b9-ccd7-47ff-a899-ec3c5d48bf49", "sighting--90a8fefc-0b80-476b-ac15-e96cc7dcd69a", "sighting--3961c593-9eac-4012-8867-6ef95cf31cb0", "sighting--212fd03a-20d3-4699-bafb-762093ccf3ff", "sighting--c7ac1856-e906-497b-a0ab-41534f3cd933", "sighting--abbc4129-1fce-4d98-957d-e0ac25c0aab9", "sighting--e72efc1c-8b43-4dc9-b53a-10ec013be737", "sighting--340781fd-ff52-4fad-be4e-d891a80ad542", "sighting--7bbe78f3-7cc3-4b13-ace8-066b2faedd68", "sighting--56feaeb7-07a6-4b38-b527-b6af100ba9ec", "sighting--5ad83b8d-3075-421b-9564-c1ad0c294e1a", "sighting--b6a7c9da-64f5-4ee2-917c-0d4bdefbf1be", "sighting--61c3ace2-1966-4490-b14b-d3d3214d94b7", "sighting--4ead9453-e28a-4c13-a479-29904dd5e0b6", "sighting--bc8d9460-c828-4e9f-a004-73d1921e347a", "sighting--7f5512ff-1a2e-4717-b5e3-534febc39737", "sighting--08e5d3bb-fd54-4c62-8d4d-5815f784b0b1", "sighting--8afb7de6-90db-4a8b-93eb-59fc32c7d3d2", "sighting--774b6a06-3a17-4186-8f15-8b0b35a11e3f", "sighting--11cc2503-7f74-4518-91fc-1d399ed55432", "sighting--61c121c5-1506-4816-bda1-34751438b8ac", "sighting--4793d3de-8b15-420e-95a0-e0ef69b39ddc", "sighting--b43dc07c-4a43-43e0-b31a-bff36d1b00b5", "sighting--4c73e29d-b5ff-472f-a02d-2e741dca86e1", "sighting--f3f4c03f-68cc-4a12-8bed-1a7adde1f7bf", "sighting--9b166cb7-faaf-4aaf-a8d5-3a9b18ba7d21", "sighting--b0064b50-d8c2-4ad4-b299-f63f9c644ce0", "sighting--21030890-e0d5-4479-a7eb-bc745ffce9b7", "sighting--eff5549d-00ae-4451-a26b-52d119cb0597", "sighting--1f0d6138-b805-4838-91b6-25356dedb0e9", "sighting--bee2053a-1757-4455-a323-6d7e55c08f27", "sighting--f5970d55-a481-4b09-b768-60d3b776e545", "sighting--69f7e573-42eb-47da-b1be-f755e58d72b4", "sighting--8163388e-a130-4a4a-bb8d-ea109223b0a4", "sighting--805a9b1c-d84a-4b45-b993-2950129d84d2", "sighting--6b5aeb8f-268d-4acc-b036-57d66d72713b", "sighting--96c62e56-acd6-4c10-9ba0-0f2bfee1fb75", "sighting--9042afce-1f46-483b-ad84-83061f09a8c8", "sighting--8287db55-e2b7-4c86-b1bf-8e40662f24a9", "sighting--40f2e60c-7063-4a8d-b055-6d252bab97da", "sighting--a76f6e26-9d3c-450a-8220-a0dee1f35e10", "sighting--65e4d408-4ee5-4b6f-9b71-58598580dddf", "sighting--206b3a2c-c1d4-4901-ab6b-fc5736739873", "sighting--b8f23633-2824-44c9-8fa7-c524def3b594", "sighting--14f86353-7e21-43b1-b721-5ffb81f9ceec", "sighting--b434e029-101a-4f4e-8c99-d47133987e85", "sighting--607c6184-2c9b-413a-8452-534ddd54bbc3", "sighting--7a739da0-5b66-426f-bc89-d4c7e3e67768", "sighting--834dd829-d955-49ba-9606-99be381cd03e", "sighting--a0ce3854-3fa4-4a03-9a97-2c2857a28294", "sighting--466ee47e-4841-4a62-ac4a-d13614dac33f", "sighting--b69dfbab-9a98-427a-b6f7-c246adfba6c2", "sighting--f503164b-d4e2-4c45-bb3e-45fc135c6909", "sighting--f4880924-843e-4779-9767-2d3c92cbfe94", "sighting--a4953502-653a-4163-9616-84d8fe38ae1c", "sighting--74741f57-d4c2-46c6-96b6-806d926ce208", "sighting--1e2bb044-3d13-4f52-beb6-bcc5645cc5b7", "sighting--7139e694-df7d-4edf-8fcd-fba059afdbbd", "sighting--baf9c691-8f62-40fe-b76a-c98575dcca5e", "sighting--478760d9-539a-4ea3-8a68-18b53ad392cd", "sighting--903af44e-5542-4afa-97bf-0fcbd521b81c", "sighting--8dbc72dc-ee94-4cd2-bd5c-b189525462f4", "sighting--3c89e216-b929-48ce-8a8d-0529db8398e9", "sighting--16b60fdc-b691-45b5-95bc-c4b338c65a4b", "sighting--6753a608-e0c4-4908-b0fb-e3a74e8943ba", "sighting--0f3674c9-9c94-4e5b-a85c-3d35c39d1adc", "sighting--45a53e13-f5a8-432b-90cc-b21d6697d10e", "sighting--be60e5ec-21ac-40ab-b671-e012620c03cf", "sighting--4e2e6bf0-29ce-4f8b-b04a-3c8edec4c8d5", "sighting--dd2cf361-418c-43ae-82bb-222dec1dbb39", "sighting--a5b63722-15bf-429f-8aa9-da528ad46a4a", "sighting--b796453c-d0ea-45e3-9b1d-01feed4f1ce5", "sighting--835ec811-f482-4975-aa1a-634f2606e0ee", "sighting--cb1c3f26-0cd1-46f5-8eb2-3826e7f47e74", "sighting--78196a8d-d97d-420e-a7e7-1fabba1d7b4b", "sighting--f4723162-7573-4595-aa50-ae315d42a769", "sighting--b1a9b014-24a6-4c7e-82fb-c9a3767c013f", "sighting--9f8b3b44-aa05-4a48-b36f-89840b222d97", "sighting--1c5758bc-a96a-4f02-a4af-b1b101fd0bc6", "sighting--18c3eb51-20d1-4dfb-8697-78f2b3cdd9d2", "sighting--c25fe0bb-201f-4536-b106-20fab8667f4c", "sighting--651b3228-2308-413a-b022-a5e105d871b6", "sighting--187f25b1-dcc5-4a55-be66-a83a940b597e", "sighting--163681f5-cdd1-4c9a-afe5-2be8020f67f6", "sighting--664efb10-b514-4701-8f40-63ce4d20dcde", "sighting--6ccda2fb-d840-475e-b672-8ceeed94c573", "sighting--f52b65b7-2997-45e2-8258-d63e9f5646c2", "sighting--d9a435c5-b7d5-4621-bbca-b5d130ca13f8", "sighting--ba038341-447e-49eb-a51b-803241bbd14c", "sighting--8ed6b612-e61c-4d62-bec4-fcf0908ff027", "sighting--22b04ab0-e32c-4d52-a3ad-255021bfaf5c", "sighting--ac7f2437-a851-4f69-ab66-6c1c06d2a4a1", "sighting--4e65c33c-7438-4872-b522-01ab5f4cbecd", "sighting--a965a02d-bbb5-44b1-ba66-facb2915aa1f", "sighting--b897dea7-ad47-4b3d-b3c0-d55ad00efeea", "sighting--d3e75945-0cd3-4bcd-a772-614ed94cbec4", "sighting--bb9cf35d-3a8d-40c7-b1dd-11361d75d890", "sighting--d72099b3-7924-4682-9e5c-5c729cd26680", "sighting--26c19d0f-c88b-4c98-aa11-f300d7360aff", "sighting--b149737f-7c53-4261-a462-79d440459d5c", "sighting--a12d223e-783a-4269-ad5e-2879d3fca1bc", "sighting--dd8fadbd-9927-49d6-88a1-8c6b76830bca", "sighting--daaacc49-72ee-485f-b53a-0b855b013b27", "sighting--f156ff5f-f447-4760-bb08-ced237f5ea53", "sighting--e46b0087-5d8b-438f-a379-58b7a7dde181", "sighting--1bf98ae6-fcbc-47d0-beba-a588ad801b87", "sighting--bc81e807-4b42-40e3-b860-c69d5279bbe8", "sighting--cb73bed6-de5d-47e4-a340-b4b7ac3477b2", "sighting--5eaaa2f8-6024-432d-9281-a85ddf9b1094", "sighting--a5632678-80d0-4565-87fb-8f959dc0bdcb", "sighting--03d583a5-bce4-41c7-8005-cf07e130f6a8", "sighting--4cf3198a-abee-4832-a55a-816fd255898f", "sighting--e9b5350a-fd32-4464-b71e-78924b6f09bc", "sighting--1e6f433f-653b-47a2-9e67-7b731ca4328f", "sighting--f0f8a68b-7c75-4b40-8d86-12f20a9439d6", "sighting--9628a08a-509d-4879-9593-efa59a2c083c", "sighting--f60b65f3-b527-4590-b99f-531cdcadfb42", "sighting--18d816dc-d7dd-44b8-8f31-8f0bb2099b96", "sighting--42a43cd0-db7d-4f8c-908a-98aca3f23051", "sighting--8e9d270d-6988-45ca-b2c2-9a2925dea485", "sighting--bcf1df8f-465e-4455-9e96-339aa3e8fe31", "sighting--648457ef-8a3c-4b98-8183-2156f03f0dd0", "sighting--14f51392-285c-4326-9ff7-d41b3225ecc3", "sighting--8458d4d0-9fe3-4eac-b317-78b75cdcb40d", "sighting--c9440afc-3b67-4470-87a7-cd64e864531f", "sighting--22268a01-ca0a-4198-b74a-d90a4d7c316a", "sighting--05949eb3-e9bf-48e3-91f1-1d881938b05c", "sighting--79c9c75f-8dc2-487a-888d-72cdc2544a8d", "sighting--b0959de9-3e5a-4b25-9108-48f822a17996", "sighting--5f26f04c-5731-4f52-a557-38ee77464e28", "sighting--48db2c8f-a1dc-4044-91be-e0d4d86b0f05", "sighting--25e5c983-5f49-472a-94c8-bcd1703a2891", "sighting--188a3c8b-7ba4-4273-91e3-9a6879553b32", "sighting--b0a842bc-e7bd-473f-bc47-5318fd448566", "sighting--f70adbd9-7c1a-424c-a178-471d089d7c1e", "sighting--438259f0-c281-4ebd-934e-0049fe1cc9f8", "sighting--36d4b29e-c0e4-482e-acba-4bfcc0f08573", "sighting--4291aef0-0635-4394-bc60-88dd2c428e02", "sighting--8d795ec3-10d2-4ed1-a13f-93df37ed81ce", "sighting--7944e633-b792-400b-95a6-83bb3ddab228", "sighting--e0231353-9344-45d8-98a9-364b16e0e321", "sighting--f1cdd91c-af21-4d41-add5-6dbf4881b7ac", "sighting--7e0b2008-81e4-4adc-ab0c-11a3a2e26acb", "sighting--6c9ea03f-a7a2-4c7f-a1f7-f5976a1a55ba", "sighting--05c3d716-bd11-4f3f-9718-bc2adee616de", "sighting--8bbdb87d-caa1-44e7-9b4e-a5c1558df74b", "sighting--f18f0874-6024-493e-bf6e-874c7a1c4042", "sighting--605aaadf-a169-4e02-b52c-b0cd7a93d807", "sighting--9b42af9e-3069-450c-a80b-b540e15b0da3", "sighting--769d6bea-661a-40ad-8307-3500c5da15b8", "sighting--d25b884f-0e1c-414d-b69f-7df29cb081b8", "sighting--2a4c7a28-4d6e-46f8-b725-77a6e9928764", "sighting--7191987d-9df9-4167-89f7-f518da13bb3d", "sighting--6f7a6b33-a3f7-4054-99ca-f53c638eb134", "sighting--cd58a18e-6746-44c0-acad-21e265bbc9a4", "sighting--9cc9b81f-9e58-46c7-a968-00c92ca783db", "sighting--8c97c8c2-ef93-4ba8-b064-bd1bb591e1ea", "sighting--184731d7-99cd-4ad1-8f1a-fa22980e5232", "sighting--a99a06c0-6ecd-4573-a1e8-b2a32daca65d", "sighting--72439093-d0d4-4c24-ab3f-7744b54e03ec", "sighting--db41cb1e-710c-406f-9320-360c99e4d2be", "sighting--12379bc2-56f9-4448-9f74-383487620f2c", "sighting--93982680-e388-4d58-97dd-52c49e64ca6f", "sighting--41b402ac-a9fe-43c8-93dd-c80ff73d46e7", "sighting--62cd69e3-0c96-4b84-8f9f-a3cf74a797ac", "sighting--1e50b3ee-4421-4907-b850-ff63aedeff53", "sighting--e7ee6777-be3d-4af5-a33a-880c719da488", "sighting--09283a3c-d759-4e4a-ba9a-ece1b687e741", "sighting--846b7a10-0c92-44ca-9324-b961dffea9b1", "sighting--cdd6a051-5997-4ee3-87a9-8dc76b4db4e9", "sighting--1ad92778-3594-4b34-bcd1-60ea2c8b9568", "sighting--244e6339-cc12-4c48-9065-a1d89578d400", "sighting--949e1f01-27b0-4385-a733-b0643439bd0d", "sighting--89962fab-1f8c-4db3-93bb-d2e318c7f501", "sighting--bc35c202-606c-4a12-b5f5-105ba62d4209", "sighting--1df0aac6-185d-4ca6-a24e-ca63f8508069", "sighting--5e7383a0-f417-4487-b5a7-fad74553f1f3", "sighting--a6e26b22-f987-4e3b-bac5-618591a75fd2", "sighting--c55fa430-2767-497d-915e-338c41296c8a", "sighting--01ffa5cc-b6a6-4990-9f3e-b435907e1cd7", "sighting--e359af1b-1c39-4ae0-80fe-89cff8f87bc4", "sighting--317d3644-2d38-4fbc-9484-7ae6f4dfc65f", "sighting--eacaf453-c550-407c-a931-657c6141565c", "sighting--e1e25be2-6384-42b0-8517-1c9748510ea4", "sighting--e0eae830-e1b3-4334-a7a8-836d054757dd", "sighting--dda3b4cc-2967-4aec-a785-060b5db837cb", "sighting--e02b9666-da95-47b6-9da0-a7d04fad883a", "sighting--ebed3b16-8c55-4a70-bcbe-546081433d6c", "sighting--432b5e09-a706-4038-a51c-d905f28e669b", "sighting--4b2a2d63-54f3-478b-afee-94a08bdf8816", "sighting--43bbd72b-bb8a-4df5-b08f-251436510980", "sighting--03e856f3-b6df-4c8e-b110-383debab949e", "sighting--7427d3c6-5aa6-4557-9aaa-92943a41a3ae", "sighting--f02bc3c6-6393-4ec9-b004-a954dc69cab6", "sighting--27a7881c-ce2e-4246-bfe8-fc38979719a7", "sighting--802f92aa-9f30-4b46-8028-4e3daa0af3ee", "sighting--6e42d163-4d34-406d-aa9e-26b9d5f52b4b", "sighting--39bf9337-1fd9-46f2-87a2-6b32e7e9afdb", "sighting--4119d8b8-b89e-4717-a081-1c8bf0f0d188", "sighting--26f0c6ae-db7c-497f-8a0d-3dbcf97e137f", "sighting--4014b5fe-b2c5-46ec-94cd-29bd520e2f8b", "sighting--0909d836-dfbc-4077-a047-7a91bc96bb13", "sighting--875c4577-c450-4ffa-8b79-3c3b52dacde6", "sighting--fe9e795d-88c5-4750-84ca-faa138583667", "sighting--9a728d74-487e-4a51-8ae2-c848fd46a0eb", "sighting--0583062c-1f85-41f4-9547-8292152aa702", "sighting--e12851d8-4199-4b6e-99e8-0b29bb00284a", "sighting--8380f214-4cb4-4749-9448-52346c0f2b3d", "sighting--930fedd6-e556-4b96-8b68-19911e39eabc", "sighting--6118435e-2d61-4a25-aa24-7039a49222b9", "sighting--0abb1b82-47cc-4512-b121-bfb6e90eaa6d", "sighting--36b63acd-d0e6-4de2-8d0e-214dfcd62c2a", "sighting--b7996fcc-b5d8-4a6f-8e6e-88fcbd049225", "sighting--9deec869-422d-41cb-9410-5a46ddf2a663", "sighting--1f635094-a1fc-4da2-8a70-a7c7ede8106d", "sighting--ba29bc80-e985-4a1f-8411-0e5624ed99a2", "sighting--26126504-0dfc-496d-87f8-9556e2227e2b", "sighting--49255a25-e1ce-4768-9935-69ff3e04ac31", "sighting--9243f2d0-0d5d-4f3e-abb6-063338555c30", "sighting--35cd8349-37e1-4551-a822-4676283f4c46", "sighting--8e3325e9-a416-4d50-9d7a-2b74895a911b", "sighting--91f72d7d-d862-4fb1-942a-e345d99f1920", "sighting--b7fb6141-4e25-49c7-8071-5f3f62c04a13", "sighting--c975d720-534b-4fef-8964-d860673aee5d", "sighting--c360180d-0347-42b5-8d39-6484666968c1", "sighting--a9ad7eaf-cfef-4de4-9574-bde28cc92b4f", "sighting--8a4685e6-414a-487a-bb07-5322c6418dd6", "sighting--fa73649e-6e63-4f4e-bf8a-c8b6d8bddab7", "sighting--cd0b2702-4ed5-4cf1-bcd4-106e8e56fee8", "sighting--4c1c0336-66f8-4a15-98e2-466a8bf7e38f", "sighting--8eda5427-3450-4457-aca1-cf4d5f307db6", "sighting--6251ae9f-f987-4b90-886d-20e4bad3c8cf", "sighting--f7e95be7-4694-4b55-b97a-f14846f7e6de", "sighting--3b63a332-bad0-447a-975b-d3f1e2fb318e", "sighting--97396332-8a23-4468-b943-ec2ca4cb193f", "sighting--48a9db39-ce99-4a34-9893-15db603b328a", "sighting--0cba222b-93c7-4a42-870d-cd2367cc55c8", "sighting--48e0047e-b3b6-46ca-a65c-4c6b9490124f", "sighting--377eaa4e-791d-43c8-8466-33b5beb756f6", "sighting--9e125c08-fb95-4034-a5a6-164dc6bf9a73", "sighting--a7c01155-f02e-4e03-af2a-951a4a5d963a", "sighting--1fa6aa38-161a-4eac-99b8-7f4f26e7eddb", "sighting--e582cb8e-6aad-42b7-90db-2445b74d9b01", "sighting--d11f1fc5-58f1-4796-913d-2039bdcb5628", "sighting--d646ee84-3ae3-4f19-b3fb-29124b02d131", "sighting--ff393e5a-e713-4096-b365-7803f95dcce9", "sighting--c6b2910e-da47-4c50-bddb-6afb0a42c6e9", "sighting--f1766fc2-dbcc-4b6c-a76c-b165be5dc044", "sighting--e451b5df-6dd8-4289-a6de-746ad346d440", "sighting--46f93101-e4a0-4683-8f93-a421edb63ab9", "sighting--71d30a7b-4a8f-4321-95be-5a4454675d2d", "sighting--cb8a6b57-6a98-4f95-9bbc-4d223d707de3", "sighting--09c3df37-effa-434a-a1f4-0ad2a877dc27", "sighting--bc8ec851-2927-497c-9235-b098b85c5eb5", "sighting--22fcef03-17d7-4c76-83c0-8c4f98f1bda7", "sighting--1e69af96-e468-4b60-858d-379d44f03e08", "sighting--683a5fae-f7fa-45f8-8dfa-72488bbef24c", "sighting--4761f961-91ba-4a46-a953-52e9a7a9dea7", "sighting--b00af693-3a37-4a87-bcca-910d3f519030", "sighting--6bb2f35e-0915-474a-932b-a848b25d86cf", "sighting--877f01c4-2f7d-4709-bd17-c6cac7f94bfe", "sighting--579cf86e-750b-4985-bb49-8d265a14d0a1", "sighting--766aba84-6fd4-4024-bc00-dd5c410ecc2c", "sighting--7b0256da-c0bc-49f5-916f-5ae392fb0859", "sighting--38060304-8ddf-4267-aa81-66350a25fb7a", "sighting--6d4dd91e-a229-43d9-8161-b7ef99c05961", "sighting--13b7111c-ce21-400d-b476-e73a180c89a8", "sighting--b47a30db-5dda-4851-9600-619accc424ab", "sighting--ab06e4a5-e646-48ae-bf97-c2c907a33854", "sighting--4ad20fd1-6f96-406a-a308-3488d85a293e", "sighting--92827439-ee92-4783-aa8b-ee93af224af3", "sighting--e302b295-6158-474f-ade9-5c7ecb000fb6", "sighting--03f65822-803c-4b45-aede-4fba9a513e6c", "sighting--c67c0afd-a39f-40d4-93eb-08fc11c74ae5", "sighting--9cde69c3-088d-47cf-b662-b6e9c739ad0d", "sighting--256b62fa-d261-45b2-b6b6-cccbff0e3d80", "sighting--b0e59f29-173d-42d3-a70c-6a0ad5e1a483", "sighting--fbaaeb20-e835-4da6-acb3-d9c85710e1c4", "sighting--9dbfb9b0-9421-4d6f-873c-d3624f8fa92e", "sighting--1de39f67-028b-43de-ad35-5025eeba5101", "sighting--19ab085f-6c8f-4866-803d-24714f4f3dfd", "sighting--ed7d87fb-02e2-47a0-b899-6c82823fb49f", "sighting--60d29e03-9772-4ada-89bf-4256f84e0b65", "sighting--54385976-69cf-4d89-b95f-2817fe73e280", "sighting--3a8b5e4c-f1b4-47da-901b-a2a949bc7bed", "sighting--f8fc2051-3345-419b-aa99-8d0941601e9f", "sighting--3c36a01d-9faa-437d-9a89-943f74e53316", "sighting--8633ddce-37af-49c8-8f4a-475c022e6f3a", "sighting--5b48bb17-a1ef-4d5a-b42a-3f2698adba10", "sighting--8337e580-1f34-475b-84af-839a3587e6e9", "sighting--94e0f3fa-4cac-49a5-a6f6-eecd11c7316b", "sighting--68598c23-0e8c-41b1-9d57-171ec13e7da9", "sighting--bf54f9d0-bc30-42fd-8a6a-b0f604bf273b", "sighting--e854f2ee-1127-44b2-a258-7d5649801134", "sighting--0bc2c300-0da8-460c-aae9-7a6f4d532f3c", "sighting--733f658d-8704-4369-bbc7-37bcdf4b68ee", "sighting--873061d5-5521-488e-82ae-802c77426833", "sighting--345a6d2c-780c-490b-a9b7-a3e364b879fa", "sighting--06b63486-ac6f-4c79-b728-ff9d0f2fdcbd", "sighting--cfb6dbb3-ccaa-4dcd-b7e3-1f303a91ccdb", "sighting--0e2a06a7-026e-4aff-a063-1ed01c7abe25", "sighting--d157d68d-a78b-49dc-a05c-b25db75e7833", "sighting--7019363c-961f-4e88-83f2-5271af7a2804", "sighting--868f9759-e0a6-4d17-a09a-d25204ea51f8", "sighting--4ef332eb-94dc-4fc0-a1de-80d1ceddd3b1", "sighting--266d76ee-c414-4b47-abdb-dbd784df5477", "sighting--b5073afa-ac3a-43f3-81ea-07c547d2fc64", "sighting--aa78da34-5056-45bb-a84d-145e2016ed4a", "sighting--7aab5b62-f0c1-4f63-8a3e-1705b44b3a6f", "sighting--88ce8b71-5269-41fa-9045-28574bc9e513", "sighting--a174c773-f78a-44a7-bd3c-d6a7a55171b2", "sighting--05a2faaf-13db-43a6-be64-3935bb1bffeb", "sighting--df678dda-a592-4f70-aac8-04737bf95293", "sighting--02ee2897-1024-41de-acf3-ae07bb340426", "sighting--fd5ff5e5-74c5-4f8b-8c25-ad17f85a9670", "sighting--1a251207-cafc-475d-965d-b24bd1d66852", "sighting--13082374-09fa-4a60-bcf3-cd4d5d8319e4", "sighting--b7e13246-188c-4198-9842-07389877296e", "sighting--a82ccb7e-be88-47e8-aeea-5aa5949e0c54", "sighting--83d55b49-1f77-49d5-a596-54d7967e0900", "sighting--b10b0aa0-3890-4bfa-b773-4f84e7ebc8ae", "sighting--10a89f20-ff29-454c-b43a-f2e69a2b3573", "sighting--2ed1b696-ec68-43ce-982d-b5c0e3602e31", "sighting--6d18a0c3-6641-4542-b081-9b9cf474be32", "sighting--bbc41893-94bd-45e8-9d91-b8540bcf5259", "sighting--4a2a70a5-bb9d-46a5-9b28-c8a5571468c2", "sighting--812e45a6-9fdd-4a1c-b067-cb89cbfebd08", "sighting--8668cad7-c926-4038-a529-95a5e3894b85", "sighting--d6ffc7dd-d83b-43e5-9a2c-17f58ee5848f", "sighting--e75760b6-3697-4e97-a8df-0d07f13ae3b8", "sighting--121e1b06-a98d-4cda-805e-e70ff01b2f2d", "sighting--c752a034-d29b-49aa-9593-fb12238ee24b", "sighting--76ecd722-1298-470e-9dac-05b44fb4522b", "sighting--e619b201-4375-47cc-9a32-17387db9e658", "sighting--bcf8b2d7-c745-4d82-9869-813dc6dada6c", "sighting--29b1898a-4036-4801-b42d-3b50a8971121", "sighting--c3380840-0089-49a6-a325-c6fb7198b795", "sighting--cc764199-d65d-4b2c-9eaf-ace8bb050ae5", "sighting--a7874f95-0b93-4261-b221-aea72b14fbd9", "sighting--cb7daa2c-8962-41d7-abc5-0905ecd48638", "sighting--843e6220-2696-45ab-afbe-ee95be552adc", "sighting--ba05aae0-14ff-47e7-bf6a-441079b51802", "sighting--5f2375af-e4d9-408f-b97a-65e236c25b90", "sighting--a7fcfafa-9d19-4a66-b97e-b7ef1d174055", "sighting--0ace1669-9738-46ef-88f4-d34725edebe2", "sighting--a3999ffb-8693-4f73-81d8-6592fe34e009", "sighting--838c5c95-6234-45bd-8fa5-2aab2372d7e6", "sighting--1b2a5a1d-bfd1-4b06-a59d-8a4693b7c7f9", "sighting--b16c4c00-dd2a-43c7-9de0-1fdcf8b6b409", "sighting--ef11c990-85e6-4e2a-9c79-7bb575c289c4", "sighting--2a1875fb-fd38-4022-adc7-e855f7d8629c", "sighting--a1b63ba8-76fb-4d50-a5b2-9a627af48a0b", "sighting--2b328176-854e-4d58-b092-1bc704a1a9cd", "sighting--1c398a50-85b2-46e8-b81f-04b394109a5c", "sighting--6bab5690-e989-4a2f-8355-e45f85e8b27e", "sighting--85d01191-3883-4d13-807e-eb38edcf04a7", "sighting--1911f1d1-bf06-4d68-afd4-4ad82e44397a", "sighting--64fc1444-c6d6-47e4-8f33-d8eb39df91f8", "sighting--b755a5ab-644b-4720-9497-f707fea3771b", "sighting--97ca59f0-344b-4c38-92b7-d21f92acce99", "sighting--01d0467e-7c33-4a48-a72e-64305752eba3", "sighting--31e7c442-c881-4e3f-a9da-6f790f074a8e", "sighting--729e7dfb-5e85-4ebf-8152-87485c41e343", "sighting--6ed073dc-54c9-45d5-b400-80131af679bc", "sighting--72f9faae-5835-4c8c-a8d7-be1c673338d9", "sighting--918ccf0d-6840-439b-bb76-d4fafe9d90ee", "sighting--3b7d6839-8814-48e9-9d07-8460b1650830", "sighting--b3d3b0a5-6aeb-4603-8346-62f4828bbdb1", "sighting--66e35aa9-fb56-4508-8139-e3f7856a4b06", "sighting--d0dd1412-b6ff-4105-a7d0-35f18c9cb106", "sighting--a11657a3-d8e5-4c69-9102-dae6d0b2364d", "sighting--1fc188a8-2377-430b-b9ff-2931258fd557", "sighting--67d564d1-46ce-4653-a3d7-354de69da347", "sighting--2fa4c7ab-8719-4aad-ba83-dbbd3df085ee", "sighting--93a36153-6717-434e-b37f-f49e9b94b78b", "sighting--0d7e8c84-05b8-419a-8aab-731ab1841bdc", "sighting--aed347e5-2b88-4ff5-9af4-4ec468d77705", "sighting--bd84d3e1-4c0b-4f67-bc1a-b2d446d2f7f7", "sighting--85be3c1b-9442-4823-bcd5-f4901a1cbedd", "sighting--5694db98-5271-40f0-872e-edce64389194", "sighting--025cd519-35c9-44fe-bb96-75f53b7a9edd", "sighting--88386c51-b71d-4ad3-9c1d-9848b3a0d0b4", "sighting--7441fc30-f811-4d8e-b91a-81ac39beedd1", "sighting--6a0dcbc6-385c-4db4-b353-fb568ca15603", "sighting--f56d0c38-60fb-486a-bd27-221b905aaefc", "sighting--23429efc-2a1d-4fcd-a3e8-6480ec58948e", "sighting--18816190-0bb1-4395-86f6-5cd7b406c4f3", "sighting--50ae834d-bbd3-442d-b7d6-23821cb23ef4", "sighting--27cc55d3-d3bb-4067-8025-54ae3d9f53f2", "sighting--8f39b32b-ad31-4f03-937b-ae1a8cf3cc52", "sighting--d4e9f54b-a453-446f-b24c-6da60fecd269", "sighting--c1193c12-4b18-4eef-8c33-e1793e29e7d5", "sighting--6ddf1806-a344-48b9-9640-eb63aa319dce", "sighting--86df8709-44ec-4cf6-bde1-f7f4f7a0b0bd", "sighting--973596f3-3804-4762-a8e5-60a6e0bd9bef", "sighting--5e8b2fb8-ffcb-4e5f-925f-8ff8f525e930", "sighting--aff225fb-a23b-499f-bee5-1480bd7d217d", "sighting--e9fbc031-9308-45f5-b997-2e780e38483a", "sighting--66fb9a4a-72d3-4f3b-a54e-c7022753db28", "sighting--13b53856-97c4-4595-bf1e-e234a94e8dfb", "sighting--c9768e2e-2451-41c6-b6da-7d2132d4394e", "sighting--741da5b7-79b7-4dc7-b3fd-74a75264e380", "sighting--394234b7-6b2b-49ef-850b-ba9f9f0a85fd", "sighting--0be8f3f2-ba3a-4975-93f7-c534ce4d244b", "sighting--c734b80a-c14f-4f92-a0c7-3849f41305af", "sighting--7c1d2c54-daf6-424a-b1d0-bfc487c0b5fd", "sighting--b925b259-39ed-4351-9c50-9b90fb933ea6", "sighting--049d05df-ce13-4b4c-b062-9711fea65f1d", "sighting--76ad69b5-5bb7-4935-bda2-108b68856b97", "sighting--f6b7d108-7167-46ad-9554-2efd4916112b", "sighting--6fd5e308-1a04-46ec-9607-2afe562e0515", "sighting--e257e474-099b-4378-bfa4-dc1e7dc45714", "sighting--291f663e-29f5-4f7a-a71e-c14eb7cf4c00", "sighting--742f355b-6d33-4f11-9e17-1e62980430b2", "sighting--5168ace8-ee8d-4d94-b9e5-f6e6df39d418", "sighting--659bb2a8-32e0-46ea-94bb-c0229f78d600", "sighting--f6a1b720-ac13-4d15-8878-5adcbca77e41", "sighting--ad700e10-15e0-47a1-aa07-e4989fb701d4", "sighting--ceed9d4d-82be-4960-b9ef-05612a9290da", "sighting--033dce08-030a-4cd4-8c0b-1b62924ae849", "sighting--bafe1141-a4a6-4228-8ed2-196d24889085", "sighting--67330156-a59a-4b0c-a9ec-99d471f2163a", "sighting--e4cbdcfc-4dd8-4529-90c9-f7fb98dd7955", "sighting--9b960db9-b7c3-4cbc-8f64-4f2c447fdc58", "sighting--da6518f6-c942-4dc9-b1b5-fab2d4fe9a28", "sighting--a23a135a-7661-4606-90b4-315f1382ae73", "sighting--6e86b553-367a-4e78-a708-83f647887678", "sighting--4eebc9ad-0bcf-4a02-99f2-c98f07d79148", "sighting--58dd5430-2205-47bb-a6eb-548702199036", "sighting--1c479c27-68b5-4295-8381-54359d83d38a", "sighting--be5579ed-352d-4985-9a15-554e0d598ea1", "sighting--f0320cff-8a27-4b81-a71b-0c83ffb8c53a", "sighting--df57a98b-2598-4467-83fc-9913b5094988", "sighting--d22c7d70-2256-4eaf-b8ee-26c7dd07dcaa", "sighting--5dd45d84-bcc4-4b36-9b03-ad3582fdb894", "sighting--8ce58844-c700-4870-8029-4247fa5ed7df", "sighting--062bdc31-c931-43ef-9c9f-bd129ddba153", "sighting--1431081a-c1e5-40cc-b6f4-8bdf01813ce9", "sighting--b0fd6287-2815-475c-a465-0550f64547d1", "sighting--e9dc1942-d14e-4333-96c6-9a1e23b72640", "sighting--054042a7-9342-47fe-b876-3681c3435469", "sighting--942d26a0-35f7-4f78-b0e3-386c8386515a", "sighting--69be2bf1-5fc1-4531-a78e-1d9b414e6f88", "sighting--b022f44c-25ab-473f-8e94-6e254b88aa7a", "sighting--ec5fee36-f669-4d97-a7d0-ae04a7dc4f7d", "sighting--f24dd181-a82b-471e-a586-3fe1a98233ac", "sighting--e89e503e-446f-447e-92b5-e0de2eef6d4f", "sighting--fe239941-22b5-4281-b26e-8e4571b81edb", "sighting--955c7afb-0a60-4bb0-a817-5c35dc39de98", "sighting--2d44ac95-5a02-484d-a489-f6e6c972e19a", "sighting--06c5c2d9-dc0e-4c7a-af5d-a1b96a5a4b48", "sighting--39a67515-7cb5-4441-820d-0099b57ee78e", "sighting--2b60f657-7deb-43d0-b385-9e3698e7dc13", "sighting--414f1038-7540-4a66-b21a-d87b71a8893f", "sighting--bcc6675c-14f9-4b74-9920-c5efcd4961cb", "sighting--8afc9490-2afc-4750-a064-7466a55da436", "sighting--8336d77f-f986-4234-8d42-5a07a6c38bb2", "sighting--f9b8b675-6500-4767-889c-dfa28cdb6c78", "sighting--caab001d-310b-468e-8cab-9d9e4633b070", "sighting--c2bea0f4-afd6-4f62-acd7-5b8020994ea0", "sighting--1f69a282-727c-483a-b86a-6f53e7767cae", "sighting--b2348183-43ac-47bc-bca9-7c429817db99", "sighting--2f67b9be-558b-408f-9b26-25f0a4d8a63f", "sighting--39918f19-faec-471f-80b9-3a0f804c4bcc", "sighting--1b1a3601-f85a-4b31-80f6-2f617fedce7d", "sighting--3ac0ca86-68f0-4d88-9294-1b5062416b70", "sighting--33217d0b-cbaf-43f0-b05a-90c77585bf3a", "sighting--607d67f7-0892-40f2-9b32-81946605717b", "sighting--f272b0e4-ce9a-418c-b211-41618c674d0a", "sighting--e395be6c-68f3-4b8c-a11d-ea77f5106f49", "sighting--c17f4e00-32f1-41d5-b795-8df9ac82e947", "sighting--904d9c52-81ac-4312-bbd7-f560065c0dc1", "sighting--17949eb9-a3bc-4647-8325-119207c3eb99", "sighting--fb4f9743-a048-4835-844a-7e9237bceebe", "sighting--8ac79ddc-8c92-43ec-93c9-87e9aeefe111", "sighting--42e1acaf-7114-4daa-96c8-fabe8aa20c87", "sighting--2e1c8fae-8d1e-4454-b880-7920032fb07f", "sighting--0ead954c-c9df-4a45-ba57-314431e12771", "sighting--98ee3e70-fd3a-4339-b929-3e3d2e67cf62", "sighting--0221e482-c31d-4ad9-a473-fe4c2ebaead8", "sighting--bb746b63-ef60-40b7-859b-3988b28d3428", "sighting--e1fd994f-6771-4226-b178-1daf36eb5ebe", "sighting--d9d99133-5dbf-4491-bce0-56249a8595b8", "sighting--72925824-8e59-495a-a427-5b92ca289fd8", "sighting--b7202573-880a-478a-9b0f-f53b6d439dc5", "sighting--a3dba4a6-dd47-4755-a5ff-b97882ec1ade", "sighting--f9f32d09-012c-4e9a-b2ca-201476005cfc", "sighting--da807c76-b86f-433b-9c8b-15c7959fbc9f", "sighting--a5d1abd5-abd9-4024-9f13-45d7cf705327", "sighting--6085420a-d328-4933-b66e-93a0a2daf1be", "sighting--6505c57f-f741-49a7-8fac-2056148c0b0b", "sighting--e9546ede-2a84-4907-b440-68027dd58fe8", "sighting--16393388-8316-477c-b730-7d6b5622ef65", "sighting--8cf6ecbb-34af-4a82-9a6f-6d6dae56fa20", "sighting--00024407-e008-44fe-97ca-1f19d11ad5d3", "sighting--74d9901a-7f4d-4b12-a7fd-22d0c5f62154", "sighting--9af97bd8-b200-4c52-a118-e4089cbb6fbc", "sighting--cc2bbf2b-4307-46be-a19a-302581794863", "sighting--63f14f1f-cacb-4d38-a851-e15a60a9780c", "sighting--e5fcb0d3-2e50-4825-b5b3-866d9ad87ab6", "sighting--89b58672-5274-4797-b179-a01ede365e5d", "sighting--83b89c6b-8990-4c73-b28b-d4c9c66f6968", "sighting--6572a52f-a795-497f-aa07-ab4b52e8a719", "sighting--57108903-e63c-4e54-a9d6-7e6b244039e7", "sighting--8a77f608-99a1-4454-a6a3-b2ee44654a24", "sighting--4af1fc0d-185c-4d98-a4fc-23755605abf1", "sighting--b97eb765-0d89-4f37-8c61-b5be32936cea", "sighting--b4327d31-77c2-4ca3-a03e-f963ea5707ff", "sighting--1698064e-64c1-4d1f-ad62-293131db5dc4", "sighting--78e8349c-fd17-482d-94c9-6c7a85d440f5", "sighting--3517a727-06cf-4867-b3b1-e83d22e03822", "sighting--d6226895-111e-426a-9d80-678b66123d57", "sighting--16c53688-6533-4c84-a301-812655c8ecc9", "sighting--68151355-2bbd-44d9-b793-a5c2401af568", "sighting--676c756c-cfbb-41d5-9146-eff7f734571f", "sighting--b3ff50bb-5b2f-4f88-b9b1-683809d0153f", "sighting--789079cd-7936-4969-a3e5-139244708b65", "sighting--f261c02d-901f-42e9-952d-aeab30558ecb", "sighting--5ebb9cef-04e9-4b35-b662-defc648a9905", "sighting--141dd373-f375-4803-ac18-8c8253acd378", "sighting--a65559b8-6460-4161-83a4-ac1ee08b2b4e", "sighting--a7de74dd-f53b-414b-a82c-2c4b6a21bc4d", "sighting--9412f37f-2de2-4264-8e65-d86758483092", "sighting--eb915260-bf46-4f52-b093-4e999407ab58", "sighting--70a792c8-d75a-4dcf-9467-4ca99559cb77", "sighting--43d350dd-fe35-43df-aeae-c8ca8e79edf7", "sighting--13977629-4081-442d-abe3-201c8ce370be", "sighting--54fc34ce-a0b1-4a64-95c6-5e7758b2219c", "sighting--4e917f83-d26f-465a-ba78-c06680f79833", "sighting--ed2d5953-1dc0-40ad-86ff-22954c72e90a", "sighting--58baf12e-844c-462f-a5ed-c15eafa7d942", "sighting--75af700c-2064-4696-9d04-bb3818c54609", "sighting--de273903-d4d9-4864-82d1-fc87d2b43b8b", "sighting--8b3875df-0070-49eb-8c76-c0bace45a9d6", "sighting--b7488476-05af-4f71-a59f-1eaed88e5b6b", "sighting--0acf3d8f-bcf6-4d9f-a4dc-cbc8a575149f", "sighting--9f4b12c2-011d-4495-aa13-73ab77009306", "sighting--dc757d2c-d8af-491e-b335-4484cd9f2654", "sighting--5fecb055-dd2e-441a-8eae-f1288b1b1009", "sighting--f6c73585-afbb-406f-9102-d0d81fa9cf5e", "sighting--980a027b-39a9-43e7-8eec-e0c0da781f5b", "sighting--8b09b729-39d3-4d5d-a873-5c9ea2904d30", "sighting--de869974-e4c1-41b4-bec6-b5f4a7d860f8", "sighting--12ec0c0e-bc81-47da-b15f-2c847e8f28e6", "sighting--a3e93a9b-57aa-4430-9684-3c5c064a8ce7", "sighting--68cb8e40-8e23-461a-a1c1-979c61168ecb", "sighting--e186c6ef-8910-4d33-b4df-358c41b70846", "sighting--1fb0fab4-cf3d-4b5c-b8ff-8536b6b89b59", "sighting--4f2edeaa-5b55-44cf-b059-68d41f110d41", "sighting--8102c25e-4dc5-46bd-b38b-b1745467d389", "sighting--36548e42-2dd1-4291-ad14-8233d7e250fe", "sighting--44a970eb-9256-4a0f-bd09-bd237f37e0a4", "sighting--adbf01e4-056f-4137-9853-3e6f3915af11", "sighting--a453ffaa-14a9-4c0b-8758-8fa4158e0938", "sighting--20469163-8b37-4165-9569-5d004e39c807", "sighting--5e3b6e96-a66d-4207-98f0-06b2514cad61", "sighting--446b9cdb-752c-4963-a8c7-72a26fbea5f2", "sighting--88740c96-5def-4587-8785-2c8a026a129f", "sighting--694c4ca6-d71c-4d81-a820-07e4246cda1c", "sighting--851a537c-9644-4976-8d0d-c356727f1f53", "sighting--dd8e237f-f3aa-4d90-a205-ecbf5a8978c6", "sighting--64af6c1a-9bd8-4a60-af1a-9fcc54caefce", "sighting--1fdfc7cf-63cf-49c9-8a6f-486d00b0e340", "sighting--e5e84d74-671f-4382-abae-c06964f7f4eb", "sighting--7464e01b-e4ee-472a-a92f-db96a57c4d49", "sighting--165e9b6d-7869-49e2-9b2b-59cf2203b1af", "sighting--fa0e0ba5-bce0-4783-98e9-0665bdde56c1", "sighting--b61665a8-fa01-4a43-af32-d382b80e8df9", "sighting--064eb01e-9edc-44a0-a6a0-9ac5e2431582", "sighting--1157f155-c226-43b5-bcc5-49a7c91b6ef4", "sighting--74a8fa3d-4aac-44fd-8612-7dafcd954509", "sighting--432ce0cc-0ba4-4b30-a49c-a4ca3133df14", "sighting--0be81ab5-831b-4c52-9644-32bbe8436c7f", "sighting--ec1a70d0-ae65-4cfe-b637-a606378f00c2", "sighting--39cf0a06-56fb-4850-b088-9c68772e7170", "sighting--f971a4ec-421f-4ecf-9550-6f87f75d3d57", "sighting--0160445a-d724-4c4a-b900-5d8a87fa252f", "sighting--5c46f2d0-f54d-4b40-8b0a-81e659e3b830", "sighting--ea99d3a9-a6f1-41d3-9031-ad8667c5784b", "sighting--0a67e561-53fe-440c-a046-2eb93f3e7429", "sighting--34cf9911-c91b-489e-9826-4bc1a55d50d9", "sighting--83a5a516-2d0d-4022-b42e-aa56b581fc0a", "sighting--9add8cc0-4015-4119-9c95-7182102e79b3", "sighting--cce5897b-355e-469d-94ef-c1d927f2d371", "sighting--fe50cd03-3d7f-4fd4-b58f-ed32299e7500", "sighting--c470a7aa-65f0-403a-a3fe-a2afb411b5f4", "sighting--1b9b5ee7-7d1f-4043-897f-17f45e6adb1f", "sighting--b780ddb0-e534-4fb9-8399-9f64470837ed", "sighting--916950f4-4579-4fa9-862a-de34e133d5b1", "sighting--f7d9c89d-7342-45e2-a270-efe0b0e2d534", "sighting--b915335d-ab25-492b-ad27-0f4c623642c8", "sighting--493e32b9-e9b3-43c1-9df0-11c2a8555daa", "sighting--4bef3cb8-a010-4ecd-8df5-667c7e2fe6cc", "sighting--9d05e42e-2794-4e38-9be2-f3dd5a0baec1", "sighting--037db070-4852-4374-a958-76966c9bd5fc", "sighting--05bd67a9-7b28-45af-acae-dbcccfcf4046", "sighting--0ba2feee-6815-42ad-a71d-7c805d2deb5f", "sighting--5d8ff98d-1c42-4ffa-afe0-c81788174701", "sighting--49d92dbf-dc30-4ab3-80a9-a2f497a8dfca", "sighting--1cdef68b-4889-4271-8a35-b276a2592d4c", "sighting--0abe64cf-a9e3-414f-bd4a-9e59d51bdb6b", "sighting--3f5b9199-4817-4e75-a02d-718f61221299", "sighting--d0299af2-75b2-4162-b1fa-3df9aa646369", "sighting--5b02954c-f91d-4e51-8966-472bd9c88702", "sighting--21b545ef-140d-4827-9963-6b29765d180a", "sighting--e829af3f-9ec5-40e0-8e8b-908e7838510b", "sighting--b4dbff7c-2da0-414b-84b2-e5960dcb094e", "sighting--74c85692-f328-463e-98d7-73791ece686c", "sighting--77f748cb-19e8-4a2b-9f1f-56a0e8dddf2b", "sighting--e784b16d-5e08-4421-b750-9c7e0804eba7", "sighting--8dc1e79a-25df-4471-a4da-539f7d9d42a6", "sighting--225e5a0b-fb5e-42b7-93fd-25db2627fc23", "sighting--1bc22cb3-ce3a-487f-a96d-8fbd7f450197", "sighting--6cb3c0e9-7fc9-4f77-8f22-d2c414602281", "sighting--97b678e5-cf84-4550-8aa2-78d60298f954", "sighting--32ea19a6-d4be-41a8-85d2-2a3cc9724065", "sighting--47499f86-75d3-4a70-b2d5-f958e83a4e9e", "sighting--883d7910-04ab-4c89-bb09-b5b8d2e46557", "sighting--9b4e9e21-7c1b-4197-88bc-ce7ecbc9a419", "sighting--ddd51886-0e60-4a09-8437-fce59eb9b8c5", "sighting--26cba83c-5bad-4a63-9c90-b03b24770038", "sighting--38c23630-ef78-48f0-a7a8-ffac7dc78a27", "sighting--4da82031-2667-4e5f-89a9-304cb3288cdd", "sighting--6221497f-69f5-430e-ac90-12ae923d8807", "sighting--e73d80d4-6f69-4942-b7bd-e7487d61ec22", "sighting--a71611c8-3882-4478-a468-b80105eee3c8", "sighting--1b94ea88-159d-487a-9cb8-704b828d306e", "sighting--5ad2b554-c7a5-46b8-8363-a7fc982cace8", "sighting--17a7dd77-0ea9-4e0b-aa2a-7dfe949751fb", "sighting--f1a5d5ea-7c09-4cec-8590-48b98fc13e95", "sighting--18e05ca8-16d5-40b3-b4e6-22140bb2a2eb", "sighting--e209cb62-271d-4925-bc71-d3fe1e0c94e7", "sighting--3d3c585c-1106-4e34-9880-c87d896d8bc5", "sighting--a73a3d31-0138-472e-a46e-5f5fabaa34a6", "sighting--679b0138-9653-4b79-bc1f-04202b32cbdb", "sighting--61bdab3f-522f-4eea-82c5-f3480093a3c3", "sighting--ae500996-3259-4479-beea-df5a04583aea", "sighting--f3e14fa6-8e4b-4685-a5dc-e75b2c88ff8d", "sighting--22c5305f-6a5e-4afa-8e0f-c08adc0a1765", "sighting--912c04e8-ab68-4d8e-b1f5-5ddd41816fff", "sighting--b9c14c7f-292a-47c3-8666-17971fdcc68f", "sighting--65247c4f-fcd2-42a7-bb83-69e0bcf5d195", "sighting--a7f57391-e356-455e-bc9c-c55816c82175", "sighting--7fa4d5c1-d7ce-42b8-994e-df2ac0233603", "sighting--936328ea-6a09-46d9-a35a-d10ebfa745aa", "sighting--6ec3c617-3694-42bb-86cf-33dc7570f760", "sighting--8aa0475f-7e95-4b6b-840b-bf7d9c75718d", "sighting--ddf29351-5f44-4e9a-9fc4-efedee8a49f5", "sighting--4f5b0cc8-d829-4997-aa34-beeed0aefb10", "sighting--aba5f332-04c3-449e-9797-5e2f11903913", "sighting--94006130-2063-430e-ba42-6486d7a0c685", "sighting--bf801209-3a5a-419d-88ab-ace989ba2bd5", "sighting--460cea9f-765f-43bd-a8b2-3628985b7e81", "sighting--60b0a00e-7b33-499e-b50e-c42fbadd8188", "sighting--6c988651-8a9f-4766-be16-888354e3141c", "sighting--8fea94d2-9bf4-483b-92df-ef54b70c01dd", "sighting--365443df-f67d-4026-a262-234f8c357dbb", "sighting--468a9755-6117-4644-9727-c7f438d4a5cb", "sighting--e2a4030b-8cc9-41f8-89dc-7ec26dbd10ac", "sighting--6113714e-40e5-4511-9a8e-61b56bc20983", "sighting--e28e81bf-12e5-4e7d-93a6-37ca22d134be", "sighting--159c1f14-f00f-4c5c-a4d3-3a71b5862b80", "sighting--15a29063-720b-4ba3-9f62-8ed4be12fa14", "sighting--0464ce30-0ddc-492f-949c-309d9ce00ada", "sighting--2fd13070-8d0f-4b84-ad7f-31cb231d206f", "sighting--7f56c331-74cd-44fe-a2e2-6d8c169a57aa", "sighting--eb9c6311-7da7-4430-a2f7-97015e186551", "sighting--c8280adf-302d-4b12-8527-e49c0c69c6ee", "sighting--e75ab2a3-1ce8-406b-b276-7b80a48f35b2", "sighting--7505d1f6-503d-43cf-ae1d-4d8ded5ba75f", "sighting--36da6700-5343-462e-8b4c-12c9df555257", "sighting--a76fde31-2b3a-477c-8341-4785ef8373b3", "sighting--c8e300ad-d09d-4eae-aae7-1d76b2d07f85", "sighting--8d44a616-2032-480a-8dcb-9f31a39baad1", "sighting--f70a6b3a-8d6b-4436-b1ea-4594a8599a73", "sighting--3e42b100-db2e-466b-b4f1-ee5c840eb51a", "sighting--6b021dd3-f077-4c0f-bbd2-4b8ed360b8cf", "sighting--21a98874-c5f0-4902-8887-f41029e0025c", "sighting--8355fd4a-dfcd-4ee9-aa92-9be654375508", "sighting--9d931663-b00a-4e5a-bfec-388cdea8aded", "sighting--52ee3608-ddf1-4eef-97c9-7d55193fb305", "sighting--fdd8b3fe-dcdb-4e15-bd60-01e929cfde1d", "sighting--d34712cd-1818-4781-9513-cdbcd6571e45", "sighting--0eba6565-f74d-4871-a889-ec66e5a21ffe", "sighting--6422f27d-f434-4c4e-9ead-b5f779d78377", "sighting--f7e83b84-35b8-4a0c-9384-fe9e0a461cd4", "sighting--c4fff466-775b-4e80-aabd-413041f8ea6c", "sighting--374d2bf1-fa74-4b76-ae9f-79ef1be3fdb1", "sighting--ef7a04ea-8713-40dd-984e-1806e145845e", "sighting--b1429ba3-1251-48af-b9a9-d4e0d64c2924", "sighting--907ed999-dcba-44a8-a5fe-e75efa3db764", "sighting--2fd0b271-5cc6-46ee-8d8f-eb30f302180c", "sighting--f9494aa6-789a-4102-a7c8-cc331e909e27", "sighting--94539a60-523f-4804-9e22-be547b6cde05", "sighting--7bc26169-3ddb-4bb3-91cc-31839b0995cc", "sighting--909570f3-45f3-4b5b-9440-266e9be2afc8", "sighting--142e3ef9-0bfc-4d63-bfb3-2db2134abfb1", "sighting--56f47dd8-0025-44c2-97c5-33aa63aea60f", "sighting--4250ed83-d299-49af-b7e0-feb061101b40", "sighting--a444b917-f97d-4dae-8a7c-1b9eca427c6f", "sighting--f2bc6f63-54df-4c08-b0d3-56dd11643dd0", "sighting--7dd32c15-a027-4486-82be-1a3f6a6678aa", "sighting--f47f5657-d82a-43f4-a40b-6d8b52229375", "sighting--3066dc8d-4c87-4301-842a-64461713430c", "sighting--c219d910-e1ed-453c-8cd8-978f5cbd20e5", "sighting--f64a3020-4638-4328-bbb3-24c0a9429492", "sighting--85f5a606-02fa-4424-9c8b-6cd62a012adb", "sighting--b85cebcd-b135-41bd-a5ac-e701c1711495", "sighting--eae9db42-90a8-43f3-89a1-0d73ebabcdcd", "sighting--24135cc2-54fb-459b-a512-288323f78a61", "sighting--f3697ce3-6994-47d1-8752-f10b1bc98919", "sighting--916278ce-fc6a-4dce-abba-d7a7f51abe05", "sighting--f3f52c04-8157-4ff7-a8f1-0337f22e7c23", "sighting--cd39fb68-01e7-416a-bbd0-d1258ada9a4e", "sighting--2a0e946c-10cc-41f9-8897-068ce2ac3cae", "sighting--155ec4b5-391a-4155-b0e5-b2f23f66c9f7", "sighting--991c788d-087e-4e1c-82cc-50f80dc4595a", "sighting--679133bf-29a8-467f-bd41-00580e3cbc02", "sighting--4b94f074-6fab-4d6a-95db-ef0f6f3cf204", "sighting--8dbce823-87b3-4da0-b245-712b56db6483", "sighting--5c8c3f2f-b514-492d-94eb-c70a7cf7a1b4", "sighting--46d72a89-7f13-4858-9255-cb355a5b6918", "sighting--1cc18e13-60af-41ca-bc28-ef9e3e3f7b6d", "sighting--e13922c0-9e66-4b06-a22d-5daab3ffdd30", "sighting--079f6fdf-37ad-4fb0-b8f3-e30ff38fa4d4", "sighting--0acab764-1985-44bd-8798-5b32e3d16e4c", "sighting--78c17c9d-f6d5-4e4c-8b54-3751cc847b06", "sighting--840112c4-a864-4516-b038-000ebdd7acb4", "sighting--8e751d0a-6b1f-4e9f-8575-18e480719d30", "sighting--679a2704-a149-4ac6-b21e-962f492bc093", "sighting--c7d50d7b-137a-4549-944e-f63146d46c5a", "sighting--8d584f78-1962-4280-9fb0-056d10002d0f", "sighting--f19b739d-bd1c-4c78-8950-c9dc5475833b", "sighting--fca86cf6-8f78-486e-b9fe-df00601ac541", "sighting--9ead2b13-8d75-419d-a0c2-e5a65713d1ab", "sighting--c569c056-9a8c-4a95-a77a-8ab54aa6969a", "sighting--c4e612b9-0fb5-474b-89e4-a1943e2531ad", "sighting--70a2e54c-0adf-4599-a50d-b87fc705f0bb", "sighting--92a59488-9183-4ace-be51-c61e01d85a64", "sighting--b7f23c03-6024-474e-acf5-3def48a344d6", "sighting--433621f7-b66b-49e4-aa0b-c4df70ff8cf0", "sighting--c21bfb64-f029-449a-8ae4-436853218e6e", "sighting--f35478fa-2e0a-4ce1-8a6e-d764f32efc53", "sighting--d4a0adda-8107-475f-981c-17c4794f6b79", "sighting--9dc48f1f-2e44-4eaa-a6b0-7061cac047c6", "sighting--43149ca5-56a9-4368-9b24-c74b25c683f2", "sighting--1c1f687b-13f8-4611-85ea-ae69724a5391", "sighting--86d69984-7f80-4ac9-a802-d22e520475a5", "sighting--2befa3db-8a70-42dd-b26e-e3a3a641cff3", "sighting--031bb2ae-3ce8-4f83-9d84-de8c32cf23cc", "sighting--11e9f44b-29e8-4bd0-ae8b-dab6cfbce994", "sighting--a0f5b50d-d81c-4f4e-81b0-03c7149076ef", "sighting--e7373fa7-1fc3-4c1b-a3ea-7cbf1f9b5051", "sighting--499565c4-8e3b-4b8f-a1d9-6b255a1befc7", "sighting--8ce28769-c5d1-406c-b0ad-698b4d091529", "sighting--2bd0be3a-6b53-4a7d-9b61-be9891b9d9d2", "sighting--3beea1f7-b8b8-45bf-ae84-f96777f605c9", "sighting--41d01fb6-c25d-4bd4-90b2-233b9a7466f6", "sighting--6dae6841-8f68-4180-9def-28427d337a74", "sighting--3c6740f1-fdad-4b9e-bec7-206f571688b9", "sighting--c727dc18-90e6-43ae-8bfe-de9114c011f7", "sighting--0bb702a9-6d42-4b7d-ae43-db73e40347b7", "sighting--63311813-f8f7-432d-bc29-1ff7e701c316", "sighting--1182d7a4-5f29-499d-a3b1-11b4bdfcb80a", "sighting--b436d6f6-a67a-4599-8993-a771efd107ba", "sighting--a1a7ac30-e3d3-483e-8c80-db70332dd787", "sighting--d12943ec-63ea-43f0-830b-b64baf54d43a", "sighting--62542b2c-4c71-4815-842c-b950a75189ec", "sighting--4e290b0f-6f44-45a4-a3db-19812ee3ca2e", "sighting--51c2ae27-9064-4310-a670-479693d54f18", "sighting--88a891dc-1266-428f-b38c-f1a7f64f5248", "sighting--9055623e-6c95-41a6-a37a-646e2d77354d", "sighting--f4037783-e678-477f-98cd-8a585d614887", "sighting--da6470c1-d74e-4348-9f44-103c0ba72a0b", "sighting--6b0e1865-8708-4a87-8c8c-27c3c6d54e1f", "sighting--4edfc470-4d0c-416a-b7cc-72099a8a6ff8", "sighting--f8e6f589-9910-4dad-900b-21cfdebc216c", "sighting--cd31c4d5-da17-4786-be29-7443cdf7187b", "sighting--b0e7fc61-708a-4f95-9d28-fb8341cfc36c", "sighting--cd6f35dc-de7d-4212-89e4-669aa59e6b77", "sighting--72a5c7c7-d23a-499d-9053-db69c86ddeee", "sighting--61edf62c-ee59-40b0-9aad-9301335a8929", "sighting--1deaceb8-140f-45fd-991d-6a8f13e65697", "sighting--f7951c36-4cc1-4668-a6ff-175d0bbd486f", "sighting--139133ea-7f16-41b9-9ece-d2e7c602b3b7", "sighting--f4afc508-f7f3-4d9b-9455-7d0501238a28", "sighting--94b5c1ae-e7d9-49c0-90e5-28b2847e50f6", "sighting--cfb8a2d3-adab-4e54-9076-cfe58d3d4088", "sighting--85267aa0-a35d-499e-ab0e-9cb8027922d9", "sighting--f7d6c71e-5cd8-42f8-b1a0-47023864f95e", "sighting--6d2e9fe4-3241-4079-9cfe-24325e22a70f", "sighting--99aecf23-6f51-4b43-9cc8-b315be6bdae8", "sighting--0fc5d873-577e-4ca2-b0ec-feb202c56c0e", "sighting--e77a15ed-a223-4cc8-93c8-bdceb3a7028c", "sighting--41972f16-36bf-4bef-951b-35344ad6b8b1", "sighting--945639a4-0e6e-42f9-acde-568bf89ea377", "sighting--77875147-369e-49e8-851f-fe44c5d15ad3", "sighting--cfca12ea-ec40-4141-8787-2b565705a0f5", "sighting--e867bea7-90e4-4f57-bfd3-5d3668101aa2", "sighting--24d2a58e-4a13-4136-85a9-6e092c9c5b33", "sighting--c145ebc7-f1c9-4315-8fce-f5d4d5e3bc9e", "sighting--2e8f4015-b0f0-4920-96e1-9c8a68cc035e", "sighting--f3574734-5b82-4aab-a619-8a5023e4cdb4", "sighting--b534e02e-f966-4a92-b4a4-06132ce25646", "sighting--363bc3b5-50d5-43a2-8941-4698233149d2", "sighting--ee817953-6e34-4d9c-8c56-a442a71fb7c0", "sighting--dd60387e-a746-4e8e-920d-02ac012edb62", "sighting--1e304071-ff04-4987-b4b9-57ced09c5c55", "sighting--ccd9d883-186c-44b4-8608-30bd44d615ba", "sighting--52f8634e-b4dc-4f8d-bcb9-f03d06eb3f15", "sighting--4164c004-ae09-487e-a9a1-08393ba829d3", "sighting--82335942-5508-44ba-8a73-64dd477dd203", "sighting--3b6e2785-0ed9-4be3-8c7f-50f6f2783ec7", "sighting--d35d2021-6b2c-4bc4-bda2-5260a216ccb3", "sighting--5abcbf86-c552-4420-a3e7-68357f75477c", "sighting--7b6b3feb-97d0-4960-9b8f-d20abdb96779", "sighting--d045d876-397b-47b9-b786-343a6d4bc3c6", "sighting--d35bc5c6-5853-4966-bd5d-974e95c13451", "sighting--0d9334db-3b35-4ab4-9429-c51e290114a3", "sighting--0099749a-f676-418d-ad42-fa3ab9618b88", "sighting--d006a082-bff1-421c-a841-17ac68cc7825", "sighting--10c71718-9146-498c-9808-d3c736abe4c4", "sighting--e6f5c50f-fcb8-4097-82b2-13b3d5648e44", "sighting--cf90f773-34b6-473b-9bc4-2040a9dc2ae2", "sighting--d14248c9-b7d9-45c9-8f15-2d7453ce4465", "sighting--0bd49c8a-9c6a-4c31-82a6-56d1dc14b7bb", "sighting--ace2c5f4-3653-4da5-be55-7c036ac58871", "sighting--67711802-e36d-4020-9ad8-605840c9abce", "sighting--626f2112-9d11-4406-800f-9447f85841fc", "sighting--b8c713a0-602c-456c-bf85-4915389bf5c7", "sighting--b793e366-f0fd-4244-be44-54c56c3511c0", "sighting--92399d44-8471-4699-9eef-e9a2711b209c", "sighting--d07b29ab-dbe1-439f-92b7-bdc3c26e6a22", "sighting--15322111-3a4a-47e4-9658-4de90d53abbd", "sighting--51f852b0-17a4-448d-80b0-d4b7bd8a4720", "sighting--2647f2c4-d930-47ae-a34d-3f76ab2f4414", "sighting--ff67af5a-8664-47dc-a6bb-929e22c9d30c", "sighting--8681593d-3533-4202-9fb0-1cdd1710e772", "sighting--4ea4e770-58b4-447b-a708-da881aa11ef2", "sighting--006dc3a6-cb12-41d2-a6fa-e59cd7ad5130", "sighting--55a7fbb8-33fe-4a5d-97e0-c73034df25eb", "sighting--f7a19599-3c59-43b5-b176-9272a121d8ee", "sighting--6eb25086-0f66-41df-ad8c-ad9d0a6d4811", "sighting--f34a33cd-ef00-49ed-8ea2-d70bd1422916", "sighting--73af99a6-05a7-4c1e-a714-259c2712efae", "sighting--c4c1975a-3598-4ca8-8d3e-addc6a6c0af8", "sighting--374cc6b7-14b9-4752-9946-96ba6f09b9a5", "sighting--8be97244-264e-468a-b0f9-94a16ad2d7cf", "sighting--f2d716fe-7b80-4b37-93ca-a68bfce90f9b", "sighting--bf541fe4-e808-4056-b73b-5a5296246e9e", "sighting--5f6cfc75-daff-4d02-9ed3-f4222ce9d879", "sighting--42b1b7f6-e5c5-4842-92ef-a9cf93632bf5", "sighting--2300e076-f372-45b0-8c06-2947b5644ffe", "sighting--fa21dac5-2c93-4fa2-adad-7742b557d2cb", "sighting--7a7a54f5-008a-4234-8f76-b7d9152607de", "sighting--3202968c-fb49-4c12-b9a8-308fea1a1179", "sighting--a43c4690-e007-487e-bf4c-76533f0646af", "sighting--8193a576-a632-4a91-bd85-067a9a94c13c", "sighting--6a17e0fd-a141-4087-94bb-6368b596e48c", "sighting--984d94b3-bf0b-44eb-9e3a-8b17e7f07f96", "sighting--534159df-7a3f-4459-82fc-6856077609ba", "sighting--f6935506-bf2f-40a8-84d7-dd95e8933c4d", "sighting--a40983ef-a6bf-42bf-a96f-ab2b3006bc88", "sighting--96e6cf8b-e74a-495d-850c-3c1236803b22", "sighting--a0759ce1-5d5b-472c-a0dc-2f9f0f1e1f24", "sighting--7d145bef-5bd8-4138-a14c-79897a7d8ecb", "sighting--843a3ad8-80ef-46e1-9159-356b5bd0de53", "sighting--9576fcfb-be46-4bef-9de4-6401be1b7667", "sighting--e59b03a7-f155-4af9-a9c0-d1f27e3cd214", "sighting--278e1e69-4498-4e80-999e-4040c2d4c3f6", "sighting--d2688e64-c301-44dd-a039-abce0af2091d", "sighting--c53b5eeb-7981-4958-b8a8-7a31ec72c465", "sighting--3c38865c-c44e-42f6-bf29-9e6af9b7d5f3", "sighting--cbce56eb-1ae0-49a3-b184-efa7639d3d06", "sighting--69556de3-efc3-4f92-9959-059c3e61a7bc", "sighting--aab540cd-63f8-4882-8b01-f52822493a05", "sighting--10d26877-db4e-441e-b809-f7d0c12f5b10", "sighting--6da8a134-606f-45ca-82df-37ce18993372", "sighting--d056e1c7-de02-4a57-ba9d-df0b8b23ad30", "sighting--eafb392a-c479-4111-9cd8-0c524290f8a3", "sighting--a8ecdecc-8997-4bb5-bd2f-6d638a2d2ce7", "sighting--5b96d306-b7ee-4e63-849e-a02ce29be524", "sighting--ead3e1d1-5b82-4c96-a80d-edaf46a9732d", "sighting--ea5eed20-00b2-45d7-a2c8-eeaf7ad08309", "sighting--5d0a24d3-6ba1-425f-a348-7ab9fd6490ed", "sighting--48eb8a1f-ea3f-45b7-8d67-6253cf7aff92", "sighting--8633f942-ff09-4d8e-8fd5-7b93202d875f", "sighting--5257eb3c-f877-41dc-a910-9a3af89ce1e2", "sighting--6a526781-dbfb-4437-b602-7be55864c9c1", "sighting--bf83d171-4aef-414e-bc4e-967ec4f4ce44", "sighting--cee0637f-3514-43ac-96c4-733a0664b23b", "sighting--d5885794-c898-4847-ad5f-2d3c78bf6dda", "sighting--f2867725-73a0-4772-a374-b3224cdc112d", "sighting--fa9c5aca-2f2f-4313-9d7f-4f74bd381bd4", "sighting--06d57788-03d1-46bf-9ae1-c81ad1931e4a", "sighting--5fe48c1a-f91f-4de5-9ad2-b7b9c32890ae", "sighting--17bca2f3-6754-46aa-8be7-8cca154c5f3e", "sighting--01c7041a-84fa-44fa-9395-d6945d78c229", "sighting--d8ea1677-8d6c-4ac6-91f2-93fb971bc5a2", "sighting--7759539f-2950-4eac-805d-a97c26a92a8b", "sighting--f9f3ae4c-210f-407f-a292-9ad4880ca9dd", "sighting--4a5ab107-6638-4a99-b3e4-3470ba44e8cf", "sighting--c43ba6f1-2767-43c1-bfaf-5db78c225896", "sighting--9f82e4e0-7347-49a0-8c42-d7f6229e8311", "sighting--29e6c92d-f3d6-41b5-9f30-bb011f8ed425", "sighting--a310de14-14a9-46fa-b94b-79614676d32c", "sighting--b3171a3b-dd5b-4828-aa72-4e7d81c47f09", "sighting--96c41fa0-5596-4e40-ac63-8a0f3e5cf0a3", "sighting--28e7a6ec-f470-47f4-948b-c48c465dede7", "sighting--aa0806c1-bd7f-4456-8acb-d34bc9fc24b7", "sighting--cd08933b-849d-4ff9-b3d9-e4f5831288a0", "sighting--45119efe-38d9-474d-973f-4073a3d2e986", "sighting--1a5be103-b387-4287-8253-ddf03b7655ca", "sighting--be6b1f8f-2fe0-4a4b-8989-b5368246e6ba", "sighting--39c21644-27c9-47b2-8371-a0eee52c397e", "sighting--7e671146-31be-4fe1-98a5-3955fed1b469", "sighting--25e4bfd2-a5d8-4bf9-9e55-b845ebe6a2c3", "sighting--c88167eb-32d6-441f-a74c-25941673776d", "sighting--149ff914-f850-45a2-ad02-719fc663a135", "sighting--d2612eb6-aa64-4a70-9263-8947e4dfe906", "sighting--9af29eb7-4e8f-4cd8-8ad8-95f802e3f05c", "sighting--ca2856db-35b6-433d-ab02-8c6b8a154655", "sighting--4bd42062-b4a4-4e5e-ab1f-a13dee36c198", "sighting--259de729-d2c0-4726-bd78-694eb5fa3059", "sighting--3bd54649-1325-4ae2-a1f2-630f146a2a9d", "sighting--f90b4531-16bc-42dd-b06a-974fab19f5eb", "sighting--0752b313-1e5e-4572-9671-7276a9460805", "sighting--e73cf93e-c246-417c-a766-ae8102fb496f", "sighting--676bf4fe-1816-46e3-b1db-d1cfb90cc2fb", "sighting--0dfd7f70-71a0-459e-bf40-365bae92c712", "sighting--8c4b0822-f9cf-4ee8-b9e2-9a20be9848cb", "sighting--eb560f76-d22b-4ecb-844e-0f103a37a08f", "sighting--57139279-9074-4386-8dc0-5e4f91befd1a", "sighting--3fb3566d-33bc-499b-81ac-9c9d5595adf1", "sighting--f8a914e3-a3e7-4601-919f-e273eea0a2c2", "sighting--afc8bc40-f0cc-42e5-852c-12c9d47474a8", "sighting--dd7e608d-93c6-488b-89e8-2673215be7df", "sighting--0599dd7b-7ee8-4088-bb41-4c0c7df8a3c4", "sighting--05cb76f9-5aa6-439e-a18f-c3cc8b0ad647", "sighting--4cf0cfae-1cee-4735-b810-cb719c6c2cf3", "sighting--8688c83d-7563-46a3-a7f6-ac97bf373916", "sighting--86ccc731-9e5e-40d0-b3da-9cfaa6c00755", "sighting--e9721219-3054-4673-af4a-6303e6208c09", "sighting--ed9573f2-75e3-4c56-8f75-a87b6fa4795f", "sighting--821afcf7-3080-4556-a795-5858027aff64", "sighting--093fe5bc-d419-4639-910f-4c5bc14d222f", "sighting--446c544a-7726-483f-9393-48efb1c52479", "sighting--8d9b6c51-c926-4229-b07f-27db8ecbad15", "sighting--1f3efad8-5969-490e-bdef-21a22085993b", "sighting--8aaaa03c-7caf-4b46-b441-95ee8013e785", "sighting--0c872a02-8966-437e-a40c-d657ebb19a2d", "sighting--8844ee63-4f68-4d4b-a363-ec55601b61f5", "sighting--1f7120f0-069c-4925-bc66-91cca3e0138e", "sighting--17af81f7-ab44-48bc-ab8d-af0a868c5483", "sighting--c2720e37-a0bf-4436-aa60-c7643102897e", "sighting--c353b66c-334b-4d90-8435-29fdc79839d3", "sighting--6165271a-613c-4c19-8e19-ed5944de1b53", "sighting--d2d554dd-8514-4eeb-be60-1eceb135d92a", "sighting--d06c01f2-f469-47f6-a85b-25d163e2786e", "sighting--9d66ca17-535d-44a1-8ebc-00d42f99ba7e", "sighting--8a3bd745-b982-4e36-86e7-5e76552294b0", "sighting--e6079fbb-30f7-48ea-ade1-b292165f7b82", "sighting--082dfd81-7e6d-4fd3-8610-ee9b6c4cc89b", "sighting--11146b1b-3f3d-414e-8075-5b5f57931c27", "sighting--6763837e-b68a-4e7d-84da-fb573dbdb882", "sighting--5cbd472e-4c90-43d9-b26d-12c52d38fff1", "sighting--f8823782-1379-497a-a407-72bfd7f523f9", "sighting--2e3205b5-7ebd-4d5f-9388-e0df4ab74c70", "sighting--b26d4b27-b130-4b40-ac2c-29e15815dfcd", "sighting--1154f5e5-1dc4-4c7c-afb0-7b2455b4b7cb", "sighting--9874bd10-9dae-4778-9f0a-eee8cc25d20e", "sighting--db7403a9-5192-4b8f-9425-2034c75cbdbb", "sighting--0adcd5b7-2799-450f-a927-3fd11df210f7", "sighting--00d8db5c-a31d-4c6e-af4d-179c77731518", "sighting--e9cea36a-c8ae-48c5-b8bc-0947981c0e39", "sighting--52aea663-a368-459a-9e91-4f5575101dff", "sighting--5604ba79-e65b-48b9-9461-5a7ab2cc88b2", "sighting--d5a3d0a6-dd13-4354-b751-aa073380663a", "sighting--d0f4c844-f80b-4d8c-b467-964d900fb359", "sighting--563f622b-4087-4064-b4f1-b251bf157a43", "sighting--2f7a9a23-ce62-498d-9c12-f9c39f7df060", "sighting--981efd7b-578d-4f7a-8c31-529d85b8dce5", "sighting--70f058ba-30b6-41a5-82bd-bc406e3a360c", "sighting--8acdd891-7971-4910-ac57-3514f7eb41bc", "sighting--ca1d456f-7a65-4b44-86c5-553aa10a2736", "sighting--6aab6ddc-658d-4258-baa3-aa4d64c9105b", "sighting--b59794b2-2b6f-44fb-ba9e-afee014f5b24", "sighting--cf263b14-35ac-4f7f-bcfb-dd74b4f64ff7", "sighting--5e1917f2-333c-461d-a9f3-8a643e78f06f", "sighting--3de09a54-b5aa-431f-9fe6-7e851437a0e0", "sighting--1ab839c2-2adf-4bde-afb4-652e076d57b4", "sighting--2cde56b9-df54-40eb-840b-a3c96fa87b73", "sighting--b8ef9483-99a0-4fca-b31d-4806360d1e03", "sighting--70479b7f-0433-4624-8f2e-a2989714a95a", "sighting--f22c9e38-8c21-4af6-bc96-47cfd03c4e4a", "sighting--2f8065a8-b197-4cd0-9635-41bd9c55a60b", "sighting--1b6f5282-3745-4d69-b601-0e9e92db9818", "sighting--c8256d1c-936d-4555-ac22-e8e67a536850", "sighting--22351a19-a921-4965-8ad4-9b66e272f0c9", "sighting--0ff10407-ebd2-48c8-96eb-fe049b300266", "sighting--123005ec-c65c-4093-bac0-29548ce211af", "sighting--4aa331e3-20a1-44c0-a9ad-2801bbc1ddff", "sighting--cb64b5ca-e2a0-4050-b6a6-fae9d9cd8713", "sighting--df0389c6-9b99-4576-b343-da67e07480d0", "sighting--3d67556f-f794-428d-a3a2-da59316cae4f", "sighting--98f362a0-22ec-4e8c-84c0-4845bdab27a6", "sighting--00c9d54d-b47c-4371-998d-bbce278f859c", "sighting--208832eb-0967-4973-94a7-4c842ca4cdc5", "sighting--ded7912b-c0cc-4659-9afd-581bd179682e", "sighting--837ae217-fcab-4067-91cf-aeea2d63d289", "sighting--acc89c3e-56f4-4d25-ad88-3608d4d4d6ce", "sighting--65ac9259-dc27-418c-87bf-0f4a5030edac", "sighting--e8c9278e-a7fb-48c8-89e7-97d1bd2007ba", "sighting--58e4252b-88d9-4270-90e5-e75fde2d453e", "sighting--2faa2d29-84b0-426f-bb04-2638766baa6a", "sighting--0313c590-e61c-417e-a3cf-f727199ae7e9", "sighting--75b2ed62-5dd7-491e-847e-24e14e24c694", "sighting--d7055d92-8c07-4d25-9bdd-8575ca9a4ad5", "sighting--2103cc59-b8d1-4c6d-a997-54b5a1def859", "sighting--9c4d0311-edc0-4478-afeb-e05b2685aa3d", "sighting--17eb7f95-d6cb-47b5-ab48-6d983145d341", "sighting--36de7d71-33dd-4ae3-aa01-2c730b5bfaaf", "sighting--a97f5434-963c-4221-a8a0-03ac6b9491bd", "sighting--1a1cf9bd-5f06-46ad-a495-596246196d20", "sighting--e69bd356-ba1c-4712-b728-2a9c2e441f63", "sighting--d4608529-2040-44be-b05d-bd6d50204c5a", "sighting--e2101a57-e09c-463a-a352-43125e6427cc", "sighting--6faebbe6-39c8-4597-8c36-a7cf6b34182a", "sighting--08356fae-daed-4c77-ad39-1f8d0418a9c7", "sighting--5e73354a-4e2e-42a6-a6a7-6669159e1af1", "sighting--6382ebfa-4bc6-444f-b90d-ed972edce15b", "sighting--15803f46-afce-44f6-83f4-d0e955e1e4c4", "sighting--423ca74d-32ac-4269-b4f3-f16d88708211", "sighting--b03ca0a1-da8e-4d71-94e2-2d5cf7a5b748", "sighting--8ccc8582-42a6-41d6-b6fb-74bad22cb9f5", "sighting--f0cffb09-6ec7-4de4-940a-0b5ba99a6641", "sighting--840e3932-0815-4e00-8b1e-01bdebf2f020", "sighting--72798b8b-410e-4b2e-9b1a-60ee7f910ed7", "sighting--c3bcb7f2-079a-4e5c-8c00-870d41ede527", "sighting--96fbd316-6876-42de-9061-e8e9ff8bae58", "sighting--2fb3160d-32c3-4721-a6b7-f16c9dcae995", "sighting--f67ab570-6342-4965-9772-f7cac80b0635", "sighting--77d2b5c2-e649-4774-87c1-3b235db0d58a", "sighting--9da6e768-a512-4a03-be98-4cf0ee67968d", "sighting--d94a308b-0adc-4685-ba97-3184ce2649d9", "sighting--4e93096e-604c-42c3-8588-27156e8eef19", "sighting--82d0f81a-eb85-494e-a39e-fa7832c647c2", "sighting--9227c79e-d435-4e04-b98c-6c2efccdb232", "sighting--22f295b5-b213-459c-bc99-74967dbb38c7", "sighting--1bce8c8f-a390-48b0-8dca-7c21394dd1d3", "sighting--5e8ed1f0-5926-4452-9a32-fbf305a4ed9b", "sighting--3c3ba25e-c82f-4bea-805f-c50ee87b133f", "sighting--0b3ac6b1-b348-48f6-a4fe-268b1df08b1b", "sighting--3fa0e0b4-6971-4ffa-aca7-79fa14272478", "sighting--01852355-0f24-4749-b273-76a6136d883f", "sighting--9fd37093-201e-42f3-99a1-9b79135e0f1b", "sighting--120790fa-8b00-45cf-a434-54c4a10e12ea", "sighting--341fdca5-dc8d-4ddc-afe9-74e962273d09", "sighting--598513a4-23b2-4b9b-8ec6-fa4832281f44", "sighting--93ab796c-b841-44ac-bb80-f65d21faccaf", "sighting--24bae82a-4e74-4ddd-bc01-49bb103aa752", "sighting--afb4c6e3-d016-435b-adfe-a2b69fc6117c", "sighting--c0a02bdb-580c-4992-9a7e-d5f1b43c3a8b", "sighting--1436b22e-7afd-445a-836f-21397036f608", "sighting--aa8e6619-d4c7-4eb4-b953-3359f1a7f059", "sighting--c9e69449-4a5d-4fca-8efd-3c45e4ab4089", "sighting--c677390b-408b-4ecc-8fb6-f7ccb1ea85b2", "sighting--530f1d2c-df0e-45be-a4df-d0800495478e", "sighting--70a5e1b0-077b-46da-ae9b-c39aa868c7b0", "sighting--5543cdab-4584-4649-b43c-a259a784d415", "sighting--0dd6383f-b601-4435-b943-673be000c8ad", "sighting--138fe29b-d9fb-472c-a01c-43b07f65ad93", "sighting--296746f4-9906-4d76-b29c-6212ea771bf0", "sighting--4a691c93-8331-4119-bc41-949db4f88e4a", "sighting--e2bcf004-7347-41b7-a98b-45e639b97b5d", "sighting--9d7e04e7-9b1a-4f43-9cde-8af270786d42", "sighting--0a0fb21d-fe87-45aa-a785-28bd02d348cc", "sighting--3e3e1d31-c806-4492-83ce-82d82e74fb39", "sighting--95844e79-9586-4787-b3f0-02f6dba7f821", "sighting--fe69c8e6-4336-47f2-9549-970d067a111b", "sighting--78d7be5d-91dc-49ce-af20-e64afcf15ad4", "sighting--53906b2c-cc6f-489b-ac28-4dc4ac83c7d1", "sighting--b6d25d9f-66b4-435c-9d3c-0481832fa738", "sighting--75acdc1c-036c-4442-86b9-d0658d70c6a9", "sighting--44d55626-54eb-43ae-8520-a14d82bbc968", "sighting--206ce2fb-5051-4c0f-850f-784aa6ddacb3", "sighting--cd22b39e-a402-427e-9176-65f3431b2b8d", "sighting--355eae57-5042-4f43-8dc8-dcc57cb7a503", "sighting--58aab5ff-e217-4cb5-ad25-413a062d4194", "sighting--d6a4d937-2aed-437a-b341-c29c5644f85c", "sighting--4433bcf7-4188-4a0b-80a6-82095beb5d0c", "sighting--ba39b23a-cfbd-4431-87fe-b75352dcf4ae", "sighting--a2e7f44d-8d4e-4e7b-86fc-571d96654eb9", "sighting--f0431bf0-749a-449a-bd67-ab0c48b2f881", "sighting--9df997eb-787a-4c39-a62b-c0f215a72d09", "sighting--e39813fe-a102-4eb6-b4a3-70ea686bde71", "sighting--c505a24d-cc17-4bec-99ec-56874de82034", "sighting--94fd2acb-c113-40f0-9531-b0253d6fb0b6", "sighting--4213f0a8-6c00-4b02-9bbe-fec9a23e2006", "sighting--734bd239-bf0e-4579-bcee-3e07daa4b692", "sighting--c594622f-2b52-461e-a458-ef3a2800d8a0", "sighting--8c9f81aa-af31-4d6f-9e85-f180fbf3ef28", "sighting--63526c1c-5549-4ee7-8799-7b7fc3d2a3d1", "sighting--826c4d03-f424-4570-9c45-f154a7289c9e", "sighting--bd96a2ea-937a-4ab8-8d4f-0c04b0e8910e", "sighting--9f457f73-0047-443d-8533-e40b4baaa7bc", "sighting--31babac5-3a9a-4e35-9f1b-a2df25653e0b", "sighting--965fb733-6ca0-4a9b-8dce-81b73e802081", "sighting--98e7d5b5-ac36-4031-a727-d825febe5af4", "sighting--779626ea-abed-4abe-adbd-7621f4ff7bad", "sighting--6a604d96-8eaa-4c61-a34f-7d4b7c23edcb", "sighting--9d81dc57-cc36-41ee-bf6a-c63fe6532d21", "sighting--9bfd999d-faa7-4b9c-bcce-7983ff6216e3", "sighting--4cb33819-b280-4bc6-b355-aee164645561", "sighting--e82236bb-3822-4414-81a7-73935aa7cbab", "sighting--e1b669de-6485-4dd3-8bbb-e594affceeff", "sighting--5b4d1bad-761f-436e-aa2e-b04142f1b3c6", "sighting--8aa7d8b6-bdf8-46f8-a8af-4813e090d4b3", "sighting--8a0a4a3c-99ac-4d17-bc89-1b05491b72d7", "sighting--4cbe943f-ed19-4e36-8ea4-e0d0ccb12b7a", "sighting--ed3a26be-ad8e-4c1d-99de-ee494715320f", "sighting--68f51ec1-12cf-4c1a-9f21-ca735acec6ed", "sighting--4f51913b-a198-4443-9067-9abb624bbc62", "sighting--e6cfa7fe-e19d-4e94-a770-f47bdd9df3c6", "sighting--20530321-9f71-4742-8ca3-d8c8f82c99fc", "sighting--c151ca77-9394-4d1a-a491-58f4f7bec0c6", "sighting--cec0ce42-fdc1-449e-85d7-372dc54b5737", "sighting--39001a5d-9ec8-4a90-8fec-2e1ed00e71b4", "sighting--d330b465-931c-4f42-89d1-1272e8928d41", "sighting--46197c7d-6009-40d4-a4dc-ea6faddb55e0", "sighting--e13a6bac-8ef2-49bc-a2a3-8fde70a9312a", "sighting--e77f5a5e-5418-40a3-ab8e-1eb2e590cad9", "sighting--75c51f5e-632e-4717-b990-d6b45c11dc0b", "sighting--88dda9be-b389-41a0-8885-a691c069d504", "sighting--aba4b120-75c9-44df-b6f2-0abfbe9d42ed", "sighting--ed4d0c23-b71e-4fa0-8469-8727134ae9e4", "sighting--25b3e335-bd2a-4bf4-a495-e459cedf61ca", "sighting--de4e3f03-69fe-4688-bf54-8c1051c414d3", "sighting--61e5208b-4a94-4110-a417-192d353c8b6c", "sighting--449e697a-2d54-4ea7-85ad-064c32fa33a2", "sighting--877061d4-ee1b-4bc0-a458-c5ec983d38cb", "sighting--39d822f4-6de0-44c1-91dc-df39174d731e", "sighting--bb06a312-59a0-403b-a6ec-545467e08a1f", "sighting--1811fbcd-c8be-4e5a-800d-fb6cad59202a", "sighting--bfcaa88f-295b-4fd9-9c04-0fc853da6914", "sighting--c2756603-2242-497a-97ef-b3ea38cda8f2", "sighting--6c234000-e3fe-4891-97af-9ee5701f18e9", "sighting--68094aee-4076-4296-961a-20006d55d4db", "sighting--cbdc0d40-a656-4106-b899-e806e3ed2508", "sighting--6d9d268a-584a-43ec-a806-fd6a8c0bc66d", "sighting--59cb2e5f-7403-49d0-9920-32779a66e05a", "sighting--3d86a0c2-7099-48e2-9da7-acac5553953d", "sighting--5b52bb45-4144-4231-af2b-3084a44e00bf", "sighting--e1506b74-d4e3-4a73-be2b-ef940c20e7a3", "sighting--07f7463a-2359-486e-8a99-62659d103988", "sighting--fe9eaf11-ad37-43f0-a40c-d4efc744376f", "sighting--17c3218a-423b-4318-9c70-41435e49a278", "sighting--22ed3010-6d1b-4320-a5a1-35886301a155", "sighting--dff3f78b-05f1-4791-ac52-9afcb6a6db15", "sighting--1bcddae5-9c8c-48e8-9326-bd9fc0c21a48", "sighting--10fb7404-0abd-46ef-839f-31d1fb052336", "sighting--c73f7a37-47cc-4f20-a85d-50d501cd195b", "sighting--2809f35c-1b13-4ea5-83a6-4a7064e0097d", "sighting--70f31387-084d-42dc-bd34-aa60ec8bf6cc", "sighting--ce941001-bd08-4b1a-bce3-5c04c987b5f6", "sighting--4eb9f4a4-2237-442f-8a0c-8aaccef8783f", "sighting--ac9c8b41-8b51-4b6b-a443-1800c6bbef9e", "sighting--e4eed96c-6af4-4983-91cb-928c14aefb33", "sighting--5391f96e-6a5b-40a9-9522-458706ad7d9a", "sighting--83ef4543-cf8e-480d-8c8f-3a6a6c37b972", "sighting--008b1099-6b62-4d90-bad0-3b46e4148a2b", "sighting--b25c0139-c83a-4405-83c9-40c413149d4b", "sighting--6832ea07-ebea-48de-af78-dbad570d8232", "sighting--06dad02b-a747-4d8c-aeab-205010ee85f9", "sighting--1d638e55-5baf-4bbf-b684-48b0c3e3fbb8", "sighting--e90446e6-0a3c-41b0-9204-b5b8912b5ffc", "sighting--1b295624-9c55-4468-9b7e-5f3802da7826", "sighting--431bc87f-4b33-4909-873e-4fd8b90bff32", "sighting--26d1dea3-14c5-40b1-9af3-e1d8a2bb8419", "sighting--57e72671-3760-4ad4-aea3-e69f61c21358", "sighting--8bad4bcc-0242-45e5-a5ba-aa74a4527b23", "sighting--3cb6a82f-13f6-4e1f-8585-f21d52fad787", "sighting--e8b727b0-3532-4b98-8f54-4973f2d4cd1d", "sighting--aebfdaf9-2508-41b9-b1d6-87080d98f75d", "sighting--1c281beb-80d3-4b19-a8de-c880e2594ee4", "sighting--2e423219-aa46-4058-a0ca-956a960910d5", "sighting--f878168c-9763-4fc4-9ea4-0b0b98c1726d", "sighting--275b8f72-0560-4213-b37e-b04cdfd2f10c", "sighting--fe80bc5d-c90a-45b7-aebd-6b8cf3a7074d", "sighting--5eb90b50-2936-4ac7-9be3-9357ab397005", "sighting--effaf77d-02d1-4553-a9f5-9b11de9dc375", "sighting--d6437165-2172-44d1-a6b6-04ee9c5a11ca", "sighting--d4e322fd-6152-4f07-bc67-2fb628608a39", "sighting--3a455a91-54bc-4eb2-b78b-720b5d311533", "sighting--ead42c6e-3870-4b68-970d-09109be68e6c", "sighting--3319cb52-3de0-4d24-a1da-6f308ee97f50", "sighting--97f078e2-a60c-4ccf-9e89-5ef82c1338c8", "sighting--3db9e274-86a1-4309-aa6f-1131c38cc508", "sighting--6db1ae4b-6ebe-4461-bf86-f27d316db9c3", "sighting--2a97854e-7c53-4ebd-9635-90e9df6be53c", "sighting--955dc4a3-cb9e-418b-ba82-c92dcec79da4", "sighting--0913cf92-b690-4a68-bc41-f8158483f0dc", "sighting--f29d1e32-7eb3-4b05-b939-5da58ddc1f74", "sighting--30f79348-b14d-406d-9ef5-feeed9133218", "sighting--3d823abc-e5de-47c3-8da5-abed4c9ddba7", "sighting--d562cc36-bf62-4a4d-8692-c0f314ebc865", "sighting--b326c4d2-e1fa-48e6-a82e-fc3ac394aa92", "sighting--b3976c55-82bc-470c-83b2-d130bf5c8ebe", "sighting--8873c3a4-682d-491c-8bd9-51a0b478fdb3", "sighting--e84a2b1f-30da-4d9c-9314-7e8147575ee5", "sighting--776492be-dbd2-475a-af4d-0c9ac4b09d97", "sighting--85035052-9b90-43ef-99e1-774f03c3596c", "sighting--e7b40c9d-d7e9-4e0b-a1a8-5b2bb3445486", "sighting--07976081-372d-4fc0-9868-92080db924c8", "sighting--af08f43a-e225-4bf1-b5ec-1e89174d9ad5", "sighting--bc3abe38-f3cc-4ae5-9469-47ee81eb79ea", "sighting--b4591d29-640f-4293-8946-2be297d50ebc", "sighting--c186bccd-43f4-42bd-a653-3105431b414b", "sighting--351116db-fcbf-4801-85d7-5cc247cfc059", "sighting--0c01e40e-a882-4a84-96ad-e12f9520278c", "sighting--a33fc23a-cf36-453c-8d1b-8d636ad7713a", "sighting--3649a4bb-aef5-4f50-ab82-3f6c06d21d02", "sighting--d69ab473-00d7-40db-aec6-954eea383c2b", "sighting--c131297b-644f-4075-9850-2f126db17a29", "sighting--1ed81eec-4628-4def-af6e-e5a7c4e0a2cc", "sighting--845e3f67-7e06-47c1-a7f8-39b95f3d587b", "sighting--097cedbd-641f-4807-bdfa-778da1e38a56", "sighting--a430ac7e-83d7-465b-a593-be1a31ab3109", "sighting--c727f51e-2fb7-4cc0-90e7-19cac7dd8cdd", "sighting--26aa2a39-a99a-4366-a4da-58566e7a9d48", "sighting--06bd0e2e-1314-4d38-b252-ea42096569de", "sighting--48dc2795-bca0-4507-ae54-4760db2edf22", "sighting--70c95e03-e10e-47f3-af7b-1538a84ca7b1", "sighting--0801923d-5f84-4fde-9d4b-65503330f948", "sighting--3fa66bef-7413-4de5-878c-f595562a66ee", "sighting--0303177e-6b3b-4c13-b2f7-18cb5ab12082", "sighting--d3c0de32-4e5c-4b04-9f25-3cd970740ceb", "sighting--6458acd9-1f0d-4a91-822f-b00bdf5e1bd9", "sighting--f4b911a2-59c7-43a8-8a38-50ce3aae7fa1", "sighting--2247ee1d-9a95-4696-b73b-399b6c36eaf1", "sighting--a369d076-1440-4af3-b22d-5ee5511e74bf", "sighting--96e862c0-e2ad-4005-94d5-66f6e01d96fc", "sighting--33f6b4fd-65dc-4d15-8428-f8d73223cde4", "sighting--d5820754-7acb-485e-a7eb-d60da827842c", "sighting--fcbdb9c0-50c2-465e-8272-65ee9769f7fe", "sighting--41553bbf-ebbb-4db7-9593-bd033fbdd102", "sighting--8bf2a904-2db7-447d-ad44-7f03843798a0", "sighting--fe96d2e8-f90b-4bd0-87ba-7b5f9f66e318", "sighting--1c7ebcab-fd8e-4aae-b44e-d57c36bb376b", "sighting--a9d8dc0f-b14f-40ff-a936-799dc2017d36", "sighting--408ef516-aa98-4eb0-843a-431d5b8eb012", "sighting--ffb58d1f-0798-433d-8bfb-5e4616f0b29e", "sighting--314296e8-ec5d-4fef-994e-16dd99995806", "sighting--dda63091-9e72-4920-8dc3-64fbeb44035a", "sighting--f5246186-cedc-4733-8ba8-03f8a931e927", "sighting--0f7f2765-93e9-4493-b987-6c773db24348", "sighting--c64d351f-d0e1-4012-8fd0-a8d991d5590f", "sighting--405cf1a4-c699-48a8-b181-54dfee2db12f", "sighting--4d9d3e78-c6a6-42dc-9510-d740e5332b24", "sighting--e3f41bda-fb5f-48cb-ab79-948e6f43391f", "sighting--faea158d-4f58-4e89-85e4-0a7ac3d0e4a1", "sighting--157a1262-55c4-47c6-acdd-d634ae8a28b9", "sighting--bcf0fc4a-12af-460a-9356-338c824b25a8", "sighting--8892cfd1-c04b-46e5-8db8-2a18bf9e1e18", "sighting--15dd461e-34a9-4875-93c4-a337942fcd1a", "sighting--f15ff381-8c5e-411d-90d7-99f45e168ad6", "sighting--cb294e8c-aabe-4787-993e-4b402161218e", "sighting--dbb0d7f1-3f8e-4e78-b91a-632e8f2808e7", "sighting--82c18374-4ac6-42a6-a87c-20ebaf2339ca", "sighting--f4b90f60-06df-425f-a8b1-9a3ac431f044", "sighting--044d7c59-9bd6-496d-96df-fce324626b8e", "sighting--ff8e8465-370a-45b8-b137-f0550dae99d7", "sighting--4b17881b-d1e6-465d-978c-4e840616d4b7", "sighting--ad44ee6d-beb7-486d-9df9-467f425351c0", "sighting--6d7d462c-38a8-4008-951f-e16881e0893a", "sighting--74475a1e-ec85-4190-adc1-d99ae5ef1cbf", "sighting--69cf2fba-2f5e-493b-9e44-5f1d1919b642", "sighting--3a9093f1-21c4-40ab-83bd-d4f3988511c9", "sighting--40e0b3d0-95d1-4f90-a49b-1df5e47eeb74", "sighting--d4b28b88-b75d-4d33-9db5-8a99fe6eb856", "sighting--c2f3b0b1-85ba-4480-9460-f2260bc57355", "sighting--a78a8186-0a7e-40f5-9944-a8c020cd5dba", "sighting--21f7dac2-8a7c-46a3-97f9-cb5cf8543598", "sighting--2dabe2c9-f7ea-4f47-baf1-b2fa8296f222", "sighting--26524193-98dc-40a8-98de-d9e92d7ddfb9", "sighting--ae7e153b-ff35-4b67-940a-550dff90779b", "sighting--7315f4a6-c6ff-4507-af36-f587773d3c23", "sighting--52711274-2388-4b18-b61f-ce0b69eb42d3", "sighting--8350dc12-ac80-47a4-92d5-f5d830104439", "sighting--2bbbf29f-24a0-4bfe-8668-066b2e6f10af", "sighting--616b8635-b527-4013-9bf7-d8ec8af6fad7", "sighting--ee3eef8d-92c6-4ebb-ab7c-b9325ecd1af6", "sighting--22740fb0-0ad4-4e82-acf3-8f009fd55450", "sighting--25386c79-f6d4-4f73-8e3b-177a0ad9e60e", "sighting--1214e3aa-9cef-47b6-812e-1fb7124da57b", "sighting--cb2f2a58-83f5-46b5-aeb0-3d4c1a521a11", "sighting--4364971a-a4e6-4484-a54d-0dc1519fc4aa", "sighting--b04deff3-bd1a-428b-8309-93925a1dfa44", "sighting--bbc13d86-c25f-4c67-955f-a9df49c64296", "sighting--be170dc0-f59f-4f99-b0e7-63679e631f8c", "sighting--49da66b6-131b-4e9d-a05a-85fb73477bf8", "sighting--7eeea7c4-9fcb-44c2-8a12-da0efaa22700", "sighting--27dd1515-ce84-464b-b75e-132514b58dd2", "sighting--e5ef10fa-a3a0-4565-b8f1-aa86d89489f8", "sighting--f81da940-c327-418d-81c4-80d8d08a447b", "sighting--2ba87ce7-1b7f-4875-b290-2b063e81f12c", "sighting--2773f6a6-f108-437a-8d66-22c461e38ee1", "sighting--177a8cb7-00dc-421e-8143-d34f441a2a63", "sighting--f56a3830-f371-4caf-a970-3685d977a650", "sighting--376c9168-4c0e-4815-a7c9-2e5059d5ad7a", "sighting--9f1f10f9-2b7e-4d7b-b3ff-9eaddb48de93", "sighting--d9e19f37-7d44-421b-9e5b-7bc69a94d586", "sighting--15016091-f0d5-4e86-918b-19e374d427be", "sighting--f8b1f447-165a-410c-9626-9b74e3d64f38", "sighting--3f408db3-2a38-476c-8c18-eccb45745224", "sighting--2e578fa0-44a1-4557-a63b-12223d48dfae", "sighting--d6003eaa-5f7c-47c9-9e7f-0924a532d436", "sighting--a6818060-7298-4916-b7a6-e68ddb0ba3f9", "sighting--9d1c34af-56a1-4d67-9fad-c292e109a5be", "sighting--cb56744e-ce38-4d06-a357-ba0e0d463afe", "sighting--35d8d8b7-4530-4765-b897-ca03e165d895", "sighting--af462f13-2d6e-4717-bb99-4563bba51ee0", "sighting--ce8d6042-aa8b-4e5e-bffc-50b880d56b9e", "sighting--05166194-69d1-473d-a9c8-f6a0a5e12534", "sighting--7adc04a4-921c-4ff7-9f0a-e2f48de5b7a4", "sighting--f0488b04-0563-40cb-8f06-8ca84e51dc38", "sighting--0e58bbb1-82fb-46f3-8e97-90766a898945", "sighting--74828291-b828-4cbb-9062-6120365bb6b4", "sighting--90b31a88-57d9-4ba9-902a-9831d92f1eca", "sighting--c453937f-6295-4b4a-b0de-962dc16aecdd", "sighting--043ac18a-8772-4747-9231-80abae673693", "sighting--0a51d5a5-0c60-40ba-ae45-3033c944e869", "sighting--c7972a6f-1b69-4db6-a2a0-796f806fa471", "sighting--4ff753bf-06ed-4e95-92ed-2a76426b1660", "sighting--78f2d959-48b7-458b-9240-acc4e1e5d57a", "sighting--8c508cd0-4e47-4303-b227-49d24923d17e", "sighting--e624fcc0-b87e-4964-b028-ae210aaa337f", "sighting--c78afea9-9694-41dd-925a-5552c4e5e51e", "sighting--7f6010b6-432a-40e1-9a35-be0409cf5601", "sighting--aaf0795d-65bf-46f7-96ff-7369a0d1b8bf", "sighting--cb31c588-522f-48d3-aa02-310bed2da07b", "sighting--2ae4e57c-289e-4e5c-bcb1-4afc88ce77cf", "sighting--36d6e094-27c2-4ee9-a538-1e8537099571", "sighting--f87ce14b-8ddf-4fc8-9ada-2a881e857b78", "sighting--a7c674a9-3489-40d7-817a-9ece81da049b", "sighting--c08beabd-e596-4032-bf40-45420ab63c21", "sighting--38f9c142-ebba-4d91-be7d-3c7a8c616dba", "sighting--78dec324-45e1-4a09-9943-6ac6fde49650", "sighting--d3759d91-3080-424e-bb78-9b1ecfcc4abb", "sighting--0d85fb0a-d37c-49bc-81a0-93536eddf76a", "sighting--ce052b01-7f8a-4c41-b47d-d78249b358d1", "sighting--23f3ed7f-7bd8-4e73-b4b1-24e40f29fdc9", "sighting--8041e3ad-3972-478c-a548-01e6c98f4c86", "sighting--1633e8a6-91c7-4f29-9d9e-3d463e197a18", "sighting--d1608c88-7b69-4e47-bb91-f4f789583383", "sighting--3860f95d-cddf-4d37-b969-f39c4ce09dc8", "sighting--f8bea244-9fdf-4449-9087-3a2b224f0879", "sighting--49e80669-b437-4832-b36a-3589a829e33a", "sighting--ec4164b4-e2a8-48f7-8b5c-4902c97e9cae", "sighting--7c923a65-0f37-43db-8b2f-3d56b8508173", "sighting--ff7712f0-a2ea-4f5a-8017-f49b32b57438", "sighting--883a15ee-4a32-4511-84e2-19f0ef2076a9", "sighting--32af8149-f7b7-4d2e-8fbd-9461fd84cedd", "sighting--7fba9fcd-3c71-470e-ac4e-c253dd620685", "sighting--e35a91ca-302e-41ee-9190-be7df9986b39", "sighting--c2b000a5-c32a-49d1-986f-88ef163c4260", "sighting--451da973-9216-4b3d-8acc-d8fd4c0e44fe", "sighting--1fd0a1ae-fe88-430f-a439-d92541ffc4b8", "sighting--d316b77e-47b1-49cc-8f1a-ba933349e9f3", "sighting--449a96d0-9d40-415b-b15b-18484a603653", "sighting--1a291173-6d61-474c-b0e8-e2e5391f6bab", "sighting--24809248-2047-4727-a10a-3b7a1f1e6a43", "sighting--f1ca7e3d-6eb4-417a-888a-55836a1cb116", "sighting--cef4dcc9-417c-46de-bfc1-ccf6b1ab7643", "sighting--31498d99-3147-4176-9e2d-f0d368f9a56b", "sighting--cbaf7b5d-0d9d-4e4f-a083-4c00892d3036", "sighting--fbd40732-8e84-4d8c-a9c8-3a924407a2d0", "sighting--83edc920-8d6b-4056-a522-db41cda4a4ea", "sighting--1c3e09a4-018e-4109-a6de-9aceb0171a82", "sighting--e5cd6d75-4005-4769-9a1a-63b9b103cc16", "sighting--c7d6bb6e-3b1a-434b-a660-0c757ee81e0d", "sighting--0e7bf3d5-c98a-487f-8401-6ef332be733f", "sighting--f55c5265-761f-4438-9433-8d82a92ac48c", "sighting--b1b97542-bbcf-4cd8-b5f1-d488cb45bf86", "sighting--961904b6-dc2f-4471-869e-5fd64542bfce", "sighting--a4f35f56-5263-4cfc-83cd-93d73f619834", "sighting--f3ad08ef-0a2d-4deb-b6f0-cd4fc4039e22", "sighting--bf09fee3-f773-47c4-8dd2-32f97c38163c", "sighting--976e921e-3201-41ad-b271-38ba846b487e", "sighting--94cbbb3e-3a95-4ad0-8454-58e0fa9754f6", "sighting--04a8241a-5d63-4905-af21-01dbe10e0622", "sighting--3e0e096f-bac8-47f8-a963-8990cb8087aa", "sighting--2b57872a-6a10-4d77-877f-201a41c1782e", "sighting--d9ba6f57-9299-4157-9940-4dc02a408636", "sighting--915effc0-9f83-4342-85cc-194b01514ff0", "sighting--c13fcdf0-2891-46c6-ad45-ce01c1fb39f1", "sighting--64075480-4d44-4bfb-952b-a0ce06dad681", "sighting--e103ac37-7523-4d22-9881-e3de1a139536", "sighting--a25e6a59-3bf4-4e47-a2f5-9ee28ea44df7", "sighting--47644158-a693-49eb-888e-f48977639649", "sighting--7724399a-cfba-4d6d-b0a5-d5d7962da62e", "sighting--0507989a-ef04-43ae-8e84-6de077059cf9", "sighting--5b7d181e-c490-4133-93a1-0c1ca28769ab", "sighting--a0495908-80aa-4907-afaf-458a47a97901", "sighting--3466bad9-a781-46f5-8f87-97c99292ebda", "sighting--d6b75a6c-7718-459e-a919-398332c05096", "sighting--f48edfad-684f-44f3-9ecb-b741c7904a99", "sighting--935e2e15-f267-4203-b000-1e7c8b00de07", "sighting--99b54734-e348-43db-83f2-6c9ee45e3a37", "sighting--0a2a1224-f43b-46af-acf2-a2433d2bae50", "sighting--81f8f327-5283-44fa-991e-793baac227a2", "sighting--21b67e0c-42c3-4141-a782-2f9f8901a240", "sighting--43191e92-36d5-4cbc-8ad8-01360ac39b48", "sighting--ebc50e9e-0687-419a-8d80-aa39674f3d43", "sighting--be965b7f-19d9-47d8-9a44-99ea89ca8b09", "sighting--583c1ff1-37e2-49fb-a2ce-bc090d568bbc", "sighting--37005806-afed-4655-92f8-295a874e9295", "sighting--d4f3b852-3a86-4603-886d-218ee9a4d9e7", "sighting--7d02a85f-9573-4125-9513-da147a2afa7a", "sighting--80ec091f-a5bd-4e66-aa9f-a88b6f315770", "sighting--47f19d8c-a8c8-46fd-9833-071c4eb2d869", "sighting--e80c6215-94ea-4130-b7f1-e090702c185b", "sighting--e3f8aa5f-ff1c-4548-bda7-2787b1d375c5", "sighting--9b824991-9850-4a14-9487-faaae91c1c36", "sighting--1735af10-c3ec-4540-a16a-87bb72d6f760", "sighting--0211cdfa-23bd-4d95-b9c7-1bfae797b61d", "sighting--8c59ebd7-62a6-495b-ae55-b51862360f79", "sighting--d4559c49-5bb0-455e-b42b-a5442941fbea", "sighting--8ac3a088-1242-4a3a-a49a-2eb2dbff9771", "sighting--7f4332c3-4df7-446f-b1d1-0698ebef7d2b", "sighting--9038f83f-e9a2-4901-8aba-bb2cf4fa472b", "sighting--9ee050c7-7ab9-4d61-83eb-d75c8aa30a54", "sighting--34145294-5d37-4ac0-9acf-d368847b6fa6", "sighting--37848745-03bd-4b46-9be2-66ba8ad9007d", "sighting--e32749b9-d38f-4e88-9e17-4685e81a8b05", "sighting--ce424df0-0f35-4f22-bf09-121ff35d148a", "sighting--41e42533-e47d-43ba-899a-2e7db1ea1100", "sighting--8fa3e17f-5dec-4ef8-a098-441048096fe1", "sighting--c6f0be31-0025-49cb-a5f7-564f493beb37", "sighting--b09c76e2-33d7-4e89-9b9e-a0760abdd4ee", "sighting--c779497e-764a-4db6-9034-773760db08fb", "sighting--04c79e0a-127a-458d-afdf-55049ba8cf65", "sighting--1c687470-c8d9-4d6c-a4af-15a47e26bf99", "sighting--d230d239-0e0d-4e56-9fa7-14b0f8da0c54", "sighting--848db5a1-e068-4fb7-9120-23c05c5de3b1", "sighting--dc3b1565-8498-4fe8-bb9c-b499f1241ebd", "sighting--5cf7ea3e-a3c5-4abd-929a-43cfa5e27b84", "sighting--e52fd67d-a915-4803-acb2-b5f153667a6e", "sighting--bce65c51-33b6-4ff9-9fc3-0038641f5a6e", "sighting--1881f943-0ff4-4fe8-8aa7-0624f47eaff3", "sighting--90d87a0f-bf6b-41de-9290-401f5971b221", "sighting--159e5556-e8fd-453a-8665-5e3bedcc7cd3", "sighting--6fbe6eb8-602c-4a41-8238-f6f73d4c2177", "sighting--514c8681-6f8b-4cdf-ad93-8223cdd06862", "sighting--9793d6ec-8830-4aad-88a6-4a20b42dcef8", "sighting--b344f7cd-6742-41d1-8d5b-782b0848cfa6", "sighting--9141b5c8-37cc-4c4c-aa0f-f24c8a94d81d", "sighting--40207a4b-e175-4c78-bb82-4b664830e99a", "sighting--4c321294-21b6-4e1a-9fbc-ac2c22ee29e9", "sighting--8012ab20-e342-4dfa-adfd-0d324802c215", "sighting--f2470823-9548-4f31-a0ef-da67f3223eb5", "sighting--d13bd9ce-54e0-4b74-8bfe-7395bc446a04", "sighting--0a037b7e-8428-4778-9550-54fa56a27e29", "sighting--4f0da615-455a-4586-ac7d-cd0c69e60f6d", "sighting--93060421-0842-4986-823d-fe4609a0edb2", "sighting--6a681643-be71-46a2-8c91-b37013f11dea", "sighting--0392f528-b316-44bf-adb7-26ecfa7ceb45", "sighting--8bc0f816-43d8-4cce-89b8-7d4fb740117c", "sighting--a2f4828e-e5b3-44a5-8cf2-9c6f2223af2f", "sighting--3ee49427-022c-4192-b9bf-c1d47bf51736", "sighting--076b11b0-1b47-4429-b3e4-f12a04bf9d09", "sighting--02360fcc-7bdf-457b-823b-e8d86f4d2506", "sighting--a82557c7-9898-4c2d-b01d-e77d24662b48", "sighting--f55aa580-eedc-401c-a7d2-fb3918417757", "sighting--0c327802-eb17-45c6-b2c0-c889ecae9fa9", "sighting--73dcbaae-5eaf-43ff-8ac7-17ecea3ecb03", "sighting--0a4ea607-cd95-4006-8f35-51a9604a0b4d", "sighting--29cd8cf7-0a26-4af5-a0f7-f4c63f195bdd", "sighting--535a48f7-c555-4167-8930-268d847b6c3f", "sighting--e7718cf5-9088-419b-9b62-8a79c2c1f794", "sighting--34529e5a-c18b-4df8-b954-2fd583caba55", "sighting--d960d306-2605-4a6d-b80c-44a5d37caf72", "sighting--a79101f4-3258-4900-b42c-fc264e650674", "sighting--028208c6-6bc1-449f-838e-e8a7b71ea19f", "sighting--937bebc0-509b-44ed-beac-d7b5dc6f3ad3", "sighting--bc2fe475-ed14-4009-8581-705df086bb60", "sighting--e870b795-1e8f-465e-b4c4-d77d81b88d89", "sighting--432ce9ef-d4ae-4db0-b127-f7c3b094e6ad", "sighting--f38b88be-c75d-4028-9e6c-5c583929947b", "sighting--cefe3702-d5fd-4516-a52d-948f350e6493", "sighting--8ecb4722-5558-4990-8779-e866afb8c7fa", "sighting--ffc364e9-2131-4028-894c-6a115b2c63d6", "sighting--d2e2ab0d-93ec-442f-9ca2-3f583c923f7e", "sighting--3be4e199-6843-411c-9e73-5618a172a5da", "sighting--7e39afab-6b8a-48d8-b4a3-98a4d5a159bf", "sighting--e737bbda-0764-4cc1-9b08-c84e27e54728", "sighting--9f2b8f6b-fcd6-4725-8870-db49821f2872", "sighting--156caff1-9049-410d-a3b2-71b741735bdc", "sighting--6a8302f4-d37e-4065-b595-ba82689d4dd8", "sighting--1d841b34-b734-464e-80a1-9ca868f4cac3", "sighting--784a955a-98b6-4833-a247-c9bff879499b", "sighting--4ace9b23-84ad-4d6c-ad58-0f6e9316cb7b", "sighting--b0cb068b-03ed-4c62-ab0a-099a5b59638d", "sighting--45000857-a747-4cd9-89d9-88fdb6254b88", "sighting--ee0357ae-2c71-4d97-8cf7-474368ab0062", "sighting--80a4d0dc-d8d1-4941-9dec-21084082342c", "sighting--0ec00dfe-ef45-4219-964e-5d9cbb64dbf7", "sighting--6f98abbb-adae-4d6c-b019-bb48864d45ac", "sighting--e1861baf-0262-40d4-9854-183ec9861ed8", "sighting--4f84b106-28c7-4b7d-b977-d2555e3008c4", "sighting--b6843460-ac19-48ab-a885-19d963dfed7a", "sighting--27d975ea-978f-4dc7-b59d-8b1b589c20f6", "sighting--fab7fc9d-3901-41b5-9a79-6e6b2de7e71c", "sighting--9bb64b4c-b321-4771-a63b-2dd1eabfe663", "sighting--902809e4-ac94-4773-971d-fd1d757d6a8b", "sighting--02ca3a3e-aa4d-4803-b0ca-678aa64e6bda", "sighting--af7ba0cd-de4f-45dc-8a48-0cd28c009bac", "sighting--d74e8c0b-9cc1-4b71-9eb4-a0936db6d3ac", "sighting--4230284f-4aa5-4bf7-85d5-3b7165a3a95f", "sighting--6035f000-092d-40c7-9814-fa6c80de5d36", "sighting--b9595c06-d92c-472d-aaff-bdfa6a12f10e", "sighting--2cf41a21-a1f9-4f59-b9f6-a89c8169f460", "sighting--2c31ef56-a123-4216-ab16-78bd6058ec09", "sighting--53274476-2423-41e2-8d51-5baa983d19a4", "sighting--8bb891fe-1ea0-4fc7-acae-9ee1db65636a", "sighting--fcbc1dd6-ba38-4b76-b292-dbb7c4e602d2", "sighting--746b8a78-f9fd-4275-adce-16018e57af59", "sighting--3768ac71-4efc-42b6-b801-f3c3cfd06dd2", "sighting--84659cd3-3fa8-433f-867e-9049c4cd1884", "sighting--c2192130-48d3-4592-8be9-743fffdb3f4e", "sighting--6203a316-b514-49f1-907b-1965872807b5", "sighting--7cddeb57-1816-4575-8e7a-fb92fbd41d49", "sighting--3ccb5c55-322c-49bf-9512-1a18ea50bfe6", "sighting--aeb3c68f-f200-40ee-ab1e-aad702b8feee", "sighting--aaf5375e-aa14-4fdc-b6fa-4a6643eb8957", "sighting--21163893-7e4f-4960-b376-9e9ce3478663", "sighting--4c054441-cfb1-47cb-95f3-c0ba9f12b7f8", "sighting--f13a4886-f43b-4de3-bab9-7a10062ba257", "sighting--5a63fbb3-7c1a-4f65-a747-64d688bf3803", "sighting--1ae6c502-398d-496c-bad7-f70eee3c80e2", "sighting--ea4a13b8-c92d-4979-b083-f51c12a0e02e", "sighting--511837a1-35c9-4b07-b4b7-1bc12c4630f0", "sighting--46c373f3-8666-49cd-992b-4aca767070c2", "sighting--38f46121-5797-4da9-b8c6-4c592c43b714", "sighting--1c1bd9ec-311d-4c93-a4c3-cfc554a12140", "sighting--4f757ae2-ea11-47a3-810a-ceb930a9240c", "sighting--b7de96c5-a47c-491b-ae75-6ef451025faf", "sighting--38be24df-ca53-4f79-b168-a36e43c082a5", "sighting--f1d25caf-bcd0-49e1-8ad9-9044114dfd99", "sighting--4e1034e3-963c-47bd-942e-c6456e398132", "sighting--8d1f9a14-9226-41f0-ad74-0f72d7c5bf88", "sighting--bb1ad94b-0efb-4bee-9c3a-35bfdb2c6033", "sighting--1754ec77-9de0-41b3-9bdd-360599fa42d5", "sighting--1c234072-766c-4bdc-b718-8d10067d85df", "sighting--1bcdc399-d40b-4430-a7e4-98464efd2915", "sighting--93228d0f-bade-465e-a97d-96aa899c4a2c", "sighting--0f8eeca1-c7dd-43b5-aa90-480b9418bee9", "sighting--acab5309-3e39-43b4-b274-830170633da2", "sighting--0b3d2a16-1585-4ea8-89d1-70d162bd1696", "sighting--c00b080f-1b6c-4472-a6d3-60ee3acc8d77", "sighting--f8607e40-c8ea-4191-af6b-f6ad651c5adb", "sighting--4e950d6d-ea33-4ece-91e5-66d48df0b94d", "sighting--c891a07a-d567-4a4e-9c47-cc77fa5c130e", "sighting--6735b586-495f-40fc-9bd9-7e33386cdc17", "sighting--b18ee129-c3cb-4d8b-8fd2-1c9526ead6bf", "sighting--1a1fe377-2caa-44d4-a7d2-d31ca17cc842", "sighting--e2588eb2-f19e-45d8-b2ad-794e7ae1ef2f", "sighting--177a5f0c-f8e5-44fd-8e0e-f0883dc801d3", "sighting--f89eef20-2b97-4608-99bb-4f52d8cc938d", "sighting--6ff6359c-bc8b-4e7c-8c53-e9b658a1d246", "sighting--50303dc4-299c-47a4-bc38-09162d53a98e", "sighting--b53ef8e3-fd8a-40b8-b48a-ea50c012583d", "sighting--b4d01d3c-17fc-45aa-a1d8-efd7c61a4617", "sighting--fc975e96-421d-42d0-a0f4-fd348a6a26b7", "sighting--995d3f6d-f322-4c8c-9fd9-57506dcc8d22", "sighting--0c717505-87b8-4408-9cfe-045e683ade91", "sighting--237beab0-b3e5-4c42-bfc1-520058d57a48", "sighting--b2f16744-244e-4f1b-b1b9-5f578d171d1e", "sighting--fbb52cb1-a739-4e43-918e-d49785741316", "sighting--bd349984-3174-4f60-aea0-456a72c038b9", "sighting--03ca06fd-f22c-400f-ac0c-7c2baf3cec63", "sighting--de0b0a2d-18eb-4d49-9b8f-2dbde0dddc9c", "sighting--1ae86e21-7d88-4d42-b24d-63abce023634", "sighting--ea410830-6be7-4c40-9b74-05bc112194ab", "sighting--857b8747-8d52-4668-8cd7-0ac25154d9f1", "sighting--d0225f8a-d54e-4d88-82ae-4b46e370450a", "sighting--683ec0d1-af0c-458f-a5c0-38caa7fb0f07", "sighting--a15a7ccb-b2df-4f27-b616-83679734c4b9", "sighting--11bb8eca-d14b-400c-a8d1-b3b2ce544b24", "sighting--734f7c02-8a47-4942-bc46-c8b2bc21cb73", "sighting--079570a4-0336-4da0-8ea6-623dbbb5e416", "sighting--673ad323-778f-417d-8044-c23ae2a6d339", "sighting--355face6-5378-4261-82f1-468b8a5543b1", "sighting--1313504e-1666-40f8-b66f-352111155e78", "sighting--a7956630-f2ed-4848-bb36-d6023de31f98", "sighting--85202888-3f42-44e8-bea6-92d7538566a8", "sighting--55c2cc02-91fa-4f48-ac68-21726ca24a90", "sighting--1ac65725-0d15-4852-a904-9575b62bac7e", "sighting--bcb634af-5e82-4a4e-8cf5-f938005abf5a", "sighting--20f5a76b-5634-4bc4-9de1-66cd32d8220f", "sighting--19822254-762e-4caa-89a2-fcf7ea4e1708", "sighting--bbf1f656-a36d-4cd9-82a3-3cacb91f16cf", "sighting--437a91bf-31fc-40f0-b057-710f37f3d325", "sighting--2f1d93a1-cf1e-4ccc-b350-913d25432b76", "sighting--bebf1be5-1921-4e6b-ae44-6ff2c2c2b1cf", "sighting--7e41cbce-19ca-4b1d-ad30-fb7877f02a2c", "sighting--ce7d884a-c725-44c6-8ae2-b90b91daa0b4", "sighting--51fa4a9f-25e2-4037-8406-f6dcbb4f1a4f", "sighting--f8222d18-5174-4685-b714-ebed53000e04", "sighting--4193a698-0c56-41ea-b28c-c8f2b62ce0c1", "sighting--d971c5f8-5020-48f4-9cb9-761d8da690d3", "sighting--9c56dc0d-7a13-4422-b0b6-c9d7370af323", "sighting--726c0c5e-66cc-4c29-a944-80d5c8b412f1", "sighting--7d4ee7fd-1c95-4fea-b117-fe23935cfa20", "sighting--6f1b90ae-4802-4ddf-ba05-a08ad514495e", "sighting--50b6da41-03cc-425f-9ffb-292bed49d5c4", "sighting--2dd70caf-472c-4259-9901-8fcbb70f73b8", "sighting--857a8ace-9138-471e-913b-e067e79393b2", "sighting--ff157a73-cd72-4647-a7b7-6338190f7ef9", "sighting--9dc0706b-7f47-46d8-8c18-722df90243ef", "sighting--fb52c7b1-c109-419b-84a2-b4736a2a4149", "sighting--08b4da73-7213-49c8-8642-74e73dbd1fea", "sighting--c60bc0db-d9b4-46ec-a2c4-141a943b6cdf", "sighting--aea16033-c2cb-4985-9ece-cff1b0f0b805", "sighting--a0c5d89d-1230-4450-b630-8b43f05730d6", "sighting--67e0f55e-af4a-4d01-871d-370e8ab93d2b", "sighting--55578590-60a2-43ec-ad5e-30d7c888b164", "sighting--a16337a7-e907-4f3d-9879-ad34844a2d71", "sighting--47b45aba-e4d2-4b0c-961f-66999abb62b4", "sighting--ead08cd5-30bf-4da6-9478-a7b845726403", "sighting--395c0020-a6d9-4ae1-8dd6-ea0f8ceee698", "sighting--ba6d65ea-c14c-4f70-84d6-63c1efaa20b1", "sighting--add40c4f-a753-4ef4-99e9-4d780449b1e2", "sighting--e1b68919-9a4f-4bc9-a747-0a8b5726dd30", "sighting--ca37d818-45f2-43c1-b04b-2bae961609d2", "sighting--54b230ad-b29d-46d5-b9ed-e2d9a6bf8e9f", "sighting--f5f43638-a2db-4287-9ae6-2d42a41b2017", "sighting--f8f82b74-1def-49e1-84af-b4ead6fd4fd5", "sighting--96ac1355-68c9-4e4b-a2ab-04121a291234", "sighting--81dccb32-a3d1-4c46-b701-c8a67017fafd", "sighting--82d7faab-493d-41db-8baf-1dfa892090b6", "sighting--d80864f0-b57c-4ba7-95e4-e0deb736e48f", "sighting--1718d7d1-a589-4536-9a5e-4d3812b16e59", "sighting--92ddead3-7fd6-457e-b0a9-bd1a9072d531", "sighting--790566c9-f7ee-4308-b125-f1c613b5b135", "sighting--f441eed0-e414-47b8-820d-3edfc19fe374", "sighting--0f7a8961-1bff-41a0-bea0-338644c3fd21", "sighting--03e84df6-66d9-4ea0-b603-a85acfa84982", "sighting--2bfc20bc-063d-4030-8721-e022da0b541b", "sighting--5dff75f8-4329-40c7-a1f2-aeef11ab35e0", "sighting--3887e82e-6ef8-45d9-a3ed-09adf6485277", "sighting--70e7f6f4-c3c9-4c5f-a24c-f0144267fdab", "sighting--c44b1966-39f4-4e00-b2ee-aa29e626c0cb", "sighting--c9a35ae1-0306-407b-9a35-b2bd202bb36c", "sighting--2b440a3b-1067-4185-9235-c7395adba877", "sighting--f1cc9244-68d9-4eae-875c-e5e02a4f7487", "sighting--be8fddb1-a7aa-463c-87f6-ae96b7801aed", "sighting--e1b34f82-0e86-4124-84b3-68fad28bd408", "sighting--a194de03-72b6-486d-9782-af34e2d604df", "sighting--dc2eb6ff-0d49-4d21-b0cf-e5df2f6ea2ea", "sighting--f1d1040e-5056-4f83-bca1-01ae51a1a80f", "sighting--988f403f-ef24-4f0b-ba9c-1eca91921c46", "sighting--811cf509-3d4a-4ff4-9258-08a82d279ab7", "sighting--55029b75-309c-4d01-a245-6e5ed742ce67", "sighting--a325c860-c41b-439b-b7cd-6b9e21765fdd", "sighting--0a81ca0c-82bb-4e54-9031-b10052f8bc8c", "sighting--d5eda0db-bb17-49b5-8c6e-a4eaab811ee6", "sighting--9588638d-04f6-4a15-b366-cc11325f745a", "sighting--4c156474-e675-4502-91aa-745acef02fd3", "sighting--4ee00988-2431-44ad-944b-4f6eef14cdd9", "sighting--a32ac181-519e-47a1-9698-d6f6cd7fbf4c", "sighting--47119dc4-3bd2-4494-a0d2-acca6471e2e7", "sighting--fd09787a-8f77-45eb-a3b9-a908736f5870", "sighting--918894e8-a2ca-47a0-a93e-fec4964c209e", "sighting--f5b3d1fc-631a-4b28-a930-f38dea07c429", "sighting--53d13094-a2ff-481f-a065-7c2fd8a04529", "sighting--d77ee33e-ba32-4ea4-927a-bd6ddad5875c", "sighting--2234f36a-593d-4ae3-9ab4-cf9670abf15c", "sighting--6b734129-b2a4-42ec-8ee9-0e98f2c8e617", "sighting--a3bcf532-f293-4dbb-a061-d563bb8bb590", "sighting--057ced06-37d5-4e88-95b9-0951e3290698", "sighting--f5eb02d7-c407-42a6-af35-ebaf7c0748c8", "sighting--746df95e-28c3-4104-a773-0e6166941d91", "sighting--a180885d-2ef2-4bf8-8e99-bea8866c4231", "sighting--35ea2255-f3ae-465a-91d4-465e0ea65f06", "sighting--75113c5d-66aa-4e6a-9c72-291e0b9bac3e", "sighting--2d0f4bf7-ee13-482d-9d21-dcc518451fba", "sighting--cfaba23d-ca43-493f-b0a3-1f7d49f2750b", "sighting--06bd523a-db72-4766-9288-0a0a4885f7fd", "sighting--3ec54439-1879-410f-b720-14c1dc3cda32", "sighting--252084a5-f095-4aad-b1cd-9fdd4980d1cd", "sighting--61e5d51f-de7c-4897-a877-c278d51eae33", "sighting--1cb62bb2-c418-4018-b4ac-21926936d474", "sighting--7ed6d40f-f8db-4642-8c44-e20adfd9e098", "sighting--2c6b5a99-de84-4af3-bbe5-0141bf9e7dbd", "sighting--7a44d043-7f57-45c3-ba81-f97b97496252", "sighting--38c8f4b0-55e3-4704-8928-975f61fcea21", "sighting--6680a81a-95cf-4055-a71f-4d78e25dd105", "sighting--0c9d804a-12ac-4bf6-aedb-90da734e4a4a", "sighting--cde735ee-ecd5-4510-a4ac-79f6943d0ae9", "sighting--de502e58-eb79-440e-bead-7036a81e3659", "sighting--d668bafe-a0c2-415e-a1af-128570eb8dbd", "sighting--c81fb638-7f78-4852-b587-f4e0a4940747", "sighting--54b2bd83-6bf0-426d-8652-f644075535c0", "sighting--e510be9a-fc23-4ba9-89a9-3ddeef34376b", "sighting--984c5c30-9bb9-4f32-bdd2-f4c99c8a602e", "sighting--e04ef3aa-f3c5-4b9d-bf3f-0eb06e6a3c72", "sighting--d1a1bbe4-a41e-4f2a-98d2-91d47bc383e9", "sighting--d619fc0e-29cb-4e0c-8961-e7e197fff553", "sighting--14ef5188-cb0d-42c6-be59-253ac5c0a12e", "sighting--19316c7c-b0e6-4eaa-926d-e1f33b94d44b", "sighting--5a1b7ae5-329e-4bca-891e-d4a45a84b794", "sighting--bbeb11fe-267e-4eaf-a5b6-2183448255cf", "sighting--9255ff35-75d1-453f-ae67-1b11b90728d1", "sighting--3e0b6c16-938f-476e-979d-9473a589706d", "sighting--279657e6-a00f-444c-8325-7e98f31b51fb", "sighting--440e196d-f78a-4b90-b985-4c9ea392b84b", "sighting--4255ba70-1208-48a2-a6b7-0191b2859021", "sighting--50823abf-08a3-4d94-8885-aab09214bc69", "sighting--cce4725f-629f-4156-827b-e966c59a3dee", "sighting--daa31319-d637-4307-98d3-445c46593331", "sighting--1598ef21-6634-4d82-bc39-ce48ceddb422", "sighting--7dde5947-5219-4557-ab91-8fd36f3e65d2", "sighting--1cebf5aa-cb6f-4730-a4e7-a833cdf5c815", "sighting--76f29ffe-eba6-472c-aa4a-dae458699174", "sighting--bc16fa67-6c08-4493-83ba-288237d0c0fb", "sighting--5718775e-daac-4a30-b61d-b551885c01e3", "sighting--80e31267-f80c-4ae8-858c-225f1fbfc455", "sighting--08c2029c-1fcf-43d6-a0ac-68e7e8099497", "sighting--307ab396-59db-40bf-8959-a9dbadec5c60", "sighting--7e72ccad-8c3a-4566-887c-f04db47b139f", "sighting--4a0e28bd-2d1c-46f4-b9c1-b4ab6338fd9c", "sighting--c2ea32da-873c-40c4-b79c-5e0ec4930c3e", "sighting--868b878f-5813-4033-9959-01a5bba4bf95", "sighting--e40d2a60-de92-4f6a-b16e-46eeec3159ea", "sighting--958e5536-de29-4d84-b639-9d58e0fe8771", "sighting--0c63067e-db30-428c-a72d-044dc6bbd214", "sighting--75ee1179-bc59-4aa6-85af-92e89bf51461", "sighting--4e3ea115-4f7c-4b1b-b1a5-93e8845d4fd8", "sighting--5d971164-9387-4f1f-9f29-3c9832ad37eb", "sighting--d087a8cb-e0a0-407a-8100-96abecf07d8f", "sighting--e3cf11ca-cb50-4a2e-9530-c5f371ca86d0", "sighting--36f75f75-5104-41e6-8133-0c1e03a66bf6", "sighting--29e8d27d-3c00-41fe-8ead-c22f23e88b1a", "sighting--ecab32ed-07a7-49c6-a0e4-0be20efc2148", "sighting--cdc3b5f2-3733-40ba-a235-300ed314e4f1", "sighting--f455b3d2-f08b-484a-937b-d20db63dd445", "sighting--763c363b-7d8e-4e1a-88ff-03f5b72da616", "sighting--8a748212-a863-4e60-befd-777ef4cc6b44", "sighting--54309060-8bdb-4567-98ff-6fc4508acd3f", "sighting--f907bbca-8dd5-4b2b-956f-f5ac071a4d9e", "sighting--f720a47b-3f0e-49d3-abaf-92f1de5d443d", "sighting--21a4f23f-91bd-48b6-a89f-1f8295252e2f", "sighting--ec01a6b2-c806-4a87-bef9-b2859327866e", "sighting--9ca77d18-bfcc-4bba-9b70-3e963cb3eeff", "sighting--745ef7e7-d5dc-483b-a96d-69f3683ec618", "sighting--2336003a-dc27-4928-b962-ae22e8a2e9a1", "sighting--59ad2693-3a84-4741-88e7-d049562b0e53", "sighting--d1632261-f01e-4908-8435-b974881f2679", "sighting--14b88e20-63fb-4dd4-bc94-6d9a9b501fd1", "sighting--670064a0-fff8-443d-9d42-1976f5847ee0", "sighting--458a55f0-a9ce-4721-8dca-0a20da7a1c52", "sighting--2f84431f-f74f-4719-9369-13407210c200", "sighting--bd97a13b-7f2d-42a2-a8f5-dee42f129c59", "sighting--1a4fb02a-8d48-49bf-a4c2-9c181bcdaade", "sighting--8dbefbe7-ed68-44dd-8b2f-018b00e98b71", "sighting--485e4128-3b27-45be-a673-4cdaeef85f80", "sighting--bb40d05c-1867-44bf-beab-f1bb165d5d45", "sighting--f26c8426-22e0-4d6c-88ae-df6105586da5", "sighting--393d9e7f-627c-4e83-a104-da1b3d6bd890", "sighting--3a7c12d7-361c-4709-ba12-e9db6ab5cd73", "sighting--14367289-3ef8-484e-a460-f1787cd1e132", "sighting--2bea3ec2-5201-48bb-8526-a3284a0fe51f", "sighting--c9c2aed4-1b68-4594-b185-73277108e5fb", "sighting--22445e7d-5ec7-45f0-8996-8325df8363db", "sighting--9aeaf610-93e8-4fb9-8b81-edca25a6e657", "sighting--8b2dea19-ec23-46a1-805d-f1e85b0360c5", "sighting--7d3355eb-0db7-46b3-b9cb-46bcc3e2024d", "sighting--2872ae08-d1eb-4437-8256-31d6b886498b", "sighting--f07cf50d-4ef4-4193-b349-d6e0cff22afe", "sighting--0117f8d7-b743-478a-ba70-92eb7c5eb39a", "sighting--1b461d32-3ac5-48ec-9951-3d2aeced9ee4", "sighting--f4e47d6a-6231-4b61-85d1-d847b8fd9be7", "sighting--3e2f3df2-0f01-49e0-ac4c-33775726d65a", "sighting--d763d1ca-29bb-40db-8274-7a5415d8f98d", "sighting--d829e130-dc44-476c-ad92-e728cac3e95b", "sighting--9d585394-1b21-4b73-96a0-5b27d8e2ca7c", "sighting--feb64dfa-cac9-44ee-b819-c383eacc4abc", "sighting--fc94bf07-393a-4625-ae04-2f692aff3458", "sighting--14cc8c04-a7c8-4516-b6ee-b0ebade49bc4", "sighting--69de8f23-b775-4a5a-8d8d-e6998f78d45e", "sighting--88aae261-1209-479f-a5f6-2449e22ac902", "sighting--b1cc9393-e5a3-4669-b320-c5f2be206f2e", "sighting--b289e52e-c4ee-46a6-8db3-ecd4da7ce03b", "sighting--5b1ff932-18a8-4a91-9616-62637dd0f684", "sighting--71d55fb0-6a32-4296-9b0d-e40bbecb9aa4", "sighting--ab1af3cf-9d35-4189-8e93-e6de484153f0", "sighting--06e206e4-0e9d-47f3-83d1-2a92a2155300", "sighting--a73298db-3b7b-43dd-aa72-f005e50696bf", "sighting--c92eef28-ea76-4246-a66d-b5a4b6ce71a6", "sighting--28fe85fd-d11a-47b0-a2f5-c9c34b565c20", "sighting--a53d2636-a65c-414a-a39c-f71543618b69", "sighting--34af8ea2-f9e5-47ec-b471-6d258debc022", "sighting--795c5740-ca64-4d80-9e92-bf613cc2208b", "sighting--0312418a-5114-47de-b57b-d25568f18a10", "sighting--9ac8d888-915e-4275-a8f7-0b2dbc28254e", "sighting--2f77597a-47df-4fe8-a46b-d60f4ff21ade", "sighting--885456fa-c222-43e9-af3c-01b5d92c285e", "sighting--83f6d656-5c63-45e7-bef3-01e3f217878a", "sighting--39b858b2-2c7d-4be8-9271-ceb8b2922857", "sighting--ffed2a83-4145-480c-8242-14cd1870cd71", "sighting--d1b7bb8f-1bc5-41e3-b721-faabce91531e", "sighting--addbe453-3f84-47ad-a5d6-5519dfcb2787", "sighting--2b983619-18df-4e99-8ece-66136fcbd386", "sighting--198917a6-1ad3-4712-8fcd-bd65e9eb5966", "sighting--1a68e822-762e-4347-8507-93343a4297fd", "sighting--5331f73e-4dad-45c1-afdc-a8e28bd8da42", "sighting--97c62b3f-5519-469b-a502-4ce90ec16e6a", "sighting--49ea0664-7fea-42e2-8639-17433599f356", "sighting--82b94fed-6ad1-4a4f-8b37-9dcedc199a3f", "sighting--166aca7e-d337-4e36-803d-017aaa1525bf", "sighting--ca71eeff-3d02-4b88-8998-74e500528973", "sighting--3d9b5dce-70c3-485f-bd94-d1ec4b6a2b30", "sighting--2acf6358-9c6f-4c9e-96e0-bc0fe5bd6fbf", "sighting--7672ebf1-84f5-4613-b93e-27577ee1e17a", "sighting--95dd4cd4-859f-4f73-89e1-144bd5acd443", "sighting--846f4a73-0819-4cbd-be50-cb5d942128e8", "sighting--500e31e5-cb69-4e3c-803f-06c76ccd1790", "sighting--16ef9a86-9443-45f5-b850-ffca0b8488fa", "sighting--6229251a-6e0a-44a7-89b1-a1333b5e887e", "sighting--db0dddba-4ddd-478f-acb3-f35e603e3470", "sighting--05a21b05-00c7-4d7f-adf4-637599728c9b", "sighting--95eb694d-e09f-4635-a654-5fc0489f7778", "sighting--2a8b9019-9e42-49f2-aed8-6656969a4385", "sighting--e3d37e63-53ff-41eb-bfe5-f8ce23d80b33", "sighting--4923e03b-bd05-4c45-a460-986fa12593a1", "sighting--7501dd05-cb2f-45f5-8b8b-9a83891929da", "sighting--8f6c6108-64a6-4738-ba91-e61c4099e382", "sighting--15dd52ae-1cf5-4139-ba82-ee9a956edb40", "sighting--33d2bb72-131c-4b33-8b23-b4474b958e4b", "sighting--4b06e225-2856-420e-b20e-ca36223d019d", "sighting--e925cb56-e277-4350-a9c5-70009353b15c", "sighting--6e5b99c8-bf4f-416a-ba6d-2e8972660dd2", "sighting--1f5d8b61-fab4-48d9-b3aa-c35793c6af89", "sighting--fc6ce9fb-36e5-434c-870d-9dc18d1b36ed", "sighting--68cd733e-a3da-4719-aa97-07a097ee92b2", "sighting--c2be889b-3063-45e3-9784-750898c41a11", "sighting--4f52517c-38ba-45d8-9e87-6454d3421d24", "sighting--374d7fa9-c523-4275-9589-ccfac17177d0", "sighting--b6ea861a-2d64-4a9a-b665-3ef49a6867f3", "sighting--0a6f6f21-6a72-4cb4-b4a0-156633b20aa0", "sighting--2edeaab9-f2f0-428f-98cb-6174c7485071", "sighting--26afb69a-de13-4880-8775-78ebf47c7f7f", "sighting--37faaacc-0d6b-4d51-8a63-805e43175637", "sighting--5fe269bc-545c-4446-ad40-fb80d84658ab", "sighting--af1d4bbc-9d21-49a9-a424-9f501848c547", "sighting--0d9550c1-e837-4aa4-9624-00ab1fbb9fe1", "sighting--acea534a-4b29-4038-b934-71fed3645e42", "sighting--762e2826-243c-49e8-a697-2e5f33c2f7ba", "sighting--eb24019b-e449-4e8f-acf2-e71ea6ddcdaa", "sighting--e9feaf2e-4f53-4c1d-bbb7-f06319e29a45", "sighting--ce5392a4-8231-4c92-b7af-80d558b8dc10", "sighting--43e555d6-43a6-4fee-a796-86d9bee0d692", "sighting--c0351934-d000-427c-a725-218c02fcb137", "sighting--4235a0e2-1ef3-484b-8325-25d8395307fd", "sighting--d5e3b2e7-4516-4aa4-8dbf-42b1c13936c4", "sighting--2493fee0-ef77-444d-a276-f4e2affd5385", "sighting--192a0f64-1dc3-40da-8071-10a40915ff95", "sighting--7660c781-6363-476f-aef4-db6ee3d1a1ba", "sighting--1c2dae39-ca89-4fe6-a0d1-8ce241ba6226", "sighting--3ee12155-4bba-409d-9901-16ce4c35944c", "sighting--70539a8b-8451-48e9-a54f-2b71ce1efda5", "sighting--a294aaf8-661a-44d5-a568-03bae7c8ade9", "sighting--76730f63-6b7e-470e-9e2a-3e9d6c12e5a6", "sighting--e86919bc-a724-4e17-83b1-8beab7ea548d", "sighting--7280e69a-5d87-4a28-985f-ac69c5afd9e0", "sighting--b31a390a-71e5-42be-8387-62fab71f2174", "sighting--4290cf96-b32a-4b09-b2ba-e572ad6e7656", "sighting--5f0d84f5-5583-4c2c-870e-e3418ea5e7ca", "sighting--0fcb5e9d-15b4-4c85-92e2-62a523a595f5", "sighting--3e75fe69-d083-469f-aed4-a20819cc7403", "sighting--4990b665-ef3d-440d-9181-5a12f7ca157c", "sighting--fbe0750a-c3c9-4600-915c-05cf864af3dc", "sighting--2100d0a0-8f87-4f8a-b50d-e6568e730950", "sighting--c0b81cc8-abeb-455c-99f1-1b628a77196e", "sighting--d3d1db61-d207-4fb0-8d8d-4c909cd1f83f", "sighting--841f7920-51fb-496c-80d4-5ccf27b059a4", "sighting--c2d1f6a4-0a10-4a77-b032-75e818866843", "sighting--33e0fc5e-c84c-4a73-a020-7303167e6ceb", "sighting--3fc54a1d-abc1-41c2-a661-26a5b422a8f2", "sighting--c4698479-9897-48e1-bd9f-0c4550d01894", "sighting--32dac7d0-c994-4e82-a8e6-4232fae4d6ed", "sighting--4196e659-a87a-408c-befe-9888a7910009", "sighting--ff26d7a9-52cd-428c-a767-31d66574e0cc", "sighting--49827310-bfe5-4072-8b34-7f1e0d2c698e", "sighting--448e9895-f3da-4396-b9d3-84ff3dc43e94", "sighting--a21a98cb-871e-4076-ba24-b438e4f866e2", "sighting--27164940-a567-4712-bc34-29b79ff9ad04", "sighting--0fc52a9e-6122-4fb9-aadf-424ce0256a46", "sighting--776b9202-056e-47bb-a956-cb3bd1d592f2", "sighting--9b212a84-3d0b-48ec-b820-e16523d7daf6", "sighting--31b9f317-d8d5-42bc-bcbf-76b30ce7c1ab", "sighting--5de0c684-b7e4-4728-8588-62cd7260985a", "sighting--acc84b77-131f-4cf7-b047-7424f27bc335", "sighting--26984484-8878-465b-a995-b98b97e75081", "sighting--d05f7a7a-d110-4625-bf45-4c5bc6bc91b8", "sighting--33750c6e-c48a-43df-b764-712aa2e714d0", "sighting--fe85420a-8237-4e02-b174-4075ee394eac", "sighting--8941f1bb-cb60-4d7d-8948-5f82416a2c0a", "sighting--d4b0c4b4-268f-45ce-9944-615e38901d74", "sighting--d0210119-7c0f-4cd0-8e8c-c69b6b946363", "sighting--f2a5a1cd-d18f-4f83-883f-9198f1320295", "sighting--cd0ae42e-2c17-4315-8550-43196ea4a96e", "sighting--fa7b11a1-7e64-4664-a584-b8540ad97fa4", "sighting--c0f0027a-0d3b-408c-9a9b-57caabdbfb81", "sighting--ed303945-5eca-4f2f-bba7-29dab7c0da4e", "sighting--88af931f-3502-4c77-86ef-4f9dda7adecb", "sighting--3ff45c50-912e-4db4-8ae5-cc9103a31dd0", "sighting--aa3bc15b-db45-45d9-bbef-d1febc5b566f", "sighting--1ba1646d-be79-49e3-b8d6-cf69cda07217", "sighting--5cfba676-cf16-45aa-8261-ec784ed2ab98", "sighting--4cc64f79-1eec-47db-9198-f3feda3a986c", "sighting--66ee129d-5ac4-489c-aafb-bcff746b8808", "sighting--422c7ce4-fbaf-4dd5-b3cb-e7f0caa37a5e", "sighting--865045a5-2dbd-44c2-9ea6-315eb77706cc", "sighting--91be4f33-90da-431c-b6b2-fb9333b85eaa", "sighting--969cb1cf-3505-40aa-97b0-2b7ca3782592", "sighting--c5cf1864-e114-4b2c-a49b-450431e2c32c", "sighting--81734860-6bf5-49a8-a8cf-a54e06300bd6", "sighting--31974286-85a0-4ca1-af25-3337e3fc9c16", "sighting--4e2735ba-cb1f-4c4e-8c60-0b05df762906", "sighting--59c5a2d6-8934-4c9d-87e3-09c988026f90", "sighting--24bd7eee-2087-4789-bf64-2328d307b701", "sighting--2c48d71a-bc95-41f9-a472-812a141b8d01", "sighting--d76783d4-e1bf-4363-ab0e-11933af91cf4", "sighting--5323fb74-371b-48a9-a323-d1b4b0819aec", "sighting--061798ec-c64e-474f-b71c-8cb7fb5e6d0a", "sighting--c481722e-a246-40e7-aab9-589510822341", "sighting--29ee5bd5-acbd-4ff7-b4d6-1d48ecddd606", "sighting--49b9062a-690e-4ab9-a94c-96fd9223e921", "sighting--0770369b-19a4-447e-afa4-e6aa6bc9045b", "sighting--c08bac10-4f6e-497f-a08d-e8ce24b77bff", "sighting--4960acc4-98f9-4ea7-b831-30fad6c5bccf", "sighting--3ab6d99c-9f64-46f1-86f8-898e21d0c240", "sighting--f9d1ebd2-ef24-4188-acf0-182e49c4fe50", "sighting--7fd3324e-a6a9-4413-8622-57942f0c25f3", "sighting--1d3a6c14-b8af-4a43-b67e-d15921b1ff59", "sighting--5ea3ccd5-35f1-481b-8f63-7c194163e2bf", "sighting--6ee11ff2-4eff-4ea8-894b-6a0d82077993", "sighting--04276fc2-e55f-4c92-9cd6-d584ab2a3a0c", "sighting--249f0d7d-a039-44c4-860f-ba346917790e", "sighting--055e4ffa-e324-43ae-8e41-63e316fa57e7", "sighting--bb28ff48-668d-493e-8120-047aeb547328", "sighting--cb9add16-d7a0-4c23-85b3-515029f723bb", "sighting--6ed5c322-b781-4a89-ae4c-000f2c7b01af", "sighting--ef4c9ad2-4299-4466-bb37-c7851b235adc", "sighting--d418f391-66e2-4775-acb1-9cf83c891177", "sighting--bdb9d141-d0f2-4667-a3d9-f9b21f2c7b85", "sighting--70593114-5483-4c2c-b4b0-22e8f83004af", "sighting--d084cc84-706c-438c-bd1b-2b12b279f334", "sighting--6c612f8f-c794-4003-a7d9-e77938442f84", "sighting--5035a0cf-53ca-41a1-af20-ac24d9cc1113", "sighting--1e101441-a013-4d1e-8963-a3ae76b0b938", "sighting--110d9346-8d84-491b-858f-81648faf3d74", "sighting--72176136-6d8b-42b3-a9eb-513a347de016", "sighting--4f8b07b2-a589-445d-8f0f-67cec1e95a8a", "sighting--61a9d92c-f60a-48df-8fb5-18f66d71d99a", "sighting--4547791e-9491-4346-8e84-a75b1af38a55", "sighting--b0977416-8363-4c8f-a93c-28c5eccbc192", "sighting--079c93cc-761a-4836-9255-ae83930e9694", "sighting--3ddaf1d7-ea8c-459e-868e-357c22589373", "sighting--23bce0b1-55d2-4ce0-b834-d0e7501aea59", "sighting--9968fdef-de1f-4ddf-86a6-c8a651691b6b", "sighting--2513ed1b-aa89-4fbb-837f-7f82ebbfde8b", "sighting--18636310-547d-4f1d-bd21-4ef82691414d", "sighting--5ff5d673-06a0-41df-ab19-445cb7d7773b", "sighting--4ce2cb8b-9a71-4bdb-bc09-b65114863354", "sighting--72df0880-823e-4c85-b207-f559ce113b56", "sighting--83699004-1fd7-48cc-b043-0c43839cf0cd", "sighting--01ccf377-46d9-4853-8c98-96a3206a20f0", "sighting--ea964fe6-962b-47b8-99c1-36cfc5a2b732", "sighting--764239fc-3cb8-46ba-8763-d2a194fda4ff", "sighting--525a1301-0dca-488e-856e-bb0698c1889f", "sighting--6ec7bb48-2fd8-461d-b6a6-4d2cd0586496", "sighting--8668ff7d-ae42-410e-8c5c-015f3a4a4497", "sighting--81304149-607a-47a4-935d-837d2fee69a4", "sighting--31ef5fdd-c1ad-4791-be2e-dae1b6ac3bf9", "sighting--650a2fed-16b0-4576-8d2b-c5a3ccc64161", "sighting--d72996c9-fc4d-4482-a755-973cfb34be83", "sighting--2b06a14a-4cc7-459b-b82d-7f8f5478da7d", "sighting--b26aa1f0-338a-4704-b0a2-0f76fcc6449a", "sighting--c74c51f9-419e-4013-bf62-b7007374ae13", "sighting--16202d71-fe95-4738-a49d-cddc48c6a550", "sighting--df95d2cd-37f7-44b9-9a1d-de792067fa01", "sighting--98629bc5-f553-496a-9b6c-9b27f4773f73", "sighting--04446348-8580-4f8a-8358-b20449f3896d", "sighting--0b1da96d-9bd6-4f0b-8e1f-854c877f838a", "sighting--c12362f3-44a6-4b8c-a045-cc7512de2b20", "sighting--2fdcea18-328d-4f4f-8e3a-c4400256a7e0", "sighting--edd3d8c2-a187-455d-87ea-95463f222a74", "sighting--f7d4aa82-de6f-41ba-9e1c-938cb7103ffa", "sighting--e5116587-efcc-46a6-9180-4d0aee42ed74", "sighting--c6ba9777-6d94-47a3-be0f-52f8527f59ef", "sighting--8237f5fc-8f6f-4cb3-a8e7-6158850be0bc", "sighting--27ca868b-769b-4e34-824b-41638e41d0db", "sighting--187e6d94-3f56-4cc4-b5f5-6ef6fc411724", "sighting--eea6817d-1e35-430a-b8ea-41e6ab32fabd", "sighting--f23418fb-5137-44d6-9572-8c5d48b0c2ed", "sighting--f1758033-7d9c-4d9f-9a74-50e1ff57c7ab", "sighting--7d3791ce-d86d-43c0-b9f5-0f248955fb9e", "sighting--4f85d8bf-923c-481a-bb89-677b8079eb50", "sighting--5b406fee-7ff0-43d3-85c2-10ffeb7d4047", "sighting--a4c77779-dffe-4f33-8415-fafeead2c3d9", "sighting--eb0e6f23-7a5c-45e7-a768-db5925a56425", "sighting--bb47406a-37e7-46f4-a4aa-a9485060616f", "sighting--4257e8c6-61a6-41e1-9ab1-dfb757108d08", "sighting--64dbd6db-c2fc-45f1-8a5c-07dd0299b154", "sighting--db0678a5-7a72-4180-b0c1-142875d631a9", "sighting--43b43491-60f5-454d-b6fc-06ba03ba9b7e", "sighting--7b3d2113-37b5-4490-bad4-ec628e03d287", "sighting--c318645b-7146-48de-91ff-a7bdea375ba8", "sighting--c442cf95-274e-4e45-87e4-08aef2ae1d60", "sighting--e2d62bc8-0e39-414a-bca9-dd39429b5d83", "sighting--476e8b2b-dd67-4efc-a303-824808c56a85", "sighting--93989c5e-3ca1-4d7a-92ee-8492928a07da", "sighting--e7b07b3f-1d7b-4e30-8361-1fed8177fd37", "sighting--d8f7b556-dcdb-4807-a222-a0dd5efba4d5", "sighting--335c6f4f-36b1-4f24-ad30-639c639e751f", "sighting--2b231639-8423-481f-96bb-b94a885dfae9", "sighting--60db6b3b-12fc-44e9-a256-9e85a148e1ad", "sighting--2c446512-ece5-4c97-b5e1-bb539e1e628d", "sighting--b9814d18-f9c5-428c-b675-28f70ddc71a3", "sighting--fd3e7945-7188-4f7c-a757-53e64d0a6d45", "sighting--4ef86ee7-5b4f-4e23-ba50-9d4d9555b677", "sighting--e5370d41-a909-4232-a9fd-123b9e91292b", "sighting--30b6bb5e-d4b7-4288-a38c-1dafd2412b63", "sighting--1e2f30ec-0475-4ba8-b87c-e6e417260b04", "sighting--a921ef2e-cd1f-430a-8afd-c9d644fd9230", "sighting--8cc598e9-f4ca-471b-ad50-6e59bcf6a8e2", "sighting--66c53804-07a3-40ee-9ef5-b83de579cbbb", "sighting--6fb76416-ebe9-46b1-9979-1b455a138761", "sighting--7a29fbf5-0b25-4d17-8455-4abfef7e334d", "sighting--dca085b7-f25c-4e92-a38a-c47699febb26", "sighting--96b32e85-ad55-41b3-9519-9c370c388044", "sighting--78131aa1-b87a-45ce-b234-8bf0ea3dca7d", "sighting--1a505d93-a788-4bbc-b81e-f7dc80c7df78", "sighting--66b24953-648e-4303-ad3f-8acb588f54be", "sighting--cab358e2-4b4c-44d3-aee9-ca895ede07ba", "sighting--0ee02eb4-4c63-4cf8-8b25-8b3a49c2171e", "sighting--95a3b35f-8216-425a-be93-49b7612f39af", "sighting--6c67666c-1bb3-4b63-8c20-c495422eaba7", "sighting--6a360070-2b50-434e-a43b-a6f3ccb307a0", "sighting--f38416cb-a85d-49e9-8d70-2dd936aaee57", "sighting--0556763a-a603-4891-a8bd-e82723cf29d0", "sighting--e95371c5-2a7e-4f2b-b164-a75604de67ff", "sighting--2245dcf9-2c07-4fcb-a984-fe5881ac338d", "sighting--bcae6e24-b958-43c6-8003-02b414fe5935", "sighting--d8574004-2c5a-4c1b-a226-0ebb35a0e943", "sighting--0d4e8dab-eff3-48dc-a476-01d9c4f64ffb", "sighting--ea082193-83ee-462c-b022-8b1f72270c4c", "sighting--e01168a4-0d01-4737-9bdf-eb5115d77fcc", "sighting--c7b365df-f2cb-4d9b-a74b-6859087a886e", "sighting--68fef677-e016-4cfd-a3f7-8e3162a68625", "sighting--4d2cf14a-28e5-4cad-871c-2139ef90fe3f", "sighting--9623e6c8-4718-42f3-b725-f7a82cd9d0d7", "sighting--35a98fbb-2a7c-48cf-ba5d-e842f765367e", "sighting--e96e119b-92a8-4893-8c93-5e43f91a903c", "sighting--26563cd4-40b6-4a39-a2c4-5a0038ee36e0", "sighting--ecb9afbb-e0e1-495f-8ab2-71cacc00bc43", "sighting--1a58f2e1-1bf2-4b81-8ad1-4de2d9cfb649", "sighting--0f7f31e0-e238-419e-ba27-b14823e5b27b", "sighting--4cfeb65e-1ba7-4127-a90f-115aaf78f4c7", "sighting--ffc14b0f-4c0d-43f4-bf87-4233bff2000c", "sighting--b7df76d6-bce6-4f52-9dc6-141950392c05", "sighting--b0192524-d224-4881-945a-0cae8a82fe0e", "sighting--0b6e5597-8273-45b9-b55c-ed254ef1308f", "sighting--b1bffa5b-abfa-48bb-9b5a-9abe9983ebf7", "sighting--fb1a24ff-6ebf-416b-98fd-bf550775a3b9", "sighting--18a6d92f-4f99-4e21-9074-a0fe0a4ef97c", "sighting--9a848577-4502-47ad-8b6b-ca3308aabaa1", "sighting--57667b40-1da9-4dfd-8484-d7c7064371db", "sighting--32235c8a-aaaa-42fc-89fa-99282cb6b217", "sighting--964cbd78-9995-4abc-97ad-4f4b338f602a", "sighting--12689134-d1cb-47bb-806f-82c49c368d85", "sighting--82166b03-1f80-40c5-a491-eff5ded12c01", "sighting--831701e9-93a2-406f-bb23-a84684df7dd0", "sighting--8ef0191f-e253-4161-8865-fbe5273d6b54", "sighting--1121350b-7602-41bf-a80d-0a79bff243ed", "sighting--b222b657-98c0-46d4-add8-898f0bc8320b", "sighting--b4c9b288-0bf7-437f-9b81-c436eca7dc4e", "sighting--0f90ec65-64cf-4463-8da5-97fd93fea052", "sighting--abd65743-8ed3-4c77-a2cc-f0b374fe5937", "sighting--e4344aef-8adf-40b8-ad0a-b53790ea585f", "sighting--074f632f-b764-45e1-929d-c5fdced05d42", "sighting--4f9c6ef4-c2a9-4517-b6f6-2fe4efc6cf56", "sighting--ad5f1006-b56d-4130-899d-67e71dfc682a", "sighting--b817a01a-3658-4acf-9e7b-6ada814fcf63", "sighting--58dc612f-f647-40bb-985c-5085cdbe17fb", "sighting--a7fb4ffa-8e99-40a0-ba18-a8b07b46aef8", "sighting--294d2ad7-b13b-4bb9-9ce3-6fe1f400961f", "sighting--e9caaa80-fb2d-4091-854d-33290867140b", "sighting--d1db78b1-0218-401b-835e-19cf1fe37bd5", "sighting--f13d52ec-9b8e-4dab-acf0-19a199eaaa45", "sighting--9e14a7bb-bba8-4a79-8866-ac0605bb0c88", "sighting--3ae96e6b-d353-4bdb-b7e1-81da45fb9cbe", "sighting--f169dc74-6dc0-418f-a440-dacb75f3815d", "sighting--636e2577-2c98-45cc-a1bb-47d0fca2965c", "sighting--a14c7333-1861-4377-8a7a-4e1fb7880ae4", "sighting--419f32be-5134-4156-a6c4-43463bfd8436", "sighting--71e173c5-576e-4780-a012-3da843138238", "sighting--8795da38-d8ef-413d-9366-2de37f5d40e7", "sighting--ce6eb014-b1f3-444e-9f93-6de0b833f4c4", "sighting--f4622399-aea7-4314-a7c2-8d4b6ae5c802", "sighting--19d9fecf-6838-4ff4-8034-8f02ea53f746", "sighting--ca8603d5-7720-4066-a237-f820a6f24fa6", "sighting--95f1483a-1da2-4a8a-b9ca-31b758bae8e6", "sighting--6c69f11b-72a8-42d2-a572-e3f8e5516acf", "sighting--2153ef41-e830-4019-ba61-3345d0967b8a", "sighting--63beed1e-83f4-491a-8076-2b06508d5560", "sighting--35e80d44-44fd-4ce0-b296-2acde5f0c203", "sighting--386b850f-07e4-4e2e-97fe-b2573d0d6497", "sighting--0bdade2d-fdbd-461c-a600-6254007f332b", "sighting--8f6d19b2-69a9-4893-9d11-a272b17b6c2b", "sighting--05a51267-6096-4f9d-8f38-2e6da5265bf5", "sighting--cd5f74bf-cd8b-451c-bd49-72d464120625", "sighting--a5c5d87a-b402-40b0-85bf-065f730e96eb", "sighting--0843aa52-bb67-4bb8-8ac5-4bdf6fc9e143", "sighting--617d9cac-7e56-4c82-97bb-b3482b1a1098", "sighting--37e32541-8638-44e3-af7e-ac8713c1f1b2", "sighting--68838428-a424-433f-a514-137a644f25cd", "sighting--9ab43a1f-a43b-4e4a-af49-0cb6c0e1bd3c", "sighting--633e8639-622b-4420-8234-bb76163bb925", "sighting--424286fa-f3e5-4cc9-80e0-95e14ea2f85a", "sighting--734199e2-ec45-4602-ae96-5debc76827b2", "sighting--f0923bf5-dd93-4de9-a983-dd01ebe04acb", "sighting--9ea6fba6-bd7f-4c78-b7d2-3b33c757ca43", "sighting--752be2eb-0425-4245-85b7-324eeba74f44", "sighting--56308f53-4daf-470c-bd02-7772175f7001", "sighting--69c8a8bd-8df9-4442-ab2e-32e8c099a12f", "sighting--df340a66-ca5a-4ae0-aaf1-65104b0b7670", "sighting--4d75c0ec-02db-4ca4-a7f1-77a72df73531", "sighting--7525b533-cabc-496c-a35d-5d50e605c235", "sighting--f3f7cbd2-f8e9-40b3-bb3e-b0376d2469a7", "sighting--cae3949d-369d-460b-a693-4830e3253a0d", "sighting--ca6c6f0d-824b-4637-89c0-0c442d5246a6", "sighting--47ab7789-8dc4-464e-a431-3300d8deab22", "sighting--7c44039a-9605-4d14-8044-75879d8b493d", "sighting--736d02d9-b9e4-4a7b-bea4-0c28a6292d88", "sighting--70bf3082-a48c-4258-95b1-2cbfcf51d9c1", "sighting--9754cb2b-3da3-421f-abc9-b3c5d53be1c8", "sighting--91de58ac-c41c-4a67-836e-69aed164d64d", "sighting--b1c2005f-4938-4451-a5d4-d62059c27560", "sighting--70f5d440-8fd0-4638-a80b-29cd74559ead", "sighting--f37bf228-ce40-47ff-9aeb-309444166c78", "sighting--7335a8fb-5ba1-492e-b01d-08e36e7950bd", "sighting--b847db2a-8292-47a5-8cf5-f051c851ee47", "sighting--244f95a0-5ce3-4a5f-8551-0923ad15b829", "sighting--e205d61c-1e08-40c3-b12d-9113acdbe653", "sighting--d726a616-ed44-4d98-aa5b-1688e64c75b8", "sighting--4798342a-e03f-4653-8451-902e7fdaa932", "sighting--1d83c2d0-e70c-4b7d-a8a6-1fe728aa1a96", "sighting--c37b11b7-c0ed-4d67-8fd1-7629bac9897c", "sighting--bf2c4fcb-5499-46ee-aadb-5d941da49340", "sighting--a731630b-0652-4998-8624-61b6641757be", "sighting--78ac2dea-1d4b-4bd9-a82e-f3fe19f37881", "sighting--5b0ae4a7-3840-4655-b8ca-37e06e601f3c", "sighting--e3645ef7-fcd0-46fa-932e-d9f62ad6ff09", "sighting--d0ed5990-d441-42ab-a50d-bf974e0ae238", "sighting--4ca70ed0-73d2-43e5-a52c-6ebac7b4b8d3", "sighting--6f2537fb-01ee-4aab-9720-5d1cb5c8e885", "sighting--a2cd8a1b-629e-403d-9670-51ef501867a4", "sighting--1eff118b-5f16-4a63-a7ca-790731a40451", "sighting--81304603-22db-4317-a439-06ae93e565a9", "sighting--f5f4ce6b-4f44-4f44-9cff-6db8e2e716da", "sighting--56a333d1-d0f2-4e2e-a773-96ec21913a6d", "sighting--e65a6525-f5ed-4a0a-ad4e-47ce84bf5dfb", "sighting--341c6f9e-af03-4579-b5a2-94f5e0753394", "sighting--08094546-2dc3-409a-8daa-b99f9193e116", "sighting--c2dfffb5-9d4b-4843-8fcb-faee289bc153", "sighting--2a346693-ad9a-405f-83e6-9e6a42ad2ace", "sighting--750c032b-dd17-4583-80a9-61d6dd44bffb", "sighting--cb60aa35-81bf-4e37-956b-45e125792b16", "sighting--bbdb84a7-1cb8-4cbd-ada5-b9a989488ce3", "sighting--7b239705-e4de-4711-a973-3821e283a7d6", "sighting--f6957d53-3f0f-4ec6-a195-5a894170796d", "sighting--64c8a326-1303-48fd-89cf-af39d33c71d8", "sighting--3470bec9-a1ed-458a-97c6-477468255b9c", "sighting--278f1e52-89d0-4571-81d7-e0bb24e84e27", "sighting--17c0768a-0224-448b-9d62-10cd43a55bb8", "sighting--7d9f9c35-510d-4fd4-a3e4-0051e0d42832", "sighting--be325a92-77b7-4c58-b064-a3b7ec1e3955", "sighting--b5cfc0fc-5cef-48a4-afba-0c52bf929371", "sighting--c24ef626-b993-4979-9b1f-c2a13618b569", "sighting--612bef2f-e98f-4221-914b-8ab1e040196e", "sighting--2335f945-a710-4ff9-af81-bb4f81cb950c", "sighting--2b3fa9db-65e0-441d-a400-66d69208fd8b", "sighting--39fcfd5d-911d-4380-97ba-20fa8dccb703", "sighting--b0c36ee3-419e-4615-b811-94765f8dc14d", "sighting--20640f98-f463-4f29-be4f-eaa67a6bb7f1", "sighting--15abe76f-5bb5-49c5-ac8c-0b327530cdd3", "sighting--2fa4dba9-3e39-4e96-9aed-9c905bf20384", "sighting--24afa7e4-a827-43e5-ba33-c6db632a24b2", "sighting--a644185e-fb07-4ff7-a01e-45e3b253a5d2", "sighting--5694c4f4-c297-4824-894f-a08453dcd062", "sighting--c382b76c-41cc-44bc-b204-3ec6bde32717", "sighting--9cab16fb-7312-4592-975c-6d6491c4e6a8", "sighting--5da81b4c-3051-4a19-8b16-30dcce24d372", "sighting--49444ec2-e8f6-4f23-aa0c-607ef54934e1", "sighting--1e62d802-e396-4719-8b1f-275a7822f837", "sighting--f175f695-6945-4ae5-9af5-635af3cffad5", "sighting--34a67d6d-0ab5-4886-ba3f-cf4cbcf76c8a", "sighting--d232a9a3-173a-4635-9114-b3ea66115128", "sighting--7ee4baf4-1439-429a-baf3-e977b333ab9a", "sighting--c0c3ea45-8b83-433c-bae3-18dadc636d16", "sighting--c9db0c09-854d-4ec4-bb52-87af965f67b7", "sighting--c27220ef-2d6c-4cf2-8dce-4a1b588d576c", "sighting--3b286923-cca6-4c1f-9037-1a766d84d013", "sighting--8a161a28-9698-4eb4-91cb-458f802b39d9", "sighting--c16138a9-d383-4191-8287-b25caefdae46", "sighting--1d61fdf7-d23d-4e09-9dc3-c380b972900c", "sighting--06e7bcf1-8eb7-414c-823d-ae7257d2527a", "sighting--47e0d7ee-7dc4-4803-9321-d5eb295102a4", "sighting--19340685-0821-40ab-81bb-5e25dea66ed7", "sighting--1155cf05-7137-41fc-8a0b-d0ed4586f16e", "sighting--f5820273-11cc-4e44-af65-08fcfd88b659", "sighting--e0ad6dd3-b1f2-495a-95ac-6e1eebfb2882", "sighting--ffbcd055-54fe-47f4-92b2-af4d0abbaed3", "sighting--ab2880ac-214e-4159-a564-6a6885153752", "sighting--18788cf0-ddb4-453d-9203-cc173305493f", "sighting--a04da725-16c1-400e-98fb-ef5b4a48b80c", "sighting--130cfcff-57cc-489c-b764-e2a77952f4b2", "sighting--99a4d98d-a2bb-4612-9033-d88e31cfecc0", "sighting--90722133-a82e-4289-8f24-6c786abec18c", "sighting--2c45faca-d75b-4cbc-8f30-132bd2c1846e", "sighting--5cbbe399-adc2-469f-a929-b126618af683", "sighting--9cfc77cf-555c-4d99-a567-fce64a4baa83", "sighting--aed2a433-ebdd-4140-8826-c839f93e5211", "sighting--ac9b5025-5872-42a1-a090-b8bcd55351cd", "sighting--40b04558-74ce-415b-9660-a4e24a02baa4", "sighting--b982efa8-de18-4aa9-a61a-e173f49b1a86", "sighting--6f23b99e-dc5a-4744-872c-1a37e8b47f64", "sighting--6f2adb77-a0e6-4801-ae70-40a5211e76db", "sighting--7d6733a8-e77a-4d01-b890-7565308388f5", "sighting--0e239d32-e318-46e2-a64d-68710b81089d", "sighting--436b0dd7-6675-4ea2-9088-64d57b3bcfe4", "sighting--e81c9227-b2da-4b40-ac37-b3ccc14db9b7", "sighting--b95d7379-a47c-464c-9b71-473b62ab178d", "sighting--8b6547b5-8805-4af7-88ea-dafc9527f3bd", "sighting--b083803f-9bb4-4383-943b-39e4fa5303fe", "sighting--0dc19e0d-3167-478e-97a3-15a13c7ffe7f", "sighting--cda1b3eb-7f62-43f9-9a8c-63d7b6c62141", "sighting--7dfbbf6b-a556-4a39-8cad-76a20d8fefbe", "sighting--4d9d4a8d-941e-4281-8e49-96449b5e7ba4", "sighting--471216c7-c052-4ff7-8af2-019a7a6d0d13", "sighting--dece6f99-807a-4eab-9413-614041d42f4c", "sighting--b75da88b-460f-407c-bc58-9f339606c90e", "sighting--b4a6c173-3aed-4a8e-9187-5bf7c379beb2", "sighting--33c2615b-1bc2-49da-99c5-c7850fd95a44", "sighting--dc68bc4c-9ea7-4e42-b42a-c0735c13df1e", "sighting--1a38d108-03e0-404c-8ff9-7605f7ce2d2e", "sighting--a2b036b6-dfaa-4bed-9c8c-9c70589ea95c", "sighting--14f1d115-7492-4f44-b544-c1284b0ba6a3", "sighting--e7dc503d-69ac-4301-8b90-e1460bb5dbc1", "sighting--ae6687a8-bdd0-41c8-8805-265199bbd5db", "sighting--ef8a3260-8b6e-4f51-a136-cad10f1ee9eb", "sighting--f1db79d5-4615-4dec-aa5f-293fe0b9a99b", "sighting--5135d5ba-f92d-44a6-b22a-2b3313fb81c2", "sighting--b9229255-680f-45e3-99aa-576adc9cc476", "sighting--a3cf67b7-1a44-46a4-afd2-8a3da598e2aa", "sighting--ef9fe756-a7f3-4e06-95e7-4b41e7f730fc", "sighting--a467e4d9-3fb1-4eaa-890d-1dd3fe068c00", "sighting--932ab7a2-6e68-444c-85ee-7fbd2b326b71", "sighting--e3d40458-c113-4ee7-acba-53d9e6ec498b", "sighting--f4461fd6-b788-4f80-ad70-ea42c61ddc64", "sighting--6ad917e3-e2ef-453d-a5ee-2e20e33d7c89", "sighting--2e13d893-5a7e-4242-ba53-70a3eb1b1c2c", "sighting--51b5aa5c-00d2-4e58-a5de-08f10ab49752", "sighting--92206ea8-ed0a-45da-8094-3557573c778c", "sighting--95faf39a-41c0-421c-a830-723a51979c3e", "sighting--05d4dac7-d68a-45de-bfb5-2a60bb304da6", "sighting--f54190b5-f129-4e32-ab2d-10ffc80799fb", "sighting--2cbdbc44-eb59-4e92-9442-6583c3783a7a", "sighting--d79a2ff2-21d3-41ea-94cc-de35a9bc4158", "sighting--09efd4ce-6802-4e89-ac19-49c7c383e94a", "sighting--7e98393b-36aa-48ac-8528-4269b2f85ded", "sighting--f229eeb7-9983-4bbd-801e-6b22e9bfe3b7", "sighting--d229cc44-1d86-4666-b5d1-ab95bf771c35", "sighting--a7c4b8ce-1b02-498e-a540-d0bae2727c13", "sighting--aef2b374-364b-463c-a9ef-bc74cb5122d6", "sighting--f83b8ecc-2f1c-4d33-8fcd-0bd661c2c1f6", "sighting--7f81fd40-1939-4326-bde8-0e37f5891f12", "sighting--96d79bb5-016e-490a-8bb4-268de8f32f17", "sighting--016db02e-0a70-441d-9117-eebf163c1345", "sighting--f75d77ef-9f64-40f0-a85f-f5bcfa16b6bc", "sighting--91b80e43-582a-47ec-9608-a3e2803438c4", "sighting--459f04ad-691f-40cf-90d9-e85f8fa6c9a8", "sighting--84550c22-6842-43d2-9488-4d757de4d683", "sighting--540de2d5-dc5c-40d9-acd2-c88644392b17", "sighting--a05f87c6-8443-449d-af63-2b554e3e837c", "sighting--c4d49b42-d958-4128-84f0-0d2d5cb9ba53", "sighting--c09f063d-b5ae-4be7-9a88-9bcf60d4e56a", "sighting--d4441393-d924-4a75-8413-a78163b78dbe", "sighting--1e669701-9a77-427f-90da-623de881018f", "sighting--b357d981-8472-47f8-86a5-adb748dcb9da", "sighting--de5ad9a0-8291-4055-b1b5-d7d6e8b81fdd", "sighting--4a0fbf86-9c2d-49c4-b848-efef191eb5d0", "sighting--9e7418c6-0129-4688-b190-8c6be252313d", "sighting--5b2dad70-e6bf-4534-93b6-8461f5a12889", "sighting--f404a5ec-0c3f-4caa-b01c-038a9f2484ba", "sighting--65ccbd02-9fb3-42af-b3ec-52c16c5bcb56", "sighting--8b154c7f-1138-400a-b584-e2ed664ca736", "sighting--07b1469f-5ee0-4a75-8669-6de8611cbae7", "sighting--089d548f-0417-409b-a2d3-9ad87fb47714", "sighting--6e3f6846-c8e3-479c-b52c-d21b940734ff", "sighting--afc41379-e6f9-4afd-ba9b-d375133e580d", "sighting--75453495-a0cf-4b65-902e-e4d440e3b773", "sighting--bd497f77-e7d4-4ab2-8f6c-9e6cae94f5c2", "sighting--fc295f53-29ec-450a-a4b0-00fe71268ebc", "sighting--753208d4-c578-4598-8400-8a293430f960", "sighting--aa42eeb7-1f1f-416b-909a-4b91a1b20a14", "sighting--904c212a-0160-4382-ae5c-856679390663", "sighting--b1ad1760-b65e-477b-bde2-79c07b5bc6e8", "sighting--0b4905c2-6564-4278-8a62-c13791756628", "sighting--59561064-79da-4abd-8d57-a834f71ddb3f", "sighting--5c58991b-0b92-4e94-961d-9cfc2747a5b8", "sighting--624ecb42-7818-44bc-a829-0265830d9c44", "sighting--6bb7e319-3927-4eb8-ae1a-59798ff845cd", "sighting--67fd2145-fba7-4665-a803-cc7211089aee", "sighting--df01a474-c453-4467-aa61-72eada387d0a", "sighting--9738acb3-f3c5-486a-9cdf-0ac31a05e43e", "sighting--3708cf42-1d69-4536-86f9-97890d6e8e9f", "sighting--1278c7bb-9cf4-4bc4-9a97-36134c3fde58", "sighting--6b97ce2c-3189-4c9d-987f-bf3a18521738", "sighting--86824f2c-abcd-4ced-ae43-219d67aaf933", "sighting--4af444c1-3b1b-4f7e-a95a-783041976220", "sighting--6c64df41-1931-4464-957f-2ca11ad9ca9d", "sighting--4dd16872-2d27-4a78-8053-e348d0e39153", "sighting--fc34a824-0c3a-4c31-af93-020ae00f982d", "sighting--993830c8-4a02-4d32-b1aa-8bc68cbdf1a7", "sighting--5f150a52-56a8-4a7e-a9de-32702b12963f", "sighting--bca70d6e-190b-4b31-af5d-de19dd8f23bd", "sighting--a514e123-b849-46a7-afde-83eb6d0b60cd", "sighting--5487b316-5f0d-4f3b-a03d-b07b9bc80a47", "sighting--7cd0dfcb-94ca-41a0-823f-cafb916051dc", "sighting--e3d0e1be-9f87-48f7-be73-6262412367a7", "sighting--5f623e9b-6285-4e73-9b5d-cb798cecda61", "sighting--610cfb08-266f-411a-afb8-88fa11971971", "sighting--0ed3a5ab-b360-4ada-b21b-7a4196998bd6", "sighting--c3b25f96-d4dc-45de-9962-15d45ffccb74", "sighting--7bc1ebff-5e75-4f0c-92c9-babb9d253afb", "sighting--9db3e566-c3f3-4e45-ab25-43f26e2a37ce", "sighting--05ce1888-eb36-4beb-9229-630b06ac2a74", "sighting--8991a302-effd-4be9-b15d-b1ccf45a8d05", "sighting--f54fcf1d-5762-4e54-bd06-87e37a70dc98", "sighting--b957843f-bf66-4c92-ae9c-3853c8cfb23c", "sighting--a32eef8e-6973-4881-8fcd-d7472daaa5ba", "sighting--04b4e21a-f714-47f5-82bc-2c25e07eeaa3", "sighting--051e3078-110e-41c1-a12b-594e18dd38ce", "sighting--6d9d7155-96df-4e2a-8feb-865f9543ae29", "sighting--ec92b709-58cc-44f0-93fd-3cee6767cd72", "sighting--9191ff61-8a38-4cf4-9264-83e2d20a98ce", "sighting--ea4e5e14-4b19-441c-8211-277a8af4a868", "sighting--c8cff9cb-e4b5-42f3-a0c7-49767300ed79", "sighting--1220f2e3-8b43-4f75-8c35-13e90bd61461", "sighting--f423e24b-22b7-4e7c-a64a-b8aaa5f1cdf9", "sighting--c589fb25-f1eb-489f-94c4-53bdaf07a255", "sighting--be16b848-ff17-4c6f-9744-16e54d6c2b80", "sighting--b2570638-08b1-46bc-9814-d12bf9e954c4", "sighting--1850b78b-4077-484a-adbb-ce3184dbc5f7", "sighting--98f0ae9f-8f01-4705-ab57-f764d0645349", "sighting--162b95c6-2fec-46ab-8ea1-c77ce262b66e", "sighting--ea2f7e92-4dce-439a-94ef-978f62404c50", "sighting--0b99280f-1b89-4126-8da4-7daa3e7cbff0", "sighting--1f16ca3b-b735-4658-b1b6-01b1d386539a", "sighting--ce22618b-526c-41ed-b4ea-70b7a6925a70", "sighting--01fa207b-9c68-40fb-b8bb-6acb93286dc0", "sighting--cb072cfd-64a8-4b32-a468-be1e43f6a2e8", "sighting--8b2b3d2d-9f05-4722-8a73-65a88a20bdd1", "sighting--c6533781-709d-43df-ab08-b2e5bb47904b", "sighting--ba050f36-75d1-422b-8274-3ea37ff5db29", "sighting--886a0b63-a54e-465c-bb9a-8f74012de8a2", "sighting--0dfc9da6-5a5d-4085-9147-9106b17d36a5", "sighting--471ac009-3a16-4c69-9a7d-9e86b4c9235c", "sighting--f70b0654-1fa1-4c84-8633-084b6015a98a", "sighting--d91870e2-6688-434d-b147-9d68d1efd0c2", "sighting--4a2dec77-679d-4be2-a5b2-89633681c1fa", "sighting--0b5de2d3-363b-4056-8632-cb2e456daee7", "sighting--853d69e9-c65e-4d10-9081-275e101114cf", "sighting--11436937-29f2-4f8d-8539-934bfc3216ac", "sighting--06f891f5-512e-4c93-b49d-e764c485e808", "sighting--75fc29ae-c3f1-43f5-878c-e6ee74118dfe", "sighting--48f8c98a-8343-42fe-b5f2-e7097ac186ef", "sighting--6dc6d0b6-54b0-4a5c-889a-f8fe738842a5", "sighting--e09868e9-4bf3-48f9-a8a4-9a131cfb18a0", "sighting--304db4a1-87e5-471d-8a6e-fa2561786982", "sighting--abcee3a3-8fe9-4d63-abc8-9d293b82d28f", "sighting--91fa2651-43ae-4730-b44e-7bdf7423d8e6", "sighting--48630b82-0f06-4b38-8977-433d5d44419a", "sighting--7fd7df8a-671e-417e-90df-550838427083", "sighting--fc2046b0-a1b0-4026-a5e5-97120a6522ee", "sighting--608d43ed-6e4b-41c7-bd5b-102dbd819ede", "sighting--2d6f34d8-6c8c-4af4-87ba-e2bf62812083", "sighting--f4aebe7b-5a3f-4d24-8526-9cb3fa7ff489", "sighting--22b4b6f6-f189-4eee-8731-45305c86f656", "sighting--a93159be-ae98-4651-9f9f-a17ecdc6be1d", "sighting--01cf1ef1-2048-4814-b673-c7335e6a6fec", "sighting--25278071-3118-4c20-b2e6-67aa85132a55", "sighting--2d80806b-ecf5-4878-966a-dfb87b8b99f4", "sighting--db28af64-9cda-4a49-938f-0b0164704e2a", "sighting--9b426c23-1b01-4085-82d7-d7f7924d6692", "sighting--2a3c4f73-00dc-41fc-8ed8-28164aa5e8ad", "sighting--07d92a6a-ebdd-4c7a-a25f-eabbe32f2452", "sighting--d0a43ac2-0639-42b8-971d-608e08a45091", "sighting--d19ebe35-6cef-47dd-b63c-02938d7e25f5", "sighting--c5525af1-c5f0-431d-bd9c-91c65da40b16", "sighting--29836e7d-6b72-4238-aa7b-19f3d0fde119", "sighting--119111b3-53eb-4b54-afec-e7b7a8f3993e", "sighting--a439c11d-0041-4c68-ad5b-737825749252", "sighting--834b3e78-3b9e-41c4-b048-092538136550", "sighting--c5b25b5e-d1ac-403b-9a5a-8132da70c875", "sighting--aca85340-2299-44b3-93fa-30df9ce02f06", "sighting--42580036-a7fe-4eed-9c4b-550efd35f195", "sighting--3b39fdae-96aa-4666-a8df-ce8113d79b3a", "sighting--f6af2493-b31d-4fa7-8300-c9887dd48cf4", "sighting--15d4f1c8-d39f-48e2-8a50-12ba720027b4", "sighting--a6408046-ec26-44d6-bba6-397e47318d61", "sighting--b379b8d1-34c9-4d55-8b84-f0fcede653c8", "sighting--7665fb90-7efd-4e91-bb3a-2fc3501b5eb5", "sighting--1f032cbe-4c14-410b-a226-a42dd58143d9", "sighting--c6111396-02f4-4836-bdb6-c9774c6ff100", "sighting--e94b5ec4-dabb-4b95-b87f-be83bf37e077", "sighting--bd1310ca-57c5-48e4-aace-1f081af0d9df", "sighting--ad10feb5-a3d1-48fb-b7fb-e96b379df257", "sighting--6a51e2ab-e9b1-46e9-97a7-facb5eb0d9b1", "sighting--9500dc2f-aa13-485d-97a5-d65f9d60029b", "sighting--81fb8a51-9413-402c-b6da-13381765a0cf", "sighting--082fe7ad-3b92-46f4-9521-eb12ed91c1ee", "sighting--9253292b-697b-40be-90bc-62f03262e934", "sighting--ba6cc864-d26d-432a-8e5f-05da2de431fb", "sighting--9fd38a25-81b9-45a6-98ce-03ed35b85a8c", "sighting--139c0c23-5c9b-4352-8bfd-539d19e43c28", "sighting--0063e55f-a78c-441a-ac57-3ff475c8865c", "sighting--9c94bf66-c8a0-4aeb-a32f-9ddf289b3b1d", "sighting--94144935-d9a6-4c67-a49b-dfbc651811a1", "sighting--494aaee4-ad17-4375-bac8-86a55bab9b2c", "sighting--921238f0-95cd-450b-bb67-13692224c458", "sighting--db56b92b-6da1-4fd9-aeea-1f053176e34f", "sighting--e4ecfbf7-5f9e-4d12-ae42-f9533845910e", "sighting--ab56d582-a67a-4004-8925-b4df65075064", "sighting--8ca02274-b514-4ea6-995f-1b43414fe6ac", "sighting--ea86b809-d414-451c-890a-d068d59dfbc9", "sighting--a5562b8c-569e-4784-94c7-81acebb20f90", "sighting--5149bbeb-68ce-4bd9-bee5-9219ae0c3842", "sighting--e78411b3-a35e-4356-9694-53a11c840ea7", "sighting--fa2ca8c7-c7ac-4d40-a1cf-751ff4452a6e", "sighting--da758ac5-f585-4e53-9d40-0b89e9d7339a", "sighting--622f666f-7866-44c8-a4ce-e1dde9303bcb", "sighting--c39633ed-c2e8-41ae-9e8a-39722d7c1532", "sighting--ff42d899-aae7-4464-bf9a-d90702dd89fd", "sighting--0ce99fc9-e7a4-48bf-b003-dd5d6e9c638f", "sighting--ddaf50b7-f071-4fcb-bd6e-f04ccc527a8e", "sighting--dba3d7a2-02e5-40eb-889a-f713fb64698e", "sighting--09e2a0be-9b51-481d-b5b7-7d0bae9af80e", "sighting--d0ec28e6-844e-493e-b06f-1389d9eeb7db", "sighting--9a6ccdfd-a5b8-4fc3-bf3f-29ff401a93a6", "sighting--d25ccb72-8386-4c5e-aa86-02703b38736f", "sighting--d86a3c62-5aca-4022-ae67-5119f4cfc4d8", "sighting--c21cb3de-05c0-4db0-9fa5-9fd8b767d9d6", "sighting--b3d22c5a-12c0-403b-8edb-0eba72d10c40", "sighting--42e89be7-1393-42c4-b3c5-ec5099fec82f", "sighting--cfe5e226-70e1-4810-be5d-792fbf6b9fca", "sighting--bb8f045c-859a-4618-9c24-5264af23ed7b", "sighting--4ac64afd-c565-4635-9b2d-f0fc72761e95", "sighting--121543c7-4d5f-482e-a659-7611ce057b87", "sighting--ff93e056-08ac-465f-a4d7-f4f9713e0813", "sighting--10031fee-6e62-4da0-851b-2dbb478ee4df", "sighting--9a7b8207-be27-4d85-99e7-b2160e505647", "sighting--599c00c5-5846-43e7-b752-86520b34a8d9", "sighting--1b8dc946-7080-4460-8ca1-3f5509b3e2e9", "sighting--71280bd5-698c-40db-8930-6a75fe3d691f", "sighting--374bde1d-b842-4964-84e0-79a78846322f", "sighting--0ae149d0-8677-4e7d-bbbc-3997aff09b30", "sighting--95dbb829-afad-413e-b2b9-041bef606fe0", "sighting--5034626a-b16c-45a3-8753-e04d8e510d1c", "sighting--8a58d2f7-761c-4cbc-a30b-8e2e54bea814", "sighting--c65aa915-b173-48eb-9d71-6c05fb898fc1", "sighting--3a00b7b2-673f-4ebf-84ae-e7862f931905", "sighting--22103e5e-8872-4e10-8065-96babeca9ac4", "sighting--40e4bc37-093f-4ab8-89b5-6958e557c10c", "sighting--0a906baf-3554-48f2-84c8-15ccf6a896b6", "sighting--987b2d04-fe06-4975-9f16-48795f5e4859", "sighting--12a0b06d-cc0b-469e-b7f1-737c81f3e068", "sighting--a8e4c2b6-6979-42f5-ae13-bdb2f23542f6", "sighting--df3b720e-2ba8-444a-87fd-080b78bc7880", "sighting--a35ca30f-4999-4ade-bd74-02fc737c4fe4", "sighting--1cabfaa6-0f99-46db-ac72-775686be7d8e", "sighting--7dd35f85-5ee8-48aa-bac9-e87d8c5da679", "sighting--8b50018b-a7fe-4b4e-be70-8b61fb75f112", "sighting--e5638e9c-db21-44b0-b729-4168d36504b7", "sighting--101aa01d-687c-4f44-9cf5-8ab0b85923ba", "sighting--fac25637-8236-4d77-9cf5-0f5bac3a2fdc", "sighting--4f4bc1a9-4222-4ff0-8c40-48cb8d38a8b8", "sighting--22ee40d0-4997-4c2e-83d8-07243d30b91b", "sighting--aa0cd6fb-7698-4215-9e3c-48ad79451b11", "sighting--79951e2c-986d-4eae-a1ea-0ca215127322", "sighting--677821b3-4801-43ce-b604-05000070d1e7", "sighting--fef614f2-b58f-4b96-92c1-492869efa9c6", "sighting--da23edc3-3a8a-4332-84ed-fb066b233c33", "sighting--d858d9d0-1663-4d8f-995c-1125cd9389d4", "sighting--567a8f5b-be35-4ac6-898c-8850472bbc73", "sighting--2e4f277b-b412-4035-b4c7-7dc31ca95059", "sighting--9589a37a-9221-4b2d-83de-d993d8ba5c40", "sighting--cbcbba2c-1b0b-449c-bbe1-7135dcd34422", "sighting--c1164255-269a-42b1-a611-950522439b8c", "sighting--d02aa237-6551-4e5f-a7f7-dad4844b82f1", "sighting--62eea720-9790-48d7-935d-e18c33ee85a1", "sighting--8eb69d53-f529-4c9f-9b7f-ab08e8567a32", "sighting--2e56ad2e-afde-41b0-944f-6f7fa197ae5f", "sighting--458ca553-ea7a-4bc6-a4eb-827cc3a4f9a6", "sighting--08bf7ada-2005-4c05-9301-25f282443d60", "sighting--08bde7ca-28d7-41b8-a452-a9486dfe1412", "sighting--f7f2f4a7-233b-4e6c-b64b-75e9b41c8355", "sighting--5bb52ccd-68d9-4aec-851b-aa884b0e5c30", "sighting--c1efa8d5-9942-4fd3-90d9-d5b35997db20", "sighting--7ac5d3b1-5e26-44a5-85aa-7f6e0790b1bd", "sighting--e29a8e6f-68f1-48cc-99b9-d829ccef34b1", "sighting--7e000282-6f34-489f-a9bd-8f6fe10a758e", "sighting--46e794fc-1ea0-46ec-9eb5-4292ec7db001", "sighting--005dc59c-f609-4234-a88a-c5ef6579da60", "sighting--25724941-9a89-4de6-a53e-7082613207bc", "sighting--1299654c-8026-4c34-97b9-2c365e3de196", "sighting--98fff056-647e-44c5-8d8a-8276183bc9ce", "sighting--d080774a-11b8-43c4-a03a-b2329af477f3", "sighting--e7beed17-1959-4b70-9def-33d1ed15601f", "sighting--cb8206f2-5a44-41ef-8e56-48e7ef24fe45", "sighting--5e353ae6-7a51-4fb3-a396-bce0be069de2", "sighting--e1a35b4a-309f-42c5-bbd3-bf6ff6863bd2", "sighting--28ef1f11-a5c8-46c5-841f-a0ecbfac54e8", "sighting--ee5c615a-b28d-4665-968c-e2fbe2491244", "sighting--2bc1b580-be25-4daa-8af5-26dd28155340", "sighting--8f2123f3-aeb7-4848-b23d-e3750d9d4d75", "sighting--82e592c2-0904-4c39-80a8-0d741294f394", "sighting--db910f51-01c3-4e1c-bf53-693f5be509c1", "sighting--01aff4b5-4ad4-495d-b631-280ada03e23a", "sighting--5ff4eea9-2bee-4c3c-9c92-08f688541d92", "sighting--0fe177c1-0be9-4429-b453-326640254683", "sighting--aaa15c47-fa69-4cec-91f8-2de5cada4757", "sighting--6cdb8d69-e65d-498d-855b-5531fd270bd8", "sighting--2ac05b95-0498-47d3-ab09-e20501bdba56", "sighting--e93530fd-b42b-4969-9e83-891ebf13b0ee", "sighting--8d7458dd-ad2e-49ca-bafc-7eb04c92b911", "sighting--e6c3a2d6-4fb7-4230-bdbf-ea6e95ac9961", "sighting--0d1201ed-de79-4ee5-9e73-ac48e511d3de", "sighting--94107308-327f-4707-8394-3f1830848efe", "sighting--1ce69d1a-100b-4268-9714-e2062c8596b5", "sighting--af21593d-854b-4608-9caf-421ab24316ba", "sighting--87df8060-5dd8-4a39-a127-5119f3abb730", "sighting--ad5f230c-9d6c-4f0a-9692-e124f96b8a4b", "sighting--17aa78af-7331-4051-b1a3-0713a9149ada", "sighting--ddba71d3-be1f-4c09-a342-3dcf2dce805c", "sighting--cddfcfdb-3c95-41c5-a6b9-a28d9db17457", "sighting--e1a9b1e5-5db4-45be-94fe-c7df246f2bb0", "sighting--606c2ac6-8de6-4ce5-bb6a-8099b33f7cf5", "sighting--3d6485e9-d520-4892-a7a9-aa8276c80b2b", "sighting--92589784-899c-481b-b014-133f0d16faed", "sighting--c33b2553-b1a9-44b7-b300-d57287619d8f", "sighting--59f1ccde-f902-4c16-90a8-64089aa7863c", "sighting--1b295420-39ef-4868-ac4d-d249c48e045a", "sighting--3bc5e53f-2cf0-48a9-bf43-96baed90d403", "sighting--14810908-2e8f-4a28-8819-cdf39e79701b", "sighting--57ee7941-0cde-4b58-ad16-522297660778", "sighting--fa8edc3b-e6b5-4b47-87a6-d2a4b722dfda", "sighting--55c872e4-827a-478f-810e-42eba69938f4", "sighting--0c631fa6-3bff-4f10-a54b-871327849c69", "sighting--27188ab8-f4a3-4ca4-b87e-edd9f1e4ebc7", "sighting--5ab27e1b-40ea-41d2-8d5d-01ee5740e757", "sighting--401d2fcf-fe23-46ee-bf93-6f185e8a07e6", "sighting--9b4bfb86-e21b-46d9-b2fb-6f662e2e4a78", "sighting--e11a6298-5be2-4a9f-b4e5-adc33ce32a32", "sighting--1212d173-dfda-4d4f-87a1-ff811b938e89", "sighting--5eeb65f4-650b-45d7-80d2-87766264567e", "sighting--03ca7965-7f15-4b98-bf3d-770ac724bdd0", "sighting--84288397-eaae-415a-a93e-34c5436e6d84", "sighting--5a113406-a992-4eb0-9d00-d17d1b835ac7", "sighting--9038b646-0119-4d1a-9b77-c755b448a922", "sighting--cd22b4de-6714-4393-8e76-85935d609629", "sighting--37374606-d552-4659-8662-bb6deabebe59", "sighting--c8f3e428-4a14-4e8e-bb57-e226520beb0a", "sighting--ad27e671-3f5a-4805-8060-610efe3de689", "sighting--1d1c9964-9c54-4593-9d96-660abc506271", "sighting--f09b731b-333d-48b8-a73f-a5c8cb131931", "sighting--890f716f-2673-48f2-ac4f-fb6df029bc51", "sighting--1327373c-e8d9-494a-bdf6-abe22be07b5a", "sighting--df0160fd-252f-4dbe-a3f9-8ae0ad73248a", "sighting--6fdddd5b-5eb4-4a28-8068-8864931d8887", "sighting--3a9b4165-1e94-413b-b3ba-867ea0cf59f2", "sighting--b161c6c9-358d-4717-8913-d5cc50505e24", "sighting--114863af-baea-4dba-8f32-7afe21d90bb1", "sighting--78fff377-3cc2-4834-9cbe-112a257d6670", "sighting--f505fb56-029f-4023-ab39-5050f7865c47", "sighting--92efb71d-7287-4e9d-92d8-bc0cca2204e4", "sighting--a83574a8-a983-4613-94e7-835f154ce7e1", "sighting--6c084dab-c50a-4f66-9e9b-0ba4276a8ae4", "sighting--e0f2cc81-670d-4fba-a1bd-f6b8b2744f6b", "sighting--afeaa4b0-2bd4-4cd7-a28c-363e89d0893a", "sighting--82d2ae18-1b5b-4ab9-bcd6-95d5abe2397e", "sighting--5d47bf15-b299-4af8-be26-6a2646423fa2", "sighting--5e0211d7-2db1-47b2-b2b2-9d5f2b2c3770", "sighting--b003cbfc-2756-41dc-8278-24e8a26bc82d", "sighting--df3b97b9-7833-4ed2-ab0e-01ac5d4fa2b3", "sighting--16d85f1c-4667-4653-9dd6-a58fb015ad30", "sighting--48c9dd68-d946-4255-9ba7-d59abb73d61e", "sighting--e206f87a-d2cf-4f74-8859-18b4dd55a0c9", "sighting--8ba3f372-676f-4710-931a-92db303e21cb", "sighting--9215f058-24e7-4b7b-9acf-700a5a149f09", "sighting--c7650de5-df8e-4057-919a-5033df6f360f", "sighting--6069bb7f-ce8b-4519-b78f-eaea45830cbe", "sighting--c8d218db-6e81-44ea-94ad-5d363f3b0ad2", "sighting--0d8b3ee4-e455-4ffc-8de9-f40b2333acc0", "sighting--5679030a-5b3d-4d40-af4b-329841c29178", "sighting--99073b84-e342-40de-a509-8ec8eb08d13e", "sighting--6c879503-f04b-4357-a098-9ee777475db4", "sighting--80f7fdcb-a7c3-42e2-ab6b-3c6b09375314", "sighting--9ad7a615-69fa-4f69-ab76-f64d39281ef3", "sighting--05702b0b-720f-4375-9b9e-0fc63d543661", "sighting--412e7d87-e3f6-4ab3-968d-5f9863de6f0d", "sighting--fef0fcd6-322e-45ef-bbf6-9d8b1c94e2b7", "sighting--fad7d8ec-e1dc-4097-a94f-31e32647d48e", "sighting--d94f6eb0-2acb-42ec-8280-0d6fdbc1f1b4", "sighting--e4cb070a-2500-48be-925e-d47e7f328820", "sighting--92ce0765-c733-415b-8981-7375498bb293", "sighting--ed63705a-8b3f-4078-ac1f-b28837767ee8", "sighting--1af29e75-2d54-4dcd-a7b1-412e84a04552", "sighting--af5d4a46-3ee7-44e0-8209-ab1e9866b9eb", "sighting--4c27bd80-08c1-493e-8a2e-91f3344e79e3", "sighting--a842a739-52a0-47cf-aa59-a6c2ccb0a875", "sighting--665e00f4-fa1b-4099-a59a-5b24bfdb85dd", "sighting--d449c79f-d2a9-445f-8427-8941e04930da", "sighting--e707fad1-b942-43a8-bf62-5ac204cb8f90", "sighting--e48ec7e4-c88c-44dc-8acb-6dbb11680224", "sighting--a0b82c09-da30-48f2-ac07-d4427b11c7dc", "sighting--700c1da5-ebe1-434d-a92e-098cd87d0366", "sighting--e630af53-ff12-4793-ae37-3557d131a4b5", "sighting--c75d2936-0b38-4d2f-8705-747ca970d6a6", "sighting--a1e825bf-75f9-4d42-aad0-32f0bbe79f0a", "sighting--dafd8b24-d2ab-494f-86c7-b15535301414", "sighting--edeb596c-8d98-4937-a32b-0f344d7e1561", "sighting--fbba2309-6575-4844-a3cb-b904a607b372", "sighting--565a962c-5d51-43bd-98f0-7b440f72b523", "sighting--50ff0dd4-f330-4b16-94cf-5c31674427d6", "sighting--c47aecc6-3450-47d1-af74-149ea24d9f62", "sighting--d129713e-f971-4d23-b22f-03fd8e1656da", "sighting--5a09af3a-2f90-4d31-aab5-daf187815186", "sighting--bf77ed51-3578-4bb1-93d2-24579e8ca9b8", "sighting--d8e36b9a-0bb8-4b8a-97db-3ac46ed4779b", "sighting--fd1bf1f8-7f01-4bff-9913-2600072c89ec", "sighting--c83c03f5-0fba-4a4c-b595-bf20e72acbdb", "sighting--b063f736-f5f3-4107-8011-1db98e06a1d7", "sighting--729c778e-27e4-45c9-bc96-628f38602cb9", "sighting--c1cdf694-303d-4631-960a-e8752e78c3ea", "sighting--55d05c9f-9c6e-4828-8b97-34ff147acad1", "sighting--d190d25f-5ce8-4ad9-8bcd-7aa0896c2a25", "sighting--22c2b8a9-220b-40e1-80b8-376bd30a4559", "sighting--4202eb6e-aa94-447e-8a3e-8eb294b4b4de", "sighting--10e8bf72-96a2-4efd-89da-d40927049610", "sighting--a0067f2b-cbe9-4d5a-a058-b79846bd85f7", "sighting--cbc81874-bcba-4cf9-8fbc-4a7bc809c133", "sighting--a7fdccf7-da2a-4191-ad0a-7d9b1acb4060", "sighting--470b2ae3-e61a-48bd-a927-59cfd4edfba7", "sighting--f211f456-adde-49a8-b284-bcc32aa9c0bc", "sighting--7e5083df-653f-4e16-9061-e31dab2f9deb", "sighting--597f176a-af68-4f25-9fcf-c53c01ad028f", "sighting--c2fec2ea-637a-4396-b8a3-5c83b8d3368c", "sighting--f23aa3fd-9109-4fff-8195-7de8c885857f", "sighting--b6e7c9a4-66f5-402f-81e1-bf53b3d48bf5", "sighting--a3b7675e-d0e4-4523-8263-9582cd91d00a", "sighting--7b36fbfe-bc40-4cc8-97c5-0e4135c380e0", "sighting--3b2f82bd-e7c6-4a34-825a-957cadacb841", "sighting--64b823f5-b133-47f6-a818-4ce3a40e0437", "sighting--d054d892-26e4-41c0-b5bc-88e0b9d8a0f2", "sighting--a3e044a7-cd0d-48a4-b0c0-5fb15efb4112", "sighting--ed6a2c08-1a8a-4167-9b61-0f129d744c22", "sighting--759eb2cd-475c-4f85-a2cd-c876a36cef99", "sighting--462a1200-d49d-45c4-b0d2-a02525cb85c2", "sighting--83d555c7-a733-47ae-b1dc-0f9659cfa24c", "sighting--f9133ebe-8654-48f3-bc1c-6b72160f778d", "sighting--72d39c9d-ed94-49e2-b76a-2924099377ad", "sighting--c73e66c3-5c95-45ad-a1a8-d7aa5c09a4be", "sighting--ec680fcf-f072-4baf-9503-726837eccff8", "sighting--4c0ad379-62e2-436e-8fe2-404fde51206a", "sighting--ca53bca3-b767-4229-b399-b06a8f0b48be", "sighting--56e39b47-8d98-4522-86f0-3b8afda8920a", "sighting--360da316-c3ef-419a-a76b-a0ce3f9b992d", "sighting--97255ca6-f32f-4603-b6c5-e39bc2a2eed6", "sighting--7f0bb69c-f5d3-4ae6-9016-970cf05c3987", "sighting--ebef0b1a-1544-4609-b438-bcbbf60a7bd1", "sighting--4929d92a-ae78-4277-a922-5b8376a91740", "sighting--cc535d26-9caa-4c4a-9659-21ec82ef33b6", "sighting--183fc955-10e5-4a1b-8f31-0cb9724a1909", "sighting--c5ced256-e7ed-49ed-9828-42b63bf0c376", "sighting--7d420dfd-cf06-43e0-b953-8cbce66fddea", "sighting--08536b0b-5b41-42cb-b922-607241a9bce7", "sighting--9c966ff3-18b1-4652-96e7-25ce79c8c1f8", "sighting--511028eb-c064-49d5-8566-9bbd3c6deb5c", "sighting--ba375757-19b0-4426-b510-0ae12f435900", "sighting--6ef12038-f773-4b41-aeca-e491c5180caa", "sighting--958acbcd-e6d2-42ec-ad1c-03c804df7c73", "sighting--010cfff8-3f00-4374-8f75-b2428808911b", "sighting--3bdc1fb1-da2d-41c0-bb06-dcf0d53e247a", "sighting--cb8c8a6b-321e-41cc-8e4f-a123acfa48e0", "sighting--0bfebf8d-664d-478f-abbb-35514f5f3537", "sighting--2ca685e5-baa3-4582-97e3-a0f80e48469c", "sighting--a7c68e07-8b1a-435d-80b6-ce018d1a97d2", "sighting--35b99f10-aed2-470a-89c4-01d1bead36be", "sighting--f358de96-0721-445f-b9cd-965f66074231", "sighting--01032d2e-19fc-4cbc-b66f-b9030b0f391e", "sighting--a9cfe01f-2468-486a-9665-e6cfce9ded2e", "sighting--2f351219-69c3-4d4b-a95e-e7a7b9d826ad", "sighting--96a35e74-312f-4063-b02d-929830f61ae4", "sighting--6200a71c-f17b-40aa-b067-d7493bc786fe", "sighting--43165f36-73d7-4147-aeb6-9f007d9229b2", "sighting--dcbd927f-7cdc-4001-9bb9-4d999cabe618", "sighting--79376a21-eab9-426b-a5b6-29221ff18ec4", "sighting--72207cd4-d90b-4907-93e0-5f60a89baa1d", "sighting--e3d26c6c-9c08-466d-8d77-c7b9cfd34c1d", "sighting--4e060b70-a02a-4f88-9cd2-e6544d0c29c2", "sighting--2244d4ae-704d-4dac-90cb-026c9b11a566", "sighting--fc5ecec1-f604-4638-80a7-e2a97ee2e006", "sighting--e4722e01-f3b3-4e34-8ede-5c841286f786", "sighting--65812f9f-9d8d-431a-a2e7-81ddb30f1cf1", "sighting--facd7c54-b2e5-45db-aa52-4f4508dce1e5", "sighting--543afcb0-54a3-41fd-b315-1eea03dcdce0", "sighting--059dabda-c0e2-42d1-a9ec-a35c481171c9", "sighting--ac9fea95-a02f-4ef9-83f7-bb93cb38d218", "sighting--d707f4d4-edd2-4ba7-ae97-e18755091305", "sighting--c8d2b044-17ee-4654-9eab-3cbf140dce89", "sighting--560c9f2f-53b5-4b79-8231-f75b1cf1074b", "sighting--6345761e-e8f8-4782-8a1f-defbe0fa98e7", "sighting--73bcc9e4-3fd9-4dfb-b20f-d621dcf4b68c", "sighting--1f32ee3e-ebcb-4df4-902e-09985860cf67", "sighting--f478fd05-8502-4d9c-83cf-b678b1aa9063", "sighting--5134ed66-6d59-4f3f-8b99-bed4f18a2c6c", "sighting--084e0426-22bf-43f7-a1ef-b70233ba9673", "sighting--28ee365a-8712-41e5-ae17-e21be810cb56", "sighting--b58f86e9-6efa-49d2-b8be-941bccb41074", "sighting--39643516-3aa3-4f56-af5d-0ed52800626b", "sighting--80e2e632-8f99-480a-9f67-63a5f172b2df", "sighting--c178e94a-ab17-4699-86e8-e91055da99ad", "sighting--d775b1c6-1ce6-4ff2-b045-e2779e343b62", "sighting--dace1447-69e6-46cf-8dce-7ca0d6912aad", "sighting--9f49ff1d-29b5-451e-a882-f005be6f51f4", "sighting--6177fabd-2d84-4177-947e-ed1b896cc8bd", "sighting--4bc924ca-fa25-4df0-83c6-b9d30b6a11f0", "sighting--8628f365-cfa8-4dc7-be39-8c136e2f89e1", "sighting--6a1b1f9e-244b-4600-9112-0ea889e0ffa9", "sighting--3a2b7343-0266-44ab-ae28-72fce890edf9", "sighting--634cb2ff-3a90-4745-b4f1-66ef46ed80f6", "sighting--b4a02f19-de0b-4dfe-aa87-c8052b47207f", "sighting--1f8c7c80-d348-43f5-92c7-848ad779d032", "sighting--30449a5d-20e8-4da5-b0ec-2fdc072bbbab", "sighting--4032fb84-fe70-4911-b0a2-29c03496aa49", "sighting--f316ce83-1ac4-449f-bc7b-d2c6dc7d1123", "sighting--3b635df0-3d19-4542-8421-f73775b53817", "sighting--beaa4536-43f3-4911-97f4-88c8484c57a6", "sighting--04421a77-6141-4bd8-acbb-fd3a2799a428", "sighting--c3d7f314-caf7-40a8-9f41-2eb4a84aed92", "sighting--d7175a7f-ae51-4573-a600-faea8f9ebba7", "sighting--ce11241d-7b78-4da3-b6df-4b73c08f2a76", "sighting--0ce21914-f7a3-4795-807f-05a1040dccfe", "sighting--0025f245-0a41-4675-a086-9a5c9763ca62", "sighting--cb52280b-2fd5-4f27-a1c8-720afe5748a4", "sighting--358ee31b-17ee-4297-bbb5-d171312101c4", "sighting--c68c7edf-6630-4b38-921e-88c6989fe600", "sighting--e16c1e66-dac3-4a12-b91d-e3ae708995c6", "sighting--e12d63c7-e2f3-408a-9633-e05f3d323697", "sighting--6f4f7ece-5460-4dc2-a94e-959eea86456d", "sighting--83399249-d7dc-43a3-877e-7282fcd115ec", "sighting--42c13998-2ae5-44b6-bc62-167d128116cd", "sighting--12658ea9-f825-4a58-b0f4-6804b6557f46", "sighting--a9521e6b-1856-4a91-a019-1ddc0a090bd2", "sighting--781a6d98-6f6f-4d0f-b863-98f7a5dca44d", "sighting--8c00ed5e-8177-4741-a381-72865acbcab7", "sighting--74098c02-37a8-4f4b-a7df-c3402cc409d0", "sighting--16c5bd0e-3856-4c15-80d1-97c726d19afe", "sighting--78eef445-13f4-4095-9c45-36f7cc331bea", "sighting--49375f0d-b13f-4faa-8cf5-c920fb78fe6d", "sighting--c9fe2f75-3a8f-407c-a707-5d137d3847cd", "sighting--c4c01635-91dd-4da0-a2ee-3ca3f42e5a31", "sighting--88d60923-024d-4455-bbc6-b79e2fe7ebcd", "sighting--44b41551-02df-472f-85f3-c2afeea71b75", "sighting--0c7054d0-6678-4163-b0e3-518d9ee34185", "sighting--5fc8e4bd-7e1f-4729-b217-7a203be68246", "sighting--6f966b8c-e361-4781-ac4f-969e975e6200", "sighting--5be41dce-e654-4f3b-9ba1-218e33c8859d", "sighting--4736ae22-2a1a-4e1a-93cf-97046ffd1831", "sighting--390b72b5-e264-4dfc-8952-a62f6b019e20", "sighting--b32c4a97-c523-4901-b4e4-11a99f10ac11", "sighting--375448b6-b863-4c71-996f-9ff330c251bb", "sighting--d2d7f1fc-dab8-48f3-84c4-80ed05894685", "sighting--ca15c58f-619b-4e0b-a875-1cd1a0465fe9", "sighting--b426c3b1-db80-4510-a924-cbb4573f112b", "sighting--97fa01d0-7fa7-4b30-80d0-682b9a53f479", "sighting--2b062df9-453c-456e-b8a0-ed65b2abdfc2", "sighting--a9907307-f791-4f09-b9d3-a0f5807eee45", "sighting--f63ace4f-70cb-4d7e-80ab-66cd0d567e71", "sighting--e3ac928f-a856-482d-a5a4-5d08dc5ad1bf", "sighting--605ac0af-5b99-44bb-87f1-4d512261a209", "sighting--d34f1784-b2e2-45fc-a7c2-6b0bef5a1d00", "sighting--d13a40d0-a113-4efc-939b-f635e8cd75bc", "sighting--8156f5ef-f9a7-4bf9-8966-a72e1bd61fdc", "sighting--9368f664-2429-4df3-8380-b56377c75921", "sighting--16ab8b22-b8b0-41e7-a5de-fe7a5e307b37", "sighting--720b0292-c70f-47db-847d-2f093f108f37", "sighting--698e43a5-2d62-49c1-a49a-c5d0ed706e9c", "sighting--5cae1551-f513-4ccc-8a18-34f3be35c11f", "sighting--f8b86d8e-345c-4eda-a008-6e2d73785e9a", "sighting--382aed13-6ab3-42fd-861b-058954ebda21", "sighting--182546eb-393f-4088-a9ce-1318ac29ee16", "sighting--d918c113-a3da-46d0-a4f0-f824a454f490", "sighting--01a6aef3-a74c-4f18-b351-2ceccab00765", "sighting--8c3a5989-eedd-4d12-8c1b-f571691830ac", "sighting--1bcdb215-0d81-40ab-9eb8-32785feedde5", "sighting--d08c9785-1c5b-45eb-9222-9e73972beb9c", "sighting--9feb3bf1-5b45-44b7-b6a0-d6f6766cf6b3", "sighting--0d5a6572-520d-4252-bf17-ccd0014d2875", "sighting--7a164e55-bfc0-4b9f-a538-a73a73b97312", "sighting--84f6be4f-074f-4eaf-84df-936cd62561d0", "sighting--872b53ea-c152-49f3-acaa-628bc48440b4", "sighting--fb2ab53c-6d14-4103-bd1b-4fce5553f1f8", "sighting--fa64c4ea-0080-48ff-a22e-c7c97f8a3177", "sighting--e74ecc1f-0954-4f09-8276-75adc4bcf60f", "sighting--8cb8bf31-e9b8-45e9-9db3-983c5d7506c8", "sighting--1f48bca5-4660-444b-a89e-b158553bfb38", "sighting--1019b447-bc8c-4fc9-a681-b31dd06c4db3", "sighting--05809054-68f0-4c77-a9fc-3073582f837d", "sighting--ba911d4d-9ebc-41a5-829c-eb53bc537366", "sighting--26d09fff-8c13-433a-b297-33fee74168d6", "sighting--0caee3cd-4d4c-414b-ab49-399f05d7e7b6", "sighting--d800a05e-3b01-490c-beec-e878690312bb", "sighting--ca0b3ba7-2b1b-4f41-9014-402bc9ada9f4", "sighting--9c61b6ac-b054-41b6-9600-9dd67cb386b7", "sighting--3ba299c5-a8b8-4a19-8528-c6f32810e527", "sighting--e6d832ff-815e-4695-96fa-fb84cd6c103f", "sighting--26c3e08b-4b6d-494f-b404-9ec60fce6412", "sighting--7978d289-36c0-4b26-a7c4-59892cc81c0a", "sighting--eb6dd5b1-47cd-443d-9ec8-7f36e3adb784", "sighting--0f42f14a-4fd4-4e35-8780-908e80fe7458", "sighting--cb7d784d-5a4f-4277-a195-89031ace9aeb", "sighting--76d3f0c3-bc2b-483c-a68b-f9318cada69f", "sighting--8042d664-ffed-43d3-b49e-8be546a6883b", "sighting--fdccd3a6-5b85-47f3-9eef-1ab938cf3135", "sighting--5d6a5435-94d6-4cef-b07c-d2e470120f59", "sighting--ae2b7f18-b234-4c4e-a95e-e02ac8c04a96", "sighting--ec17f92f-8cd5-4a75-bdd3-f5b284518332", "sighting--f7dbd38e-729a-45a4-92e0-7b8a1378f186", "sighting--c85bc64f-ad95-45da-91a2-43b053ffb9d3", "sighting--48b79097-fca8-432c-816b-7acf5a22b43e", "sighting--08578ee4-5c2f-4637-979d-312e821454be", "sighting--3ccfa4ef-7b57-4046-bae7-48316b22a74a", "sighting--fd089bf3-ce0b-42e5-8ab3-639edd136f6a", "sighting--c5b1c8d0-0d40-4cd9-837e-074fe58b1de3", "sighting--1157998c-936e-415f-9669-93f1b79ad932", "sighting--500d8768-26c7-4768-bc24-aac018611917", "sighting--9691ec6e-6c83-4d19-a3c7-8769cc46a758", "sighting--a1df9d61-4634-48b8-9680-e45562030c6e", "sighting--08d42e5c-9eb8-4932-a8e9-9af60d9bcb92", "sighting--5705c37c-444d-4bd7-8a5a-c32c052df4b8", "sighting--79a4e495-8ade-43d2-a9c0-95679f21f8c8", "sighting--4677526a-c40b-453a-b27f-a56089ea511d", "sighting--c1700088-0c4d-449d-8279-1fc1595d7409", "sighting--697df82a-f29e-44de-adf0-48d07e17d7b5", "sighting--5e9959db-fd6e-4538-b800-b283adae57f9", "sighting--01535259-ad1f-4101-bd6e-ba5ea8d93911", "sighting--053ef19b-14f5-4fd3-ac2a-ec0316e96f31", "sighting--b2208631-2c5a-486d-8158-a98e51857175", "sighting--a7e99d93-f1d9-43fb-9ee3-7efe5fba406a", "sighting--4dc4c3a6-fadc-4d25-9d45-286773bd59f3", "sighting--e277f184-d1a7-4e3c-ac9e-cee5c54261ed", "sighting--0cdea256-f4a8-4180-a812-98cc3b4dc4e9", "sighting--a78fe13e-6f44-4b04-a762-07d51b1da0ea", "sighting--6594c351-15ed-4a09-b1ef-35cf29059b3b", "sighting--fc0110d9-1ee2-418b-b9d0-442885fcd138", "sighting--04482d39-ebf9-4cb9-b6c6-7727dfb1d829", "sighting--7e565bfd-fda1-49d2-a221-3f812790ab10", "sighting--76b0a251-bedc-4eee-87d9-4c72bcf46d3e", "sighting--ab4df534-3150-427d-94af-156c4848c35c", "sighting--c9c13e4f-d150-48fd-957d-dd5b7fd2296c", "sighting--9acd98c1-6b44-42a8-a5f3-cd4ff10531c6", "sighting--4d599e58-9567-4c8d-a463-38f4b54edd88", "sighting--153de721-e94e-4107-960d-9b3f23ccee9c", "sighting--942c0d9a-0498-4866-9283-564343f35662", "sighting--d2b43517-2a43-4e64-8e5f-13647d81a39e", "sighting--6a03edd2-5c86-41ab-b87c-be98087a4827", "sighting--b280a013-7cb5-45ce-be79-4558e87a038d", "sighting--02ce48b3-5916-44fb-86ac-1006a9c13e63", "sighting--de099973-10a7-4a6e-8b5b-5e4fcfe4d20e", "sighting--1a0228ec-2521-4108-baaf-cbce7d9bd084", "sighting--b525c965-4218-438d-8183-71d2ecf578ed", "sighting--18bcdc88-6d26-4f9b-83f1-8559206d6c40", "sighting--959748b7-02c5-4f0d-8fc4-58a8e88eb6f5", "sighting--f33fde8c-36bb-442f-a0ba-4f6b2bda4b41", "sighting--e01ffa6c-ee38-45b6-bc62-07bf28b3a447", "sighting--2ad1927c-af84-43ae-88e2-8516c8dd0848", "sighting--9a6c67a6-5295-468c-8a11-873c1375a1a8", "sighting--f9b540ed-418c-466e-bd85-48f3cb5c7f0b", "sighting--a30c185d-9da8-4b1f-bfd9-598159e9ab65", "sighting--bfcb0deb-19c7-4256-b764-3ac4bfadcc1d", "sighting--da1ee075-be9f-4442-8394-7a7c6e18199c", "sighting--d6f12677-e542-45cb-9217-c8a404132490", "sighting--5cfa4cae-824a-45c4-9947-56e18d27bfe6", "sighting--4565ca79-1d75-42d4-9ec7-2a974be3e0b9", "sighting--34b281ff-50e0-405e-b424-5e8b48b8eb81", "sighting--e9cfed21-ccd7-4211-9d5c-ed23a87c2046", "sighting--8f435dbd-f79d-43e5-9cfd-c6e4453c8536", "sighting--57259a94-a711-4fb4-b127-eb0d08e3bc4a", "sighting--226dbc8b-7191-4613-ab5d-427b63596ed3", "sighting--15307df2-c646-4fdd-bf79-9acf5f5dfbde", "sighting--a49c1248-3766-4536-a13d-1facdc6468df", "sighting--25094762-dc51-4c37-a0f2-375cabbb3cbc", "sighting--a8dbf81e-bd35-4367-b631-f290f06b86f5", "sighting--69906dbe-eb21-43f3-9c6c-29bbec15a0c7", "sighting--bd8ab96d-6084-4cd8-84c2-6dff6b3af2be", "sighting--23e26cb6-feb8-46da-a1f2-2c063c0a0a2a", "sighting--c94f86d6-70e6-4801-b0ba-dc8f7c6d109b", "sighting--137b7c66-29d3-4f8c-8bfe-505476c6074b", "sighting--f0885b38-aff7-4146-829a-957653ee92a7", "sighting--2d89c111-a728-477f-bc99-21cd17eb150d", "sighting--b4a29b72-ab17-4c6f-9b8e-bd21875664ca", "sighting--601141d0-3973-4c9f-ba8d-a5347b4e2f11", "sighting--dbabdd7f-c77b-4905-932e-b25e0ecba43c", "sighting--af515a5d-a9a5-4095-a214-7fd912d94f2f", "sighting--9a774b73-df87-459e-af35-dd35524ce14d", "sighting--016a3240-f3a4-4313-9014-e15b243241c7", "sighting--cbc5b63a-e876-410b-91db-ae864c6648e3", "sighting--4c134443-ddfd-44fc-9c3f-dcf70ee55712", "sighting--f40edf07-4ac2-4479-ae9f-559c59ab2e8d", "sighting--13a8961a-d907-48e6-b9bb-fb33f59d5ad9", "sighting--58b7532b-39a6-43dd-864f-06f6ccce5e82", "sighting--baa19038-a4a8-4f0e-87cf-4b77fa9bdd38", "sighting--6ec83172-1a32-4851-94a4-4af2e9c53c7b", "sighting--fc2165f9-4516-4642-8ea7-d207876e6e36", "sighting--5cce97cf-01f4-4315-bd8f-cc190fdd566a", "sighting--df5d19b3-0046-4041-8141-68cc6ba86f6a", "sighting--c8fbfae8-a88b-4825-960e-6d257a4fa3eb", "sighting--676f8f6d-75d1-435b-a170-86ad233f053a", "sighting--e5bca925-e65d-4d7f-bcc5-25938e2a0ed8", "sighting--f1548b04-357e-4aa0-9dbd-22a78d637b31", "sighting--a950697a-1ece-4e48-a499-0ca432b41d71", "sighting--ebbe0408-c864-4dcc-bab6-636c712b1cff", "sighting--2a60ad4d-9b96-4499-8f84-bd09a8a65ea2", "sighting--1077f966-bc45-4b79-ace9-ec21328218cd", "sighting--3f5de362-dc0b-4012-a425-2336f1cb6bec", "sighting--01798f08-fcf7-49e9-be70-a13b309a2603", "sighting--5a050351-a9b1-4f4b-99f2-3a6b0df30f11", "sighting--d1ee520e-f389-4450-ad7b-366deb0a04d8", "sighting--ea2afecb-ee53-4e01-9dfa-1335dff9cf9a", "sighting--846ec512-5177-4954-bd5b-f0d5bf4c9bf2", "sighting--70f822c8-02ee-4368-ba05-298d1ded84fb", "sighting--1872393a-f37a-47a2-8856-2c327cf991ad", "sighting--816dd01d-545f-4aa8-b4ef-89456743727b", "sighting--d464fba3-9ae0-4a70-9bb2-9f5b229c6750", "sighting--89a93d5d-1ee4-42e6-a3a8-937ab51e4c2a", "sighting--5e8d04ef-1151-48af-b913-bdadde8f77d1", "sighting--8840a021-6f8d-4215-bae0-66ac23671445", "sighting--a5342cf4-e1ba-427a-ba8c-496feca193f8", "sighting--b7f73f7f-bfb4-49d9-96b4-38dc5bc57e3e", "sighting--30736ed2-06ef-49fc-b2b5-6ce8d584de59", "sighting--7f1eec36-b7c4-4723-a068-23a43d0dbd1b", "sighting--7743b8f9-cb95-4203-9a60-e7cac0426b42", "sighting--953811ea-f9b3-4441-afd4-9f9ce801b18c", "sighting--a16d53cd-9925-4ae3-b8d8-9db7cfe7cb93", "sighting--246d79ca-3fba-4cab-9e3c-4c02b5afc097", "sighting--b858b275-0dcc-4c6a-9889-888fa46c9c31", "sighting--1e58e46a-d2a9-48da-b2bf-b880ee1b4f4e", "sighting--f08219b0-c90e-473c-94e1-18a7fa2ba14a", "sighting--ad93b66c-3f86-4cb0-a613-23e157fa0023", "sighting--0fbbdf57-43fe-4a99-98be-1e72a8f0c2f2", "sighting--3b85ed65-d7b0-4a9a-aeec-47b231a2d408", "sighting--284e50bd-c253-4803-8c27-ca8db5edd606", "sighting--30c200f8-9fb5-47c9-9f8a-22bae6f4f9c5", "sighting--efaf1b14-bdef-4b4c-a583-c0f63c11ecdf", "sighting--4add4a54-b412-4715-b9cf-322145e4ca63", "sighting--4d303153-96db-4f7b-bc78-5e490d9029fd", "sighting--8f6373b5-959e-48e9-9dbb-d32a37ecbfac", "sighting--9cf02fbc-a5f8-43a2-99fd-fb6e2abb02b2", "sighting--2a24bcb0-3f08-41ac-9dc2-30ab7858567f", "sighting--a204c0de-3dfa-4053-b312-66c96886c33e", "sighting--61f80e88-ba2e-495f-8e37-caa16362be06", "sighting--99bf5067-45bc-47d1-a0bd-8b526fcf7eb0", "sighting--fe3e042e-9c9f-4586-841a-0dc872a69254", "sighting--cdbf29fd-18bb-4b40-9084-5f49bb167402", "sighting--f6b1a185-3723-42fb-9d75-6e22af7ce0b2", "sighting--0b8e082d-d855-4405-973b-b9c1e48658d5", "sighting--04e4a604-41fa-43c0-a408-5c82821ac980", "sighting--64b9d067-cb99-4de3-bc7e-92e2493d3608", "sighting--a5a3c8f0-94a5-4a29-81c5-be0d17df043c", "sighting--19d711f3-d303-46c1-bf7a-7d9ff9739bcc", "sighting--f2dabf09-a4f1-48d6-ba65-9d6a1d1a6fca", "sighting--002ec129-4bce-4bd3-a1ff-e9d8b93a8284", "sighting--7aeedf8f-10c2-4d7e-b658-619ac2a258e9", "sighting--c48579ce-155a-482d-89ca-0bfa3fdacb63", "sighting--8450b590-6c0b-460c-b7e9-eff0b4f96fb7", "sighting--4971a21e-fe63-4160-9343-51445f59f2ea", "sighting--131dae3f-a8b7-409a-9fa8-cf6a09362f09", "sighting--1f7c9c04-3e1a-4d91-b888-f94792531526", "sighting--32ad865f-5b42-4c57-a918-c30ee23618be", "sighting--11797eb0-0a2e-4f17-ae05-51833803997b", "sighting--37e029f6-93cf-4dec-8e32-8faaac21ad9c", "sighting--2a8baa7f-07b6-43a8-bb17-f39c488505fc", "sighting--738ef2ea-4051-4cc4-b260-51680a314661", "sighting--0b54c002-38a5-45ec-907b-cd50ef860bfe", "sighting--52168ff3-aaac-42ed-af81-4927b7a6f1a9", "sighting--ea36a09a-6718-4414-baae-b8cb8cf152e0", "sighting--5d88befe-ff81-4397-955a-1bb30a6102a1", "sighting--1e988276-1f17-437d-bc51-7cbf2632d13b", "sighting--035d1efd-78f3-4a98-9377-259662cf16e6", "sighting--aa43c45f-36e5-4753-b41d-29b74a44d327", "sighting--811af1f1-a518-4cb3-acb7-4a798976860a", "sighting--e8765c89-a9a0-4c78-88e5-73ef8c45f4a9", "sighting--4de31532-9963-4da4-a7c9-e4fd8cb745a8", "sighting--c66ad4d3-12d9-49dc-b615-872b1f781376", "sighting--5bdbdcde-b57b-4065-9514-cf79a2c2ebd3", "sighting--17aba07e-15d6-49ec-bf07-6993516a5be7", "sighting--ca47e178-1222-4c1d-b3a1-45513112a014", "sighting--939a37fe-974e-4505-9d61-a8c7a9d9b592", "sighting--636ddfb3-cc24-4b80-9310-5318ead0c0b6", "sighting--931f55f9-982a-4601-a7db-eb19f8bc6a7f", "sighting--21674b82-fa17-4d32-abdf-f4a78ee01939", "sighting--80ba545a-8e01-47ce-a4da-22ce34b59c4a", "sighting--81e240eb-bf78-4a36-b51a-c255313dc9ac", "sighting--13ec1e47-1d14-4956-8b85-93560989754b", "sighting--eed3e482-0a8b-41e5-9d08-bea1abe499a4", "sighting--c784fe9d-137d-49ff-bcb5-a60aa9835a35", "sighting--a98ee816-52e2-4367-b995-111b03af0a8b", "sighting--b07ab76b-457d-4d16-b8f9-f945b4021f7a", "sighting--0bdc8664-7ff6-4264-96f4-fca13f5febbb", "sighting--9999332f-09ed-4793-8ce8-6849b8f1f394", "sighting--8b56824e-f71b-4520-ba26-532fdd0271a6", "sighting--669536b8-1780-4b40-8922-059bb3476848", "sighting--16ac32d1-3972-4893-80a8-382c809f7733", "sighting--b4737141-7279-4821-ae54-7560cc1aa72b", "sighting--5d9bca33-7209-4ae0-a51f-96d75c4cf330", "sighting--8b47a1e7-8b8e-4beb-a2ca-24a083d3fd12", "sighting--3952695c-0b2e-4ecb-a4c1-df5ec568fac5", "sighting--2b7bfb5f-5d38-4e10-80b8-917d9b4b2642", "sighting--83dcbb3e-7307-45f5-8d9c-223fc7279e10", "sighting--23a27764-813c-4abd-9c69-c67d10ff48c6", "sighting--6aee7592-5d8a-4490-9cd8-fb31a760b108", "sighting--1428a4ee-6df4-45e1-95c7-1fb4f43079ec", "sighting--114403fd-44c9-4f56-ae83-0d47aec70127", "sighting--3954d0f2-eeb2-47d9-8b78-d45239151309", "sighting--7ce982cf-a41c-4a5a-baa2-7aaff6883319", "sighting--2d349cdb-0cd5-445d-8030-c649b8f91b17", "sighting--e90af404-403f-4d15-87d1-4c794975abbc", "sighting--3ecf34f2-47b9-4bd0-a9a4-c83c02663623", "sighting--7565b387-4259-4095-8423-118ac217ef86", "sighting--65f8b9c7-634c-47b8-b33e-65df6310f58d", "sighting--c7f33858-32a4-4172-a86f-ee8e012e3672", "sighting--cf4c4c9d-83be-4760-8613-f307953c7407", "sighting--cd2c7228-1b26-4be2-be10-21e668b915d4", "sighting--68bd4066-8584-45c9-addf-9f00e92017fe", "sighting--50e20fa4-a0ff-40b9-be08-e0250758b85a", "sighting--17659327-ee7b-4be5-9dc9-9b1a3c38c0be", "sighting--a585046c-e51e-4936-abf6-e43356590848", "sighting--f057820a-f212-4528-8a73-8af41ed9b018", "sighting--de5d2758-fd32-46a4-bf4a-5723d5e30c0f", "sighting--5dd2efca-2bdf-42cc-947f-da7a8da4f238", "sighting--3ec36963-ade1-4b66-8470-2b98577c5521", "sighting--dbf431a0-58fa-40b9-94b4-9ab6faa25c94", "sighting--a9300cce-6289-48bf-9412-acdcbcc34f99", "sighting--6a7eba72-2ffb-4bd1-9d07-e138b603bb99", "sighting--cb9abdb8-28e9-4889-a33a-d61fe383f941", "sighting--fd4a7226-1436-4480-a557-7a276953a6d4", "sighting--952b651c-988a-439d-a4ec-a08ca3aeceb0", "sighting--06ef62cd-f6a9-46bd-b24d-f3c92cea93aa", "sighting--81ecd377-98a3-4e84-9795-97b560aa7dba", "sighting--68a4d6ab-7d04-4dd5-9d48-e50e421794c5", "sighting--5e0d5511-9103-44b2-bcc2-a6846bea385a", "sighting--3e11aab2-03c2-48a6-b733-728c61bd8896", "sighting--84f2f513-427b-4522-bf08-c9f57fa79763", "sighting--8fd673c3-34b8-4293-8955-043c9b99d7fc", "sighting--12caff5b-300e-4be3-be4d-84df2da56f62", "sighting--a11e0ecd-efba-4919-a382-9551fe4087c6", "sighting--5815e0b1-c1b6-451c-93a7-1ed3602a53e4", "sighting--6754971c-ffc0-4f68-997d-9a632d9d180f", "sighting--f9f85dc4-df3c-4ea4-b738-f4e919a0eac6", "sighting--bb9e4e64-54a1-405f-ad99-6933864982d7", "sighting--823939cb-4333-4265-bcc4-09727c0ce2a0", "sighting--9f4dbca6-3b93-4198-9cef-2fd0ee9a9e3a", "sighting--26234386-da41-47c1-a4ad-0d8271ff1669", "sighting--cd4b0798-4939-4e55-bb43-48c55db52403", "sighting--746b62eb-2b49-4b69-a37b-0bda27523c27", "sighting--ddcce392-0d3f-4435-a50d-1e597a52cd7f", "sighting--6dda053a-3aab-43ee-908a-dd22c72ef93e", "sighting--2e70b3d0-e63b-4ed8-b00c-65e397860e58", "sighting--c3044f7a-471f-47ee-b233-0dae8a8bdfcc", "sighting--12a18329-d63c-42ed-be77-c89d25e91c81", "sighting--eb29fa7d-8c81-47c9-9ed3-46e16e2061f2", "sighting--ab38a1cf-b025-42bf-bfb2-a135e51f7698", "sighting--f1881fc9-5a7e-4928-9125-f8133394d798", "sighting--456fd62d-1fac-4969-b3a6-80b756399169", "sighting--b2a4c20d-5a0b-444a-b4d3-b086af137668", "sighting--ff437ebe-9b69-454a-a37e-5451e497e4f5", "sighting--7436636d-3cda-49a4-abdf-f0e3c9205307", "sighting--5976dbd4-cb92-4dea-b6b3-67d2694fd334", "sighting--6f7a4718-5287-4d81-966f-62c8fa855ac9", "sighting--34c30bc8-68c0-4b78-a995-d4dddc1322db", "sighting--0e53b234-eb81-4b62-8577-a46e339dcfba", "sighting--2ae995dc-a1f8-43e2-8ebb-782ecd8891ea", "sighting--56fdfb89-8484-4d69-9d98-a5c4a7a5c26f", "sighting--66ec4d78-3f39-4f23-b478-c1f74c58a510", "sighting--be30aa8f-670b-4b1b-9a3b-c99349904c4d", "sighting--fc183cac-8cce-4cb6-bd73-f3ee151c1f98", "sighting--995bd5e8-b0ca-4fa0-9aec-407b65674f98", "sighting--d0314200-7632-4acc-9cb9-1180009f528f", "sighting--fe4435da-392a-43ef-85f6-821012b08194", "sighting--28cde1e9-8e25-422e-b0d6-dc635a470e87", "sighting--fb5941c0-f7b0-4912-891d-5b696e54bdc6", "sighting--c955466d-59fd-4ef8-8bdc-ef33a97b1708", "sighting--177e894e-a7d4-4c04-92cf-4f16d4451000", "sighting--69dd4149-1dc7-4da4-b8da-9379bc812cdb", "sighting--2e78936f-3101-43ca-b124-dc88df09159d", "sighting--889c151c-7a1f-4229-b369-8a9bbd38f459", "sighting--eb8ec13b-bda0-4dfe-97a2-e0c44d100a49", "sighting--2e13d5d3-0714-4ef1-a193-ba0e255037b3", "sighting--05ff0f44-d3de-423b-8668-b8c14188cf68", "sighting--be35e36c-6f54-41ec-9438-7dadb16d12b7", "sighting--77095ca9-0321-452d-930d-3f20cbf464a2", "sighting--6235a52b-dd8e-4ae9-ab78-1c72156ee63a", "sighting--551a031b-5935-4f93-87a3-94cc827d3223", "sighting--96fa38aa-c1db-467f-9be9-2859a63cefb9", "sighting--a3bc1eb4-98e8-4d25-bfe6-cd5377589ac0", "sighting--ac49cf2c-dbd9-46eb-8902-e4e74eb8ab2e", "sighting--5cdf7f10-b090-44cc-994a-503a47240ebe", "sighting--a3f7b004-d72d-4b72-9454-717b12b5de24", "sighting--3334fc2f-5b43-4f9d-91b2-18db5c342bfb", "sighting--4f08c4bf-bcd5-4fc4-9922-ea9e48090bca", "sighting--180da3a1-1b94-4702-a332-c1c80636fed8", "sighting--04f85b9c-fab5-49a8-9f94-79e67a0818b6", "sighting--89b8eeb8-9ab0-45b4-8398-caf2aa2d2a94", "sighting--4c86ac69-fcf0-4c58-8e81-260f38736f7e", "sighting--76a6613b-c98a-41c2-ad47-e02f50c4189d", "sighting--369a4a8e-6217-408e-9eed-9145a375925a", "sighting--3c64c4bd-ea66-4ec5-9448-b594d7717666", "sighting--31f595cb-3be7-4ea4-a1be-804295b51770", "sighting--9046dbe1-b099-471d-9867-1ec5a5be9130", "sighting--9afe5e97-bd0b-41fa-b0cf-013b3b546d24", "sighting--cfde7479-8df5-40e7-af75-91c0eb6926c1", "sighting--a4b53a13-ffd7-4c98-8e60-486a661004d6", "sighting--03b6c0a0-bdd8-4978-9f46-773f333a7cc1", "sighting--0f6d94c2-f82a-4c78-b89e-de76fc717b5c", "sighting--e53bd9cb-6e1b-45c6-ae50-73dd1b17b7ef", "sighting--25988b7a-b3b8-4c5a-b524-a50198eac1a6", "sighting--99321add-5c9b-4294-96ea-48d11362b35c", "sighting--6df4dfbf-4836-4632-ad70-b1b554b3c6bf", "sighting--9821116e-a994-4172-b881-13038750fc69", "sighting--423c46c1-4fbd-443f-89e6-dd48f60433da", "sighting--663f3387-655e-4dfb-91de-1c054dc03ebb", "sighting--b97aaeff-4add-4264-a9e7-b5e58df223d5", "sighting--3ab1552a-53d9-4998-8375-1a332d3aa346", "sighting--91debe73-82d4-482f-9e48-dddea7e4818b", "sighting--fc3d7457-7793-460d-b2e2-5af9bc85f3d0", "sighting--d5239576-6edc-48aa-b7e8-430806d2c769", "sighting--403c4248-20b8-41a8-b523-09de99c0b775", "sighting--0ff9b290-caa0-45a6-89ce-7ab55261e115", "sighting--f1d94e59-5a11-4164-84c0-bbd162f4d28d", "sighting--32704695-3e00-4661-bdf0-de11ecd7982a", "sighting--6c4d0f62-f2f6-4ddd-aef6-241d5335c2da", "sighting--495e6553-f814-402b-a3da-e2c77f44efa7", "sighting--90146216-72c2-4732-99d6-d27f9e33bcaf", "sighting--5bb65d76-aba5-41a8-a87f-ee9b75fe51d0", "sighting--ca990f7d-6a8b-4ea4-9d3a-68fccf810703", "sighting--1f519666-7e4b-4f37-b03c-30f55456bb34", "sighting--74b0db32-83d4-44d2-b8d3-b8ffa4e81511", "sighting--074afa26-1d4c-4037-b196-ae28849e39bf", "sighting--57fdd07b-a13e-4175-8f5e-6f18c1764ed5", "sighting--8fafd9ae-77f5-4c1f-90dd-56b05389d7be", "sighting--54617305-5d00-47dd-82a7-496d3d9f6ec8", "sighting--73825c2c-7757-4221-84b6-0a562ae22889", "sighting--9cc30e5c-2791-47c8-8718-eccf726e0b80", "sighting--8f0e20b7-2752-430c-9b27-fddcc76570b7", "sighting--14f5e070-f724-498e-8034-8226e0d50de7", "sighting--394d1d78-7ba7-4fbb-a697-46887d0dca0b", "sighting--5ce215fa-7c78-4582-8c82-51a32594f174", "sighting--1b68f05b-83b6-462c-9c31-365f94137c19", "sighting--a1a6fa14-bc30-4146-b41b-e34aa42e3928", "sighting--9bee0d65-fc50-47de-bf50-43e48ffd2cc4", "sighting--0d43b881-e4a3-40bd-8357-b16c1cd33c12", "sighting--f043fd4f-ec1f-4c35-8005-07872b3722fa", "sighting--ff11f023-55da-4fab-8641-5e0e6dd362f5", "sighting--3ce2538c-0648-42f8-9ee9-b5a20f31b885", "sighting--e3b59b74-ea7b-40ff-94c3-81dc828da6ab", "sighting--c5cd3fb6-4f41-45a5-8f62-26ef2f1ed6c6", "sighting--6ff45ea0-d96d-487c-97e3-e109102e0f71", "sighting--e3b78245-252a-4767-bd45-4c48743287b4", "sighting--dbc74b2e-a557-4a77-a87b-7ef587108ef7", "sighting--8679563f-10df-40ef-bb9e-e3acaae716d1", "sighting--7d63b168-963e-48de-9421-6d9514527f6e", "sighting--dfef6537-2171-4ad3-b689-42c9ce7dea97", "sighting--ac892ddd-4c22-48ad-a27d-b17da456a160", "sighting--a865fc5d-5d21-4af3-9c35-2d395661bb2b", "sighting--7bdd5839-1ea2-451c-add4-cb92dae27018", "sighting--35115155-45b4-4288-a107-0a06ad516f30", "sighting--7a01cb12-1109-4426-bb53-0a5c7f098de5", "sighting--0652151c-12ee-44a0-bc50-2db9b4143ee3", "sighting--635f99f9-b519-49ce-8c10-82f4e775b10a", "sighting--7cb3d31d-a2b0-4bac-a382-e7499f278e21", "sighting--3a4729cd-5811-4b0d-abf4-ac9332ff24de", "sighting--02292899-61d2-4c50-8fd8-2c2234bc3f1a", "sighting--76af8040-1f01-4a93-9701-0b173d41945d", "sighting--372d7fc1-fc5a-42aa-8151-227325b3d23a", "sighting--45158378-163c-441f-97ef-43420b87c17d", "sighting--b0deecd5-846a-45d9-b090-93bbbbcc5b7c", "sighting--49ce2736-57f9-43e3-8e56-a248d0305cf4", "sighting--9459bce9-bd19-41c9-84e6-45f122cde0d3", "sighting--4ce8ab22-4a68-4f3d-94cc-1814268f39b0", "sighting--1b50c82b-5f01-4c49-a099-14500da1e3c6", "sighting--e5a5158c-905e-4bd6-b0e7-d020279f6096", "sighting--05e6be61-7f30-4ac1-8557-b3d35c374461", "sighting--1285efad-418e-4f00-b74e-4762af85ca22", "sighting--0c63587d-fd26-465e-a5bf-3572de37e43b", "sighting--0f71525d-7e5e-429d-a16f-ce21f1c6d6c2", "sighting--7eb027b8-f1a4-493c-984e-6b2431ca679c", "sighting--765599c4-00ba-49a7-94a9-cdc12dc31536", "sighting--a0846266-7149-419e-a165-0af37fc6e6f5", "sighting--1240b543-9cec-410d-8586-f36d470e82df", "sighting--be88aae7-5c4a-43c6-83e4-bc49537bfbe3", "sighting--09adadcb-e70c-4610-b2d2-b6af0550c162", "sighting--598f81f1-6429-4be8-872f-6a6568df4fc6", "sighting--a8f478ce-192e-4720-b573-61f15a733f56", "sighting--2c06502a-8640-4076-8d3f-4495b0121ab6", "sighting--4b4fa768-b1ec-4111-87c0-8126c8d382cd", "sighting--bc566ad8-3472-4b02-be67-208b784b6532", "sighting--8cad1852-20c7-4a9a-a1d4-e4acf342245b", "sighting--8e6fce72-a44a-40af-b3a5-0c3503ce940d", "sighting--af628bbf-a734-4d62-a9cf-c24d1b775041", "sighting--3975c506-3cbf-4139-b96f-78913f4e2b35", "sighting--b53d1c65-e9db-47cb-979d-b466c6d032bf", "sighting--06248fa4-da8f-4fcc-a683-aa91da15aee1", "sighting--a1df25c4-d92d-4c0d-88e6-c473f7d15993", "sighting--ef82317c-b999-4107-9785-aee65d29da7c", "sighting--d54ec8ed-ec73-4620-9798-62a8c82d2950", "sighting--1d5696dc-f594-4f5a-a157-e2638f4a062c", "sighting--5c9f43cd-fcb2-488a-80ea-34ccaaf67f84", "sighting--83670673-156b-4051-a0fb-dacbda337d2c", "sighting--fa9a7825-a773-42a7-ae98-4db14eaad527", "sighting--8aad5cd4-6dcb-40db-9e71-e898cd0f2afe", "sighting--4ef04aef-73f7-4792-914d-aac07d82a7b2", "sighting--0edf17b9-1f73-43e7-b6ea-1f77e945d853", "sighting--e90838da-b783-4a24-9630-dce2d089e717", "sighting--39a021a6-c7a0-499d-9b0b-707dab681e08", "sighting--4db89acd-e840-4c9c-948c-d0246a6392ac", "sighting--1f7f5c97-eaf0-4620-978f-49762f5e010e", "sighting--ec2045fb-7afd-42f8-96dc-aa630c7b9fe6", "sighting--6b114aa3-8bfd-4e6b-ab6a-b0a847734879", "sighting--f6002549-b141-46d2-95f0-e2fd3c13d06f", "sighting--cc017f0d-f885-41b7-92bb-22364f3ff201", "sighting--832b0ccd-3dce-4d40-adc4-065a3f4c6167", "sighting--557eafe7-dd5e-43f1-a868-93785a36057b", "sighting--4de39b41-700c-4128-b752-eb43142391a5", "sighting--5b0e523c-6bd6-491c-bf99-08bfc6231d9a", "sighting--996ecaa6-9b96-41a6-bce3-54f0ef482caf", "sighting--06a3bf51-045f-4c1d-8813-6dceef104cdc", "sighting--795cd685-8972-48ac-9d15-7ba92e8fbfc9", "sighting--4fdecb4d-dce6-419d-99e4-0924e796c95e", "sighting--efb848bc-9198-4e5f-9530-88722e69aa0e", "sighting--78050b5f-a925-42dc-bf3f-701d8286fdff", "sighting--094b2d44-bcb8-4f0a-a660-cbb32e84368c", "sighting--b3ebf2c6-dfe8-4a8e-b96e-1e55a4b1adf8", "sighting--abb2b8cf-58bb-43c1-bc4c-e39f34179240", "sighting--3ac008c0-d834-4da4-bba5-33415cd03556", "sighting--d44dbc9a-35da-4b92-805f-5e08cd34a75c", "sighting--a2b3d4cb-7120-49f0-ab78-1b7955efacdc", "sighting--43732c45-6cd5-4ad8-8d16-ba112ed5f223", "sighting--fff31d36-9781-4dc1-b732-f420410d146a", "sighting--6fb67b2c-a7ae-4825-afdf-bf3c750398f9", "sighting--ecd6b28e-0f6b-419f-97fb-4e811a2c9bb9", "sighting--790b696e-8e53-4bb6-a068-57d4a392314d", "sighting--032ce66d-f556-440b-9723-7244a0e4db62", "sighting--7f8209c9-696b-4c03-b12f-716003f00696", "sighting--75e4b402-a817-477e-837f-1286adad6a24", "sighting--c9479ab1-96c8-4c54-86f6-bf0730643c9a", "sighting--30ed874f-b50d-45a4-9e3b-fca6cdf3a8c8", "sighting--ffce2fa8-dd5b-4c66-8f2d-8d72a92749ce", "sighting--86c667e6-f4ec-48b5-b914-bc84e66a3fcd", "sighting--7a20fb09-6400-4ac9-82ab-0e4f6a1f77f6", "sighting--b8d2c872-a7b2-485f-9f8f-e2095b652f38", "sighting--d19ddea0-0490-422f-8b82-ac786d546dce", "sighting--e9b0654c-c4b4-4c43-8ee1-4fdd6f1b4a37", "sighting--4a09fee5-6060-414e-bf86-855cb0a4cbf2", "sighting--817377bb-d793-4969-9028-fb4b63c67d93", "sighting--a53486f2-cd74-4568-a021-8636319a5c46", "sighting--4d6678b0-938b-464d-ba94-081ef6bbd08b", "sighting--2f0493ee-8bb4-4fed-b437-a613e9538acd", "sighting--9fe703bd-e9ad-4b57-b376-6f1fa02257a0", "sighting--8b77e004-a3f0-4b6a-a632-d28573bef3dc", "sighting--7a686df2-6bba-4855-8bf8-16d8b5808400", "sighting--b8504664-dc7b-41f0-a7ea-5761955c1c2a", "sighting--13dc57d9-56a9-41f6-b98e-fe85de44e79e", "sighting--6a6fcc9c-7360-4fb4-967d-b1968d5ac902", "sighting--2b051a5b-a514-4fc9-ad0c-646524f99c8e", "sighting--1e91224e-3863-4a4e-a7eb-2b49d4c7d76f", "sighting--cd5c3d4d-a746-423d-bb23-befc3a313c9e", "sighting--4511bb16-14a6-4589-a20f-f6e01a9a618c", "sighting--9c74bb4e-4049-4764-8fd4-c23f9289f1ca", "sighting--a91ce9ad-7bea-466d-8703-db8914f54e59", "sighting--82d466db-a0be-4e9b-9c1e-71a5304c0bfe", "sighting--d953032e-bdfe-4b09-b6fe-6913b7c4042b", "sighting--176b12f5-c1e8-4d4e-a076-406545b2939a", "sighting--cf18a173-d244-4d8b-823d-939d1cccc2a6", "sighting--48fd81a9-4d0e-4af9-abda-4d22a6bf8809", "sighting--069daafa-56e1-4255-9fe8-c6c8214d2ae9", "sighting--acd256b4-06b8-4cb0-9848-63e8674b1ed3", "sighting--d8a43725-8404-40f5-9052-cbe293ad2d98", "sighting--11785aec-481a-443b-8377-837f788f75b3", "sighting--1a601766-aa65-47a2-867f-b64ca66377b2", "sighting--3db34258-0ed3-4f69-8379-9455a9e16c33", "sighting--6f5c30e6-51e3-44c2-a603-05448cf5e146", "sighting--a2e64e8c-05ee-4cad-a6f7-1726a3dd5739", "sighting--7cb86828-965e-42ba-97ea-4ee0b1f76524", "sighting--11df6e9d-c6d2-4a34-85e3-731f4fdb66da", "sighting--d1fb9c0a-5e2c-4010-9e94-a82a04b2e14f", "sighting--030d32fc-1cd3-40f7-bef2-28361b1525e1", "sighting--0a930847-b52f-4da5-b5e4-3d982b339e77", "sighting--273d85b0-cf40-4180-b613-9aaa63e04421", "sighting--8f506e2f-a2ef-49ca-9239-45f85d0082d0", "sighting--e6849e46-f92f-44b9-b0ab-7416238b8d17", "sighting--5d496738-afb1-4c68-b937-19fa0dda877b", "sighting--e626e260-2b13-4f6d-9991-a2d9f3d02978", "sighting--b45ec012-a1c3-45d5-bc24-10f0e0302ea3", "sighting--fdc5fa4c-9186-486d-9826-936df55d0404", "sighting--b5a134d5-f652-4176-bb1e-dfce5a75b006", "sighting--5acb7a87-6edf-4d3f-97bd-8a49abca1eb9", "sighting--ccb44480-a515-43ca-9ccb-2042d714fb91", "sighting--be9a1922-c29f-4bd2-915b-2b51f910028e", "sighting--87f28230-fd5c-4fc5-a470-c0d17556610f", "sighting--c5cf940d-9b7a-4aae-a939-5e2d2d69873a", "sighting--1e3c98ca-620d-40e3-b344-05bb82a64545", "sighting--6c976a74-308e-4eaa-9c04-30f95cc6c024", "sighting--d42e0a5a-2545-4cd8-929d-fac5e53b02ca", "sighting--1fceaa87-7f6a-4290-8e6d-f148f927f4d5", "sighting--70fc7377-bfe6-4ee5-9c82-7ddef5234bb8", "sighting--fc33f4e8-2dc5-4ab7-bb0f-b9ce747a6639", "sighting--a0c04e95-9b79-4671-8049-6ecea4189aba", "sighting--818ef569-01dc-4f03-9cf5-9b01931e0b45", "sighting--6915a6c7-cae5-4d44-a1f4-8cbb23034174", "sighting--beeee296-940d-411e-b705-0294d95727d9", "sighting--29cbc099-b666-4fb6-9a38-05bc06e12138", "sighting--1cf37446-a97e-4f7c-b9f0-9be893e71ab2", "sighting--b4e94c00-ab8d-4531-8b48-1edad28a743a", "sighting--586d7b94-f44b-4a48-85a5-d766b9efb2a3", "sighting--49b3ae2c-a98b-45c8-8ab7-5b6eca5c84af", "sighting--cf93461f-bcbe-4dc6-ab5f-90a459f57141", "sighting--d3e5acc2-b27d-458d-928d-0f28fe25ea99", "sighting--e7f35716-2909-4c92-86fd-f734cea8c9ca", "sighting--4a313082-d355-4922-b5f3-e936604dee2a", "sighting--8727ad46-64b6-43ff-b214-ef4b47d6dd09", "sighting--009728df-f962-4b46-84d6-f723e9b36df7", "sighting--d3758911-9eb0-467a-989d-f02436e78431", "sighting--c828442b-5ac1-41ea-9f70-79af762f3507", "sighting--617c8afa-c75e-4b3a-9ca9-171fd3b355cf", "sighting--ccf0eee0-72b9-4508-90e0-45f37208d253", "sighting--5da7537f-7717-4785-b114-faac47a196e2", "sighting--ac11f344-9504-445e-8aca-516da0205204", "sighting--c475c5ae-41d6-48b8-84b3-c90aeae2f15e", "sighting--d0bfffa6-366f-4d33-886d-b91fc6c9f145", "sighting--c8a34baf-46ea-452f-9914-44fd0916b23c", "sighting--f4b1ff82-78fb-4b18-bddc-b4320d7581ce", "sighting--bb3e04d5-5e1a-4df6-9266-2d827c7fbc13", "sighting--70978756-f9d8-4d4f-949f-419cdd89cd55", "sighting--fa4c905b-6061-4179-9449-b7a1823bec63", "sighting--a347a0c6-fc5a-4b3b-bfa0-5433242ad981", "sighting--a8f84ead-3ec4-4e73-ad4a-155e55bc5e4f", "sighting--9593b2ad-4363-4be5-979e-5bee553f6d9f", "sighting--4d36b576-5195-42cc-a691-d7f121f45a3e", "sighting--3c9fe489-4d3a-4be7-8e4c-31c3f904dae9", "sighting--43a9efcf-1ca0-4023-9b02-ddbd99b992e5", "sighting--11584cef-7744-4353-bf7e-437207154335", "sighting--b59e611d-0005-4586-b82c-17c77461576e", "sighting--817fea91-ffe7-4c34-a9f1-3506f3b24638", "sighting--38c89c24-20d3-4d8d-9609-b103767fa53a", "sighting--f84745cc-ef94-4756-8a63-e80da392a58f", "sighting--b2e5123d-2c7e-41ad-85de-97991c17557a", "sighting--8357a12b-f835-4506-8d9e-2f1178025f17", "sighting--d429e3b2-e3bb-4104-ae6d-c9ab75f9a6e5", "sighting--fd547366-5d88-4ee9-a4a9-2c499fca5838", "sighting--72f2df17-b263-4061-9f87-31dce7505739", "sighting--eb3ae95a-bf35-488a-863e-c6bfc1305f2e", "sighting--66961369-5324-4f67-ba40-53191f71a428", "sighting--ea6f7371-1265-4b1d-82a5-66aaab5c03ed", "sighting--6a52cb0f-ace6-45ea-8e7b-d7676432fe15", "sighting--3d53b537-4b4f-48a7-9fe7-bd08715a519b", "sighting--5ac954d6-60ad-4d24-905a-260ff4fc6a16", "sighting--1709d8b0-0243-4d1e-9289-13d49b10da31", "sighting--184e8efd-b68e-49a7-bb5e-18bdadbb8b7d", "sighting--1b891826-fc8b-4638-a0f7-d6366b4b3f31", "sighting--5fd7bc69-8114-4f24-8b73-7280d1f531ca", "sighting--2bb76da8-3ab9-4aa9-bbe4-421f6f1b29bd", "sighting--285c858a-a5ab-4311-a936-fb7cf3b11dba", "sighting--cd5af75c-45c9-4223-a02e-2252cb0d9820", "sighting--00214c98-ac97-4e1c-894a-becb506757e0", "sighting--5fca561b-b622-45b4-9882-a46193a3dbda", "sighting--0687bf7e-2aa3-4b9a-bbb0-ea988bc3a47e", "sighting--af36e383-d217-4a25-9e33-3d857ced3310", "sighting--d662d5cb-61be-4d19-adce-badeb7b902a7", "sighting--b5b0bc7b-f550-4d49-aa37-5a86359f11c9", "sighting--68d3a742-5d65-4f69-ab0d-739da3ae2fe6", "sighting--e0982538-37ae-47b8-8976-55ae729a22d2", "sighting--d2521158-25f0-4bc1-b9f6-244711f4df32", "sighting--92dabfbe-1e41-4f4d-be47-b9b5ab2c8cea", "sighting--165bbb1e-1a69-4414-87cb-9b3691b1a969", "sighting--35f7230a-4a0e-4717-9406-83e6ed6c1528", "sighting--f93367e3-c22e-4bb2-aa13-c1563f7cebc8", "sighting--71aaef82-2683-448b-a67d-88942e9c3ced", "sighting--e5d6a4bc-050b-44a5-93d0-f34501079a66", "sighting--e5330e0d-5f29-4a2e-b81d-0fc24e42d519", "sighting--3c03ab5a-b365-4e81-80c9-e5c5a1e29a79", "sighting--90661dc8-e111-4bb5-8c12-2aeca56bdd0a", "sighting--a75339d0-f22d-4982-8b2e-12945649afa8", "sighting--3b51178f-25dc-43c7-8416-26bf1d1111b6", "sighting--b531ada9-e55e-4f75-8678-fbe5d1c19599", "sighting--b179dab4-8891-4bc8-a28c-f6b7817a2a58", "sighting--60ea74da-e5ec-4fab-a44d-e2b82bc24aa0", "sighting--d8acbb50-9911-4314-a6cc-243882f07cb1", "sighting--e70c9991-4a3f-45a0-a3aa-7e1dd660be75", "sighting--a6e25a30-7009-4098-b43e-9bd8eecf75f8", "sighting--9afa5a8e-7abc-4f4b-b688-aae59fad55e6", "sighting--1bf2186d-e8d1-4c4d-a499-a27248dbfc34", "sighting--e267b2b3-b10e-4e0d-b4ed-c86cb9f7b4d3", "sighting--ba0770b5-d040-4199-898c-7e0758c5d58d", "sighting--5993da55-445a-4ec4-8aa3-aab8bc0b9975", "sighting--8abb29d3-065a-4c3a-88fb-a093ba7c0da8", "sighting--0442d2f2-a2f7-4858-b82a-195819aba9f1", "sighting--e6fabe2f-5ce4-4cd8-80c0-0f82962c5704", "sighting--b4032993-a909-49c1-b75e-449924a17c5a", "sighting--789c0e5c-7cdf-4b7b-946b-11e8ee7f111e", "sighting--9b305430-7f8f-44fb-85bf-0b835a31203a", "sighting--f367c7fa-df78-4e8b-b468-6f77af347349", "sighting--32eb3503-1a94-4025-92cc-bd692f777636", "sighting--20152aa6-46cd-4bd4-a4e6-209664bce941", "sighting--c34c71ff-a40b-4ede-b20e-07f094da09b3", "sighting--46b5427c-e948-491f-a5d0-656626fcc71b", "sighting--72f89262-c554-4371-a68c-8e48d6d40c2b", "sighting--7880701d-424c-4b64-92be-b920547e77b2", "sighting--7215e7af-e4b4-4227-a1bd-5b33283e506c", "sighting--b5bd45f8-2ae1-46a2-8008-f7401be876eb", "sighting--b18b58c7-d16d-4034-a706-bd2471f4ef76", "sighting--fdef56f6-d6b7-4766-8383-a1c39b4bf9f3", "sighting--63d715bb-1356-424f-bb4a-0c94cbb7ae7f", "sighting--479b82ed-fb15-4e7c-a123-d67f5a63e6be", "sighting--c23802a1-3e14-4104-88ca-60d229728402", "sighting--3c6a2e57-42d8-4827-8029-33a7f2144c1a", "sighting--abfbfb4b-b847-4f1b-a31d-5d86acdf8710", "sighting--a351fa5c-dc68-431e-9052-2cc5bd2b30fb", "sighting--4a10638a-20d6-4ac2-a3b9-ca3523d8b6a3", "sighting--f3dd1cde-21a5-4772-bbe2-69ffd036d59a", "sighting--47cbe7b1-88d0-4e71-9ce4-902318b996db", "sighting--228d98ef-3954-454e-877f-f4e93335e3aa", "sighting--336a281f-7667-4c4c-9bd6-acc14a2a2c84", "sighting--b55503bc-5b87-49b7-a084-0c5a1f2a3606", "sighting--91a7540e-3ed7-4841-9fed-12aba157d83b", "sighting--feea00e0-7617-4bc9-9e4e-64d91a85f978", "sighting--07dd215a-8021-458b-ae11-7c227d2cdba4", "sighting--c4e61ffa-117c-4a28-a751-a0332a439519", "sighting--2ddcc2cd-0bef-4f76-892f-7693ac8d4c6b", "sighting--a97c4045-5256-409b-805f-357c140cbb9c", "sighting--751b56bf-1a6d-4840-9335-39eac7b99d1d", "sighting--419b0b65-fe11-4ee5-9280-f8b75afb1890", "sighting--2443b536-9fe2-49ef-b44f-9bf3ea1005a3", "sighting--b63f87da-f40c-4245-9d51-73a3317da4c4", "sighting--3bf15afd-9002-49c3-9b9f-bc488a8e5289", "sighting--1d140b67-4053-449d-931c-a8cfcc47ad11", "sighting--ece14482-ca86-453b-8bb8-619150829be2", "sighting--683ed3ee-3695-4ed1-a0ec-da2397a9aa0b", "sighting--7fb9046f-a815-4c99-a797-a9bb6bb63dd8", "sighting--066e0007-4984-40e6-b5fe-e3b5f2caa819", "sighting--35409894-8521-4bc0-852b-1e4382a70f80", "sighting--bb75a298-da04-4996-a5a5-b33697e23167", "sighting--2f785fcc-1bb8-485e-8062-42a4b5922c2c", "sighting--10eedc7d-b5d1-47da-9858-3fa8ec833056", "sighting--92c70501-4df2-4b5d-8e84-ab051c408b04", "sighting--dee4913a-2d1b-47bf-ac06-e7c5203c0284", "sighting--d8b1f460-5408-44a7-80a7-0174548f2363", "sighting--7705a57d-c661-4b6e-a18d-a8034800281a", "sighting--5f7a6764-5b6d-4ff5-9d7b-8c98ef4a9c35", "sighting--37f8568f-a1a4-41f7-940d-ab0c79e4788f", "sighting--6db4b995-7c32-4053-82c2-3209a6fdd20c", "sighting--09b793bf-8c71-4745-aac5-61a52aac1113", "sighting--8131981c-a1b5-4fe9-8bae-943a715267f4", "sighting--d2422fc3-52f2-4ee4-a2c0-18dac235380f", "sighting--137d9872-d596-42e5-bd5e-4bc21bc72fc7", "sighting--360400ab-9bd1-4f15-8050-5f856f2f673c", "sighting--0863a54e-ae9c-47e8-93df-fa47a09fa696", "sighting--a178ab4f-2563-4870-b159-e35fb854bee0", "sighting--0b4db8f6-43b7-4e4a-8e8e-f3119b62c7ec", "sighting--d3268b6a-0f9b-4f35-9db9-1a4a19b58347", "sighting--35ac338a-e8fa-4a93-bc4c-d13506031143", "sighting--54299db4-dc13-480f-bebd-a50bfa658fd9", "sighting--a0637b85-ae58-48e6-a5c8-9d5d69f4a08f", "sighting--e98d3750-a741-49b0-ae28-9ee64ffb3c4a", "sighting--ac6995e9-5981-4fc5-8d57-296660f54d3a", "sighting--cb9b01ae-51df-4b31-8aab-f301e01705c8", "sighting--d91b2e0b-7873-4963-9821-8acaf8c00fb2", "sighting--3c4acd51-dcc0-4b90-b36c-709c7ca06094", "sighting--00c5788a-9336-48bd-9d40-9af7e35d102b", "sighting--21cdec7b-8813-4d20-ab09-2a7e446f9cf0", "sighting--a5a4383a-d3e4-442d-87d7-fd3a6a3f20c1", "sighting--59ec6f51-23ea-4e31-896d-4fd087ffb226", "sighting--f27194cd-087b-4726-837b-4f6d7f5e9f37", "sighting--172895af-ab8d-4c0f-b22e-123e1195131d", "sighting--c2f87be3-d599-4125-9ac5-570bcf4fd7b4", "sighting--6bfbacd2-0efd-4abc-abe4-3e4b247cc43a", "sighting--4f347ff4-c17a-4a57-8b71-ae8f3915d34d", "sighting--84547435-6dd5-4dda-8868-7cc6a36c1617", "sighting--3f6449fa-15a7-4915-973b-7d5bae302c5c", "sighting--43acd4fb-d98f-4ba9-80b3-63fc27bb6b07", "sighting--dd490e13-43d6-477f-a538-69d987bf43f5", "sighting--aa8d052a-361e-4aa5-93c9-13411b4ea084", "sighting--c07b3a43-09e5-465b-b30b-77e08e1449c3", "sighting--8d84ed38-d58c-44ce-815f-26fe7d4a037c", "sighting--f48f7445-9e62-4910-a8f0-598426ec0a4a", "sighting--0760d735-bcab-4f9f-80ce-ac2350b65306", "sighting--6e0c5927-a710-4562-b07b-1cc8a6c44cb8", "sighting--f8e9d656-8497-4c95-b27f-fd4250fde50d", "sighting--ffd461ce-fa9d-432a-aa78-84eaa80b7144", "sighting--19b00c3b-3e68-41d6-9c8d-f44ce14b4c6c", "sighting--329abe87-0f6d-4fc5-a3a1-58dd3f7c33f6", "sighting--f4fc6124-2a47-479f-955a-e602c6217e27", "sighting--d28ee217-565c-47b5-b281-45b794488162", "sighting--0496fb2c-1316-4d4c-bb6f-8d7be06369cf", "sighting--a5d0eac0-7fb3-488c-b240-03354be08217", "sighting--9b7b3286-b615-49cf-8062-a3713128a3f7", "sighting--17de0994-0c24-4c04-9438-2215ce1aed06", "sighting--7e37ba10-6d94-42f6-ade5-d61a9a486ac6", "sighting--12549a31-8f6e-4a7b-98eb-0e4d81525ca7", "sighting--9cbb99ad-483f-46e1-88c7-fd5c4214a51c", "sighting--3a62285e-b5e8-43c8-a62e-d1f9c9d61a55", "sighting--81ade2b5-bc66-4e3e-948e-91252ccda41d", "sighting--18af74c3-7e1a-459e-8b36-68b72917335e", "sighting--8c4ae549-e834-498a-941a-5cd1fb367b58", "sighting--9c033598-d4ba-4f12-9b8f-758f131e8cbc", "sighting--ceca4fcb-8af9-496f-a2a9-ff29c4512675", "sighting--df925364-a5b4-4d6d-b8b5-a2948c7ce248", "sighting--1930af62-9838-4969-ae9c-7afea7cbac71", "sighting--0f92a6e4-693e-4b4a-8a9a-f7b014c80e89", "sighting--bbb3c4d5-0287-4133-b1dc-f078f53ee79d", "sighting--e78bd739-5aec-4f77-95c4-83fb601fe415", "sighting--0c11f9db-fed9-42f0-a0c1-c2ef390fc766", "sighting--d1da913f-f607-431c-9a53-a54e0ef13891", "sighting--0d46f0e9-2f22-431b-aabc-49605c89f1fd", "sighting--e99ae761-a8fc-4814-9360-b7cd812b0834", "sighting--5dbb08b7-c1f1-4fd0-98de-6570c072028a", "sighting--c03164df-a3ba-4d9d-848c-696a23508238", "sighting--8cf084cd-6b06-4b83-97f2-3c689db94a34", "sighting--eda13e47-6fb6-47b2-bd6c-3a5e95f42ae4", "sighting--d0d55988-7749-4d54-9efb-c8b94885d24a", "sighting--a48cc796-392a-41f0-81f0-4e3f728aa56c", "sighting--e8cfec1d-8f2e-401b-9948-7d30612d3620", "sighting--c12efddb-13d8-4319-ac7b-afb05c3890f8", "sighting--5fad133f-3d31-446d-9edc-14e9dea34520", "sighting--53668aa2-e35e-472f-a2be-530e02cca85c", "sighting--6670b248-a644-40d5-9296-d0569eada03d", "sighting--addc1b78-5fac-40e6-bb58-5350abd9c375", "sighting--844d034c-86ca-41af-a2a1-1ea49559ff82", "sighting--65d1e324-5812-4077-9777-727275f38fcc", "sighting--bf0d281f-d654-4c45-8ed6-48b86df229a6", "sighting--e7e2f07a-11a9-4ec2-bf15-48be46bf237e", "sighting--070ace85-bfc1-4db1-bff4-4b2a872768b4", "sighting--694864df-b7ff-4504-833e-52bf9616c561", "sighting--4b369339-5376-4424-b3f7-c914f4e4f940", "sighting--99b9ebb9-e16a-4d2f-b7f0-489efaf76a7c", "sighting--6608cd70-d1d7-48a2-9706-8147a58c3cf3", "sighting--e4e5580f-1a1b-4abe-8701-b1ad86eecd75", "sighting--7cfe5585-02d8-4969-b2ec-812ba8e4c1c0", "sighting--a45b671c-37d1-4ee5-b4bb-f0a23fa0dfa9", "sighting--f9e54f6f-4473-4eef-8b7f-06f1d0af021a", "sighting--88ba9a9b-1b28-4443-be3b-dd5055bbc8f3", "sighting--5f1588dc-2153-4aa2-b88b-b9ef5400206f", "sighting--14b057ed-fb9a-4235-be4c-28d555031ac3", "sighting--8d8a95b3-aec0-446b-9cc9-f32e63360984", "sighting--cfd14f2a-7f4b-453f-9c4b-50f126cc2b85", "sighting--4e189575-715b-496e-867f-df3a6dbcc69d", "sighting--e176c830-9dc3-4570-b3e9-667cea6ed336", "sighting--7100cf50-9dc6-481e-a162-b7281e4dc796", "sighting--52dae5c8-ebc9-4d26-bdf1-5772b06c4995", "sighting--e58a0b55-3604-4533-a012-7a47b012069f", "sighting--d7fa2cad-018f-4cf1-803e-639bac7cdec3", "sighting--2c772226-2efa-4d42-8aeb-163e350c7e3e", "sighting--ad111b0f-cc51-436e-b6ec-a9e069f88d87", "sighting--e27e1448-ed1a-4eca-8b60-4ff1e533543d", "sighting--235ce37e-a114-4800-976b-02d9b5b979c8", "sighting--25c972b1-bd1c-43a7-880d-e05f4366de58", "sighting--6999017e-cd78-4c4b-82e4-381fceb5ab86", "sighting--98d4530b-432c-44ed-9760-52de3de436fe", "sighting--91423a87-9445-4847-802a-a29c4186fabc", "sighting--61ef330e-cf68-4b25-a557-2c756030a881", "sighting--12e1b8df-1329-4e8b-828b-53132bf31923", "sighting--aee9aa50-f2e4-483a-a82a-fab091cbc0ea", "sighting--b63b6b5f-5c7a-45b2-b001-953ca0f5baa7", "sighting--4c857689-949e-4edb-9e44-788832ad4199", "sighting--a7b0fc76-11ed-4fee-a1db-542f434592d2", "sighting--2b404f86-efaf-4f6f-9771-d79dc8f5f413", "sighting--d02ef1a8-7322-48fc-9cbe-e1347777eb0e", "sighting--53b30c81-cf7b-4416-8a89-8392ac831293", "sighting--66d37f66-b1c1-4170-9a68-76280e319c86", "sighting--2e94d7dc-80e6-458b-8209-fcbcf7671a2b", "sighting--c79a1a31-b746-4898-a3f1-d572a458e76d", "sighting--dad3f347-ee0e-4d4e-b7a3-c78f0e873578", "sighting--9ec1eeab-25b3-4e99-ba89-0a5e0ef646d6", "sighting--3cf82e4b-5cf9-42a2-8c73-0a02988eb86d", "sighting--c9f3418a-f57b-4547-aac2-21463e509458", "sighting--8b23361e-a6bc-41ae-a86f-96908203c387", "sighting--03c7e1c2-f6c7-41c3-840b-fb91942b16d0", "sighting--02a40d11-d3f5-4def-8a86-b3d0a1cf5651", "sighting--95b6f8b9-80bd-41fb-bf6a-ea99445b89e4", "sighting--5163854b-2e01-4f08-8480-33c2008b7361", "sighting--4c44e28b-de73-4f95-99cd-d03289e4e1e4", "sighting--5db0d92c-2625-4393-a45d-c267bd44ed8f", "sighting--6a2ff4f9-8588-4fb0-9921-0f954ce469a6", "sighting--885ca8b9-08c8-4baa-a6bd-0438ea6b24f2", "sighting--b5a72af7-a1c3-414d-8b8e-6f32145e1157", "sighting--e26deb4e-ea24-4f78-ab69-2a77dfdc43d5", "sighting--fc116dd7-8813-45cb-884f-9b9bfa5a290a", "sighting--afcf2747-1e9a-404e-a3a3-11b339096421", "sighting--4ea27080-2dae-4aee-9033-7c4a8a68428f", "sighting--8add874c-78a3-4c35-bf93-d9d3cf6f4375", "sighting--068fdbf0-5b6c-4460-9468-71d55ef4b0ab", "sighting--6adc302d-8853-4830-881b-a7f698a71f39", "sighting--1789b2f6-b66b-429f-89ca-77bb8056fcbe", "sighting--5721c8cc-c95e-487f-980e-246f613fd950", "sighting--307cecbc-bef0-4dc0-90ee-f12010c21755", "sighting--aa646a41-e0b8-4a6e-841b-ca15ccb28c4e", "sighting--6d7353f9-8594-4b67-9948-cef5cb50aeb7", "sighting--405e2ebd-ed16-4eeb-ac5b-86c2147dffca", "sighting--bae2f6fd-21d0-4247-8fac-e1dd2dffc122", "sighting--e9baf4be-dab1-46e1-b615-010e1e06c6ef", "sighting--f23f2a9d-50ae-45dd-b89b-3804d1a80034", "sighting--42ab14fa-565c-47dd-a084-e4f371973d24", "sighting--cf837112-4186-4a2b-9322-5bcb7c33a831", "sighting--97735718-9ab0-4db2-82e7-644f9628bc74", "sighting--91b13570-2850-4168-acf3-4375c5457ad7", "sighting--35a1ec5a-ef64-4a2b-86cd-c76a3209f967", "sighting--41d027d8-c061-445d-bd6e-94121d5dd337", "sighting--141571a7-ba06-4c81-aebe-9a68696944b4", "sighting--d3614eea-87ff-4e5a-bb60-55ea69554739", "sighting--3ef0b915-5622-4098-8ffd-6871eb93fcad", "sighting--e5768051-c452-4860-8ec5-d8b1bfd03453", "sighting--6c91638b-1063-4668-9e30-fb554a8c3763", "sighting--98cdd1ef-69fd-4b7e-a6c2-7b7d670150c5", "sighting--e1c37115-bb67-458e-9f51-86ecae37cb2e", "sighting--8e907e07-9ef2-4fee-855f-b6ce525f3a9f", "sighting--4e908c6c-02c2-4683-a5ad-cd855925b667", "sighting--7e528e18-6022-460b-a23b-9a5b905dbe6d", "sighting--ce6cbd36-9c3b-456e-bd2a-da8b6081a5cd", "sighting--2f5f4be5-ee3d-4a65-87c0-015d672d3b93", "sighting--248eb83a-50ef-44d6-9428-858f30dbc88a", "sighting--16445a13-c449-499a-bd33-a5d73d895c1d", "sighting--2b93c0fa-e69c-4b6f-8a99-dbb58d043945", "sighting--1819cc37-a084-4f24-a30b-dd29be1477a3", "sighting--741e088b-edc9-4444-88f6-55e5e7188a18", "sighting--745a8f94-9685-4a41-abf4-a4c189a47b7d", "sighting--bebe5a03-18bf-49d0-ad45-24e25074ae9c", "sighting--ab9dd535-92a8-4d90-b5d4-35e662d1c9e6", "sighting--63e732a3-765c-4132-a610-a59e5d099045", "sighting--28a212b6-2f12-420d-9c78-718fd1b5e9af", "sighting--2db2f4cc-3b42-47d2-baa6-e150745a4016", "sighting--1bf7499a-070b-4864-b7d3-6dcff20c8c37", "sighting--6a21484d-70a6-407d-a96b-6e91b5de2207", "sighting--32ce1fa8-7041-45ce-a71f-3ed9b092c825", "sighting--ac69eaca-5b2a-44fb-bb8d-411b8d9721f1", "sighting--bcd14de0-3763-4e61-8769-cace440197d1", "sighting--6de9026f-e93d-4dfc-b706-6483c4ec4a2b", "sighting--6e37dce7-9d4a-488d-a815-e7cae7312af7", "sighting--315319be-56bf-438b-8299-22863ac84a37", "sighting--7e1eb192-6990-4be1-90db-3902670810c2", "sighting--c8d2b20d-6ad1-4219-affe-f80916faefbf", "sighting--3d97b4c1-ae62-44cf-969f-835116ecffea", "sighting--4096d21b-a974-44bd-8011-725d691d65de", "sighting--2b07befe-3ca8-4180-8c2b-7eb7757c9ff5", "sighting--24092c01-ec79-4c2a-bfd0-1fc508a78804", "sighting--5d46c205-f3cb-4258-a1a4-8c6bea9298d6", "sighting--f1cb8798-e71b-445a-913e-628f47ae4623", "sighting--23db63d8-9e05-47f6-804f-ba43a2f48a26", "sighting--909b8c04-5079-4974-bdfd-a7e6351f8aaa", "sighting--130abc0e-b2cf-4b49-b2df-41b375b5c3cb", "sighting--4567208a-0049-4b78-b893-56905247d5e7", "sighting--9ac1b6f2-e4a9-4c56-ad98-d96c63809cae", "sighting--b180cd84-a895-47bb-b6cc-8591753f776d", "sighting--5a7d77d4-4574-4885-99e1-a8fbb7a433ce", "sighting--bc0ec17a-7286-43a2-a831-555ae6a4ca5b", "sighting--a871473f-bc03-4abb-93f3-8de00cd74ef1", "sighting--41242f04-b0b6-4cbd-a4b9-808f50eb30c4", "sighting--128939b5-aa80-45b1-bc10-526f2fb54f8b", "sighting--27294eee-f85e-4204-8c32-2b377fafdf39", "sighting--22d39bac-925b-45e4-8f29-360ab17eb04e", "sighting--ce64072f-7b3f-4807-a7fb-fdf8b52b4e04", "sighting--e3f73aac-17bb-41e6-be77-5f395f22a7b7", "sighting--5394f2c2-e0fb-43ee-99c5-6382b2c214f9", "sighting--9c5193a6-0150-43b6-9621-73f150213307", "sighting--4ad4b48f-b790-46ed-8dc1-8209f3ba381c", "sighting--d0ce776b-6520-4eb4-ade6-8d393e03b8bd", "sighting--27091663-3b3e-467b-848b-4af1ac8749ae", "sighting--9828a9a9-c1fb-400b-bc27-2af90fe0562c", "sighting--80c7887c-3c2b-4195-acaa-ee06951dfb78", "sighting--637b4dc5-9a06-43e9-bde1-a374110d1956", "sighting--0c18cdc7-46b1-47aa-8e08-c70064546ba4", "sighting--144a9be8-071a-4c83-9f65-bd3ab3f6ba6e", "sighting--372f2b07-ac10-4229-a5fc-cdec2e9eada6", "sighting--c3ceca0d-7c71-48e8-ac43-b2eb501cbacf", "sighting--397f4a0d-e19c-4cd7-bfba-a2db8ae2ae5b", "sighting--ec606aa4-934c-4e3c-a242-247fc7f189ae", "sighting--8f400c28-dbd0-4c64-b4da-1868cca6d39e", "sighting--ee5f95a9-ec4a-4b12-80ec-75483116d505", "sighting--37724812-6a29-4345-bb9c-ba8a2f49020f", "sighting--f267eeba-dd54-41fb-9950-897f02b85dfd", "sighting--e8d8376e-19b3-4f39-bb89-6e65ad2a1abc", "sighting--ecba1e13-51c8-4ed6-98d5-dac23014dccd", "sighting--fa55021e-ad4f-4afc-afec-64aac95c431b", "sighting--e2ed429f-dd76-4272-a009-3ae3b81463e7", "sighting--02e95f20-4852-4339-bc38-12aa9a879d4d", "sighting--847036dc-26a9-485c-91cf-8d567eec3d6b", "sighting--a5055b1e-0c72-4d4e-a8d5-43bdf74154ca", "sighting--e32a3475-6646-49e1-bdb1-43d7c30a958c", "sighting--2ed76a2a-10b5-4546-9f03-71aca0346ce2", "sighting--e4910117-c0b3-4573-8fdf-751c67418720", "sighting--042fffae-e03d-4b8a-a6ee-cc44d54a19ec", "sighting--31857b7c-e389-4e90-850c-2102befa7e97", "sighting--a276f2a2-fcc5-4ecc-b9c9-bbc57b2f8977", "sighting--576f89ed-7ee7-4b66-960f-8286b05c4182", "sighting--abc18e2e-5c15-4fce-8c11-83e883c13219", "sighting--1752e02f-fd6c-4fd8-a47a-d1873186e596", "sighting--139b6ec6-0086-4a85-9741-0302b5673cab", "sighting--777a058f-615e-4605-b8f5-0799045490fa", "sighting--ae19de4a-f7f0-4be4-925e-70ba8e8dec36", "sighting--ad109f08-db2e-43c4-bf11-54c415ee6587", "sighting--52df53d9-9b2c-4620-9375-0cc5be67d322", "sighting--93f7074f-f5ef-40f3-8ca3-0c6cd1e47f68", "sighting--31e3c373-89b1-41ab-a605-9e6c025b92e9", "sighting--b66a9539-1324-4f3c-aab6-0dc93c556791", "sighting--e79f659b-59fe-4dd1-a324-47c8617036d5", "sighting--b3f39fdb-7cbf-46ab-bda0-b3f94a5d279d", "sighting--773b2237-2509-4b39-b115-2bcc0b4a9eff", "sighting--611c0204-fa85-4382-8f77-a0b072bbe0d3", "sighting--d3650637-c4de-4355-8a67-67baa5ea9ad3", "sighting--2d0b800f-22c6-4e31-a31b-a4f40d6d665b", "sighting--4e6da95a-1bfd-4679-9929-416d6f9804b5", "sighting--8f08fcd1-0ed6-4d8b-b4ca-906b9a1f6e40", "sighting--07d3a709-b9a8-496d-bd19-6be129cd04cd", "sighting--d9dcc094-9d6a-4bb7-81aa-32e3e529baae", "sighting--42f92007-2d9a-4304-9883-2dfc82dae015", "sighting--256b7975-1f99-41c4-aef2-805d3efcc6a6", "sighting--5e60996f-1fab-4dc8-9b2d-2775b7b7e59e", "sighting--27735ef3-303c-425e-9445-adab1e627471", "sighting--6561c625-5033-4221-a94d-246ece6b058d", "sighting--6b550c41-56f9-4124-82d9-d5627ffd7f6f", "sighting--f00f88f1-55ea-4764-9030-68911b1888fc", "sighting--20b3e033-1846-48eb-9951-62de5c43380f", "sighting--db9517be-7b23-48e5-984b-416f0d07f322", "sighting--7cef0c97-4a76-4cfa-8b87-d5debeb42888", "sighting--1fdad14d-285c-4b93-b35e-0470206db059", "sighting--4b352d7d-23e9-42d6-95a9-b357502aa3c9", "sighting--eceaaa80-7260-452a-8ebb-e611fa8c4c96", "sighting--706d8529-e8b5-47c3-9a8b-bf2534cc05eb", "sighting--aaceb8dd-f063-4eeb-b61e-71344e4b5c70", "sighting--429f4ab3-420b-484b-ad88-c4dfeedd47d2", "sighting--4510bd5a-ba5b-4d29-ac21-f89af6c2791b", "sighting--f171a4bf-4c4f-4ce1-8899-77b281e8fa19", "sighting--2c9c5b21-6c2e-431a-ad9c-6cf2c2efc401", "sighting--04838bfe-0d10-4002-a852-c1f43caf7d9d", "sighting--397df8e4-69e3-4101-b30e-fd9be8def952", "sighting--1424747c-ecaa-4923-9a9b-05372f0debfa", "sighting--2c2c7307-d0c7-485c-acf9-8764e9be2add", "sighting--51272334-d58f-4e5d-ae72-364b93ff8df5", "sighting--6f64dfcb-c909-428e-b518-c88554e4f068", "sighting--7a08e7e3-6e73-4977-9ed5-33f5340b66fe", "sighting--dd48c996-46bc-4dde-9fab-72e584730e3e", "sighting--d13c6db1-6a67-44cf-aa9f-adb4688d821d", "sighting--8ef1d018-9a04-4aba-a0cd-211bb37a78e8", "sighting--da203ab5-8633-48f0-b914-e74385407968", "sighting--7fca1b99-28bc-4cfb-ac6e-36db3024b3da", "sighting--89e73cd4-c382-432b-aed7-661704d3e37d", "sighting--5872a878-a077-490e-bb6f-840f10919660", "sighting--64486851-532a-411b-9a1e-844bf4d2d9b6", "sighting--a9f944e4-21ba-47bc-87dd-4b8eb98767c5", "sighting--838f0bbc-fade-493c-92b5-dd4d19c23a66", "sighting--e0311f9a-ba68-4bdc-9e1f-22c1581bb5d7", "sighting--2d5ccb2f-5ae0-4543-93a2-52f1c22c2046", "sighting--a3a2828c-d184-4856-8e5c-88d104b10a00", "sighting--ab0f66dc-f6c7-448d-aceb-cd0fc1722cd3", "sighting--acb149e6-d99e-4d1f-be8f-e4bd51e1ad19", "sighting--7b1c8527-cc2c-485c-b5e6-25b524bbcc43", "sighting--635f2531-80e2-4e94-b26a-498b93f2c6bc", "sighting--b78c9a37-baa5-4080-9da3-66111b2b1aa7", "sighting--999dc75d-84ba-4d94-96c8-ca2598662751", "sighting--5a084796-cad5-48e3-acbf-791433c83e70", "sighting--5d17f031-67c1-426b-9934-75103f5a9e5d", "sighting--94f0ca04-7d5d-4d55-a132-6f5d1477eb46", "sighting--4206a43a-7c32-4e8f-8870-55f3aa5543df", "sighting--ba3d1072-1e89-471b-a966-1521358b0a4d", "sighting--cbb30901-7e4e-47b7-8667-402cf3381a83", "sighting--31a3057c-059f-4929-bba5-a9d0531f28a0", "sighting--905781a9-f480-4ed7-8b41-780d3bf339e4", "sighting--c6d5c6cd-c82c-4697-b948-45adf862041c", "sighting--5a18fbfa-f22f-4e41-9ca8-2a0132904288", "sighting--55472a9b-f7a4-462b-8394-24fab80c31a3", "sighting--4b2fbc24-dd9b-45c1-bc17-36e4e52860f1", "sighting--862dd05e-e9ba-4d8e-b9b3-e21c3e671e10", "sighting--80d26912-ecab-48da-bafa-ae09219e37a2", "sighting--d77131c5-ba03-47f3-95dd-ac9a1eaff81a", "sighting--5285c066-32e3-4e16-a2c1-0d79aca2a0d0", "sighting--4633360c-3de0-41c0-a053-dbffc148bb64", "sighting--3b6f9b79-ddfd-48b7-badb-99d894a7af21", "sighting--4e3c18bb-de27-4e23-9751-26e7a0cdaaeb", "sighting--46ebbac4-6b2f-4a28-9f62-ebbb64ac7e4a", "sighting--76efceab-435d-4bea-b2a2-5bf96c59a59f", "sighting--280eea35-c671-42ab-81b6-c3a20ff5352d", "sighting--05af7ac8-5bc0-4b40-ab03-586e3fc3b8cd", "sighting--51a584a6-0955-42c4-ac1e-b32364b61816", "sighting--5b8b9892-b2fe-4c70-9eeb-ea10a47a5854", "sighting--ade79626-0278-40f6-afd9-7125be4a9b66", "sighting--c6918f74-6d17-4dd0-8059-981ba6fbbdf8", "sighting--4b10e497-440c-4312-8d19-1778ef3b7e26", "sighting--df6d9eb3-8b7d-45eb-b5d6-e5daf9bf7dfd", "sighting--6d8225ee-e11a-4050-867f-84516a797e34", "sighting--77b5221b-0f11-49fe-a587-50a6f3ce248d", "sighting--9d7a9848-37ca-4554-8db2-0a6f00d2ba81", "sighting--3ffca2bd-e890-46a0-8883-256452721944", "sighting--dfd0b582-d301-4995-8973-a60571395003", "sighting--92a9f09b-996b-4e5d-8601-d7e1e96934b4", "sighting--ab110368-66fd-4724-a2c5-3aa8acca8341", "sighting--776b1295-9fa0-4cc0-9b6c-6f6ab2f70bb4", "sighting--87d6cf4a-95fb-4c4f-82b5-950be2a2f007", "sighting--3c8aab33-6bf5-49d4-8149-8dfc84bc5d94", "sighting--d2cbb55f-2b0c-4e67-9214-2a458a21634c", "sighting--ed8c30e0-4f0a-4b8e-af43-0c5237a3c58a", "sighting--cabadcbf-f9d6-4905-9960-0b56ab61b1fc", "sighting--92fae36a-4ade-4934-8b61-7c549e4d4c0a", "sighting--51b9a3ab-6725-4e2e-b4a0-edd3b0dca62b", "sighting--509a16e9-5dd0-4691-9de3-7daa2d6a6eec", "sighting--7a11bba8-5710-4cc0-bb2c-dfe611954bac", "sighting--ef73c4a6-cc2c-4b3c-afdd-e17ba78fbcab", "sighting--1ed10e3f-50f6-440e-aae9-03770be2ede8", "sighting--6d14d7a0-8af8-45ff-bb70-7c27458ee594", "sighting--ec4020ec-fbec-44d4-a38a-46b7aee619c2", "sighting--6526de70-44b6-40b6-b20d-448d89a90bf1", "sighting--daa36507-9519-4434-8085-6f4219dbe8c0", "sighting--1d81b716-afe1-45fa-bf57-4b1a80c81772", "sighting--1292e44f-4442-4e4e-9280-7bfca9c19220", "sighting--560b708b-8dae-4664-a9ac-a5fe5e848e1b", "sighting--9ec9b734-740b-4645-aedc-0a9cce70837a", "sighting--690d3fda-9644-4ca5-93f7-aa2c3d31a060", "sighting--e78fabe8-59c5-48ec-a5c7-eef759b6bbed", "sighting--187a257d-3314-43c2-b4ec-945a3821e523", "sighting--41bb1d57-6d38-413d-9326-9cb0d91901df", "sighting--d7fea330-a0d6-45fb-b5cc-ba84c559b846", "sighting--2629e443-23bb-4a9e-9062-b49f081fb07a", "sighting--b8207806-001d-487a-9b45-8248ff162215", "sighting--9e644708-53b8-4523-b30c-f1c48e98a4f0", "sighting--182f3d7e-5469-4d50-b0bf-4a5bff7930b1", "sighting--407f3b2e-6b89-406e-b473-e6db2b957c4b", "sighting--bc858819-4d9c-4f4f-a448-86edaa848d3f", "sighting--f119e8f0-cb28-473e-b2e3-84854376c705", "sighting--19b3efc6-a8cb-4920-b30d-9c8af67fc613", "sighting--60907ec8-be8e-4817-9684-0b7d77d615ae", "sighting--2efbc9b3-6356-42a1-baa9-9e2255506dab", "sighting--771e69d6-d77d-461d-b3e2-a6c47f652fdb", "sighting--9b8ad6c0-4287-465a-9c76-8385fd6704e7", "sighting--041e8f5a-5bb8-4fcb-9639-d93d24c57a58", "sighting--b4254492-706c-457b-bdcc-9cf594088b9c", "sighting--c8748548-4c86-4f39-b41d-ac20ae7cb96b", "sighting--901fe9f3-7dd7-4057-8752-3f0074f8623f", "sighting--73acc315-38df-4432-b8de-2899462c7c0e", "sighting--a3ca3193-4aca-4c32-9518-d29738208fae", "sighting--9b5ea17b-09d1-4c9d-bcdc-c9f298e40d43", "sighting--bc170bb9-e2ff-46d6-8c87-e6837ed8da94", "sighting--8bafba4a-1b22-45c9-a0a8-52bca54fd76b", "sighting--18b7a880-8cdd-4aa7-b3cc-3465005df1e4", "sighting--ffd782a8-e462-4a7f-bf83-5fa3c7cd8837", "sighting--f5aa496b-3c35-45f6-b64c-0ffaa73d987f", "sighting--dc4d4749-d1d5-4d70-8403-dc6dc3c4d7d1", "sighting--8772a2fe-c3b2-4ef5-b9dc-ccc01d54f693", "sighting--3d312acf-9267-4770-8757-07ecf6de236f", "sighting--d99e8d99-378c-4ac1-8623-423bdd455c52", "sighting--5588ef37-7e4b-48c0-941d-f232efb6a3b2", "sighting--003b8481-f63d-48d7-875e-758ce80db5e6", "sighting--69bc8653-548f-48a8-86a9-5c2df55fe800", "sighting--dd65bb3c-e89f-4a92-92b1-8208be9b6fc6", "sighting--5f03bfa4-64f5-484e-895b-e9b5a16587be", "sighting--b866ee52-421c-4ea5-8852-540bb46e98fd", "sighting--34536372-a867-4666-a33d-5ae8e428af1f", "sighting--6b5b1d38-3047-41ff-b0a8-3713085441b4", "sighting--355acced-1c95-42db-902c-63e8059505a9", "sighting--d83465e7-5181-4d0b-975e-66381d98a981", "sighting--6fb42ea7-07f7-4706-8742-bc9c911e3ccb", "sighting--65e8ff87-bd5a-4b7f-85d0-4a5fdd111e52", "sighting--e152bed6-bca3-4fe4-b147-83d5890745f0", "sighting--eb89f5a2-0ff2-4b2a-9753-562bb612def3", "sighting--0f20633d-d075-4bfc-8666-41d3ddea4b9d", "sighting--037104ce-f71b-4cc5-a51f-a11f1fdc5584", "sighting--57262443-766c-4edc-bc46-cea53a896b47", "sighting--a3ed9c89-0782-4007-b015-314385b93c14", "sighting--403fb0a5-3570-40b0-a9f1-24c92290c025", "sighting--b634208e-7542-4040-a9be-85aa3f6db8e1", "sighting--c775a990-8fd3-4189-8b00-105a657a8547", "sighting--c771d429-6dcb-42e2-bf56-16412c3aade3", "sighting--39c694a5-e754-45e7-88ba-852d3b8c812c", "sighting--5c4ba1f1-b711-472f-bb60-12a21e4182eb", "sighting--8888e66c-e199-423f-bbe2-bae191ad81cf", "sighting--2d19eae1-b9b3-40e8-b487-8f903b20aa95", "sighting--30db86fe-3233-44b0-9633-c5c1d21d98ba", "sighting--fa14d239-a85a-4f66-a072-7af5e9e60b73", "sighting--670167a5-d3ba-4a12-aed6-0837564e2637", "sighting--48e3e7f1-c517-46a7-887c-8bcf79ee0685", "sighting--222cfae6-7ade-4a47-aa2b-5afcc4f18c55", "sighting--b70c0bef-e0b5-4140-8d79-36797f7ac82f", "sighting--319e2bf7-18ab-40df-9df1-79063e6f884d", "sighting--f957099a-b149-42e4-b3a2-8cc0af9d2390", "sighting--67b05bc3-2d03-4d74-b8d8-c05c93027454", "sighting--2b2d4e4b-79ec-4a0b-89dc-0efbb20cb12a", "sighting--0ec584b1-c6bb-4fc4-bea6-bd33e313d13f", "sighting--8be1da96-6ac4-496f-97e8-79f620c8c282", "sighting--e9944e7a-284d-4771-8c1c-f3a79c62f317", "sighting--95ab9264-6654-4e5a-8662-9ace0d34f3f7", "sighting--9aaed0ad-e152-4854-9b4b-7433793f83c7", "sighting--1ff9e13b-b2ab-4c4a-b97e-dfacb6e5c9eb", "sighting--2e96d799-b52e-4ccd-8c4a-7a43422dfd6c", "sighting--83e8afdb-1815-4e4c-80ac-59e2795a2c5b", "sighting--d600c765-ccbb-45f4-acce-4a2201813bd6", "sighting--493fd710-a456-4514-8137-7d4659fd349f", "sighting--6cf88ee1-1189-4e34-be31-616715b889b5", "sighting--eb5995ba-8d14-4215-a37b-699102fd3446", "sighting--e492913a-af88-4471-83ff-762032e402d4", "sighting--a63a7696-fc71-4892-b3fc-6389b52a7ba6", "sighting--cee09bf0-e1d9-4b30-955e-ebd551fc6dd5", "sighting--c2bca213-8bbb-40c3-93f0-02502576b993", "sighting--140706e5-1e4e-4b2d-b741-c49ca55fe148", "sighting--d72c70b5-2997-4d8b-8e0c-9a40ffa4a8b9", "sighting--92a0ba09-1d01-41d9-b47b-b5bf2d39d930", "sighting--19f046b4-7cb4-4b19-bb4a-3399621790dc", "sighting--08a3d826-1004-468f-b0aa-88bbc2d439dd", "sighting--8712eadb-26b1-4a45-a071-772231716be2", "sighting--e92e875b-47c5-4f9a-8ee4-e21a55f7f5d5", "sighting--055d02d4-2b75-4c2f-9f0c-aa3d9c9b293c", "sighting--b5ff52de-6ac0-4dfc-a77c-0957138c6a3e", "sighting--6fc96d32-4544-4738-824e-d7609be1a148", "sighting--91c50996-b421-4035-a9cc-047f26b98cf4", "sighting--0ba957cf-c5b8-4ce6-ba55-8eb0f5b091b4", "sighting--44d4e637-6a92-4597-823c-871fdf0701ad", "sighting--825dc756-6f22-4dba-9d07-999248fb3d2d", "sighting--30baa229-224c-4f14-9ccc-b3db2c6afeb4", "sighting--b2e7a170-40b1-436e-a052-2526d355cf9c", "sighting--62b6fbac-4066-4e18-a32a-f0d68e41baef", "sighting--ec1935b3-b3aa-4515-9f78-a9fd9fa998c2", "sighting--3be1b731-b89f-4272-bbb6-6d0927b0fde4", "sighting--d30a74da-a0d5-4d53-b62a-0c1b245e59e5", "sighting--12568317-0042-42aa-a90f-a8cabef8d99b", "sighting--3f3471ec-ca8a-4d92-8a37-080b8a15f753", "sighting--400a807b-e13c-462f-8926-31b31289d669", "sighting--812130a0-2f35-4533-bea2-c1ea6cf398cb", "sighting--f0353a7c-281f-47be-815f-ccac32830d03", "sighting--34da8fcd-7848-4dad-9457-c0678c5e2d76", "sighting--a0244ab8-2185-4c38-b125-ab344fa9b886", "sighting--3a4b8cc7-dcce-4ad9-aec8-04e4ce9064a9", "sighting--2796f8ee-7975-4668-9ee1-6025bd55b767", "sighting--0300ce55-136d-40f4-8285-47fb284fa505", "sighting--7403eeec-989f-4330-ba77-3d76d54f6103", "sighting--a045f1fb-2ca9-483b-807c-afb2ac7e5755", "sighting--fedd8a02-911c-496a-95ca-de8a377969b8", "sighting--ec5f54a4-1a97-4444-bf21-9770f055f422", "sighting--9cd47a04-cd6e-4271-9a6f-3285a83dcdcc", "sighting--71713770-9bd6-46a2-a06b-0d41c1a5ec03", "sighting--09579d6d-7558-451e-b550-408424f5d38e", "sighting--8fd170b6-17da-4a59-a625-b86c77eed0eb", "sighting--69096d7b-a241-4072-918a-48268eb23aca", "sighting--a53dcd76-63a6-4186-ac02-c276d9e24a81", "sighting--142f59fa-3957-4f6e-a64e-8306dd701024", "sighting--a44d55bf-dbe0-4783-9eb6-5589c6122eb6", "sighting--b2b9f2ba-bdda-4e6c-8e91-d356238b0c50", "sighting--31f2eaa6-5b20-40b7-8397-fede519846c5", "sighting--ceb25bc2-7a11-493b-bb47-540a64db2026", "sighting--f21a216c-1763-41ef-9bc8-f6b9f1d3b013", "sighting--5e6d1061-250d-4368-84cc-7c7ec5bb9639", "sighting--36639924-de2c-408f-9a0e-43a69bede7cc", "sighting--25c7cd45-5b8f-4287-9d06-8b06949310ab", "sighting--ea257eff-2129-4c2d-84a2-9db2eb10530d", "sighting--d0a986a6-58cd-4b5e-ad03-7fd17dd04581", "sighting--f7a92300-644f-4ef8-8a20-66bd84c6af32", "sighting--c3a205b8-ddf6-4a28-a6b8-ae55a258d6cb", "sighting--fe226000-01eb-478a-b981-4b2aa03214ed", "sighting--6db858ed-43d6-483b-8c26-7c512da03d8f", "sighting--8696bab3-58dc-4ee7-9a1d-6bb359dd523a", "sighting--99d722c7-0b70-4592-8543-b8a3d3ae3f3a", "sighting--3dbd2684-a0b8-4b58-b5d7-21d920a59bdf", "sighting--4cb9c577-48ba-47fb-aa73-0075f4618987", "sighting--6781d861-53d0-4523-a798-133bd866a146", "sighting--3c993040-aef4-4174-acf8-66df318550a2", "sighting--88bf4f35-a224-4c78-a26b-7a9071d3c742", "sighting--f7181b16-dacc-445e-adf3-2ff437830dc8", "sighting--b8d1ebf2-d75f-43ba-9cfd-99004804aa25", "sighting--3d15fa1f-bdf1-4cfc-992c-bc43697844f3", "sighting--8b04662e-1134-4f6d-a0a3-8ff2d7f325e0", "sighting--9bf434da-f1a9-4acc-b0c1-a2fab5c17d12", "sighting--650ee5fb-eab9-4cf5-a527-60d958f34409", "sighting--0f412c36-b456-49ae-8457-e69dfeb3c70c", "sighting--10fada08-7811-471c-9fb8-f936d415c03b", "sighting--b3aa54d5-7d1b-43b9-9df9-3351306bbb6b", "sighting--6f49f8fc-455a-4ec8-970e-264dc4447a12", "sighting--bb039abe-911b-48fd-b56b-3a795fdeaeec", "sighting--072cd28e-16bc-41e9-ad02-6b29a911e1ae", "sighting--bc7ef6b0-dfae-4741-95ab-3aa0857df714", "sighting--b93321b1-8a50-4df2-9cb9-0be41ca4cc1a", "sighting--5731ea5e-aaac-4053-8075-943fca32b657", "sighting--78224cdb-f554-4433-a5ff-630c52927579", "sighting--382b032a-df83-4ce8-88d8-8e587298bb77", "sighting--e2e39e69-1033-4f5a-9198-63fd3bcb1443", "sighting--0b9399e6-0801-45ff-9073-3cc6bc36bc2f", "sighting--2429f8a1-c8c2-4474-874b-1d5d589cc22b", "sighting--19b74884-3cf8-416b-a646-13a1f40adb09", "sighting--64e27874-ac5c-49c9-9630-99f5a6e968f8", "sighting--69f69c03-8b8e-4646-8aef-4190e6a1cb28", "sighting--f807f4a5-2e21-4a4c-8ca5-05d3286dcdf4", "sighting--333d7d35-4804-4c2e-8b4b-5585d367e78e", "sighting--93357067-8616-4e4a-9ac2-43a434cf4216", "sighting--3fce02d7-d352-467f-bf91-8b89fcbe99c1", "sighting--105f6812-3e8e-4f75-a6d9-612fd7748752", "sighting--c2c91310-d35c-4201-8c12-c293ab37033b", "sighting--23a2e5cc-fe3e-436f-a485-910212fb0fe5", "sighting--11f66a72-344a-45b4-8e59-ca14456ada65", "sighting--3597e441-8135-4b09-b2fd-e7fc38121ad3", "sighting--2b6b15b9-498d-4a12-a1bc-19951f440068", "sighting--54fee16d-2e53-4149-95d1-4cc6a60e9aae", "sighting--1a6d4113-c7af-4acb-bdf9-67dd663a598d", "sighting--58ba10e2-d8de-471c-9d4e-12120a3479b3", "sighting--6d9ca3a6-c961-41c2-9a3b-1a77525d8703", "sighting--42813207-4115-4afd-9600-e76b8ed35d14", "sighting--dea62bb3-75e5-4741-8d13-394971180552", "sighting--6b96f1b5-395a-4199-841c-1570d7349c74", "sighting--c7187250-8dc3-4449-8231-a1439189b718", "sighting--e341dd78-57c0-4dac-81c6-645b52b651c8", "sighting--7bc1aab7-0690-48ed-9252-e0fe78a586a9", "sighting--b3f3f92b-5836-427c-b18e-94eed59c69c0", "sighting--313fc9f9-1055-48fd-8416-e8748007fa0d", "sighting--699e36cf-b9ac-4fe7-8a16-3b650f8c7a95", "sighting--eb254275-0347-4076-ba40-b81bd197bee7", "sighting--43d69ac6-e132-41b1-a67b-3e59068e66d5", "sighting--480a458f-c60a-487c-9890-799b72c736ff", "sighting--e9b26db0-0788-4634-92d7-c2067de4845e", "sighting--8b8d9f0f-906a-4f2d-9909-55ad082a8b55", "sighting--b7c12f49-f18d-4d81-a5f0-b2ae43913153", "sighting--1377ad65-607a-4f90-986d-da6cc0f5149e", "sighting--a440b2af-d107-465a-a64d-11d70f755774", "sighting--bd42d4a5-72b4-4fa5-a5b0-8f08b0628dc2", "sighting--be949910-f6b6-464a-aa7c-c2325e1a8362", "sighting--d64659fc-1ec3-4936-b68d-9e21d05b2eed", "sighting--99842568-b497-42ef-a2b7-747c8a640d76", "sighting--c7365518-a4ae-4d1a-b78f-2c013b8d59fd", "sighting--f4f13e70-2c35-45bd-a3db-f15ae75b3d29", "sighting--ed28383e-7d09-4387-9624-4f0cd6d9ae20", "sighting--acf3c65f-271c-47dc-8f76-8e31f746f556", "sighting--4ca81488-027f-4f62-ac5d-5cf3cacd567a", "sighting--48b25f33-e902-4a08-84dd-69fbb795f7df", "sighting--aa32a441-01ec-4c7f-b6be-35191c3d87f3", "sighting--9113c0ba-ad84-495b-827e-c708a6f81031", "sighting--3ff2156d-b17c-4d99-8635-95cd2e4d8f7b", "sighting--edaf49fe-08bf-410d-98c1-2d023c34c3af", "sighting--bf512a41-a791-408e-af0a-57b023229e35", "sighting--e26066fe-196b-4aa2-ab93-7607dee697be", "sighting--e0948717-4936-4d4e-8f71-08c049b57158", "sighting--74880f92-d526-4e26-9834-054b59731163", "sighting--77ba9fc8-0796-415e-9a2a-8c8ef7e21e02", "sighting--42206363-66ad-4984-bcb1-5c5506c43cbc", "sighting--81462036-5588-46e6-98c5-552ece0f9c85", "sighting--3d13360e-84f6-4bcd-9780-df2b39def034", "sighting--05023669-3429-4f1a-ae48-96c505445b37", "sighting--2cbead46-c38f-4e31-8520-0e5422b3fcb1", "sighting--0e40b0bf-252c-43db-8108-ec7b8c98b16c", "sighting--b95e66d1-49a0-4c2f-9562-38e5de50bf3d", "sighting--cbb8cc88-fb8c-4bd8-86f7-8fff62488a3d", "sighting--63c8fa92-61b4-494e-9ac8-78f57a54c269", "sighting--044bc9f7-da76-44d8-a2ea-4a2c2407f031", "sighting--253d7895-989d-4f6b-8bd6-732f5f4d5074", "sighting--fd1d9e1b-74b7-4010-9fad-1fc096e465df", "sighting--0b6ac6a7-009e-4f74-a586-ca67ec5c367a", "sighting--2ecd42fe-8c1c-4121-99ba-4306ebd81feb", "sighting--86fa05fa-f39d-41a3-acb8-819b9dcc5aff", "sighting--bdf36c5c-0bc7-4506-a753-72b70c45140b", "sighting--7994f5f5-bac0-43f4-8605-517abf938eab", "sighting--126442fb-bce6-4306-a529-c6243b53acb0", "sighting--43db82e2-0a0a-4fae-a389-9a237625e1c6", "sighting--7b7442e1-0e73-4073-ad0c-3d97a9c6b2ca", "sighting--3dcc55c8-e7bc-4383-8b85-c01b6bcdaa3e", "sighting--6cecb1f5-65d5-4ed6-8bf2-8e8e1cd753f4", "sighting--7b8d78c9-cb34-4fe4-a717-fb66b9796396", "sighting--42328be6-9c9e-4814-9e2e-ae32bf8fc7ae", "sighting--59390d3d-6eda-4784-9f43-9e197a92de2e", "sighting--cbd138f9-9bb7-4f1b-b492-efc3f94549fd", "sighting--a0a61ef6-0ec8-4cc9-a8c8-dd6cd8b6fe17", "sighting--e9cb06c7-766a-40fe-9bd7-c0334549f7cb", "sighting--e374b20d-b5b1-498f-8028-a36576e2b336", "sighting--c6f19e58-464b-46cd-9f93-5477919742be", "sighting--7f80dd5a-bedf-432d-b326-d1d3348c522f", "sighting--c96141c3-fd3d-407a-8209-863d80e72725", "sighting--c65ac709-f75b-4a56-9d41-e96346fb1060", "sighting--30f0726e-d137-4f28-8114-e9e7f3b6e384", "sighting--59cb069f-3bee-49a8-8665-c77fd4823b97", "sighting--833a6ae5-ce70-4a42-9e7b-256cd64178cf", "sighting--f0b62887-a073-4182-86b0-d8e933e7c251", "sighting--cfbe3a30-2c1d-45f7-a89b-dee67b3219aa", "sighting--6dd511f1-3d7f-4690-a6a1-ae7e1fc33433", "sighting--be096172-deba-49c4-817e-2c6edce6ed58", "sighting--4ef845c5-7cc2-433d-afff-9e8ca9c63fc5", "sighting--191c4308-74bb-4669-889f-438b13b2fdc8", "sighting--9b48b0e0-52cd-42a3-8e53-e5cdc62d18f3", "sighting--a954f9d0-ce64-4cdd-8abc-08420f1c0669", "sighting--667ad992-1565-477f-a2f7-3006d222c235", "sighting--600f7d2b-2680-4eb7-ac34-32799a7d5525", "sighting--ed952980-ada3-43fb-b53d-85055fabac01", "sighting--8d099eca-c19e-4dee-bdf8-9b3e5029f4d7", "sighting--58637f85-b073-490b-bba4-bbe04430f4aa", "sighting--fa997176-1792-4a83-b731-b28e0b165a83", "sighting--9b690fd9-d831-4301-87cd-2275cb1ba524", "sighting--e745a860-442b-4e9e-9768-ec173d7f3963", "sighting--06a94ee5-a41e-4362-8015-1fb27c72da38", "sighting--d4fc8d7a-eb68-4d30-9940-7b8ceab49ffd", "sighting--c66b5799-2dd2-47b5-ae5f-195188f4b589", "sighting--174f1f18-31d0-4e8a-9320-32b30dc02e65", "sighting--6664538a-f2d0-450e-839d-c628913bafb2", "sighting--233ab418-5484-4320-b3ef-366d744bf762", "sighting--65bfdf16-4f95-4409-b0ef-7575e37e61c2", "sighting--992edb2c-6929-43fb-beca-fd1edf64705f", "sighting--04845139-affc-4d22-a36a-84407a2c0aa8", "sighting--3b16dbd7-00f2-4a09-bdbe-75f19d1c66a1", "sighting--76e22008-17cf-4d25-8d9d-59373dc09723", "sighting--3bd83beb-3e5f-4199-b5dd-e5f5333ba833", "sighting--31cdf3dd-360e-45d7-91d8-f56ce312802c", "sighting--23b229af-6c4a-4abf-86a6-00adc1498e43", "sighting--d9ba6005-f39e-4d5f-89da-eb398fe2ba0c", "sighting--ebadf8e1-e778-4141-8078-c86b2f145e29", "sighting--c294cdc0-83eb-4b06-bd9f-59fcfc933e17", "sighting--576ab3a3-3046-4fa0-8812-aa03a97d9751", "sighting--230b7e4a-896c-4845-bfa8-ae0a9fc56fc3", "sighting--67d93bc6-4af1-4f01-b1f0-8ad4a510c46d", "sighting--30d1a809-b51d-4838-a57f-d98f0a981db1", "sighting--60056ded-4290-43fc-8151-e997165d2769", "sighting--d16d1bdf-e7cc-4ddc-b263-ee0a98d8b7c7", "sighting--d77f075f-c459-4083-93a3-51c16e979f03", "sighting--e8f5d503-4fa8-42b9-977d-86df89b7e51c", "sighting--ed66a032-9475-4e6d-bffc-a3d696786a75", "sighting--69239fbe-8ce7-4701-bfb0-a0ece80b3019", "sighting--4e0d8095-27da-44d4-b2e0-a14f3061f4b6", "sighting--50c27f38-2994-4862-99c9-04d05819c297", "sighting--43fb3bd4-7f6d-4868-9937-7bc22ad33759", "sighting--e868405c-e650-4ad0-a0d1-09cb783cccca", "sighting--191bb50f-81bc-4d2b-90ac-08720fe643a0", "sighting--dae5afd8-74de-44ab-b811-d79a6f851672", "sighting--ee2477dd-4907-49bb-990f-d93e6b434ec9", "sighting--2a18c76f-5bb7-4493-93a9-3f9a8ac0fe7e", "sighting--b8a1a918-82a6-4f18-96a7-92957e2be20a", "sighting--c993c760-40a8-4245-a1f3-5b4f1e3620eb", "sighting--cde39980-6e1c-4289-98d1-74d1903d8068", "sighting--f07cc97e-446c-4df5-8565-acecfe6c0147", "sighting--fac956e9-efa7-49ab-8ade-f2e163af9d3b", "sighting--f6a53167-6139-46e2-b734-1bc61644ab7e", "sighting--2c32afb7-24ea-479c-a198-826a2da1d986", "sighting--194a8e2b-679a-4571-8cd2-f7f83d81243e", "sighting--bb1bab28-19e3-4c58-a7a1-280d3aad9883", "sighting--e81e0f79-9a9e-4e2a-8636-73448a73f49c", "sighting--c6ee20e5-d768-441a-968c-b96dc457047c", "sighting--dee2c4c3-47a2-4ebe-99dc-50b6b1eb71f5", "sighting--0c7a6261-984d-4fea-8140-b2342b3f8bf0", "sighting--20186a48-f01a-4ae4-9932-44df4a519569", "sighting--aafb6425-8ef1-40a9-b3b3-6194307f090b", "sighting--e86239b0-5808-437b-a502-0104e0238289", "sighting--c1681adf-186c-46ac-8252-e06045386987", "sighting--4c9989c0-6278-433b-9012-e3a66e8888e4", "sighting--d20cb51f-97dd-4490-b2bb-4cf0b6d3ddf2", "sighting--b0770428-e4a4-47fc-8dd6-e13a528b181e", "sighting--945b011f-7405-42b3-b629-4e0d4ba5c4ed", "sighting--e68f8388-2ec2-4cdc-8d74-90eaa07ffb9d", "sighting--72022544-8b27-41f4-8e95-30d6c929543c", "sighting--34216b77-8c94-474e-8d1f-67ad01b7a4e3", "sighting--83978f61-4828-48a7-a550-3acec9a40d58", "sighting--8e0827ea-5733-4f2f-9513-6ca202630887", "sighting--9528e41f-a10b-47d4-b3f6-52e8f678d615", "sighting--ac215fca-b64c-41b9-aac0-a93c88fa562c", "sighting--d4f4abb4-775a-47a6-896b-90b4f6328ea2", "sighting--bcef9232-85e9-4040-aef3-348ce5f9bf4b", "sighting--aec9e7fc-8202-4de3-8525-99a20cdacb43", "sighting--f7f39b93-4ae3-4d52-8c5e-c3ee50ab1371", "sighting--95ab9db8-5263-4607-8ddf-7d21dfbb002f", "sighting--b6370f4d-6824-4829-8f58-4eca0132bb56", "sighting--a93ef243-6898-429d-aa39-9c7885ba30b0", "sighting--182a6833-4552-4638-9b51-965c5ce1ddcc", "sighting--cf3f7a6d-ffc1-466d-8547-56c6b51bce4b", "sighting--c1329564-1018-42a0-b184-cf7a3e75eaca", "sighting--f90b3aec-8865-4c74-94a2-853568d7456b", "sighting--36bffa31-dc82-45dd-85bd-9a47f02596be", "sighting--6df3a606-656c-42bd-916e-f5a68647fa01", "sighting--f689011e-353b-4c5c-a29e-3855c1e4159f", "sighting--6eb9d8cf-d05d-4518-b58a-95cb9f5cc402", "sighting--94c55c1d-79e6-4bfb-9663-e456c1284efb", "sighting--64d23227-1457-4330-9695-9a282c8ad140", "sighting--25dd917e-6794-4300-9db2-118840fc836a", "sighting--8279f27f-d33c-4db7-9cf4-1f771162b4d1", "sighting--bb17b3cd-a30c-49a7-a3c9-d1ce94c0d106", "sighting--3ccb3982-e221-41e7-bc81-38769ba9c4d3", "sighting--3a1749d9-9e03-48d4-a13a-1394c23960fe", "sighting--9073899b-dfcd-4738-b6fb-fbe5231d87d2", "sighting--6e1ce8f8-425a-4aad-98de-9256c4d04ea8", "sighting--1cbb1bb1-515b-4365-8290-0ef329c57f34", "sighting--3e1c0bbd-45e0-4730-96db-808e58d59dd5", "sighting--0b25b789-3536-414e-9a51-4726e9b18d21", "sighting--fd9884db-a38e-4f1b-b302-6ea1571fcec8", "sighting--46b28ce3-2c59-45d9-9d2c-19b6b09ab652", "sighting--c8f9740f-3605-4960-8f5c-dc6eb26762d8", "sighting--2985784e-2d08-482b-b316-f2ef1878f9d2", "sighting--faabbaf6-ceb2-4fbd-9565-8e682ac6f516", "sighting--73d1c492-844c-480a-94e0-727e4ac8ac28", "sighting--f3415c52-4a47-4dc1-8e49-ddc3c8755f99", "sighting--eed8eff6-7759-43c1-ba11-ac7554b327ec", "sighting--77ef1edf-3d7f-4c4d-844f-8d68d5f168b2", "sighting--d4033023-2f88-4aa1-a3eb-7904baab06c2", "sighting--116e16ed-bb5b-491f-9cc1-a2880505a29d", "sighting--0ac212bf-fe2d-4d8b-aa66-e5167bc0ce8d", "sighting--c484f6d1-bf6f-44a5-825e-48abdb22048e", "sighting--58680c39-5e5e-470d-a6e1-64f4f075d55e", "sighting--61f5b283-9d1d-4c90-988a-9d220b987036", "sighting--4fa5aaec-c3af-494c-919e-457e2676ec1a", "sighting--e04c9ef6-1d18-4aa8-a774-9351e9467b3c", "sighting--8b93f766-8521-4329-8bdc-e01a5e97a3db", "sighting--bc2e9a76-225c-4cbc-8ff8-d0d2099fe7a5", "sighting--46aded5e-a1be-4b03-966c-91f15716f643", "sighting--d35785c5-6d14-43fa-92cd-91931e151d53", "sighting--cf0e1ccb-91e4-4dbd-83e9-5ee59c987b5b", "sighting--a40ff6b5-a02c-470b-91ff-43c8a2206ae8", "sighting--6dfe99cb-c54b-41c6-bc4c-e06786261f85", "sighting--7d0e2ac1-49db-438f-8e9e-7aded1bd43f7", "sighting--4febd8f2-98e8-4c66-a053-b2132c75641a", "sighting--e42e7928-0381-4ca7-882b-fabb7a3884c1", "sighting--d62acc3f-b863-4916-961d-3bd245bffc88", "sighting--173baeb6-e1be-48f8-b086-6a048e0b0a8c", "sighting--496056dd-01fb-49b4-b2be-fe17b8a3453c", "sighting--67966668-9721-4859-a87c-ae20110371de", "sighting--d7fe1c01-e6ec-4fd9-8128-954d4ddb8c52", "sighting--34f3df8f-282b-4a78-9a39-ebb71205cabf", "sighting--5074e565-8e5f-4289-b647-081534b8e3d8", "sighting--13f7131c-ae9a-4be8-86e8-1613c9075afd", "sighting--ffe130c0-af5f-4ef5-b9d6-ef88ea0a867f", "sighting--e6d1a76c-baba-4134-8852-081c78e21669", "sighting--a3bbd48c-36c1-4d4f-935a-c00f1f79c538", "sighting--e4ba3da8-9d78-4ecc-8b9e-66c19a6275a6", "sighting--1e50b849-14b3-409e-8b0f-707c42d6ca92", "sighting--a1d04447-5b15-48e9-a170-849b4a9266d4", "sighting--de3ed4dd-cab6-47e9-b870-631e623d48ec", "sighting--3660e43b-2dda-4bc3-b74e-b6ea701927c9", "sighting--0da12478-e63b-42e2-812a-26a15698e6e3", "sighting--fd1a82d1-44c7-4a3e-9e87-9ece55c750ed", "sighting--a67253fb-4ecd-4b39-b823-93c9ccee5dee", "sighting--3304cd0d-2369-4110-a61f-5925d3cc4dae", "sighting--a53be5dd-e5b2-4aa4-90c1-d303e4146496", "sighting--36a47815-9675-4ded-8a7c-1b238d443d0e", "sighting--fb108fac-16c8-4862-a110-fdd67d243184", "sighting--5c7ae53b-5873-4af0-b63b-7dd20290dfaa", "sighting--0631c0cf-8854-4c60-995c-1dae8dc824e7", "sighting--75be6afe-d53b-4fc3-8dbc-1059f656a9a2", "sighting--0e382d21-7485-4745-92ff-6dcb8bda8015", "sighting--f30192a9-9c5b-42b2-ba05-7ec547960d11", "sighting--530ba046-117b-4be2-977b-17649003cd9d", "sighting--b30166c2-bcb9-4a7b-be66-fa3644ce9f9f", "sighting--3297a1da-acd9-4c59-b17d-c4b7998178f8", "sighting--822e91c4-6f44-4132-ba8b-2969bc772300", "sighting--c2006bd0-dbae-4c60-bbbe-0e85ba591de9", "sighting--a8582d25-cc2f-4e2e-8e02-9a841804d334", "sighting--bd8849d5-4b13-4982-ad05-cd047ca59a15", "sighting--ad4c7838-295b-45ed-8c84-cb7f7b107cee", "sighting--9bc9ddca-0820-414c-808d-8df54404d888", "sighting--b981523f-42a8-46c1-a293-9cb9438e57c1", "sighting--0bfa84ba-3b72-4bc8-a714-d9b4ec6764d3", "sighting--c65156ce-872b-4549-847d-5e674fcdbce5", "sighting--cca3bb46-2e1c-4267-8232-351a774700f2", "sighting--ee895923-c99e-462c-9178-77076d5c8253", "sighting--1bfd98b5-807d-4119-a39d-25f2ad4f83aa", "sighting--5e8cc92e-9903-4538-a9d1-4791469b407b", "sighting--50351579-739b-40e5-9e70-a573895b590e", "sighting--f6443dfa-be40-4184-8d9c-f3953bc4d072", "sighting--964c1eef-6fd3-456d-971d-7cebcf271c8b", "sighting--528d4337-213e-4093-97c1-dfd27ff0123a", "sighting--48d45d02-7d2d-4a32-afef-184da32339be", "sighting--320db15d-642b-4fcc-ae31-26eb50f45801", "sighting--8977f29b-a115-43d3-81d4-de40b8b18cd6", "sighting--6e1b3ba7-3bd2-4c81-bad0-e90dbbfee86a", "sighting--15a8833e-81a4-476d-adc3-a690d7402103", "sighting--3ce7e584-2f0d-4ee4-8958-91e239723ddf", "sighting--60264972-bcad-49be-90b0-0b3c772f1d3e", "sighting--b2dd1c35-1cfd-4ac1-ba89-4f67a76da856", "sighting--f15a2dae-ad41-435a-aece-a02bf5b0d841", "sighting--1ff9c3d9-fe40-4f78-ba8c-72a6e8a6c1a4", "sighting--d43f7a00-100d-4182-998a-6bef38d393a3", "sighting--74eb5281-8bce-4d3c-bf50-fce979b47a1c", "sighting--d4e75ae0-95c2-4700-8972-fcb26c9b635e", "sighting--e0e45742-c925-4bf7-8705-c4458bdfb9a5", "sighting--2201f612-1449-4a54-9a2d-aea82b9cb03b", "sighting--d7678819-322f-42f5-886c-4be036366391", "sighting--4b38faa5-b7e9-4fae-a3ed-7a392728dedd", "sighting--0394e507-94cd-49f7-8884-541d57c6caa8", "sighting--7a4bd546-da7d-425d-b842-93b5e33350be", "sighting--3598b12e-5e7e-4c8f-bb03-a0db35b80cf7", "sighting--3d622379-d59a-478f-955f-5cb6f066e1cd", "sighting--6e526258-f1bd-40f3-8f9b-e39ae506d8b4", "sighting--3da7ccc6-18d9-4948-bd09-04134360883f", "sighting--752793fa-f649-45f6-bf63-d557b213c2f4", "sighting--d6ccb5ff-243f-4604-84d8-e4dce00d063f", "sighting--859a0646-bab9-4703-8fd1-cc74cc8eae96", "sighting--8f2aeab2-b331-4c8f-94a4-86ed823b035c", "sighting--0973eb7e-f331-4b9c-adba-a3b865dcd596", "sighting--5b685a56-5d18-40dd-8438-85e7511567fe", "sighting--4da64074-19f1-4a07-9ec7-7ae4a311e2ea", "sighting--7ba89718-8ba6-48fd-8641-e5fcbba97cc6", "sighting--d8ad48ed-1d1a-45cc-88b0-4ea29d5eb782", "sighting--f8bd05ae-d6c2-4295-90af-f0291527360d", "sighting--4bce5ba3-4aa3-4aa3-9907-dcc6aa7d2a32", "sighting--ce117854-e13a-47bb-b3b2-7682a9e3c3c3", "sighting--b0fe2ecb-d2a3-4d24-ab27-272f48bc4e1c", "sighting--07ae6567-c47b-4f68-a7b6-38ff7734e4a8", "sighting--2aefa0b3-c617-40c9-8f9f-c9803157dada", "sighting--f4b91ef7-562c-42a1-bbc4-456a1e667ee1", "sighting--3cc14651-aa98-45af-a0ca-0943c23589fb", "sighting--3181f2dd-5842-42d0-aba2-3e13f79b1f3d", "sighting--5b33adff-efaa-49fa-b52c-33f2a89af78c", "sighting--5520cf88-2216-4d04-aed0-d01ae5610917", "sighting--f299abc8-d020-4b00-8a0c-7413a9f294d2", "sighting--5e0bb741-903e-4c4d-87e8-4e6fcf1ed3ab", "sighting--f9285aa1-feba-42d2-a9c7-e0888ea68ec0", "sighting--ae954a5b-d5e6-4c14-b96a-a39b42b93993", "sighting--ff906468-5c99-4112-83b7-5a7a4e287cca", "sighting--d4e21640-f282-4ae8-92ac-3dfa63b7f4b5", "sighting--43effb83-e3bd-407d-b52c-8e3d7d3024ca", "sighting--1f2797a8-c174-4844-8bb4-3e46854a8342", "sighting--dbb9b8ec-3826-4911-9ea3-1af0625eca19", "sighting--50d6382c-85f9-42cb-948a-127d1d06a5a5", "sighting--a80f1bb7-a2ee-43fe-bb0c-0e53a569a0cb", "sighting--d5a4a156-7f77-4dd4-bf63-783c9a5cad31", "sighting--30e59911-20e4-48e8-8737-85db67fc75b5", "sighting--21d2c84a-88fd-466a-a78c-72a29414e67b", "sighting--424bd57d-a69d-420d-9d41-293c6758b72f", "sighting--dd01babe-3968-477c-8181-155009568d30", "sighting--052adfd5-a5ba-44b9-93b8-a033cff8115d", "sighting--a086c29b-10ff-46a2-9103-578d25977192", "sighting--191ecf7b-f843-4071-9288-ddfcc1bb7569", "sighting--28a4b04e-e519-49fd-9da8-029fbede209f", "sighting--74acf949-556a-4cc8-916a-f4396bc60b14", "sighting--289c44bf-6236-4a32-8fd9-e6239bb5c374", "sighting--e40ad40f-32f5-4c29-8b60-386d1689e21f", "sighting--68a91038-b395-4383-af5d-b064160607d9", "sighting--8ce3ddce-847e-414a-8736-a303ac848728", "sighting--9375c527-7840-48e1-8a23-7f0e7c253011", "sighting--49e3e504-d1d4-407b-84cc-1d81138b5d9b", "sighting--6203790a-c0e8-46f8-b4e3-b17ab3423b3d", "sighting--5b444db1-560d-4af8-b2dc-7ca679438c09", "sighting--66c19db0-f448-4671-b5dc-37ca16df72d9", "sighting--14492fb8-ed34-42a9-931c-a2e9bac542f5", "sighting--ed4a2d79-1e44-4239-801f-b62cbaf77bcb", "sighting--7a436d69-af2f-442b-9bb2-c554e2f3e533", "sighting--7e43fa44-602b-4737-90bc-c70fe63729aa", "sighting--41bdbdfe-19bf-44d5-ae50-e5164170491e", "sighting--1f4076ca-4e63-4066-9a59-21940dbe8304", "sighting--b4c1fc7c-8764-4da7-891e-daa9c2cbeb56", "sighting--e3c41514-2905-419a-b0d4-b465f9b908aa", "sighting--0ae2f222-ce64-4bfc-a129-f51777593345", "sighting--8bfcf6bc-a408-4f17-923b-a58ee8d62adf", "sighting--7edd2937-1a6d-4eaf-a0d6-2c3c7d32794d", "sighting--4ddf3e2e-f9f4-4e50-abd6-4c0e7da88ad8", "sighting--1d2c39ab-2eaf-4af2-9ca7-5e93f932fb38", "sighting--68ff833e-4803-4cf8-b498-18193b8fd4c0", "sighting--c4082b1f-d902-4aa0-b438-6f627c2ba7a2", "sighting--479bb64b-7763-4768-9c14-3bd4b49e624d", "sighting--a0366f51-8b1f-4556-823b-bac7eec514d7", "sighting--a8ddfec2-5a46-4df1-b294-88b9fe156eb4", "sighting--bd80f11c-aad5-4b9b-96e0-1d97c5dce9ae", "sighting--9447941a-7929-4dea-b86c-54fd711952d9", "sighting--09e23137-f4cc-4462-90aa-b95448fd3229", "sighting--84648cf0-6dba-44e3-98bb-da0598ec49ba", "sighting--2e2397f8-5e86-4ba8-aaf2-94626061b481", "sighting--de1c1adf-dd4c-420d-8f99-4c39e091f091", "sighting--19d1f178-cf60-456e-b348-d05cf3e7784b", "sighting--c20e28bb-e75b-45da-bc3c-f9f12a6a6401", "sighting--80bbb30f-55c9-4154-8924-bebf55460ab4", "sighting--773f9b40-6468-4b8a-859e-364ba8f23723", "sighting--bcb52303-4033-4c43-940f-1415e620904e", "sighting--abe61ee1-7baf-4c46-8ddc-d8317efe7b1b", "sighting--eca52e0f-b94f-48cc-abc2-e3fd5cd1094a", "sighting--9db2ffac-2d0b-406a-b01a-9e9518e2eeab", "sighting--1feb6cd7-be97-48ce-9446-36b84d692804", "sighting--9a41cf2b-2e8b-46b4-baa0-bcab68b79f46", "sighting--3b74a2c9-6e99-45e1-9ac3-71c3bb1be0e0", "sighting--b2a95a9c-5964-4839-bf09-118ad98aca74", "sighting--89c6d892-351c-4ad2-a025-e103c176c05c", "sighting--57e3f1af-9ae1-4417-b28a-8fb90d529ce5", "sighting--44650efc-82cb-4667-85fc-bd6c47422d38", "sighting--7e5b367f-8841-4587-8af0-7313e97a563e", "sighting--68c85188-630c-4dc5-a754-a62cce2217b7", "sighting--804ee87e-1dda-433b-b71d-3815f509322c", "sighting--69a26cf3-2d23-4b66-a02b-1b7b984087dd", "sighting--484f8550-c429-4631-9ad6-f7afdcdcf35b", "sighting--069cc6ef-68f4-4b3f-b614-70b703be6766", "sighting--5407ea38-f8de-479d-8c4c-7f7e6401eed7", "sighting--e6e76616-beb4-48e5-a554-c590011612d0", "sighting--d1ddd41d-5540-48de-98ee-82791d86dba1", "sighting--563a05c7-8ca1-44f7-9d0e-65854cf96244", "sighting--fbdfb2ba-741d-4b2b-a90b-8d5e791e36af", "sighting--bc1e705a-ef49-4e4e-a2c4-2158774dfbb4", "sighting--91326a8b-0f1e-4e70-bc44-61e0e4477f51", "sighting--8b70e956-67bf-4560-bdc1-6ef712f01331", "sighting--db08c93e-8b7a-47e4-a21a-ba346bea53c3", "sighting--96edd382-e153-41b5-a522-70d30ae6006a", "sighting--abe45127-b4aa-46d8-9f36-56cd1476be87", "sighting--aa34155a-dec6-4581-88ac-82f0c8b39955", "sighting--d1cd6b21-7a2c-4236-8edf-b4277f2a485a", "sighting--e43096f1-448d-4c03-8578-7fa2b33589ba", "sighting--6c0a9583-1604-4e82-ac02-463f99173e6e", "sighting--e7e9ae2a-1224-44f4-8b9a-92b3b12196a3", "sighting--2d42d709-6b8e-4a5a-ad97-a4bd00163c1d", "sighting--9475f742-279e-4c69-b178-a60c456f4255", "sighting--c33de072-f18d-4a16-bc8a-fe8c33c824e7", "sighting--11841673-a4ad-4dbc-967d-13e39779c9f3", "sighting--3e05867f-380b-4b56-b337-bfe845c2db64", "sighting--a66586bf-90ea-4f4e-a665-e43307393fd3", "sighting--b0549cb9-4ac7-449c-9e17-86af74083597", "sighting--be186504-ddf2-46ad-9085-f3cf79c7b134", "sighting--d184929b-9533-41d4-92bd-ee48bd2f8e3c", "sighting--17a76d8e-4dc9-46e5-bfce-5b368b13c8a3", "sighting--c820f2a6-3c5d-48c8-b847-2ba83b8ae4bd", "sighting--a7f7cd3f-1763-4df0-a986-51dd96aa3a19", "sighting--7cfefda4-f428-4fdc-97b1-07d25953c3d0", "sighting--649dc33c-9d7b-41c0-87e4-65d2b71fadc3", "sighting--d2eb2878-9922-4d9c-bf4e-093b29b160ca", "sighting--b259e14a-8470-401e-b513-af3e8eec102a", "sighting--0a8e1d3c-b170-45bb-9edf-9b7d6dbc59ad", "sighting--36237dea-bb42-4786-8870-56b5f24bc572", "sighting--b465279e-4348-4be5-84a8-3bc430a3fe88", "sighting--3b36c5d0-6425-432f-9588-bc853adc51a7", "sighting--75a086c5-1b64-489e-b2c3-d593a9c437ea", "sighting--b3c2c4a0-c30c-49cb-b776-e4c0d9c17700", "sighting--54b6880d-659f-4e1a-b8ed-143e0d5227bf", "sighting--6f327ce6-c904-40c9-9fce-d93afac5eb5e", "sighting--b3b19d83-4dfa-40e5-83e3-8a70d2e919f9", "sighting--111911e2-44f9-4e46-a6c1-eac1041ff9f5", "sighting--a9165898-e682-4024-8084-41b6db268e71", "sighting--67ed2b30-3523-459b-b446-e81b1ee28d95", "sighting--e5ce44f5-ed9e-4fbc-83b9-7abd84550fae", "sighting--18179be8-84ca-48fb-8ef7-a924f279f161", "sighting--7909a0d5-71f7-4c8a-8fd6-cf491a9df130", "sighting--c6c1a019-923a-480f-a901-ad39a6699086", "sighting--affc02ba-b3f9-4004-acac-5216f3daf7b8", "sighting--e720b0b0-e8a7-4a63-acca-9854d7d68821", "sighting--8935a3e8-5eed-43f5-9f2a-00440321104e", "sighting--71be91b9-5b38-407d-8573-10622709d04f", "sighting--77765e2f-fa07-43ab-beae-bd0fccb7ceb9", "sighting--61889ded-8234-416d-a067-0a484fb9dc0e", "sighting--d8e1653d-892b-487d-96af-0bb6165dc9e6", "sighting--f2c5bdf4-9c70-4435-9e83-ce2fe736f22e", "sighting--e77d5f34-fe26-42ce-a08d-f0fd31b823c1", "sighting--e840c818-be66-471c-b942-3395acfd7128", "sighting--e4c714e5-2222-4cd8-87bb-8939146c3a0d", "sighting--f8894754-ffec-451b-a25d-e14364ebd23b", "sighting--25b984f3-2c19-4c7b-beb9-f78c334f073e", "sighting--c1625064-8a14-47fe-8cbf-90cdf71b70b6", "sighting--4cb01735-739f-4883-ab60-2e9fd6e68b5a", "sighting--8da7ebab-e140-4047-a9e8-9e056dea4e37", "sighting--304e9c45-206b-416d-90c4-d872d0408379", "sighting--251d0e3b-9795-4994-9f1a-c667487210a0", "sighting--84fca8b9-709f-419a-b432-cac70442a6d4", "sighting--322087f7-6321-43f7-a3eb-0df8e31a6b5b", "sighting--2ff7dd9f-d770-464b-ac6d-cd1dae75f8df", "sighting--56d38249-6706-4003-8149-79db0e4b2d61", "sighting--2028369e-1218-44c9-a25f-36d49146c79b", "sighting--58e77859-268a-4121-9df7-18f493e3bb17", "sighting--a4b11693-3ad6-48cb-b054-3c82b1e8acae", "sighting--e7d38266-ad03-43c1-96af-90ae96f9a836", "sighting--1b2f94aa-175e-4aa6-8977-2e9bc2f1de5c", "sighting--1f2d18b3-0108-421a-89e5-f64368c9caf8", "sighting--030666f4-56f9-4303-8cbd-dee300b0773b", "sighting--3db13dc2-c5d1-42e1-91db-744a4b4aa248", "sighting--0f8ea4ff-8d22-43b8-9e16-61dd58216eab", "sighting--51e1e1d8-60d9-443b-b9b5-3ff8af25d047", "sighting--d8a9663b-82e3-4078-9d7e-56f1e1371bc2", "sighting--063792f6-8235-4d08-9fb0-ea7b4e551f18", "sighting--31585c94-5a53-468b-88c8-8342b167c31d", "sighting--9ba9a4e4-86bf-4b06-99ae-491f62ff63b2", "sighting--83801396-2015-454e-9f3e-7b00636a49f2", "sighting--6bfe16ba-a426-455f-ac7b-f12c56f52363", "sighting--35d48453-f219-41b3-b3c7-49e219ad7cf1", "sighting--9b7301d9-9247-41a5-b97f-83745ead5cfe", "sighting--42c6cc33-ecfd-4aeb-bb8f-cc613917eec2", "sighting--dc3f2e33-c355-4c2e-adca-08b21a648678", "sighting--57d946b8-7b2a-4237-900c-1946b3790b81", "sighting--0d5bf251-ebbf-466e-846f-9ede76aef5e2", "sighting--12ea14b8-e9aa-468a-8179-08a7287edc78", "sighting--01ecad16-214b-42b6-84c2-112088714ebf", "sighting--71d255d5-4c47-4242-bd48-473daadb96e7", "sighting--0712063f-0620-4282-ae3f-be96b0b0fc94", "sighting--44eea7eb-48ee-4043-ad4d-dccf9b070835", "sighting--ebf8c92b-4d17-42fc-b935-69912d1c367f", "sighting--888f855c-6fe7-45d7-bd77-c424f659a369", "sighting--238cdfe3-7708-4c12-af52-f4f1619acb68", "sighting--01a725b4-bd15-4f39-9f9f-7f8a37aac734", "sighting--cd969b5f-815e-411a-823a-0cca6ba182c7", "sighting--dbd0ec3e-dc30-4de6-b856-8ef5acccb131", "sighting--f68f79d8-29d9-4a19-a17e-97585bc945f6", "sighting--ee8913f6-7fec-4d06-bc7d-c7f8c42b51fb", "sighting--fc24dbd9-6881-4a45-8245-0db822978b17", "sighting--0a487d0d-7c4d-4cc8-bb0c-85b9990c923d", "sighting--286e5e0e-ad3e-44a4-abaf-ccb39b18d576", "sighting--27792d6b-9b4b-4c5f-9cc1-d1b566cfb9ba", "sighting--d10a7de6-d98d-4db1-8368-120aa4608ea9", "sighting--a25e1607-5490-4a65-be51-5a4a3450f17a", "sighting--d64f706d-59bb-438f-aa4d-14eb06278e97", "sighting--29b6e7a7-c726-4216-a72e-5486f4c22852", "sighting--81dddf80-d899-4437-890b-52a2c8fcbae3", "sighting--580d831f-18fb-4ad3-8a61-8d4262d8ccbf", "sighting--4f538592-b123-4d69-a23e-9fd76549b649", "sighting--91bb9cc7-2197-4b22-b28d-b8d8e83da126", "sighting--4ff7fa29-9d48-4fc7-815a-038f1961cffa", "sighting--a3ca8734-88e4-4a79-9da7-e97307b42c1c", "sighting--7c6d5206-0a3f-4cfa-8168-dfee32d93028", "sighting--3da4423e-bb7f-41d3-9a0e-001a7e5251e6", "sighting--5b8bd457-588a-44a1-9237-4827829569f7", "sighting--2537134b-293a-484b-86b9-09afa0b09827", "sighting--dbcd8470-69cf-4677-b809-93141b89d615", "sighting--9c9e5369-7b1e-4eec-8115-ddb00cdf21ac", "sighting--98a55bf2-1fa9-4a07-b456-de52e163dff5", "sighting--3f375647-4ae7-449d-867f-f8a49be50a23", "sighting--60af7155-6bee-4cc8-98c6-f9cde79c0fc2", "sighting--9219034f-26cc-40ef-8ee8-3ac5ad4fb708", "sighting--744d86af-2eeb-43c1-87ea-c5c40e093be7", "sighting--28bc8ef1-3fca-4e04-a17a-01a2dba08fcf", "sighting--61253788-1716-490e-a7a0-60dbdd0695be", "sighting--154d299b-765d-48d0-9d4d-f610e2171ab0", "sighting--a2adf1ae-58bb-48bb-898a-3fa5d208efe1", "sighting--df2d2ebc-bc88-447f-afbc-32bf6a3577dc", "sighting--b15355d1-f4d9-4e55-bd4d-50242bebae25", "sighting--236f78a9-306b-4ece-a1e7-178f330422a4", "sighting--9489dbc8-42fc-4950-a2a3-4dc729b36994", "sighting--30e3da8f-88e5-4af5-9901-c9fddbd0e0b8", "sighting--65aa4efd-8a9c-42a0-8d45-e5d3789ee9bf", "sighting--f83426d0-1d00-483c-8192-ebffdfb40f68", "sighting--3af198ce-d329-4354-804c-952246e6ea38", "sighting--ca59fa56-0721-4943-8c5f-37a0a2399173", "sighting--0f34a9e6-7dc4-43c7-937a-c75d4256bc82", "sighting--a16009e5-2682-4066-8281-d84dc235feea", "sighting--55335dda-720a-4af6-ab2e-a45773d9aaa2", "sighting--80f66ad3-67ff-4e66-8c98-747567ec624c", "sighting--cbe8aef2-8fd9-4831-97ae-fc8c5d4d7f45", "sighting--7505da0d-4dbd-4029-845f-a0b544d21e6d", "sighting--53479129-320b-464a-98e8-68c285a13215", "sighting--100a36a4-7e25-4aea-a2cf-1eeceeede3c2", "sighting--43c671c7-3849-4ddf-b937-c2be650efaf6", "sighting--a31fd8a9-e7d2-4c55-a4b2-ec01704afa20", "sighting--b4be63eb-f532-40a0-aa5f-f527f48c16b2", "sighting--fe10731a-72d6-4611-8653-5df4c2fd7e8c", "sighting--0092ae74-6372-4258-b931-7756b25637aa", "sighting--f302ed30-a233-40ba-a0f9-b77133bbbb4b", "sighting--d3e9971d-e239-4157-8006-2bf04279f651", "sighting--fa9b703a-3a67-4a0a-9e5b-47ee714bcc21", "sighting--54ffc36f-993c-4230-ad58-f46ab8debb2d", "sighting--b4ec9144-8251-4d62-8028-d784bd7d02f7", "sighting--3026ee40-921b-4b35-9998-c0e25fa656d1", "sighting--6a9d1be9-edab-4454-aaaa-fca095fc3e72", "sighting--0aa70220-4db4-4160-bb51-bbd0b1cc2fa6", "sighting--c24584a1-8cb4-4b31-813d-fb6667380a28", "sighting--f1410dd2-7396-4ea3-9c36-c7cb7ed9bf58", "sighting--e54d8a7c-907d-4625-89d1-cc5ee64af70b", "sighting--a622b0ef-dca7-4481-8103-4f1264a9c961", "sighting--f4787efb-1265-413a-b968-8a52e50ff393", "sighting--d4676591-afde-461e-9f20-3e296e40d377", "sighting--78bb5a4a-f6ce-4a39-b0ca-84c5c7564ac0", "sighting--4e76aaf7-474f-4f3d-b96f-e0493db6fb78", "sighting--5db6bbdc-74ff-4eff-8cc7-faa9b3d88b9d", "sighting--435dcdf6-471a-4913-bf32-0de9559b7058", "sighting--eda45355-45f7-4e53-b17c-565a1f4de035", "sighting--a95911ed-e9b3-454d-b653-b23b59c0b01a", "sighting--3c88dc94-ea54-4cb8-ac26-ffb3d1c775aa", "sighting--7bde3c5b-399f-4f2c-a5f4-c4afc305a318", "sighting--5755b06f-4c19-4a25-bcae-1e33965e9dca", "sighting--96c190c7-81f0-407e-9708-9edc5f56940f", "sighting--fc04f905-b66e-4513-bc1d-efcfe78b57eb", "sighting--dcad4812-5a5c-4b27-90c7-eb1313828acb", "sighting--157c9d5a-6b3f-4fd8-b811-427398b9bbe2", "sighting--1be65789-116c-4370-9ca1-94c324e480ea", "sighting--01e904d1-cfbc-431f-8e2a-4e252b9e9a04", "sighting--677f89b5-0d6c-4f97-8b04-b0f656c7e733", "sighting--51ee7e79-7af6-4d17-8f01-421955d8cf52", "sighting--f451dc92-0cd8-4caa-bddf-e27e8de9eef1", "sighting--766682a4-6c21-4115-b1ff-c345ae170f42", "sighting--60f8c2e9-b97f-4b09-8b33-a62e8c71ec7d", "sighting--dbee495c-9db0-4814-9630-e60effd422dc", "sighting--f197792f-837a-41df-b6b0-0eea1844563d", "sighting--b83df02e-05c3-411f-8991-a99210a339ea", "sighting--2067e1a2-7b42-43a7-a514-6f5c7fdb366b", "sighting--1c9aa667-eae2-4954-9e3c-ab6723289ddf", "sighting--3e774ecb-ab06-4774-9ce8-42179799fc4a", "sighting--0f0cf62b-1321-437b-a1b1-69e62c033ebe", "sighting--7aeab104-15db-488e-9a34-6dc0b0f6ee9b", "sighting--c20ea442-2ffc-4b59-aa39-625ffc3f330b", "sighting--dafd0144-684b-4518-a1ad-72a2b0d7c7b9", "sighting--48bb20a0-b181-46a6-a0e8-8feb6dc8526a", "sighting--5b0b7e45-46d0-4d2e-ac5a-9caadc3ac691", "sighting--afab0558-3150-4b32-a4b4-146e58765450", "sighting--9e53f3f3-4a10-4bae-bb41-5400fb16cd76", "sighting--3b7ebbed-d88e-4eb7-bb8a-591ed0da13fc", "sighting--6bbe8380-6264-446e-aed3-044fa8a7f6c8", "sighting--d37d6036-93c3-4466-a96c-ee6135fad2fd", "sighting--1d481fe2-8afd-4d6c-8cb6-3d4b6ba5ef55", "sighting--2258a39d-8660-48b1-a742-6efe2f09377a", "sighting--ac2aa6dc-0313-42b8-9949-32a67cb43431", "sighting--713167b4-2c3d-4e50-a933-fefe3343add2", "sighting--245eb8a6-22db-464c-8ec1-0599ee9aae73", "sighting--1106ef5a-8655-4f29-b463-0809a68fc872", "sighting--969ba8ed-5d47-4768-a763-e2b926da587b", "sighting--d1aa9208-024b-4575-bf8d-9eddcd000b41", "sighting--59523dde-9db9-4d3b-baa0-bfde79296bc8", "sighting--0998b20b-2fc2-400b-9592-12c910c7e328", "sighting--53bab337-932a-4d66-abce-ea6cd36f1c12", "sighting--2c6bf7d7-bed1-4de5-8a9e-5f700882d4de", "sighting--5cfd2ea6-9d21-4e6c-8f5a-727e3d5ac78e", "sighting--8990b1db-01bc-473c-ac50-25fd8866b51c", "sighting--bbd91729-a5a8-45ac-a257-4ad492d21435", "sighting--52d09ca2-9929-4e94-b795-713cd7ba5dc0", "sighting--0e0b02fd-4976-4a8b-a8f5-9499ad801eb0", "sighting--c1f18be7-4674-4ae3-9dc1-7c9543d5bd37", "sighting--f1d76117-f8b6-43b2-b635-f6fc429351d3", "sighting--bd9996df-f34d-419a-b41d-222fe6535bd2", "sighting--94d071db-8517-48e8-a105-944734f73ce4", "sighting--abeb0f11-5b45-491a-98a7-848cd6f18b0f", "sighting--8c683f11-ae58-48ff-83e6-d537ea853656", "sighting--7cb2ceef-24c7-4443-9026-32ab11d17a73", "sighting--30cf799d-8d94-4ed2-ac85-99a091323c07", "sighting--5501a0aa-7df1-418a-a46c-4d0f469788b7", "sighting--bb469d7b-12c8-47bb-9676-a02037b8e924", "sighting--766b3693-f41f-42d7-933e-889444d7850d", "sighting--49f4d6d0-cc99-4375-900e-f83eae7e63dc", "sighting--4dbfda4f-a1cd-436c-8672-b3a89bae2a9a", "sighting--da292b2e-588d-4543-aff0-a5780b074ab3", "sighting--46157592-894b-4609-8677-386678944731", "sighting--5e688499-b610-4e26-98c2-05680e9950eb", "sighting--c7be2455-0641-4eba-8312-7335b8d739f6", "sighting--ac6eeea6-c867-49cc-a648-08280332cbc3", "sighting--549ab791-7238-433e-aa46-e5aa359131f0", "sighting--4c340b9a-1104-40e7-978f-e5d901926bfd", "sighting--505b7ba0-370f-4668-a92e-5a143cc491f7", "sighting--5e145da0-3c7a-4e09-940b-f25277a9948c", "sighting--e8185064-c70d-4a0c-86d0-a4a148882920", "sighting--21d4bd65-b814-4d7f-a0fb-6e9b70bd5a55", "sighting--bf5616bd-b048-4c98-9e62-e61605b6c479", "sighting--57824d3f-7422-4218-ad02-86e790cbd3b7", "sighting--057de574-104c-41d6-9fa0-b8072fb15321", "sighting--cbe49c8f-b656-425d-9d6f-9394758f6853", "sighting--3389b77c-9f30-4ad6-b4af-ad4b14671861", "sighting--954aa5b5-6f6f-482e-9f84-25cb823727df", "sighting--2c78a323-4c38-4469-80c5-c5b195c438bc", "sighting--65a3a461-e4b4-4e6f-bf03-998fb0c95647", "sighting--2021890b-7807-4fd1-8fd3-ad159ea94c35", "sighting--8c708533-edb7-4f47-a7e5-d5c161e5343f", "sighting--032362e7-61c9-430d-abf1-992dd3e28aac", "sighting--0694aefc-1d99-4571-af1a-c9d7f3192135", "sighting--df5afdca-8a25-409c-9eec-75ea9b14e73c", "sighting--fc20594e-8923-434a-94cb-ee36029f38d9", "sighting--9afee0a9-c5ca-43f9-8181-fc6edf86480d", "sighting--103ac827-53df-4ce9-aa82-6e4e0e17ed4a", "sighting--f37e756b-a673-414f-9dcb-4d3ab8bbbb58", "sighting--d9cdaf34-a4e1-44bc-8cf4-b83d5156201d", "sighting--49503504-b613-4818-8242-32c9f89d14b6", "sighting--dcb78434-faf0-4198-a4e8-7eddb1368132", "sighting--ad4ae1fe-0adc-4d4b-80ad-1a03dcafb90d", "sighting--33b76a05-0004-49cf-8071-32efb1d5e476", "sighting--394576d5-9553-4cb7-9fdd-ab4f91cb08c3", "sighting--b9814c7e-d59c-4f80-b061-2d07011d613f", "sighting--4924e708-995b-4213-b822-689ac2801116", "sighting--5e6be4a0-e98d-4ce3-9868-3b768baffe0f", "sighting--d71fc097-50f4-4c1a-9abf-a4c9665385cc", "sighting--76c8e982-4f36-48f9-9cbe-fb2140b853ed", "sighting--011c26d9-6353-4489-bd58-fc6c0a8a49b9", "sighting--e68299d7-9dcf-41bc-9dd8-c1bd2a9e5ebe", "sighting--1c8dde4b-367a-41c1-8365-e8c577080e52", "sighting--d34e60fc-ac78-47d3-b990-ec44942c3ffc", "sighting--6de77739-7b09-4a19-8f9c-ed3ed453618b", "sighting--122c60a0-a9af-477a-9831-f84730b37f24", "sighting--26d01324-9c0e-4efb-a422-dba51295afde", "sighting--be6582d8-501b-4189-9f06-e82a4e5d8943", "sighting--2dcd1fa2-86db-4fc1-bd54-6c3458552ac2", "sighting--771a3d0b-af00-406b-9a6d-e979f7a82bec", "sighting--889e18cb-9881-433a-97d9-c2d295a4099a", "sighting--478afcbb-d540-4a5c-81c4-c7f9fea6f074", "sighting--d759f406-7d39-4f4d-a266-22b059042ff6", "sighting--c2ff11d5-2f75-4a83-ae69-1f5205b5b7ad", "sighting--1edfb440-d447-4230-a1ed-d5b7ccfc6539", "sighting--f1b28625-db3b-4486-a1e3-fc45a6952343", "sighting--7cf4b69d-c658-4b2b-9812-de50d86da028", "sighting--d9281ae7-28b0-4d85-a11b-15fe2e82ca1c", "sighting--ec43df32-2679-4e0b-ad48-59f1c137c1e2", "sighting--f0edf8fd-fcda-4e79-b8e9-4b84cd95b8d2", "sighting--04cff7ed-69d7-4c35-b324-66191c18e95b", "sighting--a9168de5-c2f8-4f35-b8fc-20e5f0e0450a", "sighting--d648c158-5f49-432e-9ad2-44919f696bcb", "sighting--7c32c6e3-686d-4c4e-ac7b-041775694202", "sighting--0e754e69-2064-4f4d-92ac-19998aafc15f", "sighting--cbe1c2a4-c87a-4901-969f-8f46ebc58715", "sighting--ca044774-e716-4922-bbd8-c8c2558694db", "sighting--804de428-2ddc-4868-bc42-6ee342419001", "sighting--a06ff4b8-40a1-4267-a351-a99512ae1ee0", "sighting--c881af0d-8e4f-46f7-9d9d-1e1ff9eda2e3", "sighting--4ecd6fef-afd1-481c-9438-84b6636469ed", "sighting--e11dc983-e3ce-4e4b-bb3c-b1697461d467", "sighting--726bba38-7c16-4cb4-b1f8-bb23f818565e", "sighting--b85e0af7-2664-4ce4-82e1-50b257d1811f", "sighting--9406a8f5-c775-4dbd-81a9-8ff78104522b", "sighting--9bb31072-9277-4c29-a436-3c9d75911bae", "sighting--9e85b625-ca00-48a3-b895-8c5ee553ca44", "sighting--62b03797-64fe-48ce-b57d-9849bf64dafa", "sighting--248ad038-23e2-4143-a849-3a9b7a869737", "sighting--2c0976c8-af66-408d-b473-a3f5ea783e8e", "sighting--460590a3-3b48-484d-a28d-f2584025134e", "sighting--068bae08-6376-41f7-902b-c838359d5f2b", "sighting--7a70427e-cf81-460f-ab23-b8ce070cede2", "sighting--21abdaf3-89ba-4ae5-8cc9-b458eb5d1bd5", "sighting--e8104d4f-f77e-4089-ae3b-9360856a4647", "sighting--0415ec2f-76ac-486d-9bbb-0b08a3ef16f3", "sighting--e5c2f2a5-ba74-4677-8dc0-f78e9f0e009b", "sighting--daf16a3e-d139-48d5-b896-7142fe8ad7fb", "sighting--78879140-c1ba-4e47-a412-8242bb04dc10", "sighting--84ee8400-f31d-43e0-a4cc-f23be1611212", "sighting--2d4dc8f7-abcf-4da6-802c-2d85f217577f", "sighting--497e9dda-cdda-406f-b7ee-f6d805cea17e", "sighting--abfec317-365d-43a8-8e3e-cd4881931fad", "sighting--dcf1180a-4abd-4a88-aaf7-3f76a1c45962", "sighting--65140cde-b210-4117-a44b-94ab46a59317", "sighting--c1b4a788-ebf6-4999-a8bc-e3107cd8c832", "sighting--12f5641e-d40c-43f5-a078-5f18f72adb05", "sighting--828fdbb5-0a47-49a1-9973-3b15e8cb378e", "sighting--f6e00fd8-df96-4497-9506-ecf2b14f1d50", "sighting--32c47b49-f6cd-4dd5-8b37-ec88310b72d7", "sighting--d691f185-19b2-40ca-82ec-ba23e91d2d24", "sighting--d1bf6c6c-ea67-4e5a-afa0-2c30eb2eebe0", "sighting--8b6ec867-0c83-4cbc-9380-d44a958d37b5", "sighting--de47cb15-4f73-43b4-a61e-2b85e237ad1a", "sighting--757d1902-6a1c-4029-8a95-58c11ac3c262", "sighting--43de1482-9e3b-4cbe-9d67-3904cb4a450f", "sighting--c60c2a4b-bb7b-4cc2-9603-95ae39d4efc6", "sighting--efb5b9e8-189e-44f2-b60c-c69e22b46567", "sighting--5d98a64c-e696-4d1d-b022-d86bb7079d4d", "sighting--34f4eba6-6bbc-406b-94b1-531c328c1c47", "sighting--b68b4f89-112c-4417-ae19-a193847e999a", "sighting--e9ef0908-474c-4cd7-bf63-4801ffad7a30", "sighting--ca7c36fb-259e-4a36-ad1f-a9807f220f40", "sighting--3c591ddd-1da7-4081-9349-1534b6cd4179", "sighting--1d29e3d6-f91f-4c5f-a5db-99b8bad73d12", "sighting--78876c55-63be-43d9-b33e-65dc975bcdc6", "sighting--c7d49128-78ed-4f6b-a533-78d4bd818e22", "sighting--fa37fcaf-9f19-462a-b10d-70e836f7e957", "sighting--0e84ffef-9f58-4b2a-a6b8-81b1da456660", "sighting--19d9dd95-0cca-43c6-b87f-ae3987955b55", "sighting--bc7ad496-0e33-418c-8862-3d7d9bf87135", "sighting--fdc30241-2674-49b8-8f31-ef276629fcf3", "sighting--373920a3-35c7-47cd-b296-4083a267d43e", "sighting--99f89cee-0d3b-4fc5-808a-59f51872c45e", "sighting--563e796f-165a-4e7b-9a78-993513deeb5f", "sighting--4910714f-3c30-41e7-b3fc-591ed1886119", "sighting--25d2ae69-a9f5-4f2b-9ad1-e4f28f17c4cd", "sighting--d763560f-36e5-4f9d-b1ce-bb15c97ae3d1", "sighting--9de69acf-21f0-458a-93b8-775a267798c1", "sighting--ac7c375e-5748-4f42-b722-e1a9c61bb8d2", "sighting--3f42d01b-3136-4213-b4f2-871e1145ed81", "sighting--260c6ffc-e1b1-47e9-b259-4f5faac4d21b", "sighting--14c7e382-5a8f-4c3a-9174-d5fae12504d7", "sighting--5b17be87-6f28-4748-bf08-0b2991d10faf", "sighting--df7db81e-1ce5-4a7b-b30d-207c3103b3fa", "sighting--44491768-6155-4663-82bd-b40a72c084ad", "sighting--5ca89bb1-1c01-4361-a7ee-dd249c3264a4", "sighting--f3d2ed60-82ef-457d-8c2c-4eee34e2421e", "sighting--f6b14bce-9bfd-4016-99a9-bc4a002afe6e", "sighting--e31754ea-373f-4e95-bbf3-62471c3ba46a", "sighting--91d1dbfc-2297-4e64-a589-fe9075ec4b42", "sighting--453a1435-9e36-4b5c-b927-3293ab598913", "sighting--ece8ec55-b9a5-498c-89d1-8f45824dd74a", "sighting--565f6652-297f-404c-a14e-334cd985c134", "sighting--6d683bc0-a60e-46dd-b51a-51cce6e4f819", "sighting--a1fa533c-41e4-479d-b90f-90d6aa9b58d4", "sighting--190fe3d6-300e-4d13-8d3a-357f8b1c03b8", "sighting--83ad4568-58b6-4a14-acb2-89e6c3ce2ede", "sighting--9b2d7098-b6dd-4317-b855-cc8d30e9cfb8", "sighting--f8051869-77be-4704-8e18-f93bd68967e1", "sighting--68749e3b-c07a-4f4a-b366-2c6a5ab2cc60", "sighting--0ed23cab-8728-4e5e-84a6-d022b08e60ce", "sighting--e0a2e23e-39dc-445a-8e3c-6e0993fdb8aa", "sighting--2324dc40-9b44-451f-9dd5-c0774004027f", "sighting--e5122ca2-258c-4888-9029-d4c74f801c90", "sighting--b3de250d-c879-4f30-98b5-8cb65e511e74", "sighting--7225723b-ec77-4059-a559-de19e44f48fc", "sighting--6447edc0-912f-4e51-a247-0bd512aa03b0", "sighting--c49c12cd-6b63-4112-8193-aa1afe90637f", "sighting--d97c72f7-4dce-486f-88dd-12e8184ff400", "sighting--6c5166ae-473b-4945-b17e-a9bf0b4e18b6", "sighting--93b446b2-bb1c-44f5-94ea-de8a26715b16", "sighting--81d070d4-014c-4057-8bde-4a5d3d6d8917", "sighting--5957dbcf-0515-4af0-9556-5f91055addf6", "sighting--4542049d-f48f-47f2-ac78-096bc38226b7", "sighting--0d426bdc-7f17-419c-b4d6-3ffba7b2dd20", "sighting--5c423fda-4a40-4e3e-be12-01a478435db2", "sighting--fcc0160f-3e75-40c9-b570-93025cb86f2e", "sighting--b50f17ff-41a9-4e4c-8601-37a0759bef67", "sighting--a47f5498-55a4-4b2d-801a-74c98d1d3c06", "sighting--3266252d-821c-4ac9-af10-636c0dd6a6d9", "sighting--12462562-817b-4cb5-aa12-296e9ee1ae0f", "sighting--e47bc248-843a-4e36-9a1b-40190bb81c3a", "sighting--1c23ab02-3d0b-4106-b642-fe42eb8edefc", "sighting--8e5a3037-967e-41b9-939f-15babaf1caa5", "sighting--431d3b27-8051-4390-82b8-20ec48c2e8e1", "sighting--c0379e45-5f5a-4405-8861-f8f7f0b6c66d", "sighting--f7c91321-fc75-41a5-9a73-a28e2d6db905", "sighting--abcf5749-b8d7-42c7-808d-a8b665ece3ba", "sighting--a3dd407d-a58b-4b05-95d5-57b557d36951", "sighting--98814100-5fba-4d3d-9a7e-eceed1eb6745", "sighting--49c45cc7-11f6-43b6-8259-a7062fef0f62", "sighting--7a6ba0fd-5793-4041-b54f-8d00450bdadf", "sighting--119bc099-aecd-45d2-b223-dca533d01730", "sighting--675c4993-cb7f-4028-b44a-4295e302c613", "sighting--16d53554-2fd0-4562-88b5-37ea85381e13", "sighting--84b20ed8-52d1-44ee-9ac3-5af83a004280", "sighting--cc50baab-c283-44c3-a6ce-8fc2b4254d87", "sighting--9e1d1f14-933f-485e-b8c4-998a0d5cb237", "sighting--bf834ed9-16c2-4b34-8154-ebe5c063fac8", "sighting--e2dafd60-374c-4cc5-bf1b-13150650b48e", "sighting--5c31cea2-3571-41f9-9f02-16b92db4a189", "sighting--fc37c355-a309-449c-853d-e5c390808eca", "sighting--d87c7828-8897-422d-bd43-b0a10830b3a9", "sighting--d40625c4-8f82-4f28-9efd-f5e418da0a05", "sighting--3adb0e92-e4c2-407b-afc7-9fab1c5584e6", "sighting--c0d11f6d-8152-4735-a7ab-6fb4ddd8050f", "sighting--608c2ac8-ff85-4672-826c-4ef15fd84a4a", "sighting--e92763d0-6f28-42a8-962d-d105486bd831", "sighting--0b6ba3ac-7586-4210-8f37-c6881ce579f3", "sighting--039c4862-7779-4790-b669-96de2a3a3ae6", "sighting--5d81b9d3-088d-44cb-890b-b1e8df232f3b", "sighting--8ccf3514-8bb6-42dc-9a3a-05e9ec26d0c6", "sighting--bf36042c-39a7-425f-ad84-b9d1f7b02e1f", "sighting--ac4eec6d-c67d-433b-b906-7bc053da00ae", "sighting--f750ae25-b0be-4cd1-80e5-efb143879ac5", "sighting--f7ea5218-6811-4d05-82d8-140690289906", "sighting--787f7508-681a-42db-9c6c-277ac5cbdb18", "sighting--be4af443-b4fc-4fa5-8afb-2f6fe5e63824", "sighting--d1e5e0ce-a48d-4adb-bfdf-ed05495db483", "sighting--6846e4d5-c853-4bd4-8d5f-3fe5806639ca", "sighting--46dd1f83-c6e7-401d-9599-9ddd717ad199", "sighting--6ccc2dfa-f083-49eb-939a-cdd8618e1ac5", "sighting--85232194-2cb0-4298-b4df-87e2cc9ea510", "sighting--56bd5f70-43de-4bfd-a656-b6a4b61cb09c", "sighting--a491db1b-6ba1-412c-8472-55dd0e8a31c9", "sighting--80b97a32-a2d5-4607-b05c-1f9f41147299", "sighting--656d8ee6-aa11-4f8c-9589-bc9312dadc08", "sighting--9f80f71d-146a-4719-aea7-05690d75c498", "sighting--4e2c9b23-6960-4d71-88c4-9869a2b36723", "sighting--770b1833-72e9-459e-b0ac-29605c3ef3d1", "sighting--8c9ce2d9-a989-4229-901e-39985182bc22", "sighting--8040c7c5-dbe9-45c2-87e7-907f2a43ddb9", "sighting--a2f6003c-5798-4dca-9107-87433bc815b1", "sighting--50cfc5a9-8a81-4cc6-97bb-c22d6ef1b401", "sighting--b6db5451-faab-4c29-9068-7b8d09a331bc", "sighting--82b40cf8-2bc3-46c9-8045-305178004067", "sighting--61643be8-7c55-4f75-977d-4e17ce2c71f1", "sighting--0bf410bf-16fc-4533-a6ab-ad22f6455eb5", "sighting--8eb239bc-4baa-4fd1-9f48-93b9fa928fce", "sighting--6cb9b897-7a73-4b21-9b9e-d1f52fe23f25", "sighting--3d15e3fa-4d1a-41a0-acd5-b05706f110e4", "sighting--6348dfad-b999-4197-87fd-4812380e0ea2", "sighting--ccbb8d8d-1204-4ef7-b34d-cccc1bd4c814", "sighting--dfe4585b-07e8-430b-81ab-8349922165c9", "sighting--93f29cf5-6c20-48ba-88b1-ace79d675404", "sighting--c5b43629-5721-433b-9531-feae4c28163e", "sighting--aa149e7a-d9e6-4f32-bc48-5cbfb40fef08", "sighting--f7c40669-75fe-4b6b-b62f-d8b27620643f", "sighting--eb368c76-75d6-4cca-947b-5bc9f0b3c30e", "sighting--1d20de61-9eea-4121-939e-9b67ce51a1e3", "sighting--d9cc6b8f-fbe9-4cd9-b089-1135ef33bde7", "sighting--912ec6db-a5e7-47fa-b9d0-4a5f12e338b7", "sighting--22c51754-854a-491f-bb28-cc5091d88151", "sighting--2733c46f-4863-4923-97b0-71c2adaf5af7", "sighting--143638a2-31ac-4585-b49a-45a4093a17a1", "sighting--57ada1f4-0ed6-40d2-a1da-61c6d8e15774", "sighting--84485bec-1c33-4079-bb99-c861618b949e", "sighting--a62059cb-507e-43ab-b80d-4d5e454e42f7", "sighting--07103d11-7f90-4c67-9267-f15da0cdddaa", "sighting--831ddb57-3233-4a8c-94c1-c974c5656660", "sighting--23cc3677-6e1f-4ac0-a5ee-d7ff60924159", "sighting--0cb41bab-d3bc-4abc-903d-d4d920966aba", "sighting--27a1d0b5-47b1-475f-9b31-309f7475053f", "sighting--4613936f-935f-4ff1-b301-3c4e95ad2026", "sighting--85bacc09-1931-4bb3-93c5-556f41281b97", "sighting--4fbfc526-761d-4d9e-b946-752afec6c11b", "sighting--4b2d56eb-2fc4-4e7c-91d5-5504df9566a6", "sighting--86d51dbc-4e0d-4877-a9ba-1e8976578b7f", "sighting--35916efe-bbda-4ca7-8bae-623e46b3cf51", "sighting--dad3ed89-4d9a-4bf7-8752-35343dfb8371", "sighting--31aa5f1c-8cf8-4b6d-9348-ae0a9aff5ad0", "sighting--755ef5fb-423e-402c-b952-9d3d8ba48f98", "sighting--00b66ccd-2670-4008-b1d9-c3f0a6ffdf72", "sighting--3144c5b5-8c4d-4ae3-a97f-7938d5bd7edd", "sighting--ddda8104-f045-492c-b9e0-341464d54c59", "sighting--cb3d98e7-7c2d-48e4-b720-a5068069f16b", "sighting--31ba7f91-b400-4bb3-bb6c-0eb1fc8177fc", "sighting--25431022-7e45-4e74-b33d-1dd2783a4865", "sighting--b979c6f2-0f8c-4c28-8652-96d3f8510a15", "sighting--884128e4-d2c1-4e73-b50f-367ff66a24e9", "sighting--06c128ac-8a5f-4adf-a109-c18a718a094b", "sighting--10de7acd-0c7a-46e4-9149-ea0d8a25e25d", "sighting--9efea8ae-8a54-4dd2-ba46-f94659051561", "sighting--6d4f6ee6-df73-4bb0-822c-fb9665991d86", "sighting--ce0a7de5-24c7-4411-8100-bdf45cad9573", "sighting--2c7637c7-8ec6-438d-8e7a-8a5f6cfaf80c", "sighting--855d9065-7589-40f1-bd92-299cc893dc28", "sighting--d9cf3227-5df2-4783-a253-2d6e463032e9", "sighting--ceee50e3-bd3d-420f-8689-0f6618f71117", "sighting--438684d4-c99f-4527-ae7e-2f4d3e112b37", "sighting--f91f92f4-7dd4-409b-baf7-52a6ceb010ff", "sighting--fecfb9ca-b2b3-48f8-90b3-8da64efd12b8", "sighting--4d6b7c7c-9955-4f42-bfc1-310214842b32", "sighting--9a38a055-8279-4f68-87f2-d8830e13d92f", "sighting--59eae53a-e9ac-48d0-bc7b-62de042e5851", "sighting--01087b09-89d2-444f-af23-9bea48b48979", "sighting--a3424aaf-1c01-47e9-995f-f692b0d9e204", "sighting--14771968-70e3-4d8b-a8fe-222b4e774c56", "sighting--8b970015-b846-4aa4-9968-03b973af0135", "sighting--d504d57c-01c0-4439-b1a8-bc7fb02587d6", "sighting--72a40d04-9a38-449d-b846-6d607bcd6f12", "sighting--e2adc0d7-2159-445b-8d39-08c91ee6d27d", "sighting--d641ccfa-f126-42cf-9eaa-9425446080aa", "sighting--3d381026-8937-44d7-83f0-44037c836a5e", "sighting--9115942a-9c1b-4e65-91a2-9369364763a4", "sighting--e884eafa-6130-4cc4-a21d-abbe56464680", "sighting--4852c5ea-efa5-4a10-b984-821a685751ac", "sighting--22f0db75-6c1c-497a-926d-0bf40f4b2e13", "sighting--8f871fae-d8c0-4421-987d-043663ebc56b", "sighting--0dca31b7-5f71-4f38-844d-62657ae8792b", "sighting--b2326726-4a5d-4f58-bb2f-0a0dce1abb51", "sighting--5bef1300-50eb-4cc8-94bb-2752b724a99e", "sighting--8022b38e-d65b-43d8-ba7b-9ab177eb947d", "sighting--3c3786ad-f539-4629-8f43-a5243c39ae8c", "sighting--db47cd28-c562-4678-bb98-e6a2485c78fa", "sighting--59cab230-b18a-40cd-87ee-dd096d764636", "sighting--6c1071b5-83ea-4f65-9f0e-ef61d629a469", "sighting--917486f6-7b1e-460e-af48-da7e0cb47e7c", "sighting--f2a9bedc-674c-4353-9bb0-ca5f074c850e", "sighting--d4428d91-a534-47af-ac73-69267399361f", "sighting--f5390c2e-a743-4e33-a0e9-a2623308ac17", "sighting--d95e99a2-d2af-4680-b594-12ed2d8995c6", "sighting--e6ed55c1-447e-4e56-a195-e077c088c201", "sighting--c7bd8777-9f38-4b0b-a716-7601e87028b1", "sighting--c92be5a1-425d-4730-93b4-daa313eeebe2", "sighting--60851c65-cff2-46df-9898-a76f3d3c3f1c", "sighting--213de327-f2f8-40b4-afa5-0dafccadf9c2", "sighting--3d9424e3-3926-4bfe-8f12-d5aeba838ab2", "sighting--e5521974-23cb-4970-89bb-7612d1e053c8", "sighting--82981cf9-4695-4a3b-a52f-924979c07fb1", "sighting--30c362b3-3221-4702-b752-799d748f16c5", "sighting--85e02c1c-15d6-4cab-869f-25c42c705826", "sighting--bd82c7d7-4b9c-4f26-886b-890428c80e01", "sighting--77788b59-bfb5-401d-8fc9-e70ace70a180", "sighting--3f74fb28-7918-40ea-bd4f-653216ad52f3", "sighting--7f60ff8e-341e-419d-bedb-8609d4a00ccd", "sighting--e8cb4372-7c66-44c4-985d-e0df1e942abb", "sighting--1275c171-6fbf-4243-8427-7ce550ec260c", "sighting--751eb040-ca58-415b-8f5d-d98a581edbfa", "sighting--1164473f-2c30-49b2-aadc-c839cdb080d3", "sighting--c418dafc-a24e-489a-92dd-57647ebbf1a5", "sighting--eb7fcc22-4849-48c4-8cfd-05dc63b6d3ba", "sighting--82168934-7ffc-46e1-a866-789d431be7f7", "sighting--512d51fb-0264-4417-8850-3e5cf7f433de", "sighting--2a4a59c6-afe9-45af-b374-41cc47ec0f7a", "sighting--4829c4cc-8d92-450b-90da-d71adafe4905", "sighting--b13efb25-a88b-40e9-b20d-bf181235d3b9", "sighting--d33d2005-c1d1-408a-84f3-32225741c084", "sighting--ae64afe1-7ec9-4a08-9a12-bdf274bdc6ee", "sighting--73717ff6-b797-4e27-8252-8ea1c1e8ebeb", "sighting--5b0e5281-ab3f-4de6-96a4-3d1e653e5f0c", "sighting--06dcedfe-f415-4f49-b4c4-fc7e005acfea", "sighting--69c2eb89-3472-4d92-b5c3-e0aee42f91a2", "sighting--0d66f8c7-bb20-4885-92ec-60892b8b1191", "sighting--a3481f28-d873-4c44-a1ad-7aef0b3d22b4", "sighting--65939300-15e2-439a-817e-22a1665a815d", "sighting--bb0899cf-d9cf-49f2-b003-351a7f8c9c60", "sighting--6652db5c-96e1-4b64-88d1-b9ece7f15dda", "sighting--4515e011-95ca-4984-a5ba-08eb89e5b30d", "sighting--722c9540-336a-4718-ba89-673148608bcd", "sighting--3a20f3dc-5aa5-499d-8528-83f2407a61ed", "sighting--788912af-95c6-472a-85ee-d936bdf91e01", "sighting--6213da56-2a52-433a-ba68-01fde9320d82", "sighting--52707833-cb16-4147-86d2-7aecdd39397e", "sighting--0d78a16d-cdb0-4d06-ad2a-162d0c7169b2", "sighting--b1072628-61b3-4174-9c7f-927e39ec6f2e", "sighting--1959d204-9c14-4a5b-a7c4-b8cdda1f35fd", "sighting--09813d1e-4c9f-48ac-bb31-d10dc5ce83f0", "sighting--52e2841a-7ca3-44e1-983d-2e98663d8cb5", "sighting--cf2eca73-d6cb-42a9-84f8-31d51f8b1d7f", "sighting--33ccfc82-f644-4144-9ddf-215d2c783b1a", "sighting--6ba8beb8-d721-499c-85a8-96d818a62753", "sighting--daa1d46b-8845-43d9-bcb8-c8e9067287d8", "sighting--4387785f-ef29-4618-8928-f35beeab8c95", "sighting--951c8440-8cf9-4e79-8c13-f16c313b9ad7", "sighting--1122c168-c96a-435d-bea1-9117ef15109f", "sighting--67110b90-884d-4209-aeb6-221d13161195", "sighting--779df405-04cd-4e65-a127-2afcc52df90f", "sighting--d6fcdd73-832f-45e6-9999-77e2b0132340", "sighting--d1300ce7-b4ce-4e68-8cc4-e27b9066bdd3", "sighting--568f013d-f5f5-4752-9b7a-d15547c29d71", "sighting--c7d77c42-d45e-40b1-ad27-6661d4a414fe", "sighting--8b1bcba5-c59d-4583-a880-dd09f4ecbc83", "sighting--de67e466-4eab-4306-9e1e-5eab1b37dcf2", "sighting--62546649-33a6-4a64-add0-04b352930c77", "sighting--c220bf18-e316-4371-9040-2ca3749d707b", "sighting--bf4ad2b7-d345-4c3b-9914-543df6fbe2c8", "sighting--b59aad59-dad4-4636-9816-317566e05e95", "sighting--8f8b7844-076d-4522-99da-366bc23c5d98", "sighting--8fb02a00-8be7-4891-84a1-b2135d5fda50", "sighting--cb105644-16d8-4e25-9a19-9ea157b49158", "sighting--28de522d-f00a-4b5e-a634-5e9f7c3bcaca", "sighting--013eb61e-6b37-4764-9de2-db6aa40d6f62", "sighting--220da610-78a1-472b-9796-1e9cd7c1762a", "sighting--7afff121-31c8-433a-a562-d2c20c266714", "sighting--35934c36-e232-4875-80d9-bcdd6ca50cab", "sighting--c6393a0c-b57a-4b36-a21f-46d904b3c626", "sighting--45640a87-d932-4cbb-9cdb-0483d77f023d", "sighting--9f20d58f-86d0-4f6e-a4ea-89de67d25d36", "sighting--af3389a9-9834-47a4-837c-9a6a5bb0ffc2", "sighting--7fe29181-5fb0-44ed-a8b3-9f3a5544d65e", "sighting--06dfea13-bd75-4dbb-91f9-a3ff83e81c36", "sighting--5d7abfbd-d0ef-4296-a09f-42de7da411ad", "sighting--3c5be7e1-00d9-465f-9419-54f0f27e4621", "sighting--73c08008-ec52-4fea-a228-30785c8dff80", "sighting--7324ba3b-3b88-4f03-83a2-a58ff4affa1a", "sighting--c8918865-b47f-436c-8c15-a90feac53b1c", "sighting--7d657ac4-fee4-43a2-a540-0d34a1b1003b", "sighting--cc229e8a-ed67-465c-b765-27e27b5427f2", "sighting--9b94743a-f1cf-42da-8331-9e08b5f879fb", "sighting--134355be-5a50-4b12-9a08-6cb35992dea0", "sighting--13d6d0ca-86f5-4c3b-bd48-24f279132eb3", "sighting--2e92eba2-a44a-4811-98e7-f4ab09e281ad", "sighting--bda51584-5291-42de-bcf1-8636bc38e1d0", "sighting--a6b67c7f-231e-4422-b7db-b85c45e6a199", "sighting--6920d89d-8ca6-4b75-a913-72672de56f90", "sighting--d7e35b59-d909-42d2-8a3d-9240f3f7b9e3", "sighting--127e68cc-692a-4800-bf82-5fe427eec8d5", "sighting--f629ab0b-be04-44ba-9292-61a23bbaa81f", "sighting--9459127b-1662-4f39-a1b2-d53530983be4", "sighting--6947dba6-8268-45de-9063-34fb0e20b04a", "sighting--6ff08840-fdee-4b29-b051-f1850168bd4e", "sighting--8b2c183b-cf78-4a15-ada7-5530772f0b12", "sighting--3e0cad5b-12c4-4cd8-bd1f-daf989d0ff6c", "sighting--2eea1504-5eb6-4cfd-ab23-859c38a5b1eb", "sighting--8f6789c3-249b-4afa-81fc-ba8d2fc94c16", "sighting--8ffadc6d-83c6-490f-8be1-553995a9dc2d", "sighting--e1c0324a-adc8-44c5-bf0c-901bfa7f63ce", "sighting--3b583cf2-e1c7-49ee-86ec-8aa8b1b43e0d", "sighting--ccb76ac2-dc77-4e34-acdc-e0150b554230", "sighting--3974589c-fd1e-4d78-9640-a2bfe35d6cd6", "sighting--66ea13bb-ba2a-4c84-9692-35e3d45b5f9c", "sighting--dea6ba1a-5cbe-4b05-946c-93541dee2bf1", "sighting--97978a0c-8686-4760-adbb-1355955e17f3", "sighting--36e43ad5-9dd2-477b-bfdb-5ff0fee3261a", "sighting--3bd3384a-9470-48d0-b144-52dc7b7f1442", "sighting--503d3e97-6b6e-4fb5-9f4c-ee7f1030a972", "sighting--60cfe3d1-d7ea-4061-841f-34d9903ed27a", "sighting--b786645f-dd77-41e2-a8cf-b6bccd8a7112", "sighting--110d39e5-c1ca-4451-97eb-0ca506d409a4", "sighting--896fe29f-e476-40eb-9914-0cec2aacc3cf", "sighting--1358428c-9c5f-46ba-b67c-a26c10ce4218", "sighting--f0729ffd-0042-49c0-9398-d9ed24d8fa29", "sighting--c8bb8667-c352-49a4-9932-cdf2a6e91c6e", "sighting--cd7c322f-ed9a-4815-91e7-c754f66cc5e9", "sighting--74c200d7-97a6-4de2-b964-0fe3e355685a", "sighting--5c5422d7-d57d-4cae-b0ff-15de0a1e6abf", "sighting--4eb0c75e-a523-4485-bab9-179ea546aa5f", "sighting--09985f61-137a-4e5b-880f-902286a2f54d", "sighting--eb222b38-415b-4fab-8805-b176aa59eab0", "sighting--f84c1859-6a22-427f-b3fc-8b011d46328f", "sighting--868d44e3-8d12-407f-8fbb-fba051b60d38", "sighting--25c1f2f1-4dd0-4e4d-a922-edc07d4285b6", "sighting--fc59cbc4-48f3-4782-b87f-1720e8f4cc70", "sighting--931d70b8-746f-4f7b-92f0-fb8ad58bc762", "sighting--c309e4d5-5363-4381-b46f-80b081c4de37", "sighting--65cd530e-7239-4b59-bb02-375fda8db461", "sighting--bb3db8a4-60d2-497f-8491-dd34a953cc3e", "sighting--18096130-c34e-440c-9333-5d81d8f46760", "sighting--dd9ceb27-e993-407d-96eb-057f896f6332", "sighting--615e796d-feea-446c-9cad-d32e613de778", "sighting--f8eefe94-32c8-496b-85e2-f10c91cc436f", "sighting--e14142c7-c8ad-4762-804e-1016609f15dd", "sighting--f2549941-7288-42c0-9d55-8e031644d624", "sighting--09cc0278-ffc7-487c-aac2-85c3695cb81a", "sighting--5037e513-cb0c-4ab9-a63f-181cd4193c7e", "sighting--3cfac79d-1bf6-48fa-a8b3-d9147a98ccfd", "sighting--c7240c69-c054-4be9-a7c8-ababd7f21560", "sighting--c9fc79c4-93e3-4730-b72f-40268fa7f682", "sighting--72cc38f5-3a63-41c6-995d-f4c2bb8266a7", "sighting--78c48f1c-61a5-4251-8495-2b447c4a51c5", "sighting--8a556afe-0906-44b4-b802-9b083e954f0d", "sighting--6d95affd-0c0f-4a00-ade9-feef209dfdd6", "sighting--1e0db320-0122-490e-be56-60910f3b0dc8", "sighting--dc1fa49d-4e2d-4e25-a809-e31cf521d526", "sighting--f9e7ae15-01ed-4eb3-b531-893e852f5e9f", "sighting--53a32669-4cd0-416e-b910-3537bdb29b96", "sighting--36f61081-27d7-4d4f-97a5-3af6a8a59a32", "sighting--27a4447f-a099-4855-a80f-a248f81f4deb", "sighting--e0431481-358a-4c77-930f-19267cde0e18", "sighting--e74161b4-bdb2-4e86-84b2-8fde35615445", "sighting--dcd26e51-541b-4ab5-8ddd-31fc79d614b6", "sighting--81803ae6-048c-4277-85bf-2384b1a1335a", "sighting--1f910f58-ea32-4884-9b27-1288dc80e84c", "sighting--887232f8-63bd-458d-b26b-c973ee6ae1aa", "sighting--de64117e-971f-48b7-8561-3bb3b5ca4931", "sighting--20cc39e9-8036-498a-a4da-a8eced68df74", "sighting--1ee149e5-7217-49b5-ba6d-4fcf71a055c2", "sighting--6bef8ac6-652b-4d4b-a2dd-4234ccb5e183", "sighting--2e1604d0-b7b4-48b2-a909-ef5c80363013", "sighting--a9010bcd-1665-401a-81a0-90d9267edc76", "sighting--2bf336c3-08b0-4055-8158-4f9962ac578b", "sighting--6d9b9d69-9b92-46cc-865c-7914ead29f90", "sighting--a9a66ac4-bb1d-4e03-bbdd-8624db14bebb", "sighting--c039cdd5-5fc7-46fc-a100-136ed9f1c9d6", "sighting--8143b679-4c74-4641-8072-81c92b4694c9", "sighting--07763270-848c-4235-9a3a-7b9fcb8219d5", "sighting--794be5b9-76cc-4c1d-8a06-5e8cc37d35a6", "sighting--c62e4e86-de3b-4df6-b556-1eea356d79ad", "sighting--3273ccce-f831-4ff6-978e-1e3f2255055b", "sighting--9d8f08bd-de0d-4bdb-ba7f-a7b120b97e54", "sighting--74dfc0ed-1f0a-4b28-9842-2c926a929200", "sighting--ef31db9a-37d7-42ae-8840-9e5cc7d1a74d", "sighting--5690822d-3e10-4442-ae64-9729d8c0b820", "sighting--d465f9d5-0768-4c16-a166-017ca61d9e7e", "sighting--d24c8e14-388d-43f4-abdf-45e731d006d4", "sighting--25d1ca2c-3636-41b5-80c9-a6961a43e22f", "sighting--9c1a21a3-1fa7-4349-8a2c-2711d91e7fc4", "sighting--9661f35d-7cc4-4d05-92d8-05a40ff9e450", "sighting--9352b24d-1cf8-4994-bd4b-da3bf90209d2", "sighting--82c44218-0d4e-46c9-91e6-1df5c5b93ac0", "sighting--3cfbd78f-4f93-4988-9ba8-cfdc37c1dce2", "sighting--fd9ecde4-8ca4-4e19-abe7-b844a714939e", "sighting--ad2cbdee-b357-4903-a276-d1a8d8df4479", "sighting--f35176a3-b6fa-453f-a439-f5dc394a671b", "sighting--d73e3df7-bf86-4f41-9515-3cf1593da7f2", "sighting--bf651d51-d57b-40f4-b9d1-eab3dc3028bf", "sighting--5e421132-2951-44a0-93a3-125e036533a4", "sighting--bb43cdd3-d602-4567-9fd9-ad576c45c4e9", "sighting--d4138250-e0a5-4023-8f88-0668998d4185", "sighting--6bef3ec8-cf6f-4806-af90-a76f6821ee08", "sighting--6122e220-3f02-4207-a92e-c85abf575a40", "sighting--a4481399-6819-4dd5-9aed-c3ce665ed85c", "sighting--78705970-6ace-4986-b91a-57ef2eb479b2", "sighting--8d578802-37b6-4836-a5bd-6787ac09bb1e", "sighting--73e82957-bf51-49c5-8d6c-3f72bc61e912", "sighting--d5bee3eb-7589-4d94-bf0b-2f34acdb50a3", "sighting--988f104c-48cf-4117-a919-d46d1dd2c83e", "sighting--02929cfe-ddd7-47b9-8141-5ce9fe551094", "sighting--7f7a62c9-f3f0-4681-9e28-5bba2117f23b", "sighting--490f2ac1-1f49-44dc-9fae-99977e982107", "sighting--42ccb593-954e-408f-9118-58187937c83f", "sighting--7b0bfce6-6960-4236-b665-7fac5a210abe", "sighting--05f67a7e-9386-46c7-a89b-c3673b188d44", "sighting--9b181c18-b6bc-423b-83e2-a09dc8649bdd", "sighting--6aa718dc-931d-471d-9c9d-1a4094034bac", "sighting--be2946f6-a76f-4ab9-8a1e-3a90990934da", "sighting--66ab2c9b-29cc-4c91-8802-8dbfe4dbe2a7", "sighting--e703ca9b-e9c1-4af6-9379-646313ba1c8e", "sighting--4354150e-9e46-478c-b24b-8be14fcdae24", "sighting--a91b2433-2ddb-4b15-b5a5-6f5d250bcc4c", "sighting--33f042bd-9536-47db-b3d6-0c87a9822229", "sighting--617edc88-3cc6-4a38-86a8-8f8a4859b312", "sighting--734f08d5-63e5-41ea-b05f-6155647751c2", "sighting--52c29895-d1d1-4294-8f54-d2368b28b733", "sighting--7a99fe44-37a5-4966-bf2d-ceb6a7e1db54", "sighting--a5bae5ac-1fb9-4a36-acc8-71193b71602f", "sighting--3c4d408f-8a27-49eb-a6ab-7b428d44c09b", "sighting--2ea5f9ea-a52f-4a5d-b249-fb314da9a151", "sighting--954a82fe-101a-4899-a29f-59184c2d1abc", "sighting--a28731f8-8017-4779-b834-759402e97868", "sighting--a9ff5c3f-e9b8-480c-98d9-d312ed1e74c7", "sighting--6f234204-2624-4dc5-b99e-8e7c8166049d", "sighting--4970e70b-305c-42bf-adc9-5caf85c99341", "sighting--cd459114-3a2c-43bc-9b31-609743ff6ad3", "sighting--eb074dee-5303-43f0-8e2b-d0f751fb49e7", "sighting--08eb7cc6-c04f-4e52-b037-ada910122c84", "sighting--f3191110-001d-40e6-8d22-0e8715c7ea94", "sighting--de0cc7e4-78f3-4912-931e-fc3f6f11882f", "sighting--85e225d6-e7ea-4b88-b9b7-de18d6615eed", "sighting--3b9904ea-9a3b-40b3-bee4-fbaae97d7052", "sighting--d9bf6fff-062a-47af-954c-4df9191886f9", "sighting--e372a43c-80d7-4659-bdce-9f9987f62e91", "sighting--5ced0192-5757-4a37-8f79-0c2452d313cc", "sighting--db94506d-0de1-4696-b8aa-d7232455c88b", "sighting--3c02e57a-7cb5-4e5e-9405-9324edcbfe91", "sighting--dc5d4825-a51a-4cb6-8ad9-406d10437913", "sighting--19800b01-7aea-4188-b505-14aaa664fbdf", "sighting--63a84b0f-4f3b-4532-9e23-754b2e27d22d", "sighting--78339b96-ee1c-464c-a8f3-5dcb50ac233e", "sighting--b1ba22b6-0184-41a4-aa2d-e9465cc46af1", "sighting--dd590ae4-f55f-493a-bc12-ba176297ef8b", "sighting--d616b901-3b88-4bb2-a775-7ccfad6f31f3", "sighting--38f260fc-7521-42cc-8677-9ea798322605", "sighting--d732fbd7-d2a1-43dd-a720-e20f97be193b", "sighting--aaf2701f-e9ff-4fc7-98e1-365add814cd0", "sighting--c0669912-5eb6-42a4-9368-610f05d84e59", "sighting--3fa565a4-ac70-44d8-bfce-6f74ca2ed714", "sighting--15eecc7c-8448-43e6-abc8-4ba2b915dda7", "sighting--3890c9d0-b7d8-4dd2-aa63-5da932e86fd3", "sighting--e7279aed-97ee-411f-8c88-e6024d8e951b", "sighting--24b08021-ab7c-4771-b960-f2916e1186ff", "sighting--ef1baf16-582f-4c5d-929c-64fb70c1436c", "sighting--f19fc868-56b6-4665-b230-d692af79e05b", "sighting--6daaf2cc-3825-4cba-a820-7abc1bf60c11", "sighting--02fd5fd2-e95c-4a51-8db5-aa93774c0fa8", "sighting--5fb73ba1-1e7a-4b3c-87c5-0d7eeaeb0169", "sighting--bb09aac2-88d3-45fc-ba69-0eb54d804af6", "sighting--3bd748d8-859d-4727-88e1-b0b5ef253fb2", "sighting--689fcca9-4499-45eb-8512-43f6c3462532", "sighting--90970f33-c079-44aa-a8fd-60fbf25100a1", "sighting--97a0ed41-6753-42c7-956e-99db276e974a", "sighting--935b2831-f60d-4fda-b6fc-a0ea163ac051", "sighting--8f1e493a-5305-42a6-ad05-22357046a1e3", "sighting--41ac87b2-9db0-4c3c-9e25-0426aa5577a3", "sighting--45ab811c-a30c-4825-9cd8-a130760ef755", "sighting--7c38b52b-2d19-4e22-9eef-5632d1039dc0", "sighting--47f19424-3698-4a06-a259-a5c03ec07de3", "sighting--5cd736ac-3688-42de-ad5f-a1bbc5957c5a", "sighting--91b79d6e-6454-44a3-83ae-d16737c4b55c", "sighting--4bc6f56d-fde6-48b3-94ca-c9fbda6fca72", "sighting--3a54c2b0-171d-4ee8-a05e-e0614b9b824b", "sighting--42918ecc-0b57-487f-9a4a-52b0525f5711", "sighting--03b24ae4-24e3-47da-be3c-02f5f2c22596", "sighting--114011bd-44f0-4d02-b45c-205af9c770ae", "sighting--7404c650-772e-4c7c-8afd-d8fd2d458767", "sighting--19d33dfc-d925-4659-b19a-37f7fa2a9ec4", "sighting--d5baf1d1-45b3-442c-892a-7c97af821a84", "sighting--18a16cca-8e3e-462a-9d96-f44e00e50139", "sighting--d2f62e8f-07cc-4cbf-953b-2ce0565c1b16", "sighting--84e228af-78e6-406f-8ae6-34e1452ec6ab", "sighting--853e5306-8f3c-4150-95de-db179a4864af", "sighting--108f6435-22e7-43dd-b9c5-67d6ed056482", "sighting--96e65106-2596-4946-b39c-43b94ceab7fb", "sighting--aba0f4b8-e13b-45dc-b56c-1542939baba0", "sighting--9fa0c341-684d-4765-b0a4-68fd8605b398", "sighting--1fb6205e-6465-4feb-87d8-657c551879a7", "sighting--fa86ae9d-72af-4956-a2e5-ee3345f919f3", "sighting--3129d6b1-ce90-486c-8715-08f69bfb8ec6", "sighting--0d9fea8f-a2e7-4ac9-9524-d885a9cf9334", "sighting--38816237-53a9-4da5-b02b-a67f3bd41447", "sighting--6fb00dbd-4ade-47b6-9133-fee387f9a2b5", "sighting--6d2b44a9-ab82-40f2-b68d-0c6821706a80", "sighting--9c0bdb0c-5e6a-45af-9f9b-fdee323d3864", "sighting--765303b5-c799-41bd-8af0-dacaeb0ec7e2", "sighting--64d1d678-6d56-441a-bd66-dc3ee710f2ff", "sighting--22342cca-49b0-445a-b94b-361aac71043a", "sighting--33dfa625-8f3a-481d-9c73-e34d25d7655e", "sighting--a3c0c754-0060-4676-981f-5b481579861f", "sighting--96263733-0b2b-43e1-87f5-3e8786d8e79d", "sighting--5829d24e-a789-4f78-bef6-5c99c047217f", "sighting--224226c5-5307-4b19-972b-f24d7b27c7a5", "sighting--f1a87b1e-39fa-41bf-b4f8-f9ed48425a1b", "sighting--98ee0975-82c9-44b0-a91b-f33ce1b8c9b3", "sighting--e22033df-ae0f-41ab-a10c-c408ffc91835", "sighting--234cf216-9936-4ca6-97d4-a7969132fb97", "sighting--0d5426a3-ac13-4ee7-ab54-10843a8f2f52", "sighting--078cdfb6-db1a-439b-abbd-9dec6943f29b", "sighting--e45eafdf-dc36-465a-9f6f-88ec0ee0bc5a", "sighting--296addff-c02a-44a4-83be-8efa886c8c73", "sighting--4f9b6d0e-76dc-45fc-a4cb-9e0f98cb3bba", "sighting--57cbfe0f-1ccb-4664-abaf-e9a93bce231e", "sighting--8f4a0c89-afbf-4607-80bc-b97d1943befb", "sighting--4cc3b0ad-917d-47d5-ac56-1f7162fdb3fc", "sighting--3204ef31-c8f6-4d16-ae03-2f26ab4bf4c5", "sighting--70cd86d8-49a6-47cc-8f8d-d3f40c14defd", "sighting--af30f19d-b5f3-49e5-82ed-da2e3c2b04a8", "sighting--50208ef4-e9cd-4493-95fe-096adb747bfa", "sighting--bc594288-7d3b-42e6-848e-4d067904747e", "sighting--273c7cc7-724b-493d-9573-f82e25562552", "sighting--8164509a-1336-4d09-aa5c-b08abe767da2", "sighting--9a548d3d-0cb6-4252-a4f3-b00d800cd44d", "sighting--ece0c259-e271-4e63-980d-14138334c0fc", "sighting--bf963b3d-d710-456d-a65d-e7d7754c4f75", "sighting--ad0ec94f-dbb5-48fe-b340-ae956cc87fc9", "sighting--7e422ebb-21b8-47cf-96ef-1ffc54d13c33", "sighting--278cd90f-db2e-420b-b83f-b184aed23d88", "sighting--fa7e13f2-2254-4c4b-bdef-dc54fcbc8a02", "sighting--24e69403-cc47-431f-8af0-7ac9b3b9a01c", "sighting--5cffe936-9b04-4e99-9930-9cc837a4bc27", "sighting--76dac123-1b03-4d31-a70d-671b764814f7", "sighting--93c2ad3c-9788-46e9-ae45-41761550f37c", "sighting--9f464fb0-6021-44ad-a8aa-5db96ed40e29", "sighting--3acc23fa-b020-4eb5-9bca-e05170114315", "sighting--6233852d-6450-43d9-9dc7-fd36867ab0f2", "sighting--72b33a44-a8be-4106-bb56-736ca7c51dc3", "sighting--462117af-07a2-4ca7-ae27-01896e479678", "sighting--7c34874f-2380-46d7-a1c3-275ebf9c4c73", "sighting--6e1be3ed-3a5b-451e-ae67-fcc13d9efad3", "sighting--3fffdbc9-cfb2-4000-8422-1eff510179c9", "sighting--379794e8-0d9a-472b-a623-bcf99a82f727", "sighting--fa796089-7e6c-42d9-8661-d6ace4ecb262", "sighting--d56072d8-0423-4753-9062-654d7a85c4bc", "sighting--781a5cce-e7a6-448b-8146-f79a84e79a2a", "sighting--84786a89-0976-49a9-9a44-aea01c94c575", "sighting--ab11324a-406b-41c7-9028-56f9ba968428", "sighting--55871870-103b-4d57-9b8e-542886fd82d1", "sighting--95c89e0a-9e8e-4d94-b007-a774b5989afc", "sighting--fb5f194b-1c46-4e98-9959-7a5a19241cd0", "sighting--3c60729c-ce49-43e6-8d44-39331b21a1ff", "sighting--b9f0557d-aa09-4361-b953-17cc6df70020", "sighting--52257c09-71a9-46ca-a158-391442b5f385", "sighting--187c8d81-46b2-4b88-b5dd-3ec7650ea16f", "sighting--cd940497-521a-4277-8338-249336c73daa", "sighting--c36aac8e-b253-420d-9230-3aebd79baf8a", "sighting--3d98725c-8964-4e06-8a83-6437f3174e66", "sighting--1bc0645c-a94e-4b1d-ab4c-d6a9a598b69b", "sighting--82c9b611-2e4c-4ffb-881e-aff8412d9f66", "sighting--87c9aff5-e8f6-4abe-8211-a1b2d4d8d732", "sighting--e65891f6-3210-4113-8e23-af2f9b9d91d3", "sighting--a01b4aba-caae-47d9-ba2d-24ac74243109", "sighting--e1eae82e-7255-4849-8d90-c82ca8155d14", "sighting--02386668-54f5-434a-a586-78a2ea97792a", "sighting--a2ed31c9-8e2d-4269-a1ad-2a3d44ced6cb", "sighting--bea3ebda-628a-4922-b43c-7967e303dfcf", "sighting--ce1e3b03-672b-4134-a0a7-2108063daf0c", "sighting--a6baac05-21e6-4fa4-a376-65cbfb3c51e7", "sighting--eb55f948-99ef-46f6-9757-f4509ac7d3d4", "sighting--becf6bdd-59c8-48e7-8079-338b862a2a07", "sighting--ca3627f7-8954-4b67-81d5-47a1fc59fc3c", "sighting--854c5c3d-7b9c-4a08-9eb1-151a48d12da2", "sighting--3090c91c-007e-4ae5-b7b6-0f12b253a82e", "sighting--2d9d4d2c-1176-4415-9f4f-ab393128d9c3", "sighting--0c2870c6-15fd-4eca-9032-c06ba04bbb1d", "sighting--93610d02-0628-4d24-ad07-b718150b3602", "sighting--30729cba-fc90-4d1d-ac74-cd7193120eba", "sighting--960b3ea9-52bf-4a92-94bf-d6e7188f4aa7", "sighting--b44c8061-9927-480c-bab0-5aff97804f7a", "sighting--bf8cbb6c-5f6e-42f5-b216-575a9745491d", "sighting--5adbeba7-7f0f-420b-8828-6b67e00533ee", "sighting--86654820-59ed-472c-953f-77734569f91f", "sighting--c95e11a9-1633-4d98-b456-e8385d3ff615", "sighting--e7e76146-c4b5-4081-978b-44a3f03bb2a4", "sighting--6b33ba94-d8fe-43df-84b8-e9b7314438eb", "sighting--d778acdd-ad1d-47a8-98db-a2f63b3137ea", "sighting--8f32bd65-4200-48e9-a6ae-e29f7503a4b2", "sighting--06942a88-2ffc-44a2-9f7c-c96c3eb21d7e", "sighting--edd2920d-6cfc-4af1-b78b-7e82c6b062a5", "sighting--71c4b9af-3408-40c8-ace2-218dde973460", "sighting--0c22a4af-0a82-4aac-a52c-8b4cd2d14ce4", "sighting--7df47116-c595-4261-be6b-05c53b5afc0a", "sighting--11e5c6b3-f344-45b4-a95a-f422dc1dd449", "sighting--066eb0f8-45ff-4a26-a231-e174915ac28a", "sighting--25dbc98d-3397-434a-94f3-99bba05dd44e", "sighting--f1eba6fd-d211-4e6a-831e-06e5e2b0f4a1", "sighting--233d0470-324f-47ab-8065-89af9c627567", "sighting--ae18f5a5-07f6-4d6a-a711-74825856a0a2", "sighting--251c7871-171b-47df-892b-21759761524c", "sighting--d3f0cb7d-df10-40c7-8f6e-a20e27fc0d0e", "sighting--9a04d187-be5e-40c6-bf4c-090cbcc33d54", "sighting--f1f4aadf-db06-416f-893e-d3e1c8a99368", "sighting--f2ada444-acab-46b5-b1bf-de255fdf7109", "sighting--eb487ba7-4a14-4b22-baa8-ea327347f17b", "sighting--619c748a-24fe-4f42-9502-863a039936ef", "sighting--fc08aa1d-4cd0-42c3-bc18-f911990bb3ae", "sighting--f37624cb-80c4-4247-87c6-b02821c1c222", "sighting--dc1d1b21-4fe3-4c7b-b174-86ba72a86aa2", "sighting--72313089-6bc4-462d-9df6-9547f375da09", "sighting--2e0b019c-d513-4b2c-9b76-13b6e7c64d24", "sighting--f1e63bc4-2d4b-45a9-970b-b0e6ef230a80", "sighting--21c8f362-10fa-4a0e-8173-3708d1d079c3", "sighting--f641f7b1-f8b3-49dd-9580-e989865846bd", "sighting--6ab4ca4d-0b70-41d2-bd41-cb1e008f3fe1", "sighting--aaef70b0-5929-422e-b1d8-a1251cdbd74b", "sighting--16a1c404-f142-43ca-9755-b8900d4d1e8c", "sighting--61e1a5ac-ca8b-41e6-a8ee-5743749043af", "sighting--179413da-8406-4515-897c-20f3d427ac14", "sighting--3ed9e912-f2cb-4e19-abac-da918131d87c", "sighting--beb50703-30ba-4b8d-a5a1-194ad6f5c02f", "sighting--3fb75f64-b1be-4fa5-8a41-2fd6a835876b", "sighting--53a785c0-b1b3-4827-9371-3fdafb26fda7", "sighting--7377d754-c29a-41f1-8d34-2cbda3be9f28", "sighting--e88e96fe-d034-402b-8794-56c8e8c79c6c", "sighting--bad6e2b0-4d5a-49f1-b1ec-89ddf1eb5dbf", "sighting--56098195-3b36-4912-b39f-eaca2b7fc7e9", "sighting--851b3c38-77ea-4eb3-ab72-3abd9dc3a70c", "sighting--c9367652-2af9-4113-bed6-248965fa199e", "sighting--30cec8f5-359b-43df-ba89-63aaaf573765", "sighting--be2ccc56-3062-48b0-b6c0-c9626c258630", "sighting--10bfa63f-ac3f-418f-b3f5-ac7ccc63e878", "sighting--151ce20a-097f-4461-ba1a-b97a59744aff", "sighting--41eb1a52-c3a6-4a32-a9d7-1385b16e3494", "sighting--90d8371a-e7cc-47d8-a492-37668c648cc3", "sighting--c61c699e-3851-49f5-9f27-edad0ed57176", "sighting--5519ba73-88b2-41f2-bc4c-d6b73411b0a0", "sighting--44bd4c15-e6d9-493c-8ec7-42a45aa7242c", "sighting--5cc6bddf-d545-428d-a618-a35ad62650d6", "sighting--155b5c2d-4a63-4022-8c55-270d78d21270", "sighting--dfa66974-dc45-461f-a55f-e80339f86c3f", "sighting--e64aa913-7443-4a5a-a34f-7da84709fe8f", "sighting--401aceb0-c7d0-4b75-9a40-21adf280aae4", "sighting--d582f7e0-1389-4080-8008-229c1f0fff65", "sighting--e297d93a-1204-40e0-89ce-823644ceb978", "sighting--be7ad1f4-3f10-44ad-9606-30ce8494a3f3", "sighting--07af8b90-e776-4e8a-aaa6-59ddf446b905", "sighting--78a82c56-0cef-4869-8fbe-0e244e7edddf", "sighting--91a35910-313c-478d-a593-89e2f683813e", "sighting--76f4755d-66cf-4880-b001-2c6c1926def4", "sighting--c7f2ee19-eb38-4cbe-8ac5-2f540ad2188f", "sighting--cc1617cf-1093-4207-9102-5de6bb07a85d", "sighting--39f9b4d1-e05a-4bb9-9fa6-2ebcde3b5bb8", "sighting--07928a5f-a069-4e77-9842-e3d5eab0e862", "sighting--b5b1d4cd-2ce0-4a80-8c94-5d805ebd742b", "sighting--a0b53c75-015f-42f7-854c-bb7468c4e2ac", "sighting--1319335e-6fb8-416d-9003-a9c278eb59f1", "sighting--0787dbfe-9c4b-4324-b5d3-99d90ffa3518", "sighting--f861e92b-dc8d-405a-bd99-621c0e3dbb3c", "sighting--d8788b31-45a0-4c25-b4aa-35c43309d22e", "sighting--87512e85-afbc-438f-a0c9-9c1e0fc446d0", "sighting--de2a9fb3-95de-4822-9ae5-5794c572a67e", "sighting--8eef8fd8-581e-4847-82ed-81a4af16c481", "sighting--e32419af-26b5-46f0-a7d9-1008b4fa5711", "sighting--ed7cd14b-52f5-4031-b154-a1b173ea29cd", "sighting--559056e9-6682-4dd0-b8b1-ce61fa3e7e77", "sighting--9d2f3f6a-2224-44fe-a8be-0a426a26ca79", "sighting--b1add7be-d0c4-4062-a831-b862382febee", "sighting--ffb7cba9-3da0-4742-9ce5-e71c0b112940", "sighting--a23de5b2-7733-42e8-8492-5ca454046858", "sighting--2707ebac-9ff2-449d-ac36-efde5cf9b773", "sighting--8f274345-0cf5-44a1-b8e9-54c518dc710c", "sighting--f067b88d-f65b-413e-96e6-20a23e0fbab7", "sighting--dbe3a752-f867-4f50-9de4-f8d4952c7f1c", "sighting--c97b7b05-7808-4699-b6e7-2812909dcbe1", "sighting--5ba3869d-ebcd-40f7-a902-75ad30e2d28b", "sighting--425ecc33-5b6e-4edc-b33c-af121f10b27f", "sighting--44569698-8dcb-478c-a3e3-14d6f87a0fd4", "sighting--5ef47290-bd26-4671-ab1b-b8dd94bc97bb", "sighting--8332c502-1ca9-4120-9b0f-dae38c6e4186", "sighting--1da3a530-0cff-463e-9c0c-cb07a1c7cee2", "sighting--35e658c8-5c8e-458b-879d-1732f56553a3", "sighting--d7b0ef8c-a853-46ff-bf5e-6fc213f89d3d", "sighting--38d70c7f-26f3-4253-8d09-a6a0bc9bd263", "sighting--5201562c-8c09-4cf4-906c-b10571447082", "sighting--b08715b1-1bcc-4d07-ae78-35d2b92754f1", "sighting--a5bb4f3a-8d5c-4921-880d-c0c8b1967e32", "sighting--a3c2344d-205e-4124-a2c5-f6f48a58c893", "sighting--b1324e6b-5f47-438a-8b92-0822de0bad30", "sighting--bb7dfb16-f97f-450a-b0c4-3e7e04dae062", "sighting--90fe4859-2b18-4cef-9211-39b36176b82e", "sighting--2c5557e1-e4e3-426f-b0cb-dd8f26a82cf1", "sighting--afd5fb9c-ca5e-492f-8bec-7e04e1a49180", "sighting--dcddfb0c-1644-4a6b-a416-963135dfe008", "sighting--f8f39d93-105c-4338-8111-659916025bb8", "sighting--28a6ea84-8975-4ff3-8861-6d000d479225", "sighting--e552bc80-8454-4a66-bb5c-009eca5621bd", "sighting--f0dbf4b3-66bf-4537-9ddd-e3df790950a0", "sighting--dcbf128a-1dd2-4d03-81a6-bb72cd869095", "sighting--c46b725e-4461-41c0-a797-bbab60d09abb", "sighting--09805da4-b937-4473-9c97-670dd6ce1acc", "sighting--30d42542-96b0-4d11-8042-0a784361d7ab", "sighting--a3884b70-95a6-45ae-9a9d-71123c0c9616", "sighting--f0748f82-7203-4400-997e-4ffe4122c697", "sighting--d46312e0-5dc4-4a54-869a-6202a22e4408", "sighting--142f282e-79b3-4a43-9533-60fe57a00aaf", "sighting--7722290a-9183-4bbe-b082-b05608551494", "sighting--d5fe8765-2525-4ef2-96a4-c86ae63050e5", "sighting--b95cdd04-6c3f-4570-a93a-ac4cfc6de6a8", "sighting--dad0db17-425e-4e86-b290-5abc9ea140af", "sighting--e71d7456-6a4d-4226-9021-5e3d0b9e2121", "sighting--992306e1-f47f-4cbe-a0fe-892ecd37c422", "sighting--4aa083c4-eccf-4395-91c2-cd20b19acabd", "sighting--f5ddfabc-9e6b-49b9-8b64-6c520dba19de", "sighting--c1b976ed-2e79-46be-851c-f3dc433527c7", "sighting--5b95aa5c-7fdb-4ccc-81e0-7ef1cd2095df", "sighting--c0bfd1cf-2408-415b-b43f-07157d5263e6", "sighting--57af01da-4c73-4a06-9e57-d2399bb09d23", "sighting--4d03842b-806d-4b2a-b54f-01841640c713", "sighting--d07214bf-1b29-47b3-bb60-1905a6c12bf4", "sighting--cb563b0f-c0b6-46dd-9fb1-248a60687868", "sighting--d7f77422-2214-4276-a862-06c91f80e10a", "sighting--9f76881d-1148-455a-9989-a69947818b66", "sighting--8c850fee-781d-4e88-b4ab-85eb6f41a240", "sighting--79411c2c-af3e-4268-a9c0-5f7b2f34db8f", "sighting--2ee77a67-7f3b-40c5-80c8-0483518a1af3", "sighting--eb2de36a-3c39-4f36-a40b-2cb1aaef591e", "sighting--4d3b6da5-695c-416f-8693-67e2ba346e6a", "sighting--00f7775f-46bd-4be3-bdd1-726f246fef81", "sighting--9803f486-187d-411f-a56c-51fad6c3f220", "sighting--fd015f71-31a3-4419-8421-8bcae7c48f26", "sighting--fd372e76-1915-402f-907c-e3b353542854", "sighting--60f5c904-9d0f-4f05-a6a8-2ce3e893d6b0", "sighting--8e52b38a-c260-4346-b65b-6f67d19929c5", "sighting--f638c1e1-8f7e-4b8f-bfe1-5a232f67a690", "sighting--b8e8a241-915b-4130-b07f-2c118aac9784", "sighting--3e458acc-b541-4424-90eb-127d679c303a", "sighting--6523f4af-53bd-4488-b9a2-bce14b3095ad", "sighting--5d841371-9289-484a-a069-9e2011456a68", "sighting--cb9d4e61-85fb-4e3a-ac5d-a69e15e96adc", "sighting--cbaa06bd-0f5a-4cd5-8e65-9d590e31e9c0", "sighting--8f01ef50-f68b-474a-bdbc-c78284fed5c6", "sighting--53d37aff-e684-4c8c-b069-7eefa0264b43", "sighting--97738b2d-ce94-4e55-9c67-20bb8b2e36dd", "sighting--ad8bdbea-f669-49d4-9565-85c1cf7cda75", "sighting--96ef244a-b3c4-4afc-b0cf-46a4c79ff747", "sighting--d666b2f6-2642-4f0d-aa4c-6c56cc964d95", "sighting--7d1ec2ae-9394-4ee1-850a-78a2b94d5b37", "sighting--1f0e7d9d-c7f3-4a3c-9f2d-925e1607d951", "sighting--543b8847-89aa-4009-8a5c-f16f390f3eea", "sighting--1cc74392-3dec-4592-8e86-27c09510e4ed", "sighting--005d3f2a-8d8e-49d0-810f-f57e622bc9a8", "sighting--b3d8a1b8-5c8e-46e5-942f-3b703b63ef56", "sighting--55761e2c-031e-49e5-90c9-a3c80c8fa77b", "sighting--bad61a9c-797f-4b2b-97ea-8fdde6ee27ba", "sighting--acdd8651-e556-4c50-b681-5324885186a5", "sighting--777ea744-44de-4d7e-b4e2-5e9d0a5692ec", "sighting--10074373-dc78-463e-9f65-ea7ec9a7ffd1", "sighting--b679bf34-a8ae-4d53-b44d-d155d2926574", "sighting--1b68ecfc-5835-4944-af95-d25779687c72", "sighting--1ee43d31-0665-479e-9b79-e6f4b10a10f2", "sighting--bfe99ec2-48e3-41ba-938a-7056f46a0f43", "sighting--ce370053-2aeb-4d92-96a6-2258c2eb5a60", "sighting--269066eb-33d4-40db-9a1e-8cf0cda2b0d6", "sighting--7d9ef45a-7b9a-49b0-877e-c9c10ee4daa6", "sighting--cc47cc2e-651d-4bb9-8a63-7822db2466aa", "sighting--0ab144c7-5716-41f0-aa89-2a71dc19515f", "sighting--dbb4badd-1770-421c-a74a-e87dc00e6aa9", "sighting--abf1f953-fad4-46e8-a9b9-33184e272724", "sighting--066fb0db-d9b2-480f-9b1d-8e9456068cf8", "sighting--6de9f38a-998f-4296-88ab-3f09ad3c97d4", "sighting--f6da60e4-eb43-4cc8-b6cc-e24131b9d519", "sighting--95c07d99-e486-40ec-afdd-c1e3c5deeb7b", "sighting--ba81b9cc-af8a-413e-99e3-99882e50d68a", "sighting--46da91e7-e049-4a68-93eb-5ea17ad3a9e1", "sighting--523a344e-1a18-45fb-bf80-015b35870dec", "sighting--3a756574-52c0-42d7-8f74-1ef703d6ed19", "sighting--6a4084ff-c4f2-4d33-972d-6335174622e5", "sighting--12f6521a-e72b-4674-9cd6-bffe71dac272", "sighting--7d6240f3-06ea-45bc-9ab7-ea189b37c11a", "sighting--51f67f08-936d-45e2-9b3e-979d4aa85454", "sighting--6c38a569-2efd-4127-87a3-a4eec8ed93e4", "sighting--f6e30464-1a50-456e-951a-ddc0384fe0eb", "sighting--b74e4b3a-03fb-4de5-89fc-d8dcd944ea37", "sighting--53dc8dc0-03a6-4919-9cdb-2ec46043e0d9", "sighting--aee78162-084c-418d-ba7f-9dbd06ffee9b", "sighting--53a2e020-a59f-44a1-94a1-522ce1fc4ef7", "sighting--38292d22-0bcc-4acd-9170-524dd86a86d0", "sighting--32945c36-50ec-4668-9d9b-fe9ea5a1dc95", "sighting--aa5c5f83-5de9-4155-9e03-da893ca9634a", "sighting--d04656e6-32c1-4187-bf81-b251ced208c6", "sighting--6dab8840-3e43-462e-8d4f-a50136d94b2f", "sighting--a5bef9ee-d0e7-4004-b3be-b849db08c4a7", "sighting--44939334-f294-4c85-bc43-ab84970fcda3", "sighting--cda58613-5616-4519-a72c-57fdee87013d", "sighting--e65b5782-75a1-4927-b0c6-ef53987662a3", "sighting--ba26512d-66b6-4e1f-ae39-048f21a6f84f", "sighting--68324354-7264-498e-9ec4-a4154981df39", "sighting--5ec00706-90da-4dd3-8b4e-e276f847f1ba", "sighting--cbe7e8b5-7ed7-4fbe-80d9-936c269f7f1e", "sighting--d1f8eac4-2166-4445-9d70-cc07e1be0c3c", "sighting--14584096-43b1-47f7-911b-852f9ab9f2d8", "sighting--a0977e6a-89d4-443b-bd1d-64a9c607c239", "sighting--34ad7c64-7b2a-4693-8270-e6ae79722feb", "sighting--42355b35-16c7-4952-abce-2f5ceab3c5d6", "sighting--c041134b-9ebd-4cc8-8b0e-b6c3af9cc773", "sighting--24e85f9c-a3cf-43aa-a045-2136f33e0463", "sighting--ac1e5699-e279-4a83-a93b-666db9c2aff2", "sighting--6e648110-baae-43ee-ac70-e7a3b7109132", "sighting--4b712ecb-d2d0-45b3-90d5-23cdd8abb2f9", "sighting--82c0b13d-f8c8-4deb-86e9-23d5c1a7c9f4", "sighting--c83636f1-0f62-4f7f-af09-6877ef82111c", "sighting--a1669d40-047e-4892-90a9-01e82f9c0ce9", "sighting--f27e990e-89a2-4ef1-848c-d1b6c0b97915", "sighting--15f4f39e-5a7b-469f-a4d8-cd9c194cb876", "sighting--194f9595-cfaa-4999-8118-9d84291e2229", "sighting--56b13878-bafa-43e5-b364-6d5b9f99caf7", "sighting--c207d3f7-b7e0-4c25-9352-8079a8075de6", "sighting--9fde452f-77c3-446f-9ab2-b5b752c98220", "sighting--b162fa6e-ab90-44ce-8135-b46141a58ab3", "sighting--e8461848-dd38-4c76-9572-caca110391ed", "sighting--99aa91f0-60ba-4455-848a-5a21d4edb7bb", "sighting--83257419-d288-46cf-9315-e0cb410accfc", "sighting--6492094b-d722-4b42-9952-f1ea8e77a3f8", "sighting--133582fc-57ad-40b0-b71f-a784a3519319", "sighting--2691a0dd-3d3b-42be-990b-69fa756aa9d8", "sighting--1c651108-53c0-4c0d-877e-c5afad424f25", "sighting--34c9f4e2-b173-4e56-8548-77a7a1242dff", "sighting--84c88eb2-4826-43c2-944e-6ee4d1f40d9b", "sighting--4c08d0b3-f8ce-494f-8f57-1839ac9a1e0d", "sighting--d9f0e0e9-e49f-4179-b009-0717df381505", "sighting--e8d41018-c718-446f-92d1-8ca8c9817a9d", "sighting--72d35e72-777e-418a-a48e-20bcfa86faea", "sighting--3cc74789-b94d-4122-b4bd-e8381047181b", "sighting--b1b2e2e9-bea6-4a04-af22-b48efd4681f6", "sighting--baf15271-74df-4b6e-8332-b8620a107ae1", "sighting--4ab04937-71d2-4ae5-b819-966d643ae3a9", "sighting--89b6b264-2865-4219-8112-c712974ba90f", "sighting--9113696f-d912-454c-9601-99ffcd91e291", "sighting--4ddbe5fe-1f79-4360-8c0b-8c9984a47b91", "sighting--9619b396-08cf-4d72-8489-5003222fe9f7", "sighting--5dc121a1-1f6d-4c0d-866f-1e59a36907d0", "sighting--a0daa408-9744-49df-ab8d-472f06fa39b7", "sighting--84004446-e681-433c-b40f-52b71549312f", "sighting--c53c63d6-6212-4b3b-9d03-dfac8a981fbc", "sighting--e580a458-4cf6-4aa7-ae47-797482e301f4", "sighting--3e2114c7-a128-4a3f-a937-12c115e8c9d4", "sighting--e257cec0-c43c-4db8-b561-fa6095748800", "sighting--569ffc95-8da2-4270-9693-7d64d0970d04", "sighting--692c33e0-d8f1-4909-a93d-710c91606cbb", "sighting--94cd54e8-2d97-4570-9d42-19ed34957be4", "sighting--8c65b46e-e6d9-41e7-8597-8570b68fbb95", "sighting--b8a34f7f-8f52-429f-9f01-3cdccf362ed9", "sighting--7f2c5851-f325-4a9d-a9c2-43bd0427a6d1", "sighting--c536e1e8-7495-4596-8a65-30837942b88a", "sighting--a686b847-8408-415d-9f06-5f79aff535a1", "sighting--473ba20c-ba49-4912-a74f-8a91a9b55b1f", "sighting--47c2ace5-310e-44ee-ab65-cd3117094bc9", "sighting--77b65391-7444-4fac-aa15-1b3cd1217493", "sighting--eaee3a11-fb91-4cf2-9ff9-08782fe647ca", "sighting--00b41b6c-7f60-4bdb-8f50-ea5aca4c3ce0", "sighting--0a485122-5492-4c2a-b572-8ff4a15e692c", "sighting--d11c0898-6171-4005-aed3-7d9d8a57d687", "sighting--2dd39506-acdc-4656-84fd-9cf40162fdba", "sighting--19901edd-52cb-4b1a-9713-6ca0e38abe3e", "sighting--feedc922-1d6c-4373-a42f-b59d78ebcf9d", "sighting--0d65bfc2-aea0-4ea4-b825-c731974bb7a5", "sighting--84531056-8f33-4d28-a340-a6d3cc8c9dc3", "sighting--906bf06c-2ab1-44f4-80cd-c6733c91bfdd", "sighting--e7f53c30-7606-4167-b6f2-9c5c1966eb85", "sighting--a16686b7-6c78-4613-8686-0536acb7d81f", "sighting--ba962402-23ed-4373-9c37-996920acffe6", "sighting--8346f43c-0f31-4f55-ad04-222adfd4d067", "sighting--6036a4c5-26a5-440c-8b25-620bc3b0968c", "sighting--4f9b4a07-914a-47eb-8d76-a7493b8437c6", "sighting--57dad78f-d6a3-41af-8e61-17d5981f1680", "sighting--5bceb2fb-758c-4f31-b743-2c2a041f4619", "sighting--2fc5860a-4b6f-487f-83d9-4858cff3ee06", "sighting--ca150ec7-916b-4e4d-bccc-951b44d5e6ef", "sighting--f831ed76-902a-4505-9caf-2b22cf0fdfbb", "sighting--814c93c1-5fa1-4871-87a6-7b6fcc84c616", "sighting--880bdcf1-22d0-4a1e-81bc-e462a51ea699", "sighting--47b453dd-54f3-45ce-84e3-0cadce2966fa", "sighting--e27db92f-7fc5-4eee-a1eb-d012744052d3", "sighting--6f382032-d1ad-42d3-9ace-a35a70256cbf", "sighting--9dcf3758-4317-46a7-b042-dc64a1f2b013", "sighting--b0d89cb2-6908-45d0-acc4-f5774f1d8f42", "sighting--3b0dfe89-0c0d-44c5-8a2e-a679201cabd1", "sighting--0d3bcc06-c682-4201-bcc1-55c512194c5e", "sighting--46fd8038-7b41-4464-b064-0f57a243cee1", "sighting--9b211ce0-963c-44fa-ba64-cc37a0921219", "sighting--cd41264d-9c88-4145-a195-e01d89b1c422", "sighting--156a1fe7-37ae-4879-bf6d-7284611e867b", "sighting--304222d0-af47-472d-993a-54d05257c773", "sighting--613a962f-06df-4533-ac95-41efc4e2246d", "sighting--db776b11-aa90-48de-802e-d0bea4e1bae1", "sighting--021c2d7b-a784-4202-b3e4-518288e5a788", "sighting--fb55e3c5-a4f7-465d-bd25-11c9298a3715", "sighting--56d6836c-9f23-4dea-9a3c-834c8ac43503", "sighting--10e00628-7820-401c-ac74-8e932f409747", "sighting--da164776-f792-4221-9bc2-a335811737a9", "sighting--da4c8902-9fdb-4f60-850b-a6583866c355", "sighting--1a2fe70d-480b-43b3-b572-e23a7016c431", "sighting--e9449339-2b6c-4046-ab22-b96842f80b76", "sighting--0d570d3c-6da2-40ad-9f86-64236822195e", "sighting--9b138ee5-c74e-4051-b863-7c17ddd2ecb1", "sighting--0e02214c-29d4-4854-a5a0-e735d5ae0422", "sighting--6f6230d9-7508-40e0-b990-ee2db4c4d889", "sighting--cdbae260-d37c-45cb-91e4-6b84b8fba497", "sighting--a8499306-5ee8-4c5d-9386-527ac3f34645", "sighting--03df324e-8afe-4cca-95f7-ec29f124b454", "sighting--cb574c5d-ad65-4646-9e31-4dc5531a4edc", "sighting--af416ee0-10f3-487d-b293-51526cd52ebc", "sighting--a421940a-71fe-4548-968b-350dc9160ebf", "sighting--4266e67d-6f1c-4aab-8e3c-7a173ddc27d6", "sighting--5da587f3-a051-4602-bd4c-ad1d95290097", "sighting--bd4ea61a-1234-4a24-a84b-a85c25217b89", "sighting--e241d44c-1c31-4b17-8c5a-70ed439773be", "sighting--35bc818a-a9b6-403d-9209-90585d9d81c2", "sighting--37a5ffa1-406c-4e2f-94a6-738292b0f232", "sighting--09809e04-0fa7-4d38-a217-14cbf9925b6b", "sighting--888fe6c3-1e47-47d8-b164-0d4f32bd49ad", "sighting--8de8f754-5ecc-4fd6-bf7d-404aab4ca9dd", "sighting--a88982e5-3b72-4dd4-ac0a-057f8c8a9f48", "sighting--b92b887e-b226-40be-ad17-c91bab3f9e08", "sighting--2f7ddb46-549b-41f7-a056-8f32e1aa6825", "sighting--d62405a5-e740-42cd-a3de-467b57544393", "sighting--0ff62994-208b-4427-86aa-ec77b8116dae", "sighting--977996e9-44a0-4faf-b1f2-14dbf7b61c66", "sighting--b66996cc-3768-423e-a98d-39e2834b4e8e", "sighting--b60174aa-add4-45f9-8fdc-02c93348bd62", "sighting--246d8177-4d56-4a6e-b224-64bd8843cac5", "sighting--860382c2-3196-4057-b8cd-05ba36b5e917", "sighting--ddfb33f4-fcdc-4e78-93e9-c5786219d9e3", "sighting--5a7ba7f9-f89d-4b9e-9524-94b33463ce45", "sighting--5fa229b6-5913-4645-bfce-d7159f77c764", "sighting--db26944a-3431-4706-9300-29d44f4e5e04", "sighting--a88878b4-795d-4606-8f6e-8140186058f9", "sighting--91bd5139-379f-4f48-9e3f-ff0ecfb17a03", "sighting--183695dc-d502-4ba3-ba38-5d64a54a3590", "sighting--62c1a570-26c6-40ac-8353-66d46469874e", "sighting--9d6e31b0-1458-40e5-9fa9-4eda37328f65", "sighting--484dd5b2-51e4-4d45-9a39-65cea545f7e4", "sighting--a5c164d5-1036-4d7b-82ee-513c39bc6ba9", "sighting--8d58344c-67c3-4b36-9217-2a9079de0f66", "sighting--d15ee50d-b91a-4279-aba0-96408fde88b0", "sighting--a98396d6-c6f6-4496-8934-514b1a321ca5", "sighting--d58c817c-d258-4d0a-873d-6d0da4b75d6b", "sighting--1526084f-614f-4deb-9e86-18fc84366241", "sighting--c0bab5b7-9643-41ea-922c-c3e2e9274818", "sighting--61621159-0e5f-4bce-98e7-1f9a64cace06", "sighting--f0e7298c-1f82-46f4-9fcd-b7b4b6a291fb", "sighting--4e4d5050-d252-4896-91b6-0a050e8eb498", "sighting--c1419c5e-ec1e-42a9-b62b-52a91db3ded6", "sighting--03802f6e-d8f6-43d7-9f63-8c6be24bc26c", "sighting--3ab853e3-fced-4dcb-acc5-62a8b7f121e4", "sighting--08cd908f-d2ca-4e22-b097-8d0731334bcb", "sighting--aaaa2317-b49c-4884-9c7e-8c33f12918c1", "sighting--c5ba73f7-798e-4d88-9307-8aa17e89d476", "sighting--e21428cc-aa1e-4674-90b2-b53a26baa16b", "sighting--9e4c9e92-d39b-47b6-877b-f6347448213e", "sighting--bc05963c-31ec-4eb2-882c-0619ca98e588", "sighting--a9010794-ff1c-4a74-a54e-72c816d46615", "sighting--18cefc5d-6a6d-4370-88b0-62ea7c3179aa", "sighting--f0d4fe39-4fcc-4610-bdda-a6e519afe5a6", "sighting--7f5406de-c3dd-4f56-ade2-6584cf5262e0", "sighting--620c6a30-e58d-4e92-8a25-69672988dc57", "sighting--8b4aad1a-dd04-45b4-9ff2-7d3ddce2376e", "sighting--8032168e-c5ca-4284-97eb-088ceda7d448", "sighting--69d3adf0-4578-4761-ac23-3647286c373e", "sighting--e7c9f2d8-35a0-4767-ac27-e6a093c9ed2d", "sighting--ebe05d42-a2b3-4940-814c-802c10fe660c", "sighting--1f8856aa-51de-4b65-a394-2b98d70c4da7", "sighting--a732d0d6-cc3f-4532-9815-868129d5877b", "sighting--154f1527-7f93-45ae-8a85-0ea7ebaf79e1", "sighting--72f24893-2942-450a-b6b6-dde2a917ed14", "sighting--150e86c1-4b27-4a46-80e8-f837f9a0feb8", "sighting--4fd77969-2d71-41fa-a984-2b97eb44efee", "sighting--408c216a-521f-4def-91a6-adfe8dcdeacb", "sighting--cf5b51b3-1cc5-44a7-a710-0940207e66d1", "sighting--81908907-4e93-4a6b-80a4-6917e3178048", "sighting--8cf72d2c-6039-44b0-94ea-d51b4ff55b62", "sighting--a5f238db-a171-46e3-8391-560652cfe13d", "sighting--119786ac-23d7-438d-95f2-cb9467cba0ea", "sighting--d0058efe-9a29-4074-a6fd-7da3ab5e17f4", "sighting--88ac3a41-6c32-46f0-9323-b4f340594fc0", "sighting--0a592cb7-0da3-4143-8240-0d0918f5f158", "sighting--173332b1-dc7a-4da8-b482-a84360899b55", "sighting--d4b937ad-d0b7-4c35-99cb-e750a591b4a8", "sighting--11f90f4e-03fc-40e7-8552-b9f8542953b3", "sighting--8d6186e3-dfa3-4c51-a5ae-4ee38a5ecd46", "sighting--a4d974c6-0f1b-4b2f-a0f6-d03854839b52", "sighting--ea3481e1-0002-483e-9ee4-65e6beb5b7a9", "sighting--484e1429-11b5-4ec3-a3b3-83d8afa3e714", "sighting--7e04c43d-2d64-4778-8640-429fb6ec3804", "sighting--24b7f53a-fa01-4626-9c08-bb06640b6aaa", "sighting--04c69e68-a25a-4271-b541-0048e905129c", "sighting--ae8e248a-3daf-4b3d-90d9-88a28809e823", "sighting--930a0a85-e616-4e8e-b1fe-712ae756b77b", "sighting--9f3c99e6-22b9-4030-8dbe-276b7eaac396", "sighting--832e0a0f-1d9b-4fa3-a357-76d07add169a", "sighting--56d2ee9d-e4c3-4ee5-9dda-06ebe9f7b5fb", "sighting--4b4ba654-9b3e-413f-a2b0-75e12fd26c50", "sighting--ea326647-2a26-4d7b-ab61-9d1ddbd5546c", "sighting--f55c71fa-f447-4ffc-8a64-f31f63344530", "sighting--0dc24976-2c0c-42e2-9873-a05cefa0b371", "sighting--03bf455a-5a41-4565-a19a-80b866d76fac", "sighting--6083baad-324b-4293-b996-29adfbd5ea67", "sighting--0b90d2b5-df68-444e-9add-7a50a7d78b04", "sighting--f86d5968-b347-4060-b678-41984329cef3", "sighting--07285468-8e0d-412a-8c22-d615a03142d0", "sighting--c434a7a8-4ab0-4dc4-bccb-8d19f92f0e74", "sighting--c11243ab-c097-4868-aa17-dfcfa1441ee3", "sighting--d21cb426-b66b-4e22-a39c-32de994af0ae", "sighting--6704905e-8809-49cc-9338-cd444674544b", "sighting--57e93890-66d1-4920-bf7e-fe051aa9b2ed", "sighting--500228ef-f631-45c7-a8bf-a23dba080644", "sighting--9c0e0b6b-b873-4ae7-a17a-c7f9623de778", "sighting--1026a505-d03f-4de6-9efb-3508fff3a46f", "sighting--96bf8239-a9b1-4a53-b1ba-8d9c73881455", "sighting--980f98ef-56a7-40e9-a08e-35245d3c2ff7", "sighting--ef885e76-12c5-4f82-ad29-9c951e8d54f9", "sighting--8498d3b7-ce52-41c5-a698-2f2effb990de", "sighting--a636da7b-9125-4668-848a-5443858db4bb", "sighting--91029240-52af-4a7a-b283-261d37f4047d", "sighting--a1d8cb3a-ce15-4980-bc43-15e115ee82fb", "sighting--13d2b8bc-cf48-46c7-98dd-cbae60ccfbfb", "sighting--3c06adf4-65ee-4a87-8379-a425bcf7ec9b", "sighting--237e2c82-0c43-4bb5-a992-01451d77ce36", "sighting--689c21f5-282c-4533-9108-af12e6614210", "sighting--02fc9e07-086c-4d02-81f9-a88b6c47ea62", "sighting--28b18b5a-7c6d-494f-80f2-8ba0c17a9511", "sighting--c8a121ae-ecd1-432a-9969-12cb91dc0f54", "sighting--ef6faf55-a4bc-4f1b-b51b-86a604dc9e27", "sighting--c17ce80a-6f07-4cbd-8976-32590724b32f", "sighting--1e1bba0f-a098-4be1-8ab8-941530d07748", "sighting--60a2ae4f-cadd-4828-81eb-fd88d09dd7b7", "sighting--d19aa53c-1ff2-44d3-9dc5-7c6ea6387f0c", "sighting--b660a1af-6aec-43be-94ae-35a5d0527d52", "sighting--a6c484d7-0281-4366-9d4d-f0fbbfae2304", "sighting--a017515c-b29b-429a-9699-084061f64292", "sighting--1dc68fa6-818b-445e-98d1-6d13a9de5739", "sighting--cea06a1e-bcdf-4f93-a521-f56eb074e839", "sighting--594bd294-a14f-49b6-af68-9ef6cb1c3119", "sighting--eedddbe1-eb27-4975-8f5d-4a52d5ec887a", "sighting--fff5eca7-4ef4-46ac-af87-02e4597eccbe", "sighting--6f4597e6-02bc-4528-ad1f-142b2e455c14", "sighting--1fbb992f-87aa-4fa1-97b1-57fb3bc7ecb9", "sighting--63cf2d1d-b0a6-4a8c-a614-05d50fdf1083", "sighting--469b4063-d20f-49e3-a50b-52918d1169da", "sighting--24375ecc-c7c0-45f5-949c-1dd93ef13313", "sighting--dc335582-4154-4293-b262-3b5d73140d86", "sighting--5f6e60e0-e415-4516-9565-eef42f1e8708", "sighting--3c7098d5-aad4-44a8-aef2-f3c257e5fcfa", "sighting--76736600-febc-4cc0-8942-c5ca42eab023", "sighting--d787bd30-6160-48e2-90a4-c9bf7696b28e", "sighting--301c9c98-54d8-4745-ba10-97ac8ed0cf0d", "sighting--326cb98a-4bdf-4820-b762-582b22a2eab0", "sighting--bad62cee-7e73-4fac-a1ec-14c6f1eca512", "sighting--c28e9058-c736-44b7-8e3a-345bc9c61b8b", "sighting--57b839b6-2409-4032-b5dd-9bcf0891ad51", "sighting--d85adb4a-b767-4109-b01e-ca5101962188", "sighting--52c98eef-ccdf-427f-bd50-dffa66554ec1", "sighting--c8d93dec-0f5e-41ce-9bbe-642dda7e8524", "sighting--e3dbc770-adcf-4dd6-ad24-079df70f13f6", "sighting--37622560-dd95-4722-acf5-67415e33c3d0", "sighting--25e5e131-12d4-4996-a455-248fbc87ee53", "sighting--d86641b4-2156-4460-a9fd-c8ff981b2c65", "sighting--8827962e-d11c-4607-978f-605c43899ea3", "sighting--74ff6483-33f6-4ba3-9b2c-29df86cc8b78", "sighting--a73e14ee-2f6d-48fc-be42-7d58bc451d4b", "sighting--0c039cf9-7294-4a10-88d2-79638291a40c", "sighting--6be05078-9a9b-47ec-ac6a-baa73abad9a0", "sighting--41c94b48-9ea0-4ef6-98ab-cfe6d95824df", "sighting--c7e4c18a-0979-469e-bbd6-6dad2ec76b32", "sighting--a21652a1-8100-4d10-beaa-b87871da587b", "sighting--32fb5ce7-a559-4ab4-b4b0-98bf192ffc3f", "sighting--4754b5a8-33c6-4cb4-bcbf-62c599dff3a3", "sighting--b0c5be50-b245-4c01-a3ed-1b6db5634c1f", "sighting--ff22133a-e89d-4223-9a40-cc113198e585", "sighting--7477b4ca-a882-4f35-869d-544bb31c1b27", "sighting--293bbf3b-d7c5-4461-8da5-b70c1bb492b3", "sighting--6c43cbaf-6619-4a4c-9f87-0f11ff088aac", "sighting--ab808bb3-7e95-4d15-9a1c-adebedf88875", "sighting--3d7cda63-e7c4-4dba-919a-6f32eb5f48f0", "sighting--d45c6fad-b161-4ab2-9ca2-c619623a5b6f", "sighting--023fbb4a-1141-4b60-8760-f165cd837163", "sighting--8e3e974c-e10e-4bb7-9d44-3c147708d6d4", "sighting--1b63a9e2-37ce-42c5-8a98-82643602e0b2", "sighting--37aa323d-1e35-44e0-b67f-efbd82a65564", "sighting--cf2cd9a3-4dbc-4b45-a892-7205b60c100a", "sighting--e37243c2-402a-4d3f-b2f9-76bf838c6e9b", "sighting--d13a4828-2178-411c-8b87-d58694f7be82", "sighting--63cf882d-efc5-419f-849b-2a08cca28d52", "sighting--827cc0d6-38fe-415e-b1cc-dc7139228713", "sighting--cb8e5fe2-c6f9-47d7-8d3e-3370ec1f3032", "sighting--6acc3a3f-c4fd-4d44-a677-dde8f4b98d14", "sighting--014541c1-db7b-4a97-bd26-17dec9cd83c7", "sighting--45b58add-23a8-4c0d-902b-2df384da82b7", "sighting--22a918df-da3e-47a4-a30b-71413b3d3bb8", "sighting--bc7c82d8-7863-4ad3-8ef9-834a90613bc1", "sighting--894001c6-1c5a-4b17-8eeb-768f9f49bb4c", "sighting--0be3a269-20aa-4709-8428-bea50290c3b9", "sighting--b864741a-5dd7-44ef-b831-9ff1d009a46c", "sighting--87e10c1a-565c-4bfc-a102-2df46aa143e0", "sighting--2d9a911c-53d3-4796-8eb5-cb30a95d9572", "sighting--fcb583f5-dcbb-416b-bfdb-a95ba5ce75f8", "sighting--cd31744e-bf17-407d-bc72-a72f468b9375", "sighting--81dca85c-2020-4fc7-9361-94819ffe42cf", "sighting--a07b66f1-6882-4cc1-accc-5ab86be02a51", "sighting--539c49c2-6a03-4a02-b228-c68939b9ae82", "sighting--67af1295-4c9b-41d6-bb6d-b74c6c2765f3", "sighting--578ce85d-335f-4d34-bb43-7e8b8c197337", "sighting--8dadf692-4e58-4f26-81b8-050a5c6c2ac2", "sighting--4a4ac92f-4af3-4f12-a25d-0289a1a68c17", "sighting--c8c60979-461e-4094-91a8-af3c91e91ed8", "sighting--8f9c96b7-ef94-4188-b6f3-66d47beccd6e", "sighting--73ae393c-cf2b-4312-a09d-b46f21a12cfb", "sighting--7a1becde-1ce7-4283-ad48-e1537f8f8f1a", "sighting--67737fc4-f61e-48c0-9fb2-b2cf0e52f624", "sighting--24e6095b-7a8e-45ee-bd4e-076cceccb275", "sighting--578652d4-af74-4415-afc5-ca1bb8bdc9e1", "sighting--afd96a2b-cfc7-4efd-a36d-74ca0ed95f42", "sighting--b3008f75-25cc-4928-9048-931ae4f63f81", "sighting--059a4c41-3d79-4d72-9d75-517ccac5870d", "sighting--8ee12a45-624f-4f2c-a94b-5dc0cb2168fc", "sighting--e7cb910e-66a2-48d2-afcb-d018a7667613", "sighting--88e75b80-8a5a-4a84-bf8e-25fb36c2ced1", "sighting--e13e6373-2b53-4749-9cbe-c3e50078b52a", "sighting--24b31886-487d-4712-998a-e76c536b3ce8", "sighting--65d6dc79-8683-4aa2-90e3-af49a2706955", "sighting--eaec2c7a-144a-4110-a7a4-a18c2de74d61", "sighting--736ef52d-9409-4751-84f9-7407d8870a71", "sighting--cb5f719f-b7cf-45ec-a75f-974bf45e0f82", "sighting--4e6b6200-e5cf-44ff-b846-ba524a5ec138", "sighting--d6d31b81-125b-42d6-880c-a2e5a650637c", "sighting--0e670e9d-79b7-4587-ba15-8eb9df137cb4", "sighting--64497394-f2cc-440c-a642-ee9f9937b9ac", "sighting--2a2c6c23-44cb-400c-8b12-862143c846d1", "sighting--8abe1cbd-2563-4d45-af92-443991a238fa", "sighting--ffca4ca6-62ae-4ccd-9e4c-b299ab73b90f", "sighting--c3617ef9-b35d-4929-9469-6bdee9a4cf8e", "sighting--d5974779-fba0-43bd-9fa3-f2a23c801512", "sighting--4d3603b8-fbaa-49b5-9646-5b0ac426a9b0", "sighting--62c90d31-798c-461b-abf4-3e261af6d487", "sighting--0c73a2db-dea2-46d4-b70d-78d0c036ab9c", "sighting--1ce05191-2df7-4627-a61d-e1edf52f78b7", "sighting--27131798-1e92-42d2-a210-4e4a0ee46e42", "sighting--caabbe41-1459-48ee-abb2-db4e84b1c281", "sighting--05125c25-1684-401c-99c8-3b955fa5ca38", "sighting--0894e040-65b2-4b7f-acfd-4b7bcc2e65ba", "sighting--4fcf34fe-c647-4ded-aa9d-91f252d70c5f", "sighting--7b445788-5861-44b5-ae9b-bc028e388c59", "sighting--015b56c0-1c4f-45bc-89c8-48e5b3d9e517", "sighting--d813fcac-ac7d-4920-b371-5917fa952dd7", "sighting--e84bd58a-dfd9-4bc9-a917-a3933da50ae9", "sighting--7aba1df9-659c-46d5-80c6-3c4aaac5e56c", "sighting--8581aaea-5dd4-4ef5-9b9e-062cfe70a7ef", "sighting--ff8f1a47-d50f-4120-b7b4-9d47dc075b4f", "sighting--0eae3c80-b40c-47d4-bf17-09518d25208a", "sighting--8db4b446-fabc-4255-8800-20b050ed037d", "sighting--61cc8782-3f28-40e1-8602-ea1afc6de4d2", "sighting--b61e7f6b-dcce-42ed-b681-49763185c345", "sighting--00249f18-5cc1-4c4e-80cd-40990772a753", "sighting--46fa23a1-6185-42ee-9bc7-c8db0c0f8482", "sighting--ad243112-ee37-4336-9535-7066013bbab1", "sighting--8dee315c-46d7-4de1-928b-81e1736cc172", "sighting--17c1d310-a6c4-456d-8a61-45ae16ee0399", "sighting--a325783e-ec31-4540-bf16-09f65e728db5", "sighting--3379df41-0c09-4e17-92eb-846c11192b88", "sighting--57d1a78f-3cac-409f-b5f5-83a61681595e", "sighting--0077012d-9669-44da-ab7d-aae4deba4eb9", "sighting--14983e8d-8fb3-4f3f-bc1e-8463225f38f7", "sighting--dfaf54ff-5859-4ba7-b0db-3c808653371d", "sighting--1a473a02-012c-4a3a-8394-bd54797c4f9f", "sighting--d8292a4e-e409-4f2f-a35b-0c9b11a4a087", "sighting--f371cecc-8ad9-4ecd-8427-c1f06fe60235", "sighting--06050b58-bd31-4c3f-84d9-a1febc2d0fed", "sighting--6e9912ea-b00c-4553-93d4-cc5c619a694e", "sighting--6f8636da-c4f4-4b3b-88a0-052ed76e5b95", "sighting--fa204a82-a89a-4022-bb03-05188fae6468", "sighting--78460772-3d7b-4fbb-a19b-7234c205552b", "sighting--806b4137-0a47-491b-8458-b9fda88fc319", "sighting--97ef2f98-9f12-46fe-860d-3b4574c8862d", "sighting--9b335db4-c775-4c9c-ad3e-63370cd774e0", "sighting--178f7b43-ab27-4ea0-aebb-85415cbf9975", "sighting--31fb1a2d-0557-44a9-89b5-e26e4f4122c6", "sighting--6a3a0ac2-ac31-4649-93e4-a710d9398058", "sighting--bd5c5844-acfa-441d-8b6d-856a329ded33", "sighting--8ac6264e-b091-4ade-be4d-1b6a239c628f", "sighting--27b1d27c-ef63-4bf3-9d1b-fd0cc7a97a93", "sighting--60fac9b2-eb77-42d3-927a-9f560bdeb98a", "sighting--37cdf189-884f-44d5-8954-83fb47f305f6", "sighting--4ec978c8-ddf1-4b2f-8cdc-680c4f7f4dba", "sighting--b6f8ed44-ee04-49ee-8dd9-2754fb79e960", "sighting--2ef8b222-adf2-4075-9724-a0c03039f4e0", "sighting--8da869e1-93cd-45ae-924e-782e5b28d54d", "sighting--b89115f0-b214-49e3-9f6c-06b8080c4f64", "sighting--976ece1b-9ec2-4253-abde-bcdf3feca7af", "sighting--36b043d3-00af-4e95-af87-340c34c55923", "sighting--3ff03c9a-ecda-4fcc-ba33-32dee212445f", "sighting--ab3149dd-8993-4754-81af-b85724ad2400", "sighting--96b874a1-37fa-492e-b06c-4c26bf1e68b0", "sighting--23d58e8d-3c8e-44e2-90cb-d57175ab4739", "sighting--4cd95498-f1f4-4141-9499-0a0bf2b8f185", "sighting--c538b65b-e659-4c93-a853-867c2ed73de4", "sighting--e28c5ae8-2226-46a4-b5b0-49138abcaf59", "sighting--b5102493-2e4d-44d9-8916-4bc488dd9af8", "sighting--2978a714-d1f1-4d9a-bed5-a6715079a10b", "sighting--97331735-9d52-4607-b2c6-a94d64629950", "sighting--04457c48-8c59-4e89-8b01-e44fd8647c78", "sighting--4be0bb5a-9f2e-4d30-bde2-8ab51d526702", "sighting--cd35ddf9-2742-4ec0-ac1b-1d61ff3c1bd0", "sighting--2ec5f29f-8154-4e78-a541-b0f9bd30491d", "sighting--cea27762-32a9-49c0-b51d-02c2b73e7a7b", "sighting--7587b11e-f6f6-4fe3-803c-62fd64b03551", "sighting--bfdf4001-9ed1-41c1-a026-7d61f517ce92", "sighting--3f81ab88-7de9-4386-9775-8b3cb278fc04", "sighting--791a4028-2a76-48ee-8040-ecbafa7b8a50", "sighting--97b231f0-1e12-4dd9-858e-342235e69b68", "sighting--27d13723-35fe-4780-9364-72853f98034c", "sighting--6b021cc3-fb38-4e72-8695-d74cbd499347", "sighting--7ecbf6e9-c1e9-40a3-b2c2-d045f4e62027", "sighting--ba5d7bc0-d8db-42a8-b995-b5333897eec1", "sighting--79bc1a2a-99e3-4a83-9b3b-a019fb6d1e78", "sighting--57532835-0a58-47b2-a65e-c563103c49b7", "sighting--e7b061b7-0585-424c-8663-055b9f177bab", "sighting--fb140858-b57e-4d66-9f4b-c903e3b730fd", "sighting--6d989639-7077-4fdb-8cc5-d53cf780978f", "sighting--b8ce2935-5276-4476-8a96-e719f93e6c4f", "sighting--4119b3b2-2901-43d7-9581-85803eb4d034", "sighting--839d0076-c788-423e-96a5-20574dd337c3", "sighting--b614e92d-a1b1-4adf-b36b-d95bf1e63544", "sighting--6d70ab1e-e97a-48ea-8728-13aae363fb2b", "sighting--dc043b08-26de-446c-87d0-a6949c2af87f", "sighting--80711d37-fc98-4b0c-a0d2-9c0cdc37bdf9", "sighting--5bb3bdda-1c3c-4e4c-b8a9-6cd9bc566a0d", "sighting--077b059d-0e90-4ce3-babc-56cfa5396b86", "sighting--6a049cc1-f61c-412e-a475-f52749e83bc3", "sighting--4549bbde-52d2-4e54-a22a-1d7acd880aa0", "sighting--fa9a3e2d-9438-43a0-9f43-90fb25727d65", "sighting--35ed9076-2b03-4aa7-b98d-e6f57d1839d4", "sighting--e7f1f6ac-9ee4-4d78-ae90-cd6409a63bbd", "sighting--8b839beb-58e5-4b72-b17d-a847859414e8", "sighting--bf012e71-3708-414d-837a-092cc5f7f0d5", "sighting--73770c49-1a21-4d34-9933-639d597843b5", "sighting--06b5f803-d46b-4e4b-b7f8-293031e7d4a6", "sighting--d8a948cc-f446-4760-a22d-b55366c9d2c2", "sighting--2055e6c2-2759-4b2c-9f40-3cd5d6fabfa0", "sighting--f96c2829-833a-466e-8701-ff26582f61e4", "sighting--a154d97f-0916-4969-8547-0ebd8b8a2bac", "sighting--2b8d891e-7bd7-4dfc-81eb-075062a2da5d", "sighting--c648fde1-ca02-4554-8f24-6553dc2ca0c5", "sighting--74ee86da-1f30-4f5c-8cda-6580b1be18d5", "sighting--e24500a2-66a8-467c-b6e9-c8992bacd97b", "sighting--e07cf024-290d-4ce6-bad6-84bbbba7ee09", "sighting--05e92587-072f-4117-9b19-16427f9c292d", "sighting--bccc8057-f4bc-4252-ba7b-11fe61f57897", "sighting--2103c9aa-e2de-4530-a3b6-65d78e104753", "sighting--b401177a-f066-4b51-ab52-d80982f96310", "sighting--997f66ed-9afe-4834-816e-4ff0b2584f73", "sighting--514ed81f-b8b3-48f0-bf97-254ab18fdd40", "sighting--8fc5542b-8c5c-4c11-bfdc-eeb2a1b354d2", "sighting--26b76bde-98ad-44c9-a1b4-d735368d3835", "sighting--b0c66ec1-eb30-4c02-af11-e6ba07b7d1c9", "sighting--08ce0248-f044-4759-81b9-9162656eb68a", "sighting--638d44a5-6cf0-4b35-9887-4d671486d14a", "sighting--97d0a3ae-f8cd-4958-ae84-69d2adc74fbf", "sighting--6de5b55c-33e3-4ba4-b972-96da27c59964", "sighting--f874b9a3-e37b-46e7-8ad6-092ba0448b4c", "sighting--212458b2-1c74-4216-816c-53a26b5521c1", "sighting--ad55f458-8eb6-412f-a3e3-284a1b76fc1f", "sighting--25fd5f3f-150f-444e-8932-b26c56283244", "sighting--999bffb8-24f9-4947-90e4-55cb6baa44d4", "sighting--dec530a0-60d5-4807-8bb7-473c76750b58", "sighting--e43ceeef-9f76-4652-aff8-a527f2e0d50e", "sighting--3e01a18d-ce16-4fb7-9c50-1aa6b3329545", "sighting--0cfa7e62-2cec-458f-97ac-37b0363d0170", "sighting--f31a8a55-a4bb-4dcc-abbb-a5f8eb522a63", "sighting--2c9c04e4-93c7-4471-bd7d-519d6e4b8686", "sighting--e0b585f5-8922-4bf1-86f6-6e29f39d1128", "sighting--285202c8-a629-4608-bf4b-7c5fd2cb832a", "sighting--82c20ece-6dc0-4f2c-b0a0-9b1fbfc8af02", "sighting--9bb6bb21-2edb-443f-b055-827b0b85f720", "sighting--b5ea4f08-bdb6-435b-a052-f3a410a52552", "sighting--9abd941e-9fd1-4ffc-931b-dd755c7fbb3e", "sighting--c8e68a40-de68-4dff-a304-fa2c8c9695c5", "sighting--a5e94fd6-c1cc-4605-bc73-c8b5cf60ceb1", "sighting--1033a86e-0954-43e3-9bac-1dc3fe59c526", "sighting--2bc833dc-cd54-4bef-a31c-ccef66300e0f", "sighting--69b05796-e432-4fe0-9fcb-1f489c768376", "sighting--7e9ca277-ce19-4602-8416-b6e66872ccf2", "sighting--18219379-42b4-4a71-966e-10f6656034f4", "sighting--227355a5-ffd8-47fd-8bf9-6bd469d9d384", "sighting--e52f1972-8e99-4d01-b5d2-a018ce2b5d67", "sighting--316a291e-5154-4fdb-9775-b5418605f3e3", "sighting--c74c0f3a-d90f-4a7c-bd25-817fe0d0809a", "sighting--87229b63-5c1b-41c3-8438-27a0485531ed", "sighting--eb32bddd-8fe8-4c8a-a191-ab15ac53d258", "sighting--c8fd1578-277d-42f5-b04c-51475dbd1da4", "sighting--7739f9d0-029b-43ae-9155-650ebfcdd9b9", "sighting--6a4083f4-24d5-44f8-b492-a439845e622c", "sighting--0fa8edc1-0ec1-4bf5-8076-98d8bb61347d", "sighting--d155d346-6518-45d1-ac40-273271fdbb54", "sighting--26a46cd0-c634-47c3-8088-b40102b88d6f", "sighting--14116108-8c5c-42de-98a1-252ff9f3ae1c", "sighting--bafa4c5d-0437-478b-9ac8-58e369e7e005", "sighting--fc1b5958-2b02-4c4d-a965-b0bbeb387a91", "sighting--953f935b-9c98-4092-9722-ceca3f0b3ea0", "sighting--bd490ce2-65ba-4d21-aaac-81bab5765471", "sighting--49c9b082-93ed-498a-bbb2-6c3ce18184b7", "sighting--71b30770-ecc9-4910-9bfd-16b9bda10ba9", "sighting--8cf6fffd-d58d-4296-94c9-d98056721b63", "sighting--9784b512-0787-4707-bf7a-fb85d4aa92c7", "sighting--cb97c40f-8826-4ad6-ab9a-b6492344a04c", "sighting--d19c0614-e1dc-4835-bdd3-2cdda75b4ef4", "sighting--0ff26965-cf1b-4f42-bea6-35252fc71a32", "sighting--9a0db1eb-9ebc-41c9-b255-094ca8e20b10", "sighting--f2f3bb1c-87a8-4f4f-bf57-aa9a3a6d6029", "sighting--6ead4216-81a2-4cc5-bb2a-012b892457ea", "sighting--db39364b-51ab-4e49-a718-e0f1f5d78644", "sighting--53caa8d2-5b20-46e3-bca6-bec360d83467", "sighting--071c1874-8296-4ca6-b698-8584180c6525", "sighting--39c9499c-b4a6-40ab-b6e0-f838267afd55", "sighting--f15e4619-8c62-47cb-be94-91df377da1e2", "sighting--e3262332-d60e-47b3-b9cd-51426af6515b", "sighting--e927e106-02fc-41fc-9481-4375b5920d73", "sighting--ff2a0014-513b-4abd-a74e-13e77c13d92e", "sighting--ee96a1ed-ccfc-4a8c-b7c7-928cae7a8667", "sighting--c7cf5b21-40ea-40af-9830-9af2eebbc725", "sighting--bf3e0307-6efc-46ab-80a2-83fa94ba1a76", "sighting--c1b39ab4-81e2-47f8-a9a7-2e7567462f3c", "sighting--ffca6b67-c859-43a1-b7d9-71c0623b3f2b", "sighting--fdfc52ec-508e-49e7-8981-fd89391687b5", "sighting--a360d8b9-a746-44b9-8cc0-0bb2e472b2d9", "sighting--d1d4c8d4-fd02-40ab-b9b9-277fade43249", "sighting--743073c4-76fa-4b61-b3d1-9440442d28f0", "sighting--be88e9df-dc9a-4e41-9316-1873e558309d", "sighting--23734aff-3278-4315-bcbc-baace9af164e", "sighting--bf37be6b-c9b8-4519-9575-6bf277c02506", "sighting--6443f309-76de-4a1f-bc7f-1c5d31c87253", "sighting--ea6f18f4-f69c-4755-ab99-b82a24639562", "sighting--02ea537e-14fb-4b08-804a-3a50e52ff869", "sighting--69a32dda-8d45-4f5f-85f5-0663c5be4009", "sighting--88c9b8c4-f3b0-48b9-abef-64470b219fdf", "sighting--07fc53c9-804d-4c53-b04c-4aea060c5668", "sighting--e8278153-db60-488c-994c-3c1ca3d2971b", "sighting--4e913a02-1d11-4281-ace4-80011c92230c", "sighting--da090237-9cf0-45c4-acd4-d7427da3e6c6", "sighting--e972352b-b6a0-415e-87d9-2d15719151a8", "sighting--bb1c3317-1b5b-4fd6-a3c4-3990c844d001", "sighting--aa516159-fc7d-4ba1-a291-13a28bb95368", "sighting--7b1c6c55-8096-4560-9f4f-e118f56416dd", "sighting--e361a246-3ba6-4754-8cec-048b58c2be4b", "sighting--05d9cadc-96dc-4a7a-ab22-f2ceef4d8b5c", "sighting--3397476e-61d3-41c3-af2f-6955e2193073", "sighting--3e9a0f54-89de-4578-a795-107c99f9b123", "sighting--e1f601cc-26fc-486a-a21a-1dce68446ea6", "sighting--40336a26-784b-4263-b53b-dae2d7fa3578", "sighting--f0b9a847-cabb-45a3-946d-97330f31b414", "sighting--6c458cc5-4051-4ff8-910f-bafcf55df691", "sighting--69463bcc-0606-4efb-ad95-2eeb3df2729b", "sighting--75aee143-d9a3-4fe0-b04d-a4f9da1e1ca7", "sighting--9f737278-6b64-4ffc-9214-141b7a3bbef3", "sighting--b1dd20d9-1029-4a7f-b919-e85aed01587a", "sighting--ab2b68dd-ecaf-4da5-a447-abb85b477e85", "sighting--ca94db66-ec39-47c0-bda9-755e015cd7cd", "sighting--4c41d0fd-4a57-4c81-aecb-3ab042ae10bc", "sighting--c6706f96-7a61-47aa-8bfe-7f0c40d6817f", "sighting--29b73ff2-d6cf-42fb-a4fc-e69cf2059569", "sighting--232fb0e7-f404-4ea0-83d2-21e3f3362b20", "sighting--5e6f9493-eb2f-47a1-a045-d4d8d9770bb7", "sighting--2707df62-2e03-4b8e-a760-10985642463a", "sighting--31f8dbcd-3006-4003-99fc-2a234982593f", "sighting--fd2e4ab8-2a8d-4e23-8c30-05eb3cb9b25c", "sighting--eb2433d4-6ceb-4d84-8133-2ed98199e808", "sighting--e2bc8693-0a6a-4c70-9a77-afcbf01f744b", "sighting--1a915308-44ad-44df-9665-06b67c0114f3", "sighting--54ba9ca6-2f79-4c6f-a514-354cb86dd8e6", "sighting--29438773-dae8-4a23-8b3a-d265762812e3", "sighting--49df194d-980d-467b-8737-f65047341048", "sighting--e6520933-38f3-4a8a-befc-bcb4ee6dcf0e", "sighting--d9313059-cfda-48a2-89fc-ecc64fc9e2d6", "sighting--0654c469-ab09-4471-a6d2-4eae1e2f559c", "sighting--e27fd57a-c2fb-4096-8f43-84c1dab40ddb", "sighting--3892619b-08d3-4a94-8187-5422e2679f56", "sighting--ccc31b5b-e1a2-4506-b178-be7740016142", "sighting--b749b889-d1b0-4563-8f9b-6ba20d5ff06d", "sighting--e24c3599-6d26-473a-b0f9-57a960bd4dbf", "sighting--be897c07-d5a8-4be2-b601-dca6124495e3", "sighting--7aa68a96-7284-4818-a53c-395e556bd353", "sighting--b925b443-2f0b-4cac-9df8-d0e9fc856823", "sighting--c7ee8135-5bd3-4c3e-8087-9f23bcefaa8a", "sighting--98ed03bd-c62e-404c-b22c-d24d8e61eebb", "sighting--935f40f9-7d21-405e-9992-a92504ee09f4", "sighting--fd9f663e-0367-4813-bb14-76a2c0c5971e", "sighting--5df6205a-7b1f-4ad7-b271-ce71b886eccd", "sighting--aa71b181-14dc-4e72-9db6-7b64934796f6", "sighting--0dfbc13e-66cd-4127-bab2-dfc49fe7aae0", "sighting--794b2e48-5057-43af-9afd-211100e6d372", "sighting--28430ab3-eb88-45ea-9675-857ba97d3899", "sighting--27e7be3e-cd0e-4805-a5bf-bf313007dbab", "sighting--14f5fbac-0eb9-4179-a238-b3b5329827e4", "sighting--aae95c23-801d-4092-b6b4-c382b318a258", "sighting--14a69bb5-f0f6-4f9c-9088-22eb0d35f2a5", "sighting--6659b451-224f-46f0-a75a-5c395d0d854d", "sighting--ac205741-b0d5-4976-b44c-07aa1ee6e155", "sighting--1676b68d-7aca-46fc-be45-ceba3663ab72", "sighting--3fe9f743-4f9a-4a47-834f-0dcbb021ee63", "sighting--2011e631-7a2b-4a4c-925b-b3be13e65acd", "sighting--6ab9b938-f495-4599-aade-33360cea7ef8", "sighting--b759a6c0-0b72-41a4-8d6c-2897b041cbdc", "sighting--3ecbfff9-69d3-4f16-aba7-62cf5fb4705d", "sighting--5971833b-76f2-490e-aeaa-8cb7218b84a7", "sighting--3f59f957-a2c0-4a5a-bd58-c0c68112c919", "sighting--7f66643d-c443-42cb-a87b-16b36a5d176d", "sighting--831fa944-b76e-4a6e-8d37-3204016ff96b", "sighting--2fec3bd1-259d-465e-b276-0c9fcd13af7d", "sighting--fa691f32-25cb-4234-9af1-164486c52716", "sighting--ebb8be9b-512e-4d42-8e76-edb7e51c7223", "sighting--e947fbaa-6d0c-48c3-80d0-2432afc00e4f", "sighting--9e4ba907-4005-4db8-8b24-99d1f11fb3ec", "sighting--8f3df129-66cd-4ca1-9b5d-78ed147bdf10", "sighting--731193b7-264a-457b-b428-772e0a9b4e55", "sighting--00dc810c-ee78-46de-8d83-e5ae0580ff30", "sighting--094ca9b7-0d65-45f7-940b-5a022b782a0e", "sighting--fc4cf5a3-5154-41d0-8f43-681922f2438a", "sighting--aab68851-31b4-4195-80ad-349bec367d8e", "sighting--071712e2-b778-4544-9b3b-6f7415ffa29c", "sighting--5e63fefb-a7d4-4949-b579-0ddfba17003b", "sighting--c548da35-1a98-4938-810a-a67d4fabd407", "sighting--4f0473cf-eaa2-4f03-af91-185929850801", "sighting--1a248114-8ab5-43f3-8548-4174f0f33a66", "sighting--723929d3-d9ac-43ed-824c-10d91f63aea9", "sighting--b5abc2f2-b9b3-4830-aac7-51cad170c75e", "sighting--08dff496-9a4c-4012-aec3-5f5414521444", "sighting--05a6ed95-3dee-443d-aea0-896edda20b34", "sighting--ee51ce57-08ba-496f-8c41-ddc3f22b03c7", "sighting--c7d50d59-3594-4f90-bb7d-11fdbd0b8206", "sighting--1316b693-04ec-4663-bd3f-1ef870620349", "sighting--b5e69bb3-0181-4595-8850-eafab2de2986", "sighting--b439829f-2bde-46c1-b975-24afef73c8d3", "sighting--338f52fe-9f6f-4df7-98b9-8bf8945a43b3", "sighting--a29ee57a-fab5-4b5a-abe0-387c3ddde569", "sighting--878cc8f8-aefa-488c-b25b-2d886b98b56c", "sighting--98eae69b-9bfe-4085-b590-6219b0b7929c", "sighting--e635b202-e399-4b96-8a80-61b28c5d0d84", "sighting--58082734-bd5f-4c3c-94d2-de872191946e", "sighting--fec780f5-9cad-4370-9929-02ae78eb34e1", "sighting--33a147f0-f895-45fc-b0a9-3fb714899f5b", "sighting--6fa95ea0-a004-4ff6-bff8-d131851cdd67", "sighting--5b919334-68b2-44ec-82e0-ffaed0228221", "sighting--56d58518-a3af-431e-99cd-4115356a3a12", "sighting--e8a90792-ad97-4f09-8d0d-a7792d62335f", "sighting--03301af9-8a09-4773-b029-9a932d07664d", "sighting--9990662a-0665-4611-8dd9-83ed6db9d9d0", "sighting--76141942-ec78-4e7d-8eb6-adf363008997", "sighting--d65ea2ce-b81e-496d-adec-f45252fc287b", "sighting--be971703-1565-4b92-8570-3815c7216032", "sighting--88e72522-a788-4eec-bd8c-ab4e39bce1ba", "sighting--fe3b8bae-5c6c-4cd5-89ed-f956e5a2c6c8", "sighting--331e26be-3bd3-4a68-b4af-f10870dc3052", "sighting--b7ca4666-32ef-4568-ba6f-760995cca8f0", "sighting--612854a0-16d6-4aad-a6b3-65c535fb93b4", "sighting--acae2123-2011-4489-8588-f24ec5ec61b9", "sighting--64836200-32c2-4227-8b33-29bf8dc0421d", "sighting--2d142d85-f365-4d1b-bf13-73751bef511d", "sighting--244c7276-ab41-44e6-b5ec-615b7b1d289a", "sighting--637074ab-a2bb-4d75-a1e6-2c0f225b8ba3", "sighting--13291db5-0e11-44f5-8f8e-e683bb8bca67", "sighting--fc075931-26c9-44e7-8933-75fd8b6506a4", "sighting--2590a4be-c9b1-40ab-987a-2b470dfdccb8", "sighting--6dd24812-f4a3-4d76-839e-05c133070477", "sighting--a04030fb-95e1-4266-a4e7-3f18acf0a5f5", "sighting--5826b67e-32bf-40f0-a9a8-0136f84d5b2f", "sighting--c47b4c24-d7a2-45db-ae9a-85c5465b3e43", "sighting--124ced5a-8df2-4d3f-9b37-f0492195de53", "sighting--4bc125d8-a67a-4e14-a47b-de2614b8ed98", "sighting--99e52afb-a167-4dcf-a796-da3a186dcf24", "sighting--6727c68e-e742-4a3f-beac-31bba09ba78c", "sighting--44b2d7b5-5710-4263-aece-54e1933a8ab4", "sighting--37ecbbe6-e294-4fad-b16c-2b9b7f6452ab", "sighting--0c251916-a49e-4302-944f-0756f3d58268", "sighting--ba9f3ef5-2c84-48e0-a1a5-5d3622e94bf8", "sighting--e738ecf2-820f-4749-9d40-d31c39289eaa", "sighting--5d829122-2496-43e8-9615-879322d995cb", "sighting--e4a81234-79b6-4448-9563-3dbc1cad5d0a", "sighting--88b2b625-15cf-4f3d-97b6-85f31e0e7d2e", "sighting--96bfdb8f-0ec5-412e-be35-5aceb26fb825", "sighting--3a2d5729-e124-414c-98a2-9871f58ad268", "sighting--7e80621a-2c15-4ab4-b4c1-267879eeff57", "sighting--31999e92-c294-4c6a-b7f3-2c5a52338f78", "sighting--fb6d953c-f53d-4b42-b8dc-f87eb6ebf46e", "sighting--228b52cf-963f-4313-8860-740809428fe5", "sighting--7e5365fb-16fe-47b6-9229-5a727b18f8ed", "sighting--889d59d7-f3ae-4043-8f63-11c1bae3e592", "sighting--1be20860-e1c9-4c2b-8956-15ba54af6865", "sighting--50f96a5f-6af3-408c-9c74-ff0a963e8dfc", "sighting--ceceda9a-6255-4e07-a302-2d62324e8bc4", "sighting--fd60c30a-0025-4e2f-96b0-031d65137f56", "sighting--a6b969fa-a6a1-4f53-b290-8eaaa3f33c4c", "sighting--b6394003-8737-44e3-a436-ef1c141c8848", "sighting--61354fb4-dd45-493a-9470-5e2d3e57c4a3", "sighting--b67b8f59-2158-4cbe-9b1b-17f7abbc9646", "sighting--65dc5b58-c456-44da-8f04-59776de52bf8", "sighting--e1f5ae37-4528-4577-a0f6-1fd8d0d452af", "sighting--15e913cf-9174-4510-bac8-317a03c83cf7", "sighting--0d3da980-6095-4b26-9038-c5d30b2d7908", "sighting--c738e2da-55ee-4cec-b1f1-947629c8bbd4", "sighting--c42340aa-8aae-4f4c-be6b-73eabacd5466", "sighting--2c0c1075-20b6-48fc-916b-131944472143", "sighting--8240be4b-46d3-4f7c-aaf4-63cd1919c785", "sighting--29cb3744-1a84-40c6-addf-6096f1bb217b", "sighting--946ddb77-bd5d-446c-9451-35a237da753d", "sighting--e5cb8b12-b017-46d1-961e-0e3787cc8147", "sighting--168a4503-7ddc-457e-8907-8c145e275488", "sighting--5948f3d7-1c3f-44a1-965c-2484ea4e456c", "sighting--64174f20-ec73-4741-9d1f-73875ddbf72d", "sighting--7b9e7d71-3291-4ba8-9302-b5ee8b7c7ddb", "sighting--d3c988eb-e735-4687-b418-321fb27d3b31", "sighting--9814fdbe-7bfc-4d1f-9075-177089abe633", "sighting--c9ff6c68-c3fd-487a-a4ac-0a9803fb3b27", "sighting--0dbb4723-7e28-419f-b7cf-c25adb43a76b", "sighting--c1ae02bb-3d82-4764-be98-1f69d8302d25", "sighting--35b2bc53-d812-4e82-8f6c-797cb102c803", "sighting--ade6796c-f645-425d-8ef3-99e352039cc6", "sighting--d29cf47b-6f4c-4b16-80da-bc768c0482b0", "sighting--a979825d-7747-40b4-89ee-13cd7b48815e", "sighting--e17fc4ca-b3a1-47f8-9c80-eee883ff5c82", "sighting--0124544c-46d0-4472-81ef-c36b84e5dca9", "sighting--cd5961f9-2876-48ea-921c-623f5dd9a8d1", "sighting--57991405-8aea-440e-a829-4d5120050f0e", "sighting--342b4de1-5105-4473-8098-91e5c04b1079", "sighting--0916b2e4-0eae-4aae-ac44-2e538c5dba33", "sighting--3c48ab6b-0114-465b-8078-7e52930b8d8b", "sighting--0a6e3b86-715d-486a-82c1-b23894d28707", "sighting--0dcfc054-40c5-42b2-ae0b-f0ddea4a20ed", "sighting--475f8337-607e-49b6-8c01-04cd56bf7500", "sighting--9283b80b-ec60-452d-9642-5c764f6b5dd6", "sighting--79ce45be-ef0a-4a4c-b263-a82fdb747106", "sighting--69e3bda9-0068-40f3-b72b-d2d9f8bafb67", "sighting--233f50c6-e249-4c9d-927f-a5306ef5aab4", "sighting--6143586e-cd85-4915-883a-c022b3cb39db", "sighting--f8a74c2c-78e7-41ab-9bd2-212265b80fc2", "sighting--599d428c-76c8-4b14-94bc-4188a8547864", "sighting--6a58e814-8ba0-4103-a019-a0ab022488a2", "sighting--0bd2e7f6-35f2-4e7c-a507-1d7ce898fb82", "sighting--0754a218-9ef2-4f53-876e-de516dbdfad1", "sighting--917ec8f0-2152-4ad3-bf6c-c7b1d257eb60", "sighting--f9420a48-be36-4e2c-8820-11f808e1ef6a", "sighting--c67c907e-70ba-47b1-98fa-1b979436864d", "sighting--3846e08f-5474-4f71-a1c5-9e3af8829d0d", "sighting--03313f5e-11de-4361-ad57-bdce63e96d0f", "sighting--206cb8c6-8709-4c48-98c5-d2be278e76ec", "sighting--0e01de94-c87d-458c-abc6-81e1359ca954", "sighting--4d860854-a9ea-4b2b-bdd4-6d1fa489a274", "sighting--826fc121-816a-4d80-81db-d9873d98d179", "sighting--aed525f3-f243-4d53-a7b0-11fdbe40a719", "sighting--f4f44b87-5ecd-4c74-bb5f-a113eb9e9a52", "sighting--c786ff49-4b74-4e98-bf99-f542a9a32ab9", "sighting--75c1ed84-e9bb-40c8-97da-be5c573416e4", "sighting--119fd1fc-1653-4a34-8224-57191bb6f4ff", "sighting--e7bf8eca-d74e-4597-8688-e7a8b8dffe85", "sighting--9bf30c00-05ab-4025-8ac4-0f7ab38455d6", "sighting--7b241244-ce6e-4282-a8bd-f77e9082aa31", "sighting--3f8c1679-7768-4a56-b2db-fe26d785c85c", "sighting--b59761d2-914c-4c53-9d57-00ff020c5628", "sighting--36f67072-24f6-4209-bf22-ea474ef95d79", "sighting--fe99cc5f-632a-42d2-a4a7-8ae29ebfdc2f", "sighting--72ff56e6-e8e7-4a81-b8f3-6958ffb55d38", "sighting--25e4eefd-64aa-42df-bb31-f703f2dda2d5", "sighting--c83ee22d-c2fd-40b2-be3f-2cada149bfd8", "sighting--cd866310-8962-4312-947a-6be93f1fd162", "sighting--ad357df7-fc8a-4ee2-80dd-58d0cf5d67b4", "sighting--ef4450b7-da38-443c-8ad9-ea53fe3506bb", "sighting--44d5df9a-9373-422c-aab3-5c0807e060d1", "sighting--b10259c7-67aa-4d93-9785-d8b48b78034c", "sighting--823ea551-652d-43e5-99c9-83e26df0c080", "sighting--85cf5137-fb2e-445f-9bd6-4bf27aa8c1db", "sighting--950fb899-7b6e-485f-8a28-d4a9e447de84", "sighting--4429adfb-b0a6-42f9-948c-66a37b153d4d", "sighting--49b2db76-1db2-49fa-a234-615267638202", "sighting--8d04b27d-92fc-45b4-92fe-61deaeed7a27", "sighting--8a59c064-abce-4590-8335-d68fb16392d8", "sighting--4c3b7b3e-c8a2-4aa9-ac76-84f3db9f778f", "sighting--76d11479-cdb8-4988-ac59-0d3d7d772c3e", "sighting--390ec035-5068-4ad7-98be-7670675e8cf3", "sighting--87ff0f81-511f-420a-b21b-9885f9cd6cdb", "sighting--5935bfc2-81ff-44cf-b692-7993afedefe6", "sighting--c0801b02-7e3d-4de8-909a-857ffeafb148", "sighting--fb64ba44-b06e-4fbb-ac0b-2c538d03f70f", "sighting--540e1277-c2c2-4c27-a286-f0ecdc390a0e", "sighting--d1b96232-2ea5-4a69-b5aa-3749a7c12adc", "sighting--31540e98-1c27-4f4d-8094-d4d0719e9aad", "sighting--bb266e64-b723-408b-806d-b94f61176cb3", "sighting--b4205b47-7280-4ea6-8e49-8d5e6c88df82", "sighting--43b4cb8b-2fa8-4f56-ae8f-fc48ec044bc5", "sighting--db532dc7-3b08-4968-8b77-29eeadd25115", "sighting--3b791bf7-2962-4b7f-a91c-c3edff73ab84", "sighting--1f010bfd-10f9-49a7-9a4e-472fd0888ef0", "sighting--f27f9fa2-c5ce-4969-89ea-bfa2527ce19b", "sighting--ec78e348-d79a-4a8f-930d-d331ca484dfc", "sighting--8ad41daa-2b62-4199-812f-1e180b104ed2", "sighting--8f9019b4-ca82-4d2a-bd56-6ad94428ac1d", "sighting--10352afe-9336-45d0-ad7d-8548638f976f", "sighting--8585b561-7e8b-4a06-9770-813c6c0f6ed6", "sighting--3b1b0daa-9306-42d8-962a-9733860154f7", "sighting--8c9f825d-396f-481a-8b6f-b4ace5a9caa5", "sighting--f036f571-a610-41d4-8bea-fa696209e453", "sighting--99ff5247-136f-4e96-aa8a-48761c2de295", "sighting--aeabb82d-f43a-4b03-9448-3a9762007353", "sighting--663a3e33-e47a-4af9-8d34-35598bf5a18b", "sighting--00187bf9-2a54-4c32-96e2-26cf5b01bbcc", "sighting--1a04304a-6806-45a4-aaa6-0672651a7128", "sighting--8dfd7549-e640-41c8-84eb-4a4d3619c35a", "sighting--8097de74-e53d-4f36-86ba-73652981fce3", "sighting--fc3c0945-67c9-45dc-8368-50f61894249e", "sighting--45b8368d-5fff-4b56-abf2-a41aff28cf60", "sighting--f1e0513c-fcee-4976-8c0e-23148da27f9d", "sighting--d03ea06b-ffbb-43e4-9c6c-d1375eda0b2c", "sighting--18d7a875-ce14-4ebf-935a-8fea3fe4b884", "sighting--b7da8af4-a02a-4db3-acaa-4c263266f2f6", "sighting--ae47f571-3b50-453e-b00f-b0040dc09b00", "sighting--e0931bac-f647-4257-84c8-27e557dccafc", "sighting--c0be369b-3f20-4dd2-9752-46c9016352af", "sighting--8898b749-0ea4-4248-acae-d82d59f917d2", "sighting--126a94ca-10b8-4a98-a733-0837577d83bc", "sighting--fd141972-8041-4a39-925c-a31a8299052c", "sighting--41024e6c-147f-4676-9d4d-576d23431548", "sighting--58d22a70-09d4-469b-92ac-580b239caa99", "sighting--71ea2954-8f83-4d43-8cd7-2e4f05076197", "sighting--74fc1f02-65b6-4c55-881a-3fc0d6e226b9", "sighting--2ce065cc-6291-49be-9e6a-69e191031164", "sighting--e26711fd-428b-47b5-8ec5-41642b9d5580", "sighting--239a0422-fc7b-496c-800d-87d5352706fa", "sighting--23ea1494-6893-455f-9c39-5e40a13db532", "sighting--90550b8d-ec38-4574-9a09-d85d85e133fd", "sighting--4b321a25-7eb7-46c4-94ca-0f4ba59c67cb", "sighting--f060518a-da78-4452-a9e6-a7762af7536b", "sighting--3ac640c7-0d1a-4790-a89d-e8dbeab95e05", "sighting--90896e85-0650-43ce-86e8-5cea28512bd2", "sighting--60230446-a012-4b99-ab19-7c7bffcd13fd", "sighting--a2441117-f073-467c-a8b6-813ab9f1ad47", "sighting--40f7c4ab-723c-46fa-8d27-96e7098e1c66", "sighting--1800616f-d729-4f93-a36e-6fdd77c2a85a", "sighting--af4b3100-46a9-42a6-ae7c-cbbea9441a8b", "sighting--7c80ab36-d70a-41f7-a6ae-5a829b4b6d46", "sighting--390363a0-9e1e-4c77-ab35-632a7b7d3953", "sighting--f5056a19-3ab4-4786-b736-e0e5f1d1500d", "sighting--3503feb4-3f5c-4a95-9613-00ddd306a6c9", "sighting--5339f40f-53d2-4224-946b-f48a0978d79c", "sighting--2ce011fb-16dd-46c5-bef5-b0b06636915f", "sighting--b07e1b84-362c-4263-b4c0-e2e624bb62ba", "sighting--59ec6085-c9c5-40f4-b1ca-67d179323803", "sighting--b834dcc7-38d2-4595-a94f-f04b57b3a624", "sighting--9f566e8d-14f9-4b5f-9458-4f75f6c8d4c1", "sighting--75016d1b-bc82-4fe0-b487-d29e1614e02b", "sighting--391ba99d-9df1-4dfd-be86-7e82fa9451e2", "sighting--07f3bfd8-79fe-4a1e-8d6c-f9686075d44d", "sighting--a461dd91-ff96-49d5-b163-86c2ebf020e9", "sighting--852e5d09-08a0-4de4-a88c-bba4abcf9f0d", "sighting--33811b46-3a3a-4555-936c-14b99644d089", "sighting--b04a5ef6-992e-4498-b364-e1d648fce35a", "sighting--460bb695-5410-4a7f-bf04-11eeb7f355f8", "sighting--c089247a-2a65-427e-8e12-14cd91ca9edc", "sighting--d1cded50-35f7-4ecd-964d-0287b55f6e8b", "sighting--0375cfbf-84c8-4d97-be7d-420ca6d94cfb", "sighting--0fb7d777-c789-4ee1-83ef-c959e81602aa", "sighting--cf333a1b-cafd-46c1-8ded-a77d8d308100", "sighting--a9f55307-8fb5-484f-a5c5-79b94f4ac7c7", "sighting--548bda7d-698c-4f2f-bcef-a0601519d7dd", "sighting--9889a769-c918-4780-9bca-0e94a10d56ed", "sighting--c9cdfdb8-4aaa-4a27-9db5-d7a2c69eab5c", "sighting--6422859d-7d0e-427d-9f6d-6f3df2fe1a40", "sighting--1dcb4df8-54df-43b9-a7e5-40db414e384b", "sighting--52e731b3-2867-4c83-a8a0-34b7a5786291", "sighting--8d3d1e78-842c-4d00-ae03-3434a51ca7c9", "sighting--6404a85f-2a18-4347-839c-3a80057b5a1f", "sighting--08e8fad2-43e4-413f-84b5-29ed0190ba0e", "sighting--66ed2cf2-0c95-4abc-9f0a-5a01bf1b9918", "sighting--7457b9fc-37b2-4c74-9e1d-e08fb7d506bf", "sighting--a702fe45-a389-44f7-a104-91e396c2790b", "sighting--5150671d-a1c0-4b67-9b6c-6a94a342b190", "sighting--2c41c7c6-5c95-47f1-807b-820baf85dad9", "sighting--78a3597c-9600-4721-bf71-543985c60e2f", "sighting--b88eab67-2c29-4618-bec4-9ffed8b32f52", "sighting--ea484c99-f133-491b-ba00-0c29fcd47e3b", "sighting--d8205ec1-5dcc-4b68-af1d-115a969d6554", "sighting--30c8b520-9e3c-4664-84cf-064aad860aba", "sighting--16bcec6f-0644-46f6-b652-c75098c58024", "sighting--1564875b-9b32-4517-87be-1e02257218a3", "sighting--bd55b511-24c8-44ae-9ed9-19bd6a719dae", "sighting--4c111855-6f71-43b9-b3ee-5b4fb1800203", "sighting--07529a6a-4d78-4a0b-9eed-304b827148d3", "sighting--83f8b368-18c7-4cbb-acde-99e48f1227dc", "sighting--a140f2ab-a0bd-477a-980b-1fd44b575b0a", "sighting--62e1913b-bfab-4179-a038-5fcc638c5dfe", "sighting--f74ff04d-f230-4b8e-8444-59d06d235b34", "sighting--6d6d3061-cc4e-4466-aa57-7525d000010f", "sighting--40502531-2c3b-4a06-a2b2-4d10c68c8ef0", "sighting--1093efd1-0c9a-4a33-9549-4c1454e3d2b5", "sighting--6465df5d-0311-44bb-b4da-ab23911c9434", "sighting--439b96f9-4289-4143-9689-f5df22e12297", "sighting--de6ee6f5-a2ae-4dd4-819f-25ffb58aa500", "sighting--3d6a89b4-5a6c-4315-9c11-52e17e6e4c00", "sighting--d1a83f5c-242f-4d6e-a478-080ac67632ac", "sighting--32ab7b69-72b4-4927-b2fe-e6c07e70329e", "sighting--c9d5c20c-699c-4bd5-9be3-79c9fbfea177", "sighting--118a31a6-7f00-4c07-ad29-f50713aaab91", "sighting--288722eb-4fc3-44cc-9b27-3e51cd383262", "sighting--32e781ec-36e8-4508-bb0f-7b2848e12038", "sighting--6c050837-ecd1-424a-9b5a-bea558da36fb", "sighting--195996d3-8d16-42e8-a565-eb9c82c7c3be", "sighting--4def5b16-cddc-4db4-bfee-080c7b18dc6d", "sighting--716a397e-74d9-48ef-b7ee-bd6de2eaa36a", "sighting--3638771e-fd90-4401-a08e-5c4826b78c96", "sighting--67918823-865f-4f53-ac5b-94954d3b6ea3", "sighting--8ccc4dd5-f59c-4409-b1c1-a06aa84c94d7", "sighting--1115bd4e-922d-4fae-8e26-de7b0a389816", "sighting--ad7d615b-33b0-4808-b979-be7b5e573b1a", "sighting--4b5e06a8-c001-485e-b542-db4a85a77226", "sighting--a1a36fbd-cc60-4180-be5f-3453600465d7", "sighting--a1da1c91-4261-46cb-8815-5683c8850285", "sighting--7d2a3959-e0c4-48db-8d34-e71b63ad2402", "sighting--c763b938-b7fa-4185-9c40-391d46f87f26", "sighting--2245a7bd-0a68-4860-a023-ebbe73ea4816", "sighting--85b60d4e-315c-486a-b37d-df19b344c013", "sighting--e4c78437-a696-4507-b4ba-dc41e31150ef", "sighting--17085ec6-7e75-4d2e-83e9-cbb56fbbf008", "sighting--882df9cb-af69-4048-8d5f-58068aa13272", "sighting--ff9e44e8-64e3-461e-9cc9-255ead542e44", "sighting--465ae8c7-a38d-4769-97dc-69f06e804641", "sighting--c2185f25-9e7f-445e-ab8f-569a56fd06a7", "sighting--d4e64495-e4f9-428f-abdc-9a9c424588d7", "sighting--35da06bc-dae4-47c4-9339-d67603fd5fe1", "sighting--3908bd55-b45d-445d-9972-84669ab22431", "sighting--1b54b9b2-6e20-403f-9c6a-245e74b43658", "sighting--c015fcd0-5477-4ac7-89dc-1ba8e2798195", "sighting--f953c97f-404c-4768-b4e2-f989b089df12", "sighting--1252032c-1e1c-495f-89d3-589558d8efc1", "sighting--f8ca5cc1-733d-4621-868a-b9ab01106b9b", "sighting--2619cdb2-7b9b-415c-a2fa-2a3b82212537", "sighting--e7d0a8e1-88f8-414f-b96a-aebf12817098", "sighting--ba3a338b-6f58-46f9-897a-4b2cf7b1e150", "sighting--f1384127-6a5a-4ef8-8997-0d8f0d5989bb", "sighting--2d48974c-3b74-4403-befa-43227e9a08e0", "sighting--e4981ef6-b481-4cc7-8080-ae4a6f1f03c2", "sighting--fa3a3bfa-db61-4f68-a1ea-42855ce356f6", "sighting--a589becf-8343-4407-a10f-c427ad3b74fe", "sighting--52f0e7cc-8ea6-4fbe-82a5-c493af22936a", "sighting--73949ae5-2ed9-4917-9464-f77639ee810b", "sighting--b60f7c5e-cb2b-473c-80d0-4e2e7e784968", "sighting--728b1763-cbcd-41f2-ae8e-7aa86aa26348", "sighting--88a0417b-0ce3-4bb7-876c-b7234b7a0e5f", "sighting--445d2400-a411-4c3a-ac75-4ce910210b94", "sighting--69c7588c-0d8a-4e2f-b9d5-dab0ef8ce36f", "sighting--eb65ae3f-9f62-4b27-bed1-766aa03d14b8", "sighting--895fb3db-2c1e-40c5-80d7-1d6ff1bcf67c", "sighting--ef6b7c0c-5303-49b8-bd7d-befe1fa0d754", "sighting--af960e38-05b1-41b9-b44d-0689477b29b5", "sighting--3399ba1f-2014-4a07-8de1-13d552c81ea5", "sighting--cc1e164c-9a2c-4249-aff0-1e6738c8fbeb", "sighting--d8a15c50-69ab-45bd-a12b-5576e7319338", "sighting--50ad9fc0-6494-406c-8085-e86d00ee0e29", "sighting--bdf0091b-4a81-43c6-8a97-15164c7a0e0f", "sighting--deafd78b-1d38-498f-bf39-01876688864e", "sighting--59607d2f-f2c4-4534-866e-9b50f93bec35", "sighting--d725370d-0ba7-4b08-a2a4-6930b16035ac", "sighting--72fd9b7c-2519-4a69-bc9a-b6c3c089f10b", "sighting--a4f7174f-05ed-4940-b6ea-6a39b15ffa7d", "sighting--3e2a7fdf-105e-467f-843b-49c796e7f012", "sighting--2521b991-137f-4771-84ba-23098d9a605e", "sighting--03495d38-2146-4d0a-bbc1-041ac6669ede", "sighting--38a6d62e-f247-4f37-8ba8-f82463a2da74", "sighting--efebf52d-a7f4-4ebf-9ebe-53392c308bdb", "sighting--be8ded35-c077-4c66-84d9-78a36b160ac1", "sighting--866a7456-fdce-4635-865e-7415788301b6", "sighting--714315f7-8896-4bbf-b25a-834200388d73", "sighting--385f98b6-51ad-41b7-9baf-6f394563e3e5", "sighting--471f781a-ccaa-4ce9-a77d-e581e78941bd", "sighting--b60a4b74-dfc3-4d6d-b066-cf1a9a6ab4b2", "sighting--ed141e3d-5027-4b4f-9a7a-38c4356af4ea", "sighting--a264bafe-cfc1-4286-bb12-71e7613cdd86", "sighting--b410a10c-5d47-49e2-b422-de4b9a9c4359", "sighting--b79d8722-76a9-4052-9142-ca6a7db2acb5", "sighting--6fd4178d-c0ba-490c-982c-e094c291b821", "sighting--d0c44864-60eb-4c98-aa95-b618c4791526", "sighting--71d79fac-3be8-41e4-9c66-e7af6923b72d", "sighting--51abadb9-5298-4cc9-aa34-50fd3ce555d6", "sighting--4e12cdc2-d858-4c53-a835-1b6e9edbf7d1", "sighting--10746752-2f0b-4899-a658-8e284df9f99e", "sighting--908384dc-aafc-466e-ba48-e1fe9ddf93a8", "sighting--1f86ed04-89f3-428b-9325-705d1cff8137", "sighting--aa5ae531-ed3f-4b93-8f53-0c6a45ecdfa9", "sighting--68f2b7d5-1f65-4529-9987-f883fe679dd9", "sighting--0d0307e3-4396-40fa-97d7-c406183ce611", "sighting--1fd3a06a-9ca5-46ff-a9ae-e0592d4b6c81", "sighting--3f92361e-0614-4f24-9e98-4fa9ac7fbcdb", "sighting--1f670381-1c37-42cf-8777-1022eca258ac", "sighting--2a11e7b0-83f6-4220-a8a6-744d5b719f64", "sighting--5b95b271-e9a2-46a2-b2d1-8bdb3181b327", "sighting--11781a43-36b6-4bac-9a44-7eb5e93aba3d", "sighting--da41fdaa-52dd-49f1-8936-7e39d6d9456f", "sighting--ecbcefa8-5416-4021-b2a7-57d4a24dcb54", "sighting--e8c792ea-fa26-40ec-8095-a0bfaea48c76", "sighting--4d165259-5a07-403d-8804-3eb1ced91bf7", "sighting--c18f9269-454f-4186-8f2b-1e2db96ad506", "sighting--4bdec8f6-77b3-4cd0-abc8-0e36efb1d2b8", "sighting--838b7c90-7ff4-4124-af7d-db2778f4fbca", "sighting--0d45962f-3b70-4321-a706-7533d68ea8ce", "sighting--1178f691-a704-4555-8814-c60226a67a26", "sighting--f607cd28-7ba6-47a4-a327-af20f6430907", "sighting--4add0722-8370-4362-ab22-9addffe7ca6d", "sighting--10ddc692-8bde-45da-8b9f-3a23ebe4e29d", "sighting--407c9543-7d17-4a4b-bec0-d8144713e854", "sighting--bb73f42a-9ce7-4919-abef-7190eb3b17a4", "sighting--d217e92c-e38c-42f8-859a-c833e2944157", "sighting--a65a2034-9d6e-4db2-89e5-da8cd7ec1106", "sighting--041255a8-315a-4bd5-a491-e0f73cff8e03", "sighting--14c98a77-785a-4026-b588-198ac6c93560", "sighting--8b79bc18-0d5c-4550-bd73-20b1a1727064", "sighting--15afc0ad-d6d2-4c9a-9836-fb2412c6b303", "sighting--964cdf0a-91d1-4c65-a58a-e10e848d00d0", "sighting--fbec755c-3194-4883-9edf-843204b3ab25", "sighting--e46878e9-4f37-4bda-8c76-5dc421f59b80", "sighting--1e6aed00-8303-40dd-9b9b-5abc233b9c31", "sighting--349f7b46-fcfe-440d-924c-0df558fa1790", "sighting--ee674098-0be9-4aba-ba29-415248869519", "sighting--7db3c1ac-ef8a-4ffc-8b10-f4af312ea01d", "sighting--488f6601-c3f8-41be-9c16-42d75664e9c9", "sighting--28b3523c-6258-4b61-8cb9-20437036148a", "sighting--4277a610-1044-458a-9bb9-a123bcbc5c82", "sighting--a7df8336-033d-4d1a-8fbe-d1e70439b925", "sighting--6ad1bb80-6e2a-4eae-be09-b2ec655e7c0c", "sighting--aac93b2a-334e-47db-b6e2-de896c2c3bae", "sighting--4e391598-a678-489c-b0b2-cbd8fbc71457", "sighting--426b74aa-669b-448e-a3aa-3a046f2f1957", "sighting--62e58152-a5c8-4527-ae9f-b7cf7ced784b", "sighting--9abc0ae0-bacb-46e7-bdb6-df18997f6ad4", "sighting--cff44ba2-df77-427f-8dba-cf06d8b92e29", "sighting--5dd8ce59-0bc6-493c-a5c6-f359f9ca6e4a", "sighting--117a8d66-9aed-4927-afdb-34619853c87f", "sighting--a07d09a7-0096-434d-a999-86420892dd42", "sighting--6593c090-6505-4dda-88ea-822c51181f63", "sighting--bf4ca329-fd14-4123-9661-de35f37cca13", "sighting--fd5d7b1f-f620-40b7-bf98-86b0450afd66", "sighting--1c9089eb-538e-4553-915d-040183b72f03", "sighting--85cc81ce-433e-4591-9adf-a4e7386544e6", "sighting--acd0c48a-756c-4717-8577-7853318614b6", "sighting--8b05df6a-34f7-4e79-96b1-4a01915d096b", "sighting--37567368-3ee3-4587-a278-5e786e024a38", "sighting--7edef617-7c83-4192-b084-701b580d3e58", "sighting--63401d67-eddf-479d-895c-27083ca43676", "sighting--b5530494-06d4-4d17-8ebc-15d09ff60887", "sighting--09a82985-b1b4-4393-93fd-6961a297f830", "sighting--af774aa0-ace7-4264-bd8a-71040ee07bae", "sighting--2148df1c-d0ab-46da-8a6d-cb633fe81680", "sighting--e84bfdad-3f80-4903-9f4c-e3ceda4913f7", "sighting--891ac8c7-ddde-4c3a-a66c-ad68d179b13b", "sighting--1fe03940-2f10-4b3e-98b4-40526b4b8087", "sighting--7600691b-eec9-44a6-b648-6777ff845672", "sighting--f55b757d-8a3a-4b7d-81ff-b06445fb0361", "sighting--05693065-1334-4fa0-9b85-b2dbc623b449", "sighting--b0ad1ee9-aa02-4246-bd3e-770de17f8f20", "sighting--a0623ccd-3f6b-475f-801a-b6b6704c7986", "sighting--0fccad58-77b2-491e-98c6-a74f52a012f6", "sighting--0e04a381-3449-483e-8c4f-d9b9d56783bc", "sighting--5a699913-dcbb-4767-bafb-cc1c0b52daaf", "sighting--b543dbaf-3455-4ce5-a0d6-6853765115ed", "sighting--b275d9a3-58e1-4941-98d7-4fbb4dd3c781", "sighting--de16f284-d74e-4411-bc1f-986be0595b8c", "sighting--f9b0f0d9-ec2b-4a28-8e54-c795be269640", "sighting--48ad905d-4d26-419a-9fda-69fe479261ff", "sighting--615df468-dd8e-4313-a08d-3117b490639a", "sighting--ce3148bd-4452-4f89-8686-fe8c14eac999", "sighting--06700c19-b6a1-4053-aa13-c391f3adc11f", "sighting--54ec1b72-67b1-4790-9cad-6fa5a01af6fb", "sighting--c798a2d8-4a3e-4412-a01d-30fbd593a25b", "sighting--7bf4177f-0ee6-4652-a0b7-93e1e4d927f6", "sighting--a7edd7b2-5bce-424f-9b81-75741deb89f6", "sighting--8bf66bc4-1703-4fd9-846b-ab9020dfafbd", "sighting--1f0ec109-7f6d-4b55-b61c-9736a23bd2ef", "sighting--58316913-b1b8-4657-8699-db8291901d97", "sighting--2e08f442-fc5d-46dc-ad3b-b6d1597c87ce", "sighting--0f18291c-35de-4718-b680-d9043672d41e", "sighting--83f2c210-e737-4e9f-a203-6336933c7c7c", "sighting--e13376f4-4a20-46f9-b544-297247104964", "sighting--5813518a-39e8-4bd7-8097-6c395a55c64e", "sighting--cff7c2d6-8e9a-40c5-8617-a432e77ae113", "sighting--2121e863-c746-4f41-94b4-790376651dd3", "sighting--0683f334-1d91-47ae-bcd0-7bc983b20e84", "sighting--35ea6ab9-fb01-4409-8d58-3b59898599f8", "sighting--f4c73f3e-411c-4d73-a19c-9fbb3f169534", "sighting--d932820f-6b77-459a-a30f-4f12296fe4bc", "sighting--f2d3b63a-dbde-4fca-bb5e-d71e041f6b1a", "sighting--9b29786d-a874-4d5b-8878-3e1c663e5856", "sighting--19064d4b-b7eb-435d-8b50-d22f58fe9b63", "sighting--4516aad8-2222-4050-bd6e-8fd561ea376a", "sighting--41a476d9-db66-4b6a-b0e2-b1a91eebbffd", "sighting--2c70e8be-0d59-40a9-978b-bcae122281de", "sighting--e5b679b6-f74b-4076-bf6c-f23abc5b2753", "sighting--3851781b-d925-4628-a143-a33427c63f17", "sighting--c2817680-128d-4f51-9237-59f5f8e94da6", "sighting--725fbe13-d91a-403c-ac85-634cd7dee114", "sighting--c78c06a6-b546-431d-92f9-ecae55aeae4f", "sighting--b5decbce-9ba7-4bea-a68b-547a553aa912", "sighting--1dd4483f-7088-47d6-b6bf-139692c042c4", "sighting--9b601eaa-d010-4412-932d-4aec82eafa6e", "sighting--8fe3463a-ede2-4ce0-b7a2-a3f4adc0c22f", "sighting--e8f9dcac-dca8-4884-a45f-e0854d3dc1cc", "sighting--37d99a9f-08fb-431c-903b-37a8fa109c5f", "sighting--b7c00ffa-2a15-4c14-b40a-c2a0711f625d", "sighting--c2b9abbd-d628-4bf0-bde4-4ada56f45f4c", "sighting--98f0b597-360e-43cf-9120-6b8085a25f7c", "sighting--0db2adf5-f15a-40a4-b2fa-5c1336df3107", "sighting--028dc6bf-3dcd-498c-a074-e9576846fea1", "sighting--26e1a7cd-c54d-4f49-ab46-511c79133789", "sighting--ca90f27f-3ef5-4995-84b6-5913dd215270", "sighting--d572970c-b9e7-462a-9e69-338f9121da9a", "sighting--a71fe860-ad39-4723-b4fb-c1df2cca22d4", "sighting--f5a66fa1-1d45-4737-8356-3b8798428d99", "sighting--bb610afc-7dff-4788-ae6f-93d68b859633", "sighting--8a22f615-5101-4d5d-86b9-63d414e00f40", "sighting--e478c9f3-cc71-4c50-a376-998b074e5736", "sighting--5e5ec499-0ec1-4434-ade0-a69407766a0f", "sighting--d8b5ddb8-34b1-4425-8b99-b343556c4961", "sighting--b8d56b8b-d0e6-45b7-a46f-f64801705a2a", "sighting--083c4ae1-2ece-4e11-a335-095bc93fe0b2", "sighting--cdadceb7-62ab-4a8e-a87a-35688fa64514", "sighting--304d29b3-aa05-458e-b6b7-1e675f00a647", "sighting--102ba9dd-d0b9-4c13-98f4-8dd52c041366", "sighting--d5bbb79a-e537-445e-aa89-bde9fab21af8", "sighting--b0bc541a-18a2-4031-bee5-8de7235c730e", "sighting--83a7ea3a-db0d-48bb-b7db-19128bd999ea", "sighting--31b96a88-6747-43e6-be5a-8e8c3135b9fb", "sighting--c833acbd-dd63-48f9-a831-1c2062eb4226", "sighting--3f7fd650-667e-402d-83cd-7e8d9ecae831", "sighting--b6116a5e-1f88-40d0-a187-bcf859e923f5"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-25T11:00:01.466Z", "modified": "2026-06-25T11:00:01.466Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}